last executing test programs: 2.370131668s ago: executing program 0 (id=91): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x3, 0x4) syz_open_dev$vcsn(&(0x7f0000000040), 0x100000d, 0x442a00) r1 = socket$kcm(0x23, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="18000000180001000000000000000000080023006401010024e57bb2118558c79eb27bb98367f3cfe50051cc640d79e1abaaab90025d1d935dcedcab9cf7e8e5e8336acfa704cd0da3470b80a28b4f37051aa16997f60f9f6c508b54b0f745a65372310152b68573f0d232f3243a4b1117a1e34bd960349269ad35aa18739eb6dba66e168e62d54a"], 0x18}], 0x1, 0x0, 0x0, 0x4}, 0x20000880) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x0, 0x4, 0x2, {0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x80, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) chdir(0x0) creat(0x0, 0x109) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r5 = syz_open_pts(r4, 0x0) r6 = dup(r5) recvmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@alg, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/70, 0x46}, {&(0x7f0000000400)=""/161, 0xa1}], 0x2, &(0x7f0000000e00)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000000500)=@hci, 0x80, &(0x7f0000000680)=[{&(0x7f0000000880)=""/243, 0xf3}, {&(0x7f0000000600)=""/35, 0x23}], 0x2, &(0x7f0000000980)=""/230, 0xe6}, 0x344d}], 0x2, 0x12000, &(0x7f0000000740)={0x77359400}) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) dup3(r4, r6, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffff09) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r7, &(0x7f0000000300)=[{&(0x7f0000000080)="70ad5f8914ac73", 0x7}, {&(0x7f0000000640)='hQ', 0x2}], 0x2, 0xffffffff, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x0, 0x0, &(0x7f00000005c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000004}, 0x94) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, 0x0, 0x0) r8 = socket$isdn(0x22, 0x3, 0x24) ioctl$IMHOLD_L1(r8, 0x80044948, &(0x7f0000000000)=0x4) 2.26624252s ago: executing program 0 (id=93): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='gid_map\x00') write$cgroup_int(r0, 0x0, 0x0) (async) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75", @ANYRES8]) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001840)=ANY=[@ANYBLOB="34000000000401"], 0x40}}, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) (async) ftruncate(0xffffffffffffffff, 0x5) mount$overlay(0x0, 0x0, 0x0, 0xc0002, 0x0) fdatasync(0xffffffffffffffff) (async) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') 2.219679855s ago: executing program 0 (id=94): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'virt_wifi0\x00', 0x0}) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000340), 0x800010, &(0x7f0000000500)={'trans=virtio,', {[{@mmap}, {@loose}], [{@obj_user}, {@obj_user={'obj_user', 0x3d, 'raw\x00'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@fowner_lt={'fowner<', r4}}, {@dont_appraise}, {@subj_type={'subj_type', 0x3d, '@\\\\\xce*.{'}}, {@flag='nolazytime'}, {@subj_type={'subj_type', 0x3d, '-P\xf9%)'}}]}}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd30, 0x25dfdc01, {0x60, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r5 = fcntl$dupfd(r0, 0x406, r0) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000f40)=@newtaction={0xafc, 0x30, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{0xae8, 0x1, [@m_ipt={0x300, 0x1d, 0x0, 0x0, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xe8, 0x6, {0x4, 'raw\x00', 0x16, 0x3ff, "b4e8516cc9ca9e46aa725ed0fbac83664546c9d8a7b9604e767c44c5debb5625990cfafa2dde35486e1d738efd2e3b2898117e6ae4df22b93e474671f4356aceafd9755689c175acb5c04656ba6ffbd956eb8afc765489bc82807613db137bcd46b3dbc805b0987259768031e553888ba9f25c28f1eeab7e29c997ce6aa0e7856879f133fea384f690ae48050b7735d0edaaea1606dff85633c7b952a3f183fd1d7da9c42857e85dec0762ac8efcdeaa230b6129d1c8b66fe1cd6077cef2"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x8000}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x9e, 0x6, {0x9, 'raw\x00', 0x10, 0x6, "87deb28dcfa38564ad31b82509e971c7b1e9aa9f567f6074a680a1bf00c97817ac094b3d9869e2e3610a56827d860b2a629e013eacf8f82814c2aa958a526983cf10bab68e112930337309338be9874cb13d4d5094ec972bbdba985bd96f3ef6ddd57e712ecf0f27331b520f6a12ea453d2dc974"}}]}, {0xf8, 0x6, "31108410aa3776867af8928df63865a90f344cf60aba980d1c6ea7598b035e972acca2c9c9d9b457b5b76114c5c362a5b8e8145af978ca206d2f6cdd4a0c1bccaa90a63c2ab38a7fa2268c4c6aa48d39c0d5bc3b8cd4b4e6109587660998a6b42a30d8935cca492a89134a087175c726d0a3148101019fcf5051637763ec8a696def3dc13b82583901a197773e22a02e152b71367f6ac16dfa77a86ba0f8ca6fe4019d295f771979fc37428bde6b613ddf0375387febdf998e6975ecd1e0a8b981fd8195cf1cb3dc66be356ab65b7b185c92dce6fda257400450bed4e0ec8f4fbb9289c243733458158676d15b4308721d897afc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ipt={0x390, 0x13, 0x0, 0x0, {{0x8}, {0x2f0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x34, 0x6, {0x1, 'security\x00', 0x8, 0x4, "e0772d0ec98509b95f28"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0xa8, 0x6, {0x81, 'raw\x00', 0x9, 0xd45, "31dcd7ff400590d32f751fca175efcd6bb7d282d9740991fbecc3248d9e56facecb6d53049b9ab2aa5dd0d5f723bdeb82c1d625989f46445854cbd110a1b598bcceb3ec32d174c6d58423dd69b5d9ce939abc9437a57636882cf2520d980be925c0347b74e8f7c2f83e241252faf3564b4abc6088d312c3ad1df9b050764"}}, @TCA_IPT_TARG={0x124, 0x6, {0x9, 'raw\x00', 0x81, 0x80, "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"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x29}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x8b, 0x6, {0x918, 'security\x00', 0x5, 0x7f, "ce7f250bfe6603964b226dd712a4731040b26b4ede5402ca66f1ce94e7348153655a829123a24cadb9c702da6ee34f7748457106a43f9f8b619af8a5111b75d69cca915fd7d191a1a6d6766edc6a186279f1dcc9e5fe327262df99833b807e49db"}}]}, {0x7c, 0x6, "320e8487bb0ee861980be30eb4259e993453b661ff641b9e6a6d5d48f69f0d7a261f7c7dbbbd2102ef4bd4beb09c597fc2331521eb49dcc0ccbb0ae069414e8a7567cee4633cf05654e50b8bf7c19b4c1e11866d1536dc9e64dbdd21e5a65045bac6235fac0010d752e411d81a27f9152795129b715bedcc"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x2a4, 0xe, 0x0, 0x0, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xc6, 0x6, {0x5, 'mangle\x00', 0xa, 0x40, "366035009be8fbc2e21011f6db67c67862e506ab0e9b0c05463ecd6d5e4ad09204ac4d7eba93d2b837a80f6ac31122b05f73f75035ec059ba89bd3ee3d74d8b51ee0762b367ddde534f7318c5a2457455e43feb468b817af78c3d62f96fa15555935ba45d6ebb41d418eede968e1a628c9e83654ad7521da62d3616c2fc58433ace2890a96b76b24cdd3c09912d1926630bcabbf7b5a2e221a7a42d3"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x493}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xdf, 0x6, "40cd11db90dadd9decf5ecda40e1111ddb61fd839275ef086f077029fa20cc77990495fe87c2c2287883806f0cba4fcd10f1006e0aecc8231cfc35ccdb31d118e18606d302b828565ff2a20763e6c4b0a16f36c86bad17fc5598c632b459e1d102ac083d1e7c4a53c7fb77ea3229a1d4715359ece2a92f5b2eeff0b6cbebd6901e3ca146ac17a38379f22218035535e541865d392d5dd8b6ae30459f293d8fd25ef585a5c0b3eb141b3f837929d58e7825bda3b68e0d7013809b8eb2bc5279cac4ea0d45257e6e3a31d815f200"/219}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ipt={0x110, 0xf, 0x0, 0x0, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x3d, 0x6, {0x3, 'filter\x00', 0x1, 0x8, "68e7eae97bdd44f9c96667180fe209055f61e9"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x67, 0x6, {0x5, 'security\x00', 0x93, 0xc2f, "976896f6a1453c90d5dd4ab7e299e257907198747ecd800b5f26ea194ff2e001a0a9862d78bb637ac1398ecc55b3eed30d369e278f10d2a0fb413bf29e"}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x6}}}}, @m_ipt={0xa0, 0x1a, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TARG={0x62, 0x6, {0x7, 'nat\x00', 0x6, 0x562, "7b20c50783b5cc352b4714103bd79cbadc084e73da5f5b8995c3430be3f088bfecb568aa560d734f4aa2fa7396550c47152256d0f6ea94f8"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xafc}, 0x1, 0x0, 0x0, 0x4010000}, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r6, 0x0, 0x0, 0x10000, 0x0) socketpair(0xb, 0x80000, 0x4000, &(0x7f00000000c0)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x80, r7, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x32}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x15, 0xbe, "0b49c380815260ff3c8c1ca06a76fc3ebd"}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x47, 0xbe, "0fdd2a07fc33966f9e169c54837f435c5e53b565626da7ecc6785878f70a5b1362532157d3c4ef7d1bdc01dffea285a10e48aa3aae23c0857164ecdc47262c869f5f60"}]}, 0x80}, 0x1, 0x0, 0x0, 0x20040010}, 0x8010) 2.127976565s ago: executing program 0 (id=97): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x0, 0x80, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000180)=0x8, 0x4) (async) bind$inet(r3, &(0x7f00000006c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 2.124940343s ago: executing program 0 (id=98): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x10, 0x5, 0xdf2b, 0x1, 0xf5, "41d0fbd385215ca98637d7c8ccff4f1e6cf2c5", 0x1ff, 0x1}) (async) timer_create(0x0, &(0x7f0000000240)={0x0, 0x14, 0x2, @thr={&(0x7f0000000040)="efba5600bf99ee31c5d736b18864e40dc734a1861936bb460d175470bb589c611e7b7d3f66f592273aeb64b449a60054b4b22e3e88cbc00e3d37b798f49d5d9283b26536ac4e02099b0e5f92ce9c7757dabbe72fafe24c077e9841db25945abc2ed6905a774e1e7e7f124fb564c0b21c19e32f414a19b7b62e21af7b42e4790677327ff5ba8338eb3cebed7b12cead914a62b29031626efb18305b078f8f7966504a2464ac6ef81312dccb5206883ace0448902e6b9981a10e46d699577b4bc9be2fa53ace321766b85713e555", &(0x7f0000000140)="daf6dceebec0b8461a1d9b498a4887f4118996962ea5648b98eb79395d061d5fa2c5dcef394649ef10d7c896f070aa341b62f8a224e4dd57719d78402329ff7bb29a65a614b8eabb29b5d659782f11829644e702fca6f061f082225af0da75a64527b39535a54e1fa6109722ebaa38ca601bedaf35213fc6e1c2853b2dfa56e8d49db8ed216eb8074074ddaea6ca720b8d529c942a940b1479be712de0307413194863b6c511a4346b5ceb5458e984161275fce51bed0b2abc60b3a7f5cb2175731bac624af1301a5092c437943d6ded3c9a5bbd56fd"}}, &(0x7f0000000280)=0x0) (async) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {r3, r4+10000000}}, &(0x7f0000000340)) (async) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) clock_settime(0x4, &(0x7f00000003c0)={r5, r6+60000000}) (async) rt_sigaction(0x3c, &(0x7f0000000480)={&(0x7f0000000400)="65ad450fbcc38fa91897993c00000065f00fc09af4576c6bc461f9135c1e90660ff89cbef87c000026d9b6f8ffffffc461edefff650f76d4f3460fa7d8", 0x0, &(0x7f0000000440)="c4a3f9cf6835c3c422192c5800c4e1bf5de0c421f92b7280c4828d97c9c4c1e6529b06000000c4625bf67567f20f1c44690e410f1bbe43d1b177c483e57c0906", {[0x1]}}, &(0x7f0000000580)={&(0x7f00000004c0)="26676564f364430f0f288a460f0f681fb4da50f6c4627d1a8fba0b9d6c66440f380831660fc484eafeefffff00c4c15d72d300c4a3756a120df23e44dca82200000040dbf5", 0x0, &(0x7f0000000540)="c481d6514efa400f950d0200000044dfd6f0205d00c4019856457c417eecc4215566c3460c00c401fd517c35f242d9f2"}, 0x8, &(0x7f00000005c0)) (async) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xa1b) (async) clock_adjtime(0x1, &(0x7f0000000600)={0x1, 0x5, 0x4, 0x3, 0x7, 0x7fffffff, 0x1ff, 0x9, 0x77, 0x8, 0x3fffffffc000000, 0x8001000, 0x80000000, 0x23, 0x9, 0x8, 0x4, 0xffff, 0x5, 0x5261262c, 0x64, 0x0, 0x80000000, 0x100000001, 0x1ff, 0x4}) socket$netlink(0x10, 0x3, 0x15) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000700)=0x3) (async, rerun: 64) clock_settime(0x1, &(0x7f0000000740)={0x0, 0x3938700}) (rerun: 64) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) (async) r7 = syz_open_dev$media(&(0x7f0000000780), 0x5, 0x30301) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000880)={0x80000000, &(0x7f00000007c0), &(0x7f0000000800)=[{}, {{}, {0x80000000}}]}) r9 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) ioctl$VIDIOC_STREAMON(r9, 0x40045612, &(0x7f0000000900)=0xd42) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000a00)={r8, &(0x7f0000000940), &(0x7f0000000980)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000a40)={r10}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000b80)={0x2, &(0x7f0000000b40)=[{0x746, 0x6, 0x8a, 0x1200000}, {0x5, 0x2d, 0x2a, 0x401}]}) r11 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/bsg/3:0:0:0\x00', 0x402200, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r11, 0x5382, &(0x7f0000000c00)) (async) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000c40)=0x2) keyctl$describe(0x6, 0x0, &(0x7f0000000c80)=""/218, 0xda) ioctl$KDSKBLED(r1, 0x4b65, 0x80) (async) timer_create(0x5, &(0x7f0000000d80)={0x0, 0x2b}, &(0x7f0000000dc0)) (async) syz_clone(0x4000, &(0x7f0000000e00)="c847e82569b93a4fafd68fc24edc56d4335011bb7ddf8c3017bfcac8fc52d9cdaf9fb341dfec35c131a252b6ff00b7a3a29cadb83de2e05bc696b9b709f5199407859a6888a56a2d8b8a", 0x4a, &(0x7f0000000e80), &(0x7f0000000ec0), &(0x7f0000000f00)="d538108a659bd5ae2ae64214d2cc76b720e9432802a561492d6a3a91a8cdd185d6ada3c63f4ac0a6998a0eb80ccf8247cdfb5090827ade7c36fcca42c4cb5f9243619692513d60cd9ccbe8921c610211753a95dc94b702322d522682902ed9d5ca5fd3fa0f9d611ac07653d2f20726646e1747c023f310d336260208f93b20f9fed0e0571e3bc06a8d35894b06b3b24f34fbac648d3c339ccba82daca488029912cd63211efdb80b") (async, rerun: 64) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000001100)='/dev/video37\x00', &(0x7f0000001140)) (rerun: 64) 2.029140602s ago: executing program 0 (id=99): r0 = socket$inet(0x10, 0x3, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r3, 0x0, r2}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000001e40)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9d, 0x40, 0xd, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x7, 0x2, 0xd5}}}}}]}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg$unix(r6, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2001) recvmsg(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2000) sendmsg$inet(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='#', 0x1}], 0x1}, 0x0) keyctl$assume_authority(0x10, r5) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x11c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc], 0x0, [0x5, 0x4, 0x2, 0xfffc, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x50, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_STAB={0x70, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x7, 0x7ff, 0x7, 0x1, 0x7, 0x30, 0x4}}, {0xc, 0x2, [0x4, 0x5, 0x2, 0x6]}}, {{0x1c, 0x1, {0x1, 0x6, 0x3, 0xc9, 0x2, 0x2, 0x5}}, {0x4}}, {{0x1c, 0x1, {0x3, 0xb, 0x1d8, 0x2d4d, 0x2, 0x2902420e, 0x7, 0x2}}, {0x8, 0x2, [0x6, 0xed9]}}]}]}, 0x11c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="98170002", @ANYRES16=0x0, @ANYBLOB="000229bd7000fedbdf2501000000080004000f0000003c000680060001000a00000008000700", @ANYRES32=0x0, @ANYBLOB="080003000a01010205000200060000000800060010000000060001000200000008000300e00000014000068008000700", @ANYRES32=r4, @ANYBLOB="060005004e22000014000400fc000000000000000000000000000001060005004e240000060001000200000008000300e0000001"], 0x98}, 0x1, 0x0, 0x0, 0x24040810}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r10, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) socket$netlink(0x10, 0x3, 0x0) preadv(r11, &(0x7f0000000080)=[{&(0x7f0000000100)=""/1, 0x1}], 0x1, 0x0, 0x2) 582.26151ms ago: executing program 2 (id=123): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000003c0)={{'\x00', 0x2}, {0x5}, 0x118, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="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", 0x180, 0x0, &(0x7f0000000200)={0x2, 0x10c, {0x1, 0xc, 0x67, "85758d0eaeff01ffa863383fcd0b5282978c998b8097cdc2a80fee280dc65a5567fee8c0da45876105876900a7f39d38bd81c058aa62c03db43f3190ab9431fe344f6634f349329b008424fe6353d161abbe8ae39ee3fd74e7378a9ac4c4290a6b05b34a553132", 0x98, "ac2fb581b287d6e33e777e18b0ad039c680d7fa094ab021e9b51ebdde662180d7f094ddacc1d96223fe1b5b24a0a44f7b1cfad3f0399207d54228a390acccb273bdabd23eb94615183344f0608b64f040bd2f5d5574e9b0bfdb3b8bc003e449d7631f1973474fc28fdcf36ea67131cd79f3c45214a3e4c66d96098c0ad06775a963b9e63c19cd344ba167a4bbb21463530e481519aceb2c4"}, 0x7d, "b5a2fc0b29de6c50218a041e0f921a161a0c806de4bbe660c9c1ec075794276c9e8e053cbcd17fdcf45e36a5bff4f06310831630642bc7a0b5ca1d1c637771983817dbe88172d07ae90e0a1f15a26f1a2e1c1126714c357bb4e18f337f01a9ac2dfbab2796e0eb897ab23d111ead1508f490316a92dbcec31ee31686c8"}, 0x195}) (async) fcntl$getflags(r0, 0xb) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x40080, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000480)={0x1bd6}) (async, rerun: 32) fsetxattr$security_evm(r0, &(0x7f00000004c0), &(0x7f0000000500)=@v1={0x2, "d0c7"}, 0x3, 0x1) (rerun: 32) r2 = open$dir(&(0x7f0000000540)='./file0\x00', 0x202001, 0x21) socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2014}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r4, 0x300, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000000) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f00000006c0), 0x4) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r6}, &(0x7f0000000740), &(0x7f0000000780)='%pK \x00'}, 0x20) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000800)={0x0, 0x0, 0xffffffffffffffff}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000840)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)={0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000008c0)={0x0, 0x1}) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000900)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000940)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r7, 0xc01064c4, &(0x7f00000009c0)={&(0x7f0000000980)=[r8, r9, r10, r11, r12], 0x5}) (async) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000a00)=0x100) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup.net/syz1\x00', 0x1ff) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r7, 0xc01064c2, &(0x7f0000000a80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r7, 0xc01064c1, &(0x7f0000000ac0)={r13}) r14 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b00), 0x4080, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r14, 0xc0044d0d, &(0x7f0000000b40)=0x29) (async, rerun: 64) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) (async, rerun: 64) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, &(0x7f0000000b80)={0x18, 0x0, 0x0, 0x0, 0x0, 0x3ff}) 581.793586ms ago: executing program 2 (id=124): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="500100001a00010000000000000000007f0000010000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000000000004d433000000e000000100000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000e388000000000000000000000000000000000000000000000000000040000000000000000a00000300000000000000005d001400636d61632861657329"], 0x150}}, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close(0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r4}, 0x18) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000940)=ANY=[], 0x310) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0x2c80, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) socket$inet(0x2, 0x3, 0x4) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="500100001a00010000000000000000007f0000010000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000000000004d433000000e000000100000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000e388000000000000000000000000000000000000000000000000000040000000000000000a00000300000000000000005d001400636d61632861657329"], 0x150}}, 0x0) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) (async) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) close(0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r4}, 0x18) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000940)=ANY=[], 0x310) (async) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0x2c80, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) (async) 581.358201ms ago: executing program 1 (id=125): openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r2) (async) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r2) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="fba70000e80000867f0004"], 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r1}, 0x10) sendfile(r0, r0, 0x0, 0x200000) 580.911848ms ago: executing program 3 (id=126): mbind(&(0x7f000046d000/0x2000)=nil, 0x2000, 0x3, 0x0, 0x0, 0x4) r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_SCAN_ENABLE={{0x9}, 0x3}}}, 0x7) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0x20) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0c0400c8"], 0xf) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_getnetconf={0x14, 0x52, 0x400, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000004}, 0x20004804) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000480)={'broute\x00', 0x0, 0x3, 0xc9, [0x2, 0x5, 0x3, 0x2, 0x0, 0x8], 0x3, &(0x7f00000002c0)=[{}, {}, {}], &(0x7f0000000340)=""/201}, &(0x7f0000000500)=0x78) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') preadv(r2, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) 490.763364ms ago: executing program 3 (id=127): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) (async) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) unshare(0x20020000) r5 = syz_io_uring_setup(0x6d9d, &(0x7f0000000780)={0x0, 0x942e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0\x00', 0x1}) (async) io_uring_enter(r5, 0x567, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r8 = getpgrp(0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000100)={0x2, r8}) sendmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) (async) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x2, 0x0, 0x4, 0x0, 0x1, 0x20, 0x5bc}}}}}]}, 0x3c}}, 0x0) 439.380753ms ago: executing program 3 (id=128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES8=0x0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES8=0x0], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) (async) 439.045424ms ago: executing program 1 (id=129): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88201, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/38, 0x26}], 0x1, 0x1, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x42, &(0x7f0000000140)=[@vmwrite={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 438.636484ms ago: executing program 3 (id=130): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x40000) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x4, 0x0, 0xfffffffffffffd14, 0x0, 'syz0\x00', 0x0, 0x3}) (async) ioctl$NBD_DISCONNECT(r2, 0xab08) (async) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000000)={0x23, 0x5, 0x9, 0xfd}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi3\x00', 0x40040, 0x0) (async) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r6, 0x0, 0x17, 0x0, &(0x7f0000000140)) (async) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000002c0)={'aio_aio12_8\x00', [0x400800, 0x9, 0xfffffffc, 0xc, 0x2007, 0x3, 0xffff, 0x40, 0x0, 0xfffffffc, 0x2b5, 0x7fffffff, 0x8000, 0x0, 0x2, 0x7ff, 0x2, 0x1, 0x53f7, 0x7, 0x8, 0x7, 0x40, 0x7fff, 0x0, 0xc, 0x592, 0x82, 0x339a, 0x2, 0x7cda]}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r8, 0x1, 0x4b, 0x0, &(0x7f0000000100)) (async) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r9, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "f235cd041ecfd237d48b9fc39aa09025f026b0634b6f82bded015a1b2cc967eff95fd0b6841d40ae65cd6ddd03de31eba0328a09ff4f717c7b1b1c65e750c8"}, 0x60) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f0000000200), 0xffffffff, 0x501502) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x8, 0x9, 0x7}, 0x10) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r11, 0x0) (async) getsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xe) (async) r12 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r12, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_int(r12, 0x1, 0x20, &(0x7f0000000000)=0xf66, 0x4) 340.432387ms ago: executing program 2 (id=131): creat(&(0x7f0000000ac0)='./file0\x00', 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000380)={r4, 0x0, 0x1ff, 0x0, 0x0, [0x0], [0x9, 0x0, 0x0, 0x8], [0x3, 0x20000000, 0x100, 0xd], [0x1000010000000, 0x0, 0x7fffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) close_range(r0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r7, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) 339.999343ms ago: executing program 3 (id=132): ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "765795d296d6670d9f2ef09c43ed5780"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 337.669696ms ago: executing program 2 (id=133): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@initdev, @in=@remote}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xfffe, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x7f, 0xba}]}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x3, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe4, 0xfff3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0xfff}]}}]}, 0x38}}, 0x20004844) 259.335993ms ago: executing program 1 (id=134): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) ioctl$CDROMREADMODE1(r0, 0x530d, &(0x7f00000003c0)={0x4, 0x7, 0x8f, 0x9, 0x1, 0xf1}) (async) ioctl$CDROMREADMODE1(r0, 0x530d, &(0x7f00000003c0)={0x4, 0x7, 0x8f, 0x9, 0x1, 0xf1}) ioctl$CDROMRESUME(r0, 0x5302) 259.118494ms ago: executing program 2 (id=135): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/113, 0x71}, {0x0}], 0x2, 0x3, 0xd) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (rerun: 32) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000002c0)={0x5, 0xffffffffffffffff, 0x1}) (async, rerun: 32) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000001c0)=@multiplanar_mmap={0x800, 0x1, 0x4, 0x100000, 0x5, {0x0, 0xea60}, {0x3, 0xc, 0xa, 0x3, 0x6, 0x7, 'sgl?'}, 0x7f, 0x1, {0x0}, 0x4}) (rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x2}, {0x0, 0x9}}}, 0x24}}, 0x0) 258.198836ms ago: executing program 3 (id=136): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000003000), 0x201, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101442, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x5c}], 0x1, 0xc, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 80.743757ms ago: executing program 1 (id=137): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xc0, 0x100) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000005c0)={r2, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010079f550d216136a410b5839fb180000000000000001000000180000000a000000080000000100000f0500000001000000000000000300d58d1eb1fc"], 0x0, 0x65, 0x0, 0x6}, 0x28) socket$inet(0xa, 0x801, 0x84) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) 79.205033ms ago: executing program 1 (id=138): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000790408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/192, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x4f) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000002300)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file1\x00', 0xb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) 78.872926ms ago: executing program 2 (id=139): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x20, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x6}, 0x48) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1494) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) bind$ax25(r3, &(0x7f0000000280)={{0x3, @default, 0x8040001}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd2b, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x1, 0x6}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xffffffffffffffd6, 0x2, [@TCA_FW_POLICE={0x4}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x893}, 0x2404c084) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="800000001000ffff24bd7000f8fadf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000030000600012800b000100697036746e6c00005000028008000700"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1600"/20], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0) 0s ago: executing program 1 (id=140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'netpci0\x00', 0x6bf1c2d5adba8c12}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r0) r5 = fcntl$dupfd(r2, 0x406, r3) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000dc0)) mkdir(&(0x7f0000000100)='./file0\x00', 0x11c) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000240)='vxfs\x00', 0x11, 0x0) socket$inet(0x2, 0x6, 0x9) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000300), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r11, r12, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r14, 0x0, &(0x7f0000000000)="bda8", 0x2, 0x100, 0x1}) io_uring_enter(r10, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r13, &(0x7f0000000200)='~', 0x1) close_range(r9, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f0000000040)='i\'@{\x00', &(0x7f00000000c0)='./file1\x00', 0xffffffffffffffff) kernel console output (not intermixed with test programs): [ 43.930163][ T40] audit: type=1400 audit(1757979609.407:60): avc: denied { rlimitinh } for pid=5874 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.938231][ T40] audit: type=1400 audit(1757979609.407:61): avc: denied { siginh } for pid=5874 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:11476' (ED25519) to the list of known hosts. [ 46.229421][ T40] audit: type=1400 audit(1757979611.727:62): avc: denied { name_bind } for pid=5893 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.252239][ T40] audit: type=1400 audit(1757979611.747:63): avc: denied { write } for pid=5894 comm="sh" path="pipe:[6438]" dev="pipefs" ino=6438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 46.265482][ T40] audit: type=1400 audit(1757979611.767:64): avc: denied { execute } for pid=5894 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.272838][ T40] audit: type=1400 audit(1757979611.767:65): avc: denied { execute_no_trans } for pid=5894 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.685520][ T40] audit: type=1400 audit(1757979614.187:66): avc: denied { mounton } for pid=5894 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.688657][ T5894] cgroup: Unknown subsys name 'net' [ 48.836641][ T5894] cgroup: Unknown subsys name 'cpuset' [ 48.843022][ T5894] cgroup: Unknown subsys name 'rlimit' [ 48.986991][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 48.987003][ T40] audit: type=1400 audit(1757979614.487:69): avc: denied { setattr } for pid=5894 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.998014][ T40] audit: type=1400 audit(1757979614.487:70): avc: denied { create } for pid=5894 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.006479][ T40] audit: type=1400 audit(1757979614.487:71): avc: denied { write } for pid=5894 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.014912][ T40] audit: type=1400 audit(1757979614.487:72): avc: denied { read } for pid=5894 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.021555][ T40] audit: type=1400 audit(1757979614.497:73): avc: denied { mounton } for pid=5894 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 49.029465][ T40] audit: type=1400 audit(1757979614.497:74): avc: denied { mount } for pid=5894 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 49.037487][ T40] audit: type=1400 audit(1757979614.507:75): avc: denied { read } for pid=5684 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 49.051269][ T5954] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.054928][ T40] audit: type=1400 audit(1757979614.557:76): avc: denied { relabelto } for pid=5954 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 49.063261][ T40] audit: type=1400 audit(1757979614.557:77): avc: denied { write } for pid=5954 comm="mkswap" path="/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 49.070719][ T40] audit: type=1400 audit(1757979614.567:78): avc: denied { read } for pid=5894 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 49.912659][ T5894] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.299960][ T5978] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.303769][ T5978] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.303968][ T5979] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.307029][ T5978] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.309338][ T5981] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.309857][ T5979] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.310112][ T5979] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.310525][ T5979] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.310839][ T5979] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.312817][ T5979] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.314784][ T5981] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.316073][ T5979] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.319884][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.330108][ T5986] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.333033][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.336290][ T5986] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.337340][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.340422][ T5986] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.345574][ T5986] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.349646][ T5986] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.601280][ T5969] chnl_net:caif_netlink_parms(): no params data found [ 53.652790][ T5976] chnl_net:caif_netlink_parms(): no params data found [ 53.676331][ T5968] chnl_net:caif_netlink_parms(): no params data found [ 53.820681][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.824041][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.826746][ T5969] bridge_slave_0: entered allmulticast mode [ 53.830188][ T5969] bridge_slave_0: entered promiscuous mode [ 53.835121][ T5983] chnl_net:caif_netlink_parms(): no params data found [ 53.894308][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.897281][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.899975][ T5969] bridge_slave_1: entered allmulticast mode [ 53.904232][ T5969] bridge_slave_1: entered promiscuous mode [ 53.916227][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.918842][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.921230][ T5976] bridge_slave_0: entered allmulticast mode [ 53.924101][ T5976] bridge_slave_0: entered promiscuous mode [ 53.927462][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.929730][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.932646][ T5976] bridge_slave_1: entered allmulticast mode [ 53.936065][ T5976] bridge_slave_1: entered promiscuous mode [ 54.044094][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.046328][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.048907][ T5968] bridge_slave_0: entered allmulticast mode [ 54.052122][ T5968] bridge_slave_0: entered promiscuous mode [ 54.058192][ T5969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.072650][ T5976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.076443][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.079123][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.082430][ T5968] bridge_slave_1: entered allmulticast mode [ 54.085211][ T5968] bridge_slave_1: entered promiscuous mode [ 54.089630][ T5969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.133699][ T5976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.211728][ T5983] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.214441][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.216764][ T5983] bridge_slave_0: entered allmulticast mode [ 54.219392][ T5983] bridge_slave_0: entered promiscuous mode [ 54.255021][ T5969] team0: Port device team_slave_0 added [ 54.258255][ T5983] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.261031][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.264678][ T5983] bridge_slave_1: entered allmulticast mode [ 54.268193][ T5983] bridge_slave_1: entered promiscuous mode [ 54.292227][ T5976] team0: Port device team_slave_0 added [ 54.296621][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.301314][ T5969] team0: Port device team_slave_1 added [ 54.336095][ T5976] team0: Port device team_slave_1 added [ 54.339889][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.419696][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.422044][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.430290][ T5969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.437774][ T5983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.486135][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.489063][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.499763][ T5969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.505926][ T5983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.510015][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.512934][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.522967][ T5976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.528559][ T5968] team0: Port device team_slave_0 added [ 54.551880][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.554740][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.564949][ T5976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.570931][ T5968] team0: Port device team_slave_1 added [ 54.622066][ T5983] team0: Port device team_slave_0 added [ 54.659961][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.663368][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.674155][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.679150][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.681313][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.690204][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.703457][ T5983] team0: Port device team_slave_1 added [ 54.769403][ T5969] hsr_slave_0: entered promiscuous mode [ 54.772658][ T5969] hsr_slave_1: entered promiscuous mode [ 54.779752][ T5976] hsr_slave_0: entered promiscuous mode [ 54.782971][ T5976] hsr_slave_1: entered promiscuous mode [ 54.785012][ T5976] debugfs: 'hsr0' already exists in 'hsr' [ 54.786860][ T5976] Cannot create hsr debugfs directory [ 54.838742][ T5968] hsr_slave_0: entered promiscuous mode [ 54.841595][ T5968] hsr_slave_1: entered promiscuous mode [ 54.843833][ T5968] debugfs: 'hsr0' already exists in 'hsr' [ 54.845624][ T5968] Cannot create hsr debugfs directory [ 54.847945][ T5983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.850715][ T5983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.860603][ T5983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.897641][ T5983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.899825][ T5983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.907890][ T5983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.067649][ T5983] hsr_slave_0: entered promiscuous mode [ 55.070192][ T5983] hsr_slave_1: entered promiscuous mode [ 55.073063][ T5983] debugfs: 'hsr0' already exists in 'hsr' [ 55.074878][ T5983] Cannot create hsr debugfs directory [ 55.325900][ T5969] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.336360][ T5969] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.353281][ T5969] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.361534][ T5969] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.382554][ T5971] Bluetooth: hci1: command tx timeout [ 55.382568][ T5982] Bluetooth: hci0: command tx timeout [ 55.383614][ T5986] Bluetooth: hci2: command tx timeout [ 55.391989][ T5982] Bluetooth: hci3: command tx timeout [ 55.396604][ T5976] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.402985][ T5976] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.409690][ T5976] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.415842][ T5976] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.463753][ T5968] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.468025][ T5968] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.475385][ T5968] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.481152][ T5968] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.546501][ T5983] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.553998][ T5983] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.560257][ T5983] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.565692][ T5983] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.616811][ T5969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.637594][ T5976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.649487][ T5969] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.657682][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.667352][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.669710][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.684273][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.686559][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.703021][ T5976] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.712730][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.714960][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.724263][ T5968] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.728369][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.730659][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.754347][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.756759][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.767737][ T5983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.775315][ T93] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.778272][ T93] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.806871][ T5983] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.817010][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.819375][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.821258][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 55.821269][ T40] audit: type=1400 audit(1757979621.317:89): avc: denied { sys_module } for pid=5969 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.844692][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.847376][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.860232][ T5968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.891245][ T5983] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.896102][ T5983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.928245][ T5969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.951303][ T5969] veth0_vlan: entered promiscuous mode [ 55.960125][ T5969] veth1_vlan: entered promiscuous mode [ 55.977398][ T5969] veth0_macvtap: entered promiscuous mode [ 55.982700][ T5969] veth1_macvtap: entered promiscuous mode [ 55.991025][ T5976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.998219][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.010355][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.022568][ T61] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.030200][ T61] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.034429][ T61] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.041903][ T61] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.062662][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.065039][ T5976] veth0_vlan: entered promiscuous mode [ 56.077264][ T5983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.088503][ T5976] veth1_vlan: entered promiscuous mode [ 56.114583][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.117742][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.145425][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.146628][ T5968] veth0_vlan: entered promiscuous mode [ 56.148489][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.164813][ T5976] veth0_macvtap: entered promiscuous mode [ 56.168683][ T5983] veth0_vlan: entered promiscuous mode [ 56.171242][ T40] audit: type=1400 audit(1757979621.667:90): avc: denied { mount } for pid=5969 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.181012][ T5968] veth1_vlan: entered promiscuous mode [ 56.181100][ T40] audit: type=1400 audit(1757979621.677:91): avc: denied { mounton } for pid=5969 comm="syz-executor" path="/syzkaller.G8uHif/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.185940][ T5976] veth1_macvtap: entered promiscuous mode [ 56.194167][ T40] audit: type=1400 audit(1757979621.677:92): avc: denied { mount } for pid=5969 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 56.205212][ T5983] veth1_vlan: entered promiscuous mode [ 56.207744][ T40] audit: type=1400 audit(1757979621.677:93): avc: denied { mounton } for pid=5969 comm="syz-executor" path="/syzkaller.G8uHif/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 56.218212][ T40] audit: type=1400 audit(1757979621.677:94): avc: denied { mounton } for pid=5969 comm="syz-executor" path="/syzkaller.G8uHif/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 56.220568][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.229606][ T40] audit: type=1400 audit(1757979621.697:95): avc: denied { unmount } for pid=5969 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.236370][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.236388][ T5969] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.239612][ T40] audit: type=1400 audit(1757979621.707:96): avc: denied { mounton } for pid=5969 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 56.255977][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.258263][ T40] audit: type=1400 audit(1757979621.707:97): avc: denied { mount } for pid=5969 comm="syz-executor" name="/" dev="gadgetfs" ino=8584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 56.266351][ T5968] veth0_macvtap: entered promiscuous mode [ 56.273247][ T40] audit: type=1400 audit(1757979621.707:98): avc: denied { mount } for pid=5969 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 56.275782][ T5968] veth1_macvtap: entered promiscuous mode [ 56.281403][ T6056] Zero length message leads to an empty skb [ 56.289363][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.293886][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.308221][ T5983] veth0_macvtap: entered promiscuous mode [ 56.310370][ T6056] ocfs2: Unknown parameter 'acl)' [ 56.314081][ T5983] veth1_macvtap: entered promiscuous mode [ 56.317508][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.333111][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.351386][ T5983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.359214][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.383667][ T5983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.383937][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.388776][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.392256][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.399394][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5'. [ 56.405625][ T61] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.408448][ T61] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.426286][ T61] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.436194][ T61] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.448255][ T61] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.450641][ T6061] syz.3.6 (6061): attempted to duplicate a private mapping with mremap. This is not supported. [ 56.452615][ T61] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.461285][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.464812][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.468401][ T61] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.487890][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.491063][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.549047][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.552801][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.553414][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.556060][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.608825][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.612394][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.646594][ T6083] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.697052][ T6092] syz.1.12 uses obsolete (PF_INET,SOCK_PACKET) [ 56.828651][ T6107] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 56.877064][ T5975] udevd[5975]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 56.884390][ T6109] syzkaller1: entered promiscuous mode [ 56.886571][ T6109] syzkaller1: entered allmulticast mode [ 56.922330][ T6062] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 57.037666][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 57.085520][ T6062] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 57.088043][ T6062] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 57.092167][ T6062] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 57.096149][ T6062] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 57.099712][ T6062] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 57.105597][ T6062] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 57.108140][ T6062] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 57.111554][ T6062] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 57.115634][ T6062] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 57.120145][ T6062] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 57.126402][ T6062] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 57.129089][ T6062] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 57.133326][ T6062] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 57.137037][ T6062] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 57.140458][ T6062] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 57.147611][ T6062] usb 7-1: string descriptor 0 read error: -22 [ 57.150416][ T6062] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 57.154501][ T6062] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.174957][ T6062] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 57.370751][ T6086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.376189][ T6086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.461992][ T5982] Bluetooth: hci0: command tx timeout [ 57.463203][ T5971] Bluetooth: hci2: command tx timeout [ 57.472151][ T5971] Bluetooth: hci3: command tx timeout [ 57.887837][ T6125] netlink: 256 bytes leftover after parsing attributes in process `syz.0.23'. [ 58.008751][ T6129] block nbd3: Attempted send on invalid socket [ 58.011040][ T6129] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 58.015051][ T6129] block nbd3: Attempted send on invalid socket [ 58.017066][ T6129] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 58.021755][ T6130] block nbd3: Attempted send on invalid socket [ 58.025043][ T6130] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 58.028326][ T6130] block nbd3: Attempted send on invalid socket [ 58.030444][ T6130] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 58.205226][ T6140] ieee802154 phy0 wpan0: encryption failed: -22 [ 58.404504][ T6164] ISOFS: Unable to identify CD-ROM format. [ 58.421979][ T6170] netlink: 172 bytes leftover after parsing attributes in process `syz.3.37'. [ 58.426282][ T6169] netlink: 172 bytes leftover after parsing attributes in process `syz.3.37'. [ 58.444963][ T6164] netlink: 24 bytes leftover after parsing attributes in process `syz.0.36'. [ 58.448435][ T6164] netlink: 24 bytes leftover after parsing attributes in process `syz.0.36'. [ 58.456247][ T6164] netlink: 24 bytes leftover after parsing attributes in process `syz.0.36'. [ 58.459206][ T6164] netlink: 24 bytes leftover after parsing attributes in process `syz.0.36'. [ 58.492240][ T6173] netlink: 'syz.3.38': attribute type 14 has an invalid length. [ 58.502234][ T6017] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.511967][ T5971] Bluetooth: hci1: command tx timeout [ 58.652023][ T6017] usb 6-1: Using ep0 maxpacket: 16 [ 58.654871][ T6017] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 58.659970][ T6017] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 58.664396][ T6017] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.667647][ T6017] usb 6-1: Product: syz [ 58.669446][ T6017] usb 6-1: Manufacturer: syz [ 58.671411][ T6017] usb 6-1: SerialNumber: syz [ 58.677758][ T6017] usb 6-1: config 0 descriptor?? [ 58.681963][ T6017] hub 6-1:0.0: bad descriptor, ignoring hub [ 58.683834][ T6017] hub 6-1:0.0: probe with driver hub failed with error -5 [ 58.688005][ T6017] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 59.031704][ T60] usb 6-1: USB disconnect, device number 2 [ 59.114148][ T6185] syzkaller1: entered promiscuous mode [ 59.116080][ T6185] syzkaller1: entered allmulticast mode [ 59.220338][ T6200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.45'. [ 59.281996][ T6017] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.284451][ T6017] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.286797][ T6017] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.289148][ T6017] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.291583][ T6017] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.295534][ T6017] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.299279][ T6017] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.302802][ T6017] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.305264][ T6017] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.307598][ T6017] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.314074][ T6017] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 59.456014][ T6216] openvswitch: netlink: Flow actions attr not present in new flow. [ 59.542331][ T5971] Bluetooth: hci3: command tx timeout [ 59.542758][ T5982] Bluetooth: hci2: command tx timeout [ 59.545289][ T5986] Bluetooth: hci0: command tx timeout [ 59.666128][ T6196] usb 7-1: USB disconnect, device number 2 [ 59.751867][ T6062] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 59.831687][ T6234] hpfs: Bad magic ... probably not HPFS [ 59.951651][ T6062] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.955882][ T6062] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 59.973381][ T6062] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 59.977125][ T6062] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 59.981236][ T6062] usb 6-1: SerialNumber: syz [ 60.190445][ T6062] usb 6-1: 0:2 : does not exist [ 60.196292][ T6062] usb 6-1: unit 12 not found! [ 60.206757][ T6062] usb 6-1: USB disconnect, device number 3 [ 60.224956][ T6141] udevd[6141]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 60.592044][ T5986] Bluetooth: hci1: command tx timeout [ 60.768531][ T5986] Bluetooth: hci0: Invalid connection link type handle 0x00c8 [ 61.173533][ T40] kauditd_printk_skb: 150 callbacks suppressed [ 61.173548][ T40] audit: type=1400 audit(1757979626.677:249): avc: denied { write } for pid=6335 comm="syz.1.83" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 61.186061][ T40] audit: type=1400 audit(1757979626.677:250): avc: denied { open } for pid=6335 comm="syz.1.83" path="/dev/input/event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 61.227404][ T6341] IPVS: persistence engine module ip_vs_pe_s not found [ 61.235628][ T40] audit: type=1400 audit(1757979626.737:251): avc: denied { write } for pid=6345 comm="syz.0.86" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 61.369471][ T40] audit: type=1400 audit(1757979626.867:252): avc: denied { ioctl } for pid=6349 comm="syz.2.88" path="socket:[9851]" dev="sockfs" ino=9851 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.379340][ T40] audit: type=1400 audit(1757979626.867:253): avc: denied { connect } for pid=6349 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.387487][ T40] audit: type=1400 audit(1757979626.877:254): avc: denied { ioctl } for pid=6349 comm="syz.2.88" path="socket:[12557]" dev="sockfs" ino=12557 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.447241][ T6360] __nla_validate_parse: 6 callbacks suppressed [ 61.447253][ T6360] netlink: 72 bytes leftover after parsing attributes in process `syz.2.90'. [ 61.462504][ T40] audit: type=1400 audit(1757979626.967:255): avc: denied { create } for pid=6361 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 61.464908][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.91'. [ 61.476607][ T40] audit: type=1400 audit(1757979626.977:256): avc: denied { create } for pid=6361 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 61.484930][ T40] audit: type=1400 audit(1757979626.977:257): avc: denied { write } for pid=6361 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 61.492830][ T40] audit: type=1400 audit(1757979626.977:258): avc: denied { write } for pid=6361 comm="syz.0.91" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.516741][ T6363] netlink: 36 bytes leftover after parsing attributes in process `syz.2.90'. [ 61.624192][ T5986] Bluetooth: hci0: command tx timeout [ 61.631938][ T5986] Bluetooth: hci3: command tx timeout [ 61.715710][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 61.719498][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 61.830346][ T6401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.896571][ T6408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.908634][ T6408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.991855][ T6196] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.145727][ T6196] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 62.148597][ T6196] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.151517][ T6196] usb 5-1: Product: syz [ 62.153043][ T6196] usb 5-1: Manufacturer: syz [ 62.154574][ T6196] usb 5-1: SerialNumber: syz [ 62.163125][ T6196] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 62.164108][ T6415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.185701][ T29] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 62.207448][ T6415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.397555][ T6427] netlink: 68 bytes leftover after parsing attributes in process `syz.1.106'. [ 62.680164][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'. [ 62.993322][ T6457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.001225][ T6470] netlink: 'syz.3.118': attribute type 10 has an invalid length. [ 63.004167][ T6470] netlink: 40 bytes leftover after parsing attributes in process `syz.3.118'. [ 63.006194][ T6457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.007077][ T6470] dummy0: entered promiscuous mode [ 63.013549][ T6470] bridge0: port 3(dummy0) entered blocking state [ 63.015653][ T6470] bridge0: port 3(dummy0) entered disabled state [ 63.017654][ T6470] dummy0: entered allmulticast mode [ 63.021138][ T6470] bridge0: port 3(dummy0) entered blocking state [ 63.023411][ T6470] bridge0: port 3(dummy0) entered forwarding state [ 63.055909][ T6475] process 'syz.3.120' launched './file1' with NULL argv: empty string added [ 63.062949][ T6475] netlink: 6 bytes leftover after parsing attributes in process `syz.3.120'. [ 63.142895][ T6480] program syz.3.122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.232036][ T29] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 63.234510][ T29] ath9k_htc: Failed to initialize the device [ 63.276261][ T29] usb 5-1: ath9k_htc: USB layer deinitialized [ 63.285559][ T5972] usb 5-1: USB disconnect, device number 2 [ 63.443248][ T6515] block nbd3: NBD_DISCONNECT [ 63.458961][ T6513] block nbd3: Disconnected due to user request. [ 63.462725][ T6513] block nbd3: shutting down sockets [ 63.481669][ T6522] netlink: 'syz.3.132': attribute type 22 has an invalid length. [ 63.486936][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.132'. [ 63.499153][ T6522] netlink: 'syz.3.132': attribute type 22 has an invalid length. [ 63.501593][ T6524] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 63.502929][ T61] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.511094][ T1148] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.515522][ T1148] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.518807][ T1148] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.625818][ T6531] kvm: kvm [6529]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 63.633153][ T6531] kvm: kvm [6529]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 63.642767][ T6530] team0: Port device team_slave_0 removed [ 63.821932][ C3] ------------[ cut here ]------------ [ 63.824103][ C3] ODEBUG: activate active (active state 1) object: ffff8880563a58d8 object type: rcu_head hint: 0x0 [ 63.828491][ C3] WARNING: CPU: 3 PID: 0 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 63.831461][ C3] Modules linked in: [ 63.833006][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted syzkaller #0 PREEMPT(full) [ 63.837561][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.841001][ C3] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 63.842959][ C3] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd e0 43 16 8c 4c 89 e6 48 c7 c7 60 38 16 8c e8 ff fe 8e fc 90 <0f> 0b 90 90 58 83 05 66 61 c0 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 63.848994][ C3] RSP: 0018:ffffc900006f8ad8 EFLAGS: 00010286 [ 63.850979][ C3] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a4388 [ 63.853547][ C3] RDX: ffff88801e2a0000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 63.856495][ C3] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 63.859685][ T6546] block nbd1: Attempted send on invalid socket [ 63.859740][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8c163e80 [ 63.862130][ T6546] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 63.862197][ T6546] vxfs: unable to read disk superblock at 1 [ 63.865480][ C3] R13: ffffffff8baeb920 R14: 0000000000000000 R15: ffffc900006f8b98 [ 63.865498][ C3] FS: 0000000000000000(0000) GS:ffff8880d69b2000(0000) knlGS:0000000000000000 [ 63.865532][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.865547][ C3] CR2: 0000200000001000 CR3: 00000000531ac000 CR4: 0000000000352ef0 [ 63.865561][ C3] DR0: 0000000000000065 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.869570][ T6546] block nbd1: Attempted send on invalid socket [ 63.871996][ C3] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 63.872013][ C3] Call Trace: [ 63.872021][ C3] [ 63.872030][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 63.872060][ C3] debug_object_activate+0x2bc/0x4c0 [ 63.872084][ C3] ? __pfx_debug_object_activate+0x10/0x10 [ 63.872103][ C3] ? find_held_lock+0x2b/0x80 [ 63.872131][ C3] ? do_raw_spin_unlock+0x172/0x230 [ 63.872153][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 63.872174][ C3] ? __pfx_radix_tree_node_rcu_free+0x10/0x10 [ 63.872197][ C3] __call_rcu_common.constprop.0+0x35/0xa10 [ 63.872224][ C3] delete_node+0x1fc/0x8d0 [ 63.872245][ C3] ? find_held_lock+0x2b/0x80 [ 63.872269][ C3] __radix_tree_delete+0x193/0x3d0 [ 63.872295][ C3] radix_tree_delete_item+0xea/0x230 [ 63.875582][ T6546] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 63.879386][ C3] ? __pfx_radix_tree_delete_item+0x10/0x10 [ 63.883113][ T6546] vxfs: unable to read disk superblock at 8 [ 63.884721][ C3] ? queue_work_on+0x12a/0x1f0 [ 63.888071][ T6546] vxfs: can't find superblock. [ 63.890156][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 63.932300][ C3] ? queue_work_on+0x8b/0x1f0 [ 63.933843][ C3] ? rcu_core+0x797/0x1530 [ 63.935354][ C3] ? rcu_core+0x797/0x1530 [ 63.936855][ C3] afs_cell_destroy+0x1db/0x310 [ 63.938493][ C3] rcu_core+0x799/0x1530 [ 63.939981][ C3] ? __pfx_rcu_core+0x10/0x10 [ 63.942135][ C3] handle_softirqs+0x219/0x8e0 [ 63.944388][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 63.946649][ C3] __irq_exit_rcu+0x109/0x170 [ 63.948676][ C3] irq_exit_rcu+0x9/0x30 [ 63.950487][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 63.952791][ C3] [ 63.953725][ C3] [ 63.954743][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 63.956605][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 63.958418][ C3] Code: 7d 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 56 15 00 fb f4 cc 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 63.964473][ C3] RSP: 0018:ffffc90000197df8 EFLAGS: 00000282 [ 63.966594][ C3] RAX: 00000000000593cf RBX: 0000000000000003 RCX: ffffffff8b94bb49 [ 63.969184][ C3] RDX: 0000000000000000 RSI: ffffffff8de52c58 RDI: ffffffff8c163300 [ 63.971902][ C3] RBP: ffffed1003c54000 R08: 0000000000000001 R09: ffffed100d4e6655 [ 63.974482][ C3] R10: ffff88806a7332ab R11: 0000000000000000 R12: 0000000000000003 [ 63.977402][ C3] R13: ffff88801e2a0000 R14: ffffffff90ab7290 R15: 0000000000000000 [ 63.979935][ C3] ? ct_kernel_exit+0x139/0x190 [ 63.981496][ C3] default_idle+0x13/0x20 [ 63.982948][ C3] default_idle_call+0x6d/0xb0 [ 63.984473][ C3] do_idle+0x391/0x510 [ 63.985802][ C3] ? __pfx_do_idle+0x10/0x10 [ 63.987291][ C3] ? trace_sched_exit_tp+0x2f/0x120 [ 63.989016][ C3] cpu_startup_entry+0x4f/0x60 [ 63.990563][ C3] start_secondary+0x21d/0x2b0 [ 63.992193][ C3] ? __pfx_start_secondary+0x10/0x10 [ 63.993886][ C3] common_startup_64+0x13e/0x148 [ 63.995796][ C3] [ 63.996932][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 63.999213][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted syzkaller #0 PREEMPT(full) [ 64.001914][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.005500][ C3] Call Trace: [ 64.006907][ C3] [ 64.007990][ C3] dump_stack_lvl+0x3d/0x1f0 [ 64.009558][ C3] vpanic+0x6e8/0x7a0 [ 64.010999][ C3] ? __pfx_vpanic+0x10/0x10 [ 64.012736][ C3] ? debug_print_object+0x1a2/0x2b0 [ 64.014960][ C3] panic+0xca/0xd0 [ 64.016517][ C3] ? __pfx_panic+0x10/0x10 [ 64.018435][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 64.020597][ C3] check_panic_on_warn+0xab/0xb0 [ 64.022705][ C3] __warn+0xf6/0x3c0 [ 64.024364][ C3] ? debug_print_object+0x1a2/0x2b0 [ 64.026565][ C3] report_bug+0x3c3/0x580 [ 64.028398][ C3] ? debug_print_object+0x1a2/0x2b0 [ 64.030437][ C3] handle_bug+0x184/0x210 [ 64.031812][ C3] exc_invalid_op+0x17/0x50 [ 64.033320][ C3] asm_exc_invalid_op+0x1a/0x20 [ 64.035036][ C3] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 64.037461][ C3] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd e0 43 16 8c 4c 89 e6 48 c7 c7 60 38 16 8c e8 ff fe 8e fc 90 <0f> 0b 90 90 58 83 05 66 61 c0 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 64.045205][ C3] RSP: 0018:ffffc900006f8ad8 EFLAGS: 00010286 [ 64.047137][ C3] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a4388 [ 64.049887][ C3] RDX: ffff88801e2a0000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 64.053143][ C3] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 64.055859][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8c163e80 [ 64.058792][ C3] R13: ffffffff8baeb920 R14: 0000000000000000 R15: ffffc900006f8b98 [ 64.061357][ C3] ? __warn_printk+0x198/0x350 [ 64.062993][ C3] ? __warn_printk+0x1a5/0x350 [ 64.064617][ C3] ? debug_print_object+0x1a1/0x2b0 [ 64.066369][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 64.068262][ C3] debug_object_activate+0x2bc/0x4c0 [ 64.069967][ C3] ? __pfx_debug_object_activate+0x10/0x10 [ 64.071895][ C3] ? find_held_lock+0x2b/0x80 [ 64.073662][ C3] ? do_raw_spin_unlock+0x172/0x230 [ 64.075636][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 64.077727][ C3] ? __pfx_radix_tree_node_rcu_free+0x10/0x10 [ 64.079744][ C3] __call_rcu_common.constprop.0+0x35/0xa10 [ 64.081703][ C3] delete_node+0x1fc/0x8d0 [ 64.083171][ C3] ? find_held_lock+0x2b/0x80 [ 64.084739][ C3] __radix_tree_delete+0x193/0x3d0 [ 64.086405][ C3] radix_tree_delete_item+0xea/0x230 [ 64.088156][ C3] ? __pfx_radix_tree_delete_item+0x10/0x10 [ 64.090052][ C3] ? queue_work_on+0x12a/0x1f0 [ 64.091671][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 64.093343][ C3] ? queue_work_on+0x8b/0x1f0 [ 64.095004][ C3] ? rcu_core+0x797/0x1530 [ 64.096542][ C3] ? rcu_core+0x797/0x1530 [ 64.098146][ C3] afs_cell_destroy+0x1db/0x310 [ 64.099760][ C3] rcu_core+0x799/0x1530 [ 64.101165][ C3] ? __pfx_rcu_core+0x10/0x10 [ 64.102743][ C3] handle_softirqs+0x219/0x8e0 [ 64.104300][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 64.106081][ C3] __irq_exit_rcu+0x109/0x170 [ 64.107752][ C3] irq_exit_rcu+0x9/0x30 [ 64.109259][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 64.111332][ C3] [ 64.112412][ C3] [ 64.113466][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 64.115865][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 64.117964][ C3] Code: 7d 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 56 15 00 fb f4 cc 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 64.124670][ C3] RSP: 0018:ffffc90000197df8 EFLAGS: 00000282 [ 64.127102][ C3] RAX: 00000000000593cf RBX: 0000000000000003 RCX: ffffffff8b94bb49 [ 64.130453][ C3] RDX: 0000000000000000 RSI: ffffffff8de52c58 RDI: ffffffff8c163300 [ 64.133754][ C3] RBP: ffffed1003c54000 R08: 0000000000000001 R09: ffffed100d4e6655 [ 64.137059][ C3] R10: ffff88806a7332ab R11: 0000000000000000 R12: 0000000000000003 [ 64.140285][ C3] R13: ffff88801e2a0000 R14: ffffffff90ab7290 R15: 0000000000000000 [ 64.143104][ C3] ? ct_kernel_exit+0x139/0x190 [ 64.144757][ C3] default_idle+0x13/0x20 [ 64.146184][ C3] default_idle_call+0x6d/0xb0 [ 64.147784][ C3] do_idle+0x391/0x510 [ 64.149137][ C3] ? __pfx_do_idle+0x10/0x10 [ 64.150613][ C3] ? trace_sched_exit_tp+0x2f/0x120 [ 64.152297][ C3] cpu_startup_entry+0x4f/0x60 [ 64.153875][ C3] start_secondary+0x21d/0x2b0 [ 64.155693][ C3] ? __pfx_start_secondary+0x10/0x10 [ 64.157942][ C3] common_startup_64+0x13e/0x148 [ 64.159505][ C3] [ 64.161220][ C3] Kernel Offset: disabled [ 64.162635][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:40:29 Registers: info registers vcpu 0 CPU#0 RAX=00000000000b8d3d RBX=0000000000000000 RCX=ffffffff8b94bb49 RDX=0000000000000000 RSI=ffffffff8de52c58 RDI=ffffffff8c163300 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab7290 R15=0000000000000000 RIP=ffffffff8b94a68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff8880d66b2000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c28ea49 CR3=0000000057b51000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 006c6f72746e6f63 5f65657274627573 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd23070a56 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd23070a56 00007ffd23070a5c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5088612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5088612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5088612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5088612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5088612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5088612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00b8000008a6b900 000001b800000250 b9c800003ffd82c1 000000cd8ddc8de2 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02220101c36de1b9 c40000bf539dc70f 300f300f00000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08a6b900000001b8 00000250b9c80000 3ffd82c1000000cd 8ddc8de2c4000060 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 EAX=00000000 EBX=00000000 ECX=00000585 EDX=00000000 ESI=00000000 EDI=00000000 EBP=00000000 ESP=0000f01e EIP=00009114 EFL=00010046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0018 00000000 000fffff 00009300 DPL=0 DS16 [-WA] CS =0010 00000000 0000ffff 00009b00 DPL=0 CS16 [-RA] SS =0018 00000000 000fffff 00009300 DPL=0 DS16 [-WA] DS =0018 00000000 000fffff 00009300 DPL=0 DS16 [-WA] FS =0018 00000000 000fffff 00009300 DPL=0 DS16 [-WA] GS =0018 00000000 000fffff 00009300 DPL=0 DS16 [-WA] LDT=0008 00001800 000007ff 00408200 DPL=0 LDT TR =0000 00000000 0000ffff 00008b00 DPL=0 TSS32-busy GDT= 00001000 000007ff IDT= 00003800 000001ff CR0=00000031 CR2=00000000 CR3=00000000 CR4=00002040 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000001 FCW=037f FSW=7d41 [ST=7] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=c000000000000000 ffff Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003072 656c6c616b7a7973 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd17d54e56 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd17d54e56 00007ffd17d54e5c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7a9412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7a9412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7a9412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7a9412e61 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a741e80 RCX=ffffffff81af9d91 RDX=ffff88802941c880 RSI=ffffffff81af9d6b RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000617f888 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed100d4e83d1 R14=0000000000000001 R15=0000000000000003 RIP=ffffffff81af9d6d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555594b33808 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffbbccc610 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffbbccc796 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffbbccc796 00007fffbbccc79c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c1d612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c1d612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c1d612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c1d612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c1d612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c1d612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564b815 RDI=ffffffff9b1180e0 RBP=ffffffff9b1180a0 RSP=ffffc900006f8440 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000003a R14=ffffffff9b1180a0 R15=ffffffff8564b7b0 RIP=ffffffff8564b83f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff8880d69b2000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=00000000531ac000 CR4=00352ef0 DR0=0000000000000065 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000280001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c1e3b8f90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffbbccc796 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffbbccc796 00007fffbbccc79c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c1d612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c1d612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c1d612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c1d612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c1d612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c1d612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666c65732f636f72 702f0073252f666c 65732d6461657268 742f636f72702f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434940560a464a57 550a0056000a4349 405608414440574d 510a464a57550a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000