last executing test programs: 5.702766699s ago: executing program 2 (id=183): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) 5.688201151s ago: executing program 2 (id=186): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@e={0xff, 0x9, 0x0, 0x0, @SEQ_NOTEON=@special}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8971, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 5.529963805s ago: executing program 2 (id=187): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x40, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x41000, 0xc193fb33447a5702, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = signalfd(r0, &(0x7f0000000000)={[0x7ff]}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x408, 0x9, {0x0, 0xea60}, {}, {0x4, 0x1, 0x1}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "dd56e685618af176"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a40), r4) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x20000800) syz_emit_ethernet(0x4b, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x11, 0x5, 0x0, 0x0, {[@md5sig={0x13, 0x12, "9352d97000000000998100"}]}}, {"b0"}}}}}}, 0x0) 5.528626722s ago: executing program 2 (id=189): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x20, 0x0) fanotify_mark(r2, 0x445, 0x1003, r1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount$cgroup2(0xfffffff6, &(0x7f0000000100)='./file0\x00', 0x0, 0x2941010, 0x0) 5.46134935s ago: executing program 2 (id=190): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r0 = syz_io_uring_setup(0x7444, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f04) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000001380)=0x1, 0x66) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="000000000000409674f4d893e3484b97cd000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="020000000100"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r3, &(0x7f00000000c0), &(0x7f0000000100)=""/237}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r1) 5.2296271s ago: executing program 2 (id=197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = dup(r2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)=ANY=[]) 5.155823855s ago: executing program 32 (id=197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = dup(r2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)=ANY=[]) 1.709561221s ago: executing program 4 (id=198): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f00000000c0), 0x2, 0x0) r8 = openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r7, &(0x7f0000000200)='THAWED\x00', 0x7) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r9, @ANYBLOB="0500130092848b000a00060008021100000100000600100080050000060012"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$SIOCX25GSUBSCRIP(r4, 0x89e0, &(0x7f0000000400)={'veth0_vlan\x00', 0x7f, 0xfffffffb}) 1.609894185s ago: executing program 4 (id=237): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x18, 0x0, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') link(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.609543886s ago: executing program 4 (id=238): socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x10000, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20044084}, 0x801) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0xa4}}, 0x44000) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0020000000080800490000380000000000069078ac1e0001ac14140d8307d7e0000002860600"/54, @ANYRES8=r1, @ANYRES32=0x41424344, @ANYBLOB="5000400090780000db544447bec753d933b840929b7abe4a7a330193ee7d4c872cf01e8e5125323007fd8e52971bbe5a9bb5f35c8516d0a8b2bd0fe5e2f884b7b3d694a96a3ac66183d99327b5d697cc09d817a990bb07d6664dce1f7d45e96ffa1aefa368aaa73fc4c28dc7f4f26bb72e2201b15c1804d9715646d1165b11032e8675f4249801d9f40472328cdb8703e43a515c1a97e1f5abd6b7341c36e1f617667b4bdd13c2a189e63cd3722cb31355c0f9c159ec19afd2647c9b11ea038d12d7de38b7"], 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x13) futex_waitv(&(0x7f0000000800)=[{0x6, &(0x7f0000000080)=0x8, 0x82}, {0x6, &(0x7f0000000100)=0x2b, 0x2}, {0x867e, &(0x7f0000000280)=0xaab3, 0x82}, {0x3, &(0x7f00000003c0)=0x5, 0x2}, {0x3ff, &(0x7f0000000440)=0xd88a0000000, 0x82}, {0x3, &(0x7f0000000480)=0x7, 0x2}, {0x2b, &(0x7f00000005c0)=0x5, 0x2}, {0x7db, &(0x7f0000000600), 0x82}, {0x4, &(0x7f0000000640)=0x2}, {0x3ff, &(0x7f0000000680)=0x541f, 0x2}, {0x6, &(0x7f00000006c0)=0x82, 0x2}, {0x7fffffff, &(0x7f0000000700)=0x9}, {0x9, &(0x7f0000000740)=0x7, 0x82}, {0x73, &(0x7f0000000780)=0x5, 0x2}, {0x7ff, &(0x7f00000007c0)=0x1, 0x82}], 0xf, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x941002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000340)={[{0x522e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x1}, {0x6, 0x4000, 0x0, 0x0, 0x0, 0x3, 0x8, 0xfb, 0x0, 0x9, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x3e, 0x7, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x48}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x100, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x208c2, 0x1a2) ppoll(&(0x7f0000000140), 0x0, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x1000}) r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [], [0x0, 0x0, 0xff000000], 'veth0_macvtap\x00', 'dvmrp1\x00', {0xff}}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 1.225775605s ago: executing program 0 (id=240): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) shutdown(r1, 0x0) connect$unix(r1, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0xffffff00, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000040)={r6, 0x80000}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000180)={r6}) r7 = accept(r2, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000140)="00ba1b8990", 0x5, 0x20044801, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) r9 = dup2(0xffffffffffffffff, r8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$BLKROGET(r10, 0x125e, &(0x7f0000000100)) 1.225445961s ago: executing program 1 (id=241): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x0) ftruncate(r2, 0x8208200) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x5) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40011}], 0x1}}], 0x1, 0x24008094) r7 = syz_io_uring_setup(0x7dd1, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100, 0x0, 0x16e, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0}) socket$inet6_sctp(0xa, 0x1, 0x84) io_uring_enter(r7, 0x3f80, 0x3697, 0x25, 0x0, 0x0) r10 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r10, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) 1.225195564s ago: executing program 0 (id=242): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x4000010000000000, 0x0) 1.090056368s ago: executing program 4 (id=243): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100b164756d6d793000"/23], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1ee7308c8f10aaa66f733469af0b173f9729f4b6d88adf472a12d94e656927c5f986e1bd2fcf248c8fe8b39b91ae6779a67bdb3ef181fb23fde350d606025a34d8880feabd25babac9389d0e0e48c102310bc7", @ANYRES16, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000500070005000000"], 0x34}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x7800, 0x20, 0x4, 0xf4de, {{0x2d, 0x4, 0x2, 0x2a, 0xb4, 0x67, 0x0, 0x5, 0x29, 0x0, @local, @multicast2, {[@cipso={0x86, 0x4e, 0x1, [{0x6, 0x11, "95cae74748ba48c8294ad3478823a1"}, {0x5, 0xd, "865ad4069a83edfac8096f"}, {0x2, 0xd, "50546139789a66ea2300ca"}, {0x5, 0x12, "1d7a52b09539bb286cf7ca7b1d28d29d"}, {0x2, 0xb, "8d353c0a43ac72d57b"}]}, @noop, @lsrr={0x83, 0x1b, 0x52, [@broadcast, @broadcast, @rand_addr=0x64010100, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @timestamp={0x44, 0x18, 0x3f, 0x0, 0x0, [0xb67, 0x0, 0x7, 0x0, 0x1]}, @timestamp={0x44, 0x8, 0x5b, 0x0, 0xf, [0x8]}, @generic={0x83, 0x12, "d7b746c32149b13fa5f5b1ae7bb491ca"}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=0x14) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010000304000000000000000000000400", @ANYRES32=r5, @ANYBLOB="0000000000000000050021"], 0x30}}, 0x0) r6 = socket(0x2, 0xa, 0xfff) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r7, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003b40)) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r10, 0x65, 0x1, &(0x7f00000000c0)=[{{0x0, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x1, 0x1}, {0x1ffffffb, 0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1}}, {{0x0, 0x1}, {0x2, 0x0, 0x1}}], 0x20) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x3}}}, 0x24}}, 0x40044) 766.17115ms ago: executing program 3 (id=244): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r0 = syz_io_uring_setup(0x7444, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f04) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="000000000000409674f4d893e3484b97cd000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="020000000100"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r3, &(0x7f00000000c0), &(0x7f0000000100)=""/237}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r1) 765.717699ms ago: executing program 3 (id=245): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980903, 0xaa1, @value=0x6}) (async) syz_emit_ethernet(0x4e, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffffffffffffffff080045000040000000000067900228290000240000000000000000e0000002e0000000860800000043c3ef755dbb4556c5504f"], 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x8, 0xeac82) 689.345852ms ago: executing program 3 (id=246): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0xfbfd}) 630.133531ms ago: executing program 3 (id=247): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101440, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x1, "c5003f00"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x42c881, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x48001, 0x0, [0xfffffffffffffffb, 0x8, 0x0, 0x4, 0x1, 0x3, 0xfffffffffffffffc, 0x12]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="470f23fc6541fc48b8e7320000000000000f23d80f21f835c00000d00f23f8420f22e6c7442400a5000000c744240200800000ff2c24f30f00532ff30f516797c483fd005b02ead8cb65666466430f3833af00580000", 0x56}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x4800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@fwd={0x8}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x8, 0x0, 0x0, 0xf, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000200)={0x0, @vbi={0x6, 0x1, 0x1, 0x32315241, [0x2, 0x8], [0x3, 0x4], 0x13a}}) 629.992712ms ago: executing program 3 (id=248): quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'netpci0\x00', 0x6bf1c2d5adba8c12}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x5, 0x4, 0x5, 0x0, 0x3, 0x3, 0xa, 0xb8, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x5, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x9, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x0, 0x50, 0x11, 0x70, 0x4, 0x87}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0x0, 0x40, 0x2000000, 0x0, 0x2004c8, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3, 0x0, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 480.001553ms ago: executing program 3 (id=249): gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x8000021, 0x800000000004, @thr={&(0x7f0000000180)="6719abe66fd36dd8f65a2d6b63a7d9ffd6ff059ec77b799206af9e7f896e0475f31886a06645023ee8becaebeb9822c2c3265357acc63f81998df04b928406f03bfb85d2723c0fceccb9a0df132b7c52f93871f3650da79a7377d2c437060bcabfab307b57d2e938ceab81b7bfcbfccb229e59973adaa4e0bed491", &(0x7f0000000080)="5cb00e5e8dc151633a8d6d0dd7506a431ec05d4db9c8ddcdb15d77fdbd0d882ea08132f1380fa3e0ec90862acba442c37488349bf5763ff180399a4f12aef35243807ad200aa6abbc550726fe167c7c69f1196f4140af93fe46d86c4922568da40ca75ec860b7d8d51a0f3575b21469167b575278dad4611f8a21f990ff11cac14287395293fed0d6011204ea4ef56b4c645d46c9f5c773b1895eb2db92b270d1857b03c8a7f76c0e041f7beec908152dbcf9c39b4a623c285db4491af65b5848b5f672ed15060b847a75f6bcafeb71296d77ea87b69752c151ccc01f0"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = timerfd_create(0x1, 0x0) read(r0, &(0x7f0000000380)=""/189, 0x8) 330.018398ms ago: executing program 1 (id=250): r0 = syz_io_uring_setup(0x24fd, &(0x7f0000000680)={0x0, 0x4f6, 0x10100, 0x1}, &(0x7f00000002c0)=0x0, &(0x7f0000000100)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r5) sendmsg$alg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="fbd89b3e8977042b8d34702d075a011fd70630380f4fb526e7863d4634cbfa0bc71f5511e940db08172fad84fa1395f7449057c8f0e95db43f347b2a40fd82721bc99b86c962b00f3e6573f4d5247daf73f01784f9b4d6c19fa29d5ad992ef173628c59a07d2ffd58eba9389", 0x6c}, {&(0x7f0000000400)="60d96614", 0x4}], 0x2, 0x0, 0x0, 0x20040804}, 0x34000041) sendmsg$NFT_BATCH(r5, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1aac}, 0x1, 0x0, 0x0, 0xc895}, 0x40000) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="440100001000010000000000000000000000000000ffffac1414bb0000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x44800}, 0x20008800) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='7'], 0x118) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f00000002c0)=0x3, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r10 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x4080, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) r12 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000200)={'ipvlan0\x00', {0x2, 0xfffe, @empty}}) r13 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r13, &(0x7f0000002a00)=[{&(0x7f0000000100)=@in={0x2, 0x100, @private=0xa010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)="14f050", 0x3}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x9, 0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x40) sendmsg$NL80211_CMD_START_SCHED_SCAN(r10, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000002580)={0x208, r11, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x39}}}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x128, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xb3, 0x1, "11f74d0812060c1f03e75c214f1b7dbc46e2c6cb6f99bda65fd9a27ff831c9cb74ada94a91d2e85fe76a0741ce75f6a30efc1f410fff99829285cef350dde180c8c0c73863c377b10b08be2859c53558fce43824833b404de0856ae79fa3d11e5bf1c2c674bd4667b65769362146c5aa04f56894d43e187d4c1d8b2bd364ee3d9201dbbcdff62eae38301f260b83b0c3d904abe109af5199bbf544380ceff2e961328fdfe0bc96ddbdc2912459d49f"}, @NL80211_BAND_5GHZ={0x6e, 0x1, "1a25348f553bdeb70e9c0f5185137c853f30b83025c4e33d82fbc21cd38b0278ce6da766c4b164975346e459ddb090e2d5b6167e4ac2f7d91984c24e3ccc17df58dd96b771b54cea75732d55221a1b791f5238ac2279dc00e5307b8c52cf5f7448f977cd3ae3993bef3c"}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xa8, 0x84, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x8001}, @NL80211_BAND_60GHZ={0x66, 0x2, 0x1000}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7fffffff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xffffffff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x0, 0x1, @random="a863a734e9d33da4b6ea0a896626805049c63ae740ff25"}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xe, 0x1, @random="93170657663e00c25860"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xb}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000011) r14 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000080) sendmsg$ETHTOOL_MSG_WOL_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100b11b700000feffff1a000000180001801400020064756d6d7930"], 0x2c}}, 0x0) 329.795376ms ago: executing program 0 (id=251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003e40), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005700)={'wlan0\x00', 0x0}) unshare(0x2040400) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x0) ioctl$CEC_RECEIVE(r5, 0xc0386106, &(0x7f00000010c0)={0xd51, 0x42e, 0xd3, 0xfffffffe, 0x7f, 0x7, "7bfcfd11ddae41917dae6d7063732856", 0x5c, 0x3, 0x1, 0x4, 0x8, 0xff}) syz_emit_ethernet(0x123e, &(0x7f0000000a40)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7605d6", 0x1208, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@dstopts={0x0, 0x20f, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}, @generic={0x4, 0x1000, "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"}, @calipso={0x7, 0x30, {0x2, 0xa, 0xf3, 0x5, [0xe490, 0x1ff, 0xcc, 0x70, 0xfffffffffffffffe]}}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x60}, @jumbo={0xc2, 0x4, 0x9c}, @hao={0xc9, 0x10, @private0}]}, @srh={0x73, 0x12, 0x4, 0x9, 0x1, 0x40, 0xc, [@dev={0xfe, 0x80, '\x00', 0x3d}, @empty, @mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}]}, @dstopts={0x16, 0x3, '\x00', [@ra={0x5, 0x2, 0x8000}, @enc_lim, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @hopopts={0x1d, 0xf, '\x00', [@ra={0x5, 0x2, 0x400}, @ra={0x5, 0x2, 0xfffc}, @calipso={0x7, 0x30, {0x1, 0xa, 0x1, 0x4, [0xfffffffffffffffc, 0x6, 0xe514, 0x4, 0xd]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x40, 0x2, [0x81, 0x6]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @ra={0x5, 0x2, 0x8}, @pad1, @hao={0xc9, 0x10, @local}]}, @fragment={0x2c, 0x0, 0x4, 0x1, 0x0, 0x7, 0x64}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @dev, [{0x22, 0x1, "703b744dc5c6"}]}}}}}}, 0x0) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000040)=0xbd, &(0x7f0000000180)=0x2) r6 = memfd_create(&(0x7f0000000080)=']\x04\x88 \xf1\xe5\xad\xa9#\xe1>a\xa2\xa2\x17\xb8\x85\xb9J%', 0x7) fallocate(r6, 0x0, 0x0, 0x2) r7 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r7, 0x200}], 0x1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000005800)={0x0, 0x0, &(0x7f00000057c0)={&(0x7f0000005740)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 159.819282ms ago: executing program 1 (id=252): r0 = socket$netlink(0x10, 0x3, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000481100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) sendmsg$nl_route(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="40003a000a000200fffffffffffef50008000f"], 0x30}}, 0x4c000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x440008}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3e44}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x40841) 159.556249ms ago: executing program 0 (id=253): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d"], 0x2c}}, 0x0) 158.504499ms ago: executing program 1 (id=254): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r0 = syz_io_uring_setup(0x7444, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f04) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="000000000000409674f4d893e3484b97cd000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="020000000100"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r3, &(0x7f00000000c0), &(0x7f0000000100)=""/237}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r1) 69.959809ms ago: executing program 1 (id=255): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x34, 0x0, 0x7f}, 0x2c) 69.827926ms ago: executing program 0 (id=256): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x40, 0x0, 0x0, 0x3334}, {0x20, 0x1, 0x0, 0xfffff038}, {0x6, 0x6, 0x0, 0x5}]}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a01040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000400), 0x0}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xb8}}, 0x4048004) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x9ffc) 69.651032ms ago: executing program 1 (id=257): quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'netpci0\x00', 0x6bf1c2d5adba8c12}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x5, 0x4, 0x5, 0x0, 0x3, 0x3, 0xa, 0xb8, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x5, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x9, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x0, 0x50, 0x11, 0x70, 0x4, 0x87}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0x0, 0x40, 0x2000000, 0x0, 0x2004c8, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3, 0x0, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0 (id=258): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000580)='./file0\x00', 0x181242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f00000002c0)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0x5, 0xffffffffffffff80, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x8, 0x8b, 0x800000000000d615, 0x3fb, 0x7ffffffb, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x100}}, {0x0, 0x12}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f04) (fail_nth: 20) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x9}}, 0x20) kernel console output (not intermixed with test programs): [ 44.181339][ T40] audit: type=1400 audit(1748163304.306:65): avc: denied { siginh } for pid=5872 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:50894' (ED25519) to the list of known hosts. [ 46.547142][ T40] audit: type=1400 audit(1748163306.706:66): avc: denied { name_bind } for pid=5913 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.579230][ T40] audit: type=1400 audit(1748163306.736:67): avc: denied { write } for pid=5915 comm="sh" path="pipe:[6538]" dev="pipefs" ino=6538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 46.601577][ T40] audit: type=1400 audit(1748163306.756:68): avc: denied { execute } for pid=5915 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.613342][ T40] audit: type=1400 audit(1748163306.756:69): avc: denied { execute_no_trans } for pid=5915 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.573017][ T40] audit: type=1400 audit(1748163308.726:70): avc: denied { mounton } for pid=5915 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.576448][ T5915] cgroup: Unknown subsys name 'net' [ 48.726607][ T5915] cgroup: Unknown subsys name 'cpuset' [ 48.731220][ T5915] cgroup: Unknown subsys name 'rlimit' [ 49.008558][ T5921] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.839627][ T5915] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.656153][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 52.656163][ T40] audit: type=1400 audit(1748163312.816:84): avc: denied { execmem } for pid=5925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.878357][ T40] audit: type=1400 audit(1748163313.036:85): avc: denied { create } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.891808][ T40] audit: type=1400 audit(1748163313.036:86): avc: denied { read write } for pid=5929 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.899407][ T40] audit: type=1400 audit(1748163313.036:87): avc: denied { open } for pid=5929 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.907564][ T40] audit: type=1400 audit(1748163313.056:88): avc: denied { ioctl } for pid=5929 comm="syz-executor" path="socket:[2717]" dev="sockfs" ino=2717 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.953927][ T5932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.961956][ T5935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.965324][ T5935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.967358][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.968543][ T5935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.970814][ T5938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.973674][ T5935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.976509][ T5938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.978818][ T5935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.982310][ T5938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.984970][ T5935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.987253][ T5938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.989595][ T5935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.994569][ T5943] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.995374][ T5943] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.001332][ T40] audit: type=1400 audit(1748163313.156:89): avc: denied { read } for pid=5937 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.003506][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.008815][ T5943] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.011312][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.013611][ T40] audit: type=1400 audit(1748163313.156:90): avc: denied { open } for pid=5937 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.014339][ T5943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.014924][ T5943] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.031401][ T40] audit: type=1400 audit(1748163313.156:91): avc: denied { mounton } for pid=5937 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.233950][ T40] audit: type=1400 audit(1748163313.396:92): avc: denied { module_request } for pid=5937 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.280728][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 53.426139][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 53.467296][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 53.556431][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.559777][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.562787][ T5937] bridge_slave_0: entered allmulticast mode [ 53.565787][ T5937] bridge_slave_0: entered promiscuous mode [ 53.573089][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.576387][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.579400][ T5937] bridge_slave_1: entered allmulticast mode [ 53.582425][ T5937] bridge_slave_1: entered promiscuous mode [ 53.616070][ T5929] chnl_net:caif_netlink_parms(): no params data found [ 53.688572][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.750046][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.752665][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.754836][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.756840][ T5940] bridge_slave_0: entered allmulticast mode [ 53.759231][ T5940] bridge_slave_0: entered promiscuous mode [ 53.831909][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.834077][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.836086][ T5940] bridge_slave_1: entered allmulticast mode [ 53.838484][ T5940] bridge_slave_1: entered promiscuous mode [ 53.859520][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.861556][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.863844][ T5933] bridge_slave_0: entered allmulticast mode [ 53.866463][ T5933] bridge_slave_0: entered promiscuous mode [ 53.921400][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.923734][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.925786][ T5933] bridge_slave_1: entered allmulticast mode [ 53.928207][ T5933] bridge_slave_1: entered promiscuous mode [ 53.945771][ T5937] team0: Port device team_slave_0 added [ 53.949542][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.987940][ T5937] team0: Port device team_slave_1 added [ 53.991945][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.995625][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.998551][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.001443][ T5929] bridge_slave_0: entered allmulticast mode [ 54.005385][ T5929] bridge_slave_0: entered promiscuous mode [ 54.009928][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.012861][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.015891][ T5929] bridge_slave_1: entered allmulticast mode [ 54.019740][ T5929] bridge_slave_1: entered promiscuous mode [ 54.027014][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.117389][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.121729][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.127956][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.136890][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.143680][ T5940] team0: Port device team_slave_0 added [ 54.185156][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.187600][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.195437][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.200436][ T5940] team0: Port device team_slave_1 added [ 54.204738][ T5929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.240100][ T5933] team0: Port device team_slave_0 added [ 54.276151][ T5929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.283244][ T5933] team0: Port device team_slave_1 added [ 54.301944][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.307338][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.315460][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.415910][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.418718][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.429530][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.484010][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.486836][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.494836][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.506970][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.509718][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.519727][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.527133][ T5929] team0: Port device team_slave_0 added [ 54.532874][ T5937] hsr_slave_0: entered promiscuous mode [ 54.536218][ T5937] hsr_slave_1: entered promiscuous mode [ 54.548188][ T5929] team0: Port device team_slave_1 added [ 54.704557][ T5940] hsr_slave_0: entered promiscuous mode [ 54.707481][ T5940] hsr_slave_1: entered promiscuous mode [ 54.710296][ T5940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.713375][ T5940] Cannot create hsr debugfs directory [ 54.721251][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.725578][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.737121][ T5929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.797094][ T5933] hsr_slave_0: entered promiscuous mode [ 54.800630][ T5933] hsr_slave_1: entered promiscuous mode [ 54.803816][ T5933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.806837][ T5933] Cannot create hsr debugfs directory [ 54.813966][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.816822][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.827035][ T5929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.054314][ T5944] Bluetooth: hci2: command tx timeout [ 55.063593][ T5944] Bluetooth: hci1: command tx timeout [ 55.063631][ T5284] Bluetooth: hci3: command tx timeout [ 55.066583][ T5932] Bluetooth: hci0: command tx timeout [ 55.097018][ T5929] hsr_slave_0: entered promiscuous mode [ 55.099199][ T5929] hsr_slave_1: entered promiscuous mode [ 55.101306][ T5929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.104280][ T5929] Cannot create hsr debugfs directory [ 55.324475][ T5937] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.339654][ T5937] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.350957][ T5937] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.357757][ T5937] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.381020][ T5940] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.386048][ T5940] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.392672][ T5940] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.398325][ T5940] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.448503][ T5933] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.454771][ T5933] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.458813][ T5933] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.462886][ T5933] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.513337][ T5929] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.518751][ T5929] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.522921][ T5929] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.529796][ T5929] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.545436][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.574012][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.605581][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.611345][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.626001][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.628576][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.633241][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.635589][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.643350][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.645643][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.661562][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.663907][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.703559][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.722743][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.749174][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.751402][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.755097][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.757220][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.766846][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.820821][ T5929] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.829625][ T40] audit: type=1400 audit(1748163315.986:93): avc: denied { sys_module } for pid=5940 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.838747][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.841464][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.849891][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.852139][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.930574][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.949916][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.957838][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.986147][ T5940] veth0_vlan: entered promiscuous mode [ 55.991042][ T5940] veth1_vlan: entered promiscuous mode [ 56.040089][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.044379][ T5933] veth0_vlan: entered promiscuous mode [ 56.050941][ T5940] veth0_macvtap: entered promiscuous mode [ 56.058057][ T5937] veth0_vlan: entered promiscuous mode [ 56.062053][ T5940] veth1_macvtap: entered promiscuous mode [ 56.070571][ T5933] veth1_vlan: entered promiscuous mode [ 56.076791][ T5937] veth1_vlan: entered promiscuous mode [ 56.100034][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.112717][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.118518][ T5940] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.121349][ T5940] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.124796][ T5940] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.127580][ T5940] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.144896][ T5937] veth0_macvtap: entered promiscuous mode [ 56.149248][ T5933] veth0_macvtap: entered promiscuous mode [ 56.156370][ T5933] veth1_macvtap: entered promiscuous mode [ 56.160123][ T5937] veth1_macvtap: entered promiscuous mode [ 56.180124][ T5929] veth0_vlan: entered promiscuous mode [ 56.190173][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.197732][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.205419][ T5933] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.208602][ T5933] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.211706][ T5933] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.215869][ T5933] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.230084][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.238235][ T5929] veth1_vlan: entered promiscuous mode [ 56.244546][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.261349][ T5937] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.265001][ T5937] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.267983][ T5937] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.271096][ T5937] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.288396][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.292063][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.344961][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.347690][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.354015][ T5929] veth0_macvtap: entered promiscuous mode [ 56.354035][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.358871][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.369200][ T3830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.370582][ T5929] veth1_macvtap: entered promiscuous mode [ 56.371713][ T3830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.392487][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.395785][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.410225][ T5940] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.426297][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.428704][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.429160][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.439320][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.452490][ T5929] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.457152][ T5929] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.460638][ T5929] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.465054][ T5929] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.465501][ T5995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 56.529612][ T3830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.532000][ T3830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.560958][ T3830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.563347][ T3830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.617470][ T6003] overlayfs: failed to resolve './file1': -2 [ 56.627189][ T6003] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.635112][ T6001] block nbd0: server does not support multiple connections per device. [ 56.640804][ T6003] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 56.645674][ T6001] block nbd0: shutting down sockets [ 56.662423][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 56.665302][ T6005] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET) [ 56.673304][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 56.727816][ T6007] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7'. [ 56.758589][ T6017] dummy0: entered promiscuous mode [ 57.006724][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 57.016263][ T6026] Zero length message leads to an empty skb [ 57.113886][ T6032] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 57.133606][ T5932] Bluetooth: hci1: command tx timeout [ 57.133638][ T5284] Bluetooth: hci2: command tx timeout [ 57.144183][ T5284] Bluetooth: hci0: command tx timeout [ 57.145126][ T5932] Bluetooth: hci3: command tx timeout [ 57.195423][ T6036] batman_adv: batadv0: Adding interface: dummy0 [ 57.197776][ T6036] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.210846][ T6036] batman_adv: batadv0: Interface activated: dummy0 [ 57.226302][ T6036] batadv0: mtu less than device minimum [ 57.229690][ T6036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 57.234511][ T6036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 57.239507][ T6036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 57.244741][ T6036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 57.249826][ T6036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 57.254231][ T6036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 57.257949][ T6036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 57.261578][ T6036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 57.434472][ T6046] block nbd0: server does not support multiple connections per device. [ 57.439136][ T6046] block nbd0: shutting down sockets [ 57.506142][ T6060] batman_adv: batadv0: Interface deactivated: dummy0 [ 57.508449][ T6060] dummy0: entered promiscuous mode [ 57.849366][ T40] kauditd_printk_skb: 102 callbacks suppressed [ 57.849383][ T40] audit: type=1400 audit(1748163318.006:196): avc: denied { perfmon } for pid=6070 comm="syz.1.28" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.851380][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 57.851705][ T40] audit: type=1400 audit(1748163318.006:197): avc: denied { prog_run } for pid=6070 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 57.860908][ T6074] bridge_slave_1: left allmulticast mode [ 57.876493][ T6074] bridge_slave_1: left promiscuous mode [ 57.879612][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.895436][ T6074] bridge_slave_0: left allmulticast mode [ 57.897252][ T6074] bridge_slave_0: left promiscuous mode [ 57.899400][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.909864][ T40] audit: type=1400 audit(1748163318.066:198): avc: denied { getopt } for pid=6075 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.959734][ T40] audit: type=1400 audit(1748163318.116:199): avc: denied { create } for pid=6075 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 57.965762][ T40] audit: type=1400 audit(1748163318.116:200): avc: denied { ioctl } for pid=6075 comm="syz.3.29" path="socket:[9652]" dev="sockfs" ino=9652 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 58.004529][ T40] audit: type=1400 audit(1748163318.166:201): avc: denied { name_bind } for pid=6077 comm="syz.3.30" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 58.006420][ T6078] warning: `syz.3.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 58.027260][ T40] audit: type=1400 audit(1748163318.186:202): avc: denied { create } for pid=6077 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.033161][ T40] audit: type=1400 audit(1748163318.186:203): avc: denied { setopt } for pid=6077 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.075176][ T6080] vlan2: entered promiscuous mode [ 58.077416][ T6080] vlan2: entered allmulticast mode [ 58.079487][ T6080] hsr_slave_1: entered allmulticast mode [ 58.095276][ T6080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31'. [ 58.149597][ T40] audit: type=1400 audit(1748163318.306:204): avc: denied { create } for pid=6079 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 58.167174][ T40] audit: type=1400 audit(1748163318.326:205): avc: denied { write } for pid=6079 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 58.181451][ T6081] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 58.184201][ T6081] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 58.188941][ T6081] vhci_hcd vhci_hcd.0: Device attached [ 58.193367][ T6082] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 58.197373][ T63] vhci_hcd: stop threads [ 58.198793][ T63] vhci_hcd: release socket [ 58.200197][ T63] vhci_hcd: disconnect device [ 58.356000][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'. [ 58.360553][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'. [ 58.595489][ T6095] dummy0: entered promiscuous mode [ 59.055708][ T6105] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 59.062297][ T6105] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 59.213553][ T5932] Bluetooth: hci1: command tx timeout [ 59.223767][ T5284] Bluetooth: hci2: command tx timeout [ 59.223998][ T5932] Bluetooth: hci0: command tx timeout [ 59.533565][ T5932] Bluetooth: hci3: command tx timeout [ 59.710194][ T6115] binder: 6109:6115 ioctl c0306201 200000000480 returned -14 [ 59.738518][ T64] IPVS: starting estimator thread 0... [ 59.823559][ T6118] IPVS: using max 46 ests per chain, 110400 per kthread [ 60.037811][ T6107] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 60.039938][ T6107] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 60.051285][ T6107] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 60.053325][ T6107] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 60.058420][ T6107] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 60.060460][ T6107] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 60.065868][ T6107] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 60.067728][ T6107] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 60.381686][ T6110] binder: 6109:6110 ioctl c0306201 200000000280 returned -14 [ 60.418516][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.51'. [ 60.493727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.558410][ T10] IPVS: starting estimator thread 0... [ 60.608608][ T6160] 9pnet_virtio: no channels available for device syz [ 60.619805][ T6158] binder: 6157:6158 ioctl c018620c 200000000380 returned -22 [ 60.655490][ T6156] IPVS: using max 44 ests per chain, 105600 per kthread [ 60.741004][ T6167] 9pnet_virtio: no channels available for device syz [ 61.528457][ T6190] netlink: 'syz.2.70': attribute type 32 has an invalid length. [ 61.600343][ T6198] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 61.708015][ T6211] overlayfs: failed to resolve './file1': -2 [ 61.794236][ T6219] __nla_validate_parse: 5 callbacks suppressed [ 61.794252][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.82'. [ 61.841370][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.82'. [ 61.941436][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 61.945402][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 61.965815][ T6237] Bluetooth: MGMT ver 1.23 [ 62.111715][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.94'. [ 62.134121][ T6257] netlink: 52 bytes leftover after parsing attributes in process `syz.1.95'. [ 62.137364][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'. [ 62.149909][ T6260] overlayfs: failed to resolve './file0': -2 [ 62.160436][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 62.316375][ T6274] process 'syz.3.100' launched '/dev/fd/14' with NULL argv: empty string added [ 62.383548][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 62.574356][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 62.579410][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 62.582942][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 62.590126][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 62.592093][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 62.593036][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.598605][ T10] usb 6-1: Product: syz [ 62.599317][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 62.599964][ T10] usb 6-1: Manufacturer: syz [ 62.605069][ T10] usb 6-1: SerialNumber: syz [ 62.609400][ T6287] macsec0: entered promiscuous mode [ 62.610433][ T10] usb 6-1: config 0 descriptor?? [ 62.827434][ T10] appledisplay 6-1:0.0: Error while getting initial brightness: -71 [ 62.829037][ T10] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -71 [ 62.840539][ T10] usb 6-1: USB disconnect, device number 2 [ 62.903147][ T40] kauditd_printk_skb: 51 callbacks suppressed [ 62.903163][ T40] audit: type=1400 audit(1748163323.056:257): avc: denied { open } for pid=6314 comm="syz.2.115" path="/dev/ptyq8" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 62.912768][ T40] audit: type=1400 audit(1748163323.066:258): avc: denied { ioctl } for pid=6314 comm="syz.2.115" path="/dev/ptyq8" dev="devtmpfs" ino=135 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 62.920815][ T40] audit: type=1400 audit(1748163323.066:259): avc: denied { ioctl } for pid=6314 comm="syz.2.115" path="socket:[8877]" dev="sockfs" ino=8877 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.946247][ T40] audit: type=1400 audit(1748163323.106:260): avc: denied { mount } for pid=6314 comm="syz.2.115" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 62.990750][ T6315] netlink: 'syz.2.115': attribute type 13 has an invalid length. [ 62.998650][ T6315] net_ratelimit: 3344 callbacks suppressed [ 62.998667][ T6315] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 63.041300][ T40] audit: type=1400 audit(1748163323.196:261): avc: denied { append } for pid=6322 comm="syz.3.118" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 63.051947][ T40] audit: type=1400 audit(1748163323.206:262): avc: denied { ioctl } for pid=6322 comm="syz.3.118" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10073 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.138948][ T6332] overlay: filesystem on ./file1 not supported [ 63.138983][ T40] audit: type=1400 audit(1748163323.296:263): avc: denied { mounton } for pid=6331 comm="syz.3.120" path="/40/file1/bus" dev="autofs" ino=10931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 63.231442][ T6336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6336 comm=syz.3.122 [ 63.241131][ T40] audit: type=1400 audit(1748163323.396:264): avc: denied { accept } for pid=6335 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 63.266302][ T6343] overlayfs: conflicting lowerdir path [ 63.481433][ T40] audit: type=1400 audit(1748163323.636:265): avc: denied { read } for pid=6353 comm="syz.3.129" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 63.491765][ T40] audit: type=1400 audit(1748163323.636:266): avc: denied { open } for pid=6353 comm="syz.3.129" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 63.516656][ T6358] FAULT_INJECTION: forcing a failure. [ 63.516656][ T6358] name failslab, interval 1, probability 0, space 0, times 0 [ 63.520880][ T6358] CPU: 1 UID: 0 PID: 6358 Comm: syz.1.131 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 63.520905][ T6358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.520931][ T6358] Call Trace: [ 63.520937][ T6358] [ 63.520944][ T6358] dump_stack_lvl+0x16c/0x1f0 [ 63.520981][ T6358] should_fail_ex+0x512/0x640 [ 63.521000][ T6358] ? fs_reclaim_acquire+0xae/0x150 [ 63.521017][ T6358] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 63.521034][ T6358] should_failslab+0xc2/0x120 [ 63.521046][ T6358] __kmalloc_noprof+0xd2/0x510 [ 63.521060][ T6358] tomoyo_realpath_from_path+0xc2/0x6e0 [ 63.521078][ T6358] ? tomoyo_profile+0x47/0x60 [ 63.521090][ T6358] tomoyo_path_number_perm+0x245/0x580 [ 63.521104][ T6358] ? tomoyo_path_number_perm+0x237/0x580 [ 63.521119][ T6358] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 63.521148][ T6358] ? find_held_lock+0x2b/0x80 [ 63.521162][ T6358] ? hook_file_ioctl_common+0x145/0x410 [ 63.521176][ T6358] ? __fget_files+0x20e/0x3c0 [ 63.521189][ T6358] security_file_ioctl+0x9b/0x240 [ 63.521206][ T6358] __x64_sys_ioctl+0xb7/0x200 [ 63.521222][ T6358] do_syscall_64+0xcd/0x260 [ 63.521239][ T6358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.521251][ T6358] RIP: 0033:0x7ff06658e56b [ 63.521260][ T6358] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 63.521270][ T6358] RSP: 002b:00007ff067408490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.521280][ T6358] RAX: ffffffffffffffda RBX: 00007ff067408be0 RCX: 00007ff06658e56b [ 63.521287][ T6358] RDX: 00007ff067408aa0 RSI: 000000008138ae83 RDI: 0000000000000005 [ 63.521293][ T6358] RBP: ffffffffffffffff R08: 0000000000000001 R09: 0000000000000059 [ 63.521299][ T6358] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000018 [ 63.521306][ T6358] R13: 0000200000fff000 R14: 0000200000fe7000 R15: 00000000fec00000 [ 63.521320][ T6358] [ 63.521379][ T6358] ERROR: Out of memory at tomoyo_realpath_from_path. [ 63.843780][ T4795] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 64.003505][ T4795] usb 8-1: Using ep0 maxpacket: 16 [ 64.009501][ T4795] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 64.013300][ T4795] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 64.016871][ T4795] usb 8-1: Product: syz [ 64.018661][ T4795] usb 8-1: Manufacturer: syz [ 64.020618][ T4795] usb 8-1: SerialNumber: syz [ 64.025016][ T4795] usb 8-1: config 0 descriptor?? [ 64.086883][ T6391] Cannot find del_set index 1 as target [ 64.508374][ T6409] FAULT_INJECTION: forcing a failure. [ 64.508374][ T6409] name failslab, interval 1, probability 0, space 0, times 0 [ 64.511946][ T6409] CPU: 3 UID: 0 PID: 6409 Comm: syz.0.147 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 64.511961][ T6409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.511967][ T6409] Call Trace: [ 64.511972][ T6409] [ 64.511976][ T6409] dump_stack_lvl+0x16c/0x1f0 [ 64.511997][ T6409] should_fail_ex+0x512/0x640 [ 64.512013][ T6409] ? fs_reclaim_acquire+0xae/0x150 [ 64.512029][ T6409] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 64.512046][ T6409] should_failslab+0xc2/0x120 [ 64.512058][ T6409] __kmalloc_noprof+0xd2/0x510 [ 64.512072][ T6409] tomoyo_realpath_from_path+0xc2/0x6e0 [ 64.512090][ T6409] ? tomoyo_profile+0x47/0x60 [ 64.512102][ T6409] tomoyo_path_number_perm+0x245/0x580 [ 64.512116][ T6409] ? tomoyo_path_number_perm+0x237/0x580 [ 64.512131][ T6409] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 64.512146][ T6409] ? find_held_lock+0x2b/0x80 [ 64.512173][ T6409] ? find_held_lock+0x2b/0x80 [ 64.512189][ T6409] ? hook_file_ioctl_common+0x145/0x410 [ 64.512203][ T6409] ? __fget_files+0x20e/0x3c0 [ 64.512216][ T6409] security_file_ioctl+0x9b/0x240 [ 64.512233][ T6409] __x64_sys_ioctl+0xb7/0x200 [ 64.512249][ T6409] do_syscall_64+0xcd/0x260 [ 64.512266][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.512277][ T6409] RIP: 0033:0x7eff0ff8e969 [ 64.512286][ T6409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.512296][ T6409] RSP: 002b:00007eff10ed2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.512306][ T6409] RAX: ffffffffffffffda RBX: 00007eff101b5fa0 RCX: 00007eff0ff8e969 [ 64.512313][ T6409] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 64.512319][ T6409] RBP: 00007eff10ed2090 R08: 0000000000000000 R09: 0000000000000000 [ 64.512325][ T6409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.512331][ T6409] R13: 0000000000000000 R14: 00007eff101b5fa0 R15: 00007ffc40933ef8 [ 64.512345][ T6409] [ 64.512349][ T6409] ERROR: Out of memory at tomoyo_realpath_from_path. [ 64.796496][ T6431] binder: 6430:6431 ioctl c0306201 200000000640 returned -22 [ 64.812962][ T6432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 65.124064][ T29] e1000 0000:00:06.0 eth0: Reset adapter [ 65.243842][ T29] e1000 0000:00:06.0 eth0: Reset adapter [ 66.481885][ T5967] usb 8-1: USB disconnect, device number 2 [ 67.374797][ T5967] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 71.138765][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.141600][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.929282][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 77.929299][ T40] audit: type=1400 audit(1748163338.086:299): avc: denied { read } for pid=6505 comm="syz.0.172" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 77.940134][ T6507] __nla_validate_parse: 12 callbacks suppressed [ 77.940146][ T6507] netlink: 24 bytes leftover after parsing attributes in process `syz.0.172'. [ 77.947282][ T40] audit: type=1400 audit(1748163338.086:300): avc: denied { open } for pid=6505 comm="syz.0.172" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 77.957159][ T40] audit: type=1400 audit(1748163338.096:301): avc: denied { read write } for pid=6506 comm="syz.3.171" name="vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.967425][ T40] audit: type=1400 audit(1748163338.096:302): avc: denied { open } for pid=6506 comm="syz.3.171" path="/dev/vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.975070][ T40] audit: type=1400 audit(1748163338.096:303): avc: denied { ioctl } for pid=6505 comm="syz.0.172" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 77.982924][ T40] audit: type=1400 audit(1748163338.116:304): avc: denied { read } for pid=6498 comm="syz.2.169" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 77.991214][ T40] audit: type=1400 audit(1748163338.116:305): avc: denied { open } for pid=6498 comm="syz.2.169" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 77.992644][ T6507] binder: 6505:6507 ioctl c0286405 200000000240 returned -22 [ 78.003708][ T6507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=6507 comm=syz.0.172 [ 78.007775][ T6507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=6507 comm=syz.0.172 [ 78.012147][ T6507] binder: 6505:6507 ioctl c0306201 200000000640 returned -22 [ 78.033289][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'. [ 78.081155][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.173'. [ 78.236328][ T6537] FAULT_INJECTION: forcing a failure. [ 78.236328][ T6537] name failslab, interval 1, probability 0, space 0, times 0 [ 78.241694][ T6537] CPU: 0 UID: 0 PID: 6537 Comm: syz.2.183 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 78.241718][ T6537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.241734][ T6537] Call Trace: [ 78.241741][ T6537] [ 78.241749][ T6537] dump_stack_lvl+0x16c/0x1f0 [ 78.241779][ T6537] should_fail_ex+0x512/0x640 [ 78.241804][ T6537] ? __kvmalloc_node_noprof+0x122/0x600 [ 78.241835][ T6537] should_failslab+0xc2/0x120 [ 78.241856][ T6537] __kvmalloc_node_noprof+0x135/0x600 [ 78.241885][ T6537] ? alloc_fdtable+0x158/0x2b0 [ 78.241916][ T6537] ? alloc_fdtable+0x158/0x2b0 [ 78.241941][ T6537] alloc_fdtable+0x158/0x2b0 [ 78.241968][ T6537] dup_fd+0x83b/0xb90 [ 78.241984][ T6537] ? __pfx_audit_alloc+0x10/0x10 [ 78.242012][ T6537] copy_process+0x25c1/0x91b0 [ 78.242035][ T6537] ? _kstrtoull+0x145/0x200 [ 78.242053][ T6537] ? __pfx__kstrtoull+0x10/0x10 [ 78.242091][ T6537] ? __pfx_copy_process+0x10/0x10 [ 78.242123][ T6537] ? find_held_lock+0x2b/0x80 [ 78.242154][ T6537] kernel_clone+0xfc/0x960 [ 78.242180][ T6537] ? __pfx_kernel_clone+0x10/0x10 [ 78.242213][ T6537] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 78.242242][ T6537] __do_sys_clone+0xce/0x120 [ 78.242264][ T6537] ? __pfx___do_sys_clone+0x10/0x10 [ 78.242302][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.184'. [ 78.242302][ T6537] ? ksys_write+0x1b9/0x240 [ 78.242328][ T6537] ? __pfx_ksys_write+0x10/0x10 [ 78.242352][ T6537] ? rcu_is_watching+0x12/0xc0 [ 78.242379][ T6537] do_syscall_64+0xcd/0x260 [ 78.242406][ T6537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.242424][ T6537] RIP: 0033:0x7ff286f8e969 [ 78.242442][ T6537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.242459][ T6537] RSP: 002b:00007ff287e2bfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 78.242478][ T6537] RAX: ffffffffffffffda RBX: 00007ff2871b5fa0 RCX: 00007ff286f8e969 [ 78.242489][ T6537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 78.242500][ T6537] RBP: 00007ff287e2c090 R08: 0000000000000000 R09: 0000000000000000 [ 78.242510][ T6537] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 78.242519][ T6537] R13: 0000000000000000 R14: 00007ff2871b5fa0 R15: 00007ffec712b498 [ 78.242543][ T6537] [ 78.284217][ T40] audit: type=1400 audit(1748163338.446:306): avc: denied { create } for pid=6540 comm="syz.2.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 78.285517][ T6541] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 78.285574][ T6541] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 78.350153][ T40] audit: type=1400 audit(1748163338.446:307): avc: denied { ioctl } for pid=6540 comm="syz.2.186" path="socket:[11854]" dev="sockfs" ino=11854 ioctlcmd=0x8971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 78.395184][ T6546] tipc: Started in network mode [ 78.396813][ T6546] tipc: Node identity ac14140f, cluster identity 4711 [ 78.399202][ T6546] tipc: New replicast peer: 255.255.255.255 [ 78.401503][ T6546] tipc: Enabled bearer , priority 10 [ 78.407303][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.188'. [ 78.410931][ T6546] tipc: Disabling bearer [ 78.417194][ T40] audit: type=1400 audit(1748163338.576:308): avc: denied { watch watch_reads } for pid=6548 comm="syz.2.189" path="pipe:[5820]" dev="pipefs" ino=5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 78.457995][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'. [ 78.512446][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.185'. [ 78.601269][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.195'. [ 78.604388][ T6569] bridge_slave_1: left allmulticast mode [ 78.606226][ T6569] bridge_slave_1: left promiscuous mode [ 78.608112][ T6569] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.612314][ T6569] bridge_slave_0: left allmulticast mode [ 78.614785][ T6569] bridge_slave_0: left promiscuous mode [ 78.617400][ T6569] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.738051][ T1142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.857096][ T1142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.934598][ T5284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.938565][ T5284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.944555][ T5284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.948048][ T5284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.951194][ T5284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.962173][ T5932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.970780][ T5284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.976100][ T5284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.980201][ T5284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.981989][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.202'. [ 78.983083][ T5284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.998794][ T1142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.038662][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.202'. [ 79.042735][ T6588] FAULT_INJECTION: forcing a failure. [ 79.042735][ T6588] name failslab, interval 1, probability 0, space 0, times 0 [ 79.053537][ T6588] CPU: 0 UID: 0 PID: 6588 Comm: syz.0.201 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 79.053563][ T6588] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.053573][ T6588] Call Trace: [ 79.053580][ T6588] [ 79.053587][ T6588] dump_stack_lvl+0x16c/0x1f0 [ 79.053615][ T6588] should_fail_ex+0x512/0x640 [ 79.053643][ T6588] should_failslab+0xc2/0x120 [ 79.053664][ T6588] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 79.053686][ T6588] ? sidtab_sid2str_get+0x17a/0x680 [ 79.053734][ T6588] kmemdup_noprof+0x29/0x60 [ 79.053754][ T6588] sidtab_sid2str_get+0x17a/0x680 [ 79.053784][ T6588] sidtab_entry_to_string+0x33/0x110 [ 79.053813][ T6588] security_sid_to_context_core+0x35c/0x640 [ 79.053842][ T6588] avc_audit_post_callback+0x1aa/0x8f0 [ 79.053860][ T6588] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 79.053886][ T6588] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 79.053913][ T6588] ? skb_put+0x138/0x1b0 [ 79.053940][ T6588] ? audit_log_n_string+0x253/0x540 [ 79.053985][ T6588] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 79.054013][ T6588] common_lsm_audit+0x24e/0x300 [ 79.054040][ T6588] ? __pfx_common_lsm_audit+0x10/0x10 [ 79.054066][ T6588] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 79.054091][ T6588] ? avc_update_node.isra.0+0x4c0/0xb60 [ 79.054113][ T6588] slow_avc_audit+0x186/0x210 [ 79.054133][ T6588] ? __pfx_slow_avc_audit+0x10/0x10 [ 79.054155][ T6588] ? avc_denied+0x14a/0x190 [ 79.054175][ T6588] ? avc_has_perm_noaudit+0x306/0x3b0 [ 79.054198][ T6588] avc_has_perm+0x18b/0x1c0 [ 79.054219][ T6588] ? __pfx_avc_has_perm+0x10/0x10 [ 79.054240][ T6588] ? __pfx___might_resched+0x10/0x10 [ 79.054270][ T6588] inode_has_perm+0x168/0x1d0 [ 79.054294][ T6588] selinux_mount+0x2f3/0x380 [ 79.054319][ T6588] ? __pfx_selinux_mount+0x10/0x10 [ 79.054354][ T6588] security_sb_mount+0xc8/0x260 [ 79.054381][ T6588] path_mount+0x128/0x1f20 [ 79.054403][ T6588] ? kmem_cache_free+0x2d4/0x4d0 [ 79.054430][ T6588] ? __pfx_path_mount+0x10/0x10 [ 79.054454][ T6588] ? putname+0x154/0x1a0 [ 79.054478][ T6588] __x64_sys_mount+0x28d/0x310 [ 79.054497][ T6588] ? __pfx___x64_sys_mount+0x10/0x10 [ 79.054526][ T6588] do_syscall_64+0xcd/0x260 [ 79.054554][ T6588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.054573][ T6588] RIP: 0033:0x7eff0ff8e969 [ 79.054588][ T6588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.054605][ T6588] RSP: 002b:00007eff10e90038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 79.054621][ T6588] RAX: ffffffffffffffda RBX: 00007eff101b6160 RCX: 00007eff0ff8e969 [ 79.054633][ T6588] RDX: 0000200000000040 RSI: 0000200000004a00 RDI: 0000200000000500 [ 79.054644][ T6588] RBP: 00007eff10e90090 R08: 0000000000000000 R09: 0000000000000000 [ 79.054653][ T6588] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000002 [ 79.054665][ T6588] R13: 0000000000000001 R14: 00007eff101b6160 R15: 00007ffc40933ef8 [ 79.054689][ T6588] [ 79.062433][ T6588] syz.0.201: attempt to access beyond end of device [ 79.062433][ T6588] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 79.178435][ T6588] syz.0.201: attempt to access beyond end of device [ 79.178435][ T6588] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 79.186796][ T6588] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 79.187242][ T1142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.200517][ T6588] syz.0.201: attempt to access beyond end of device [ 79.200517][ T6588] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 79.205899][ T6581] chnl_net:caif_netlink_parms(): no params data found [ 79.211954][ T6580] nbd0: detected capacity change from 0 to 67108884 [ 79.212064][ T6588] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 79.223725][ T6588] block nbd0: Send control failed (result -89) [ 79.226413][ T6588] block nbd0: Request send failed, requeueing [ 79.230851][ T5932] block nbd0: Receive control failed (result -32) [ 79.234478][ T6504] block nbd0: Dead connection, failed to find a fallback [ 79.237875][ T1260] block nbd0: Dead connection, failed to find a fallback [ 79.240339][ T1260] block nbd0: shutting down sockets [ 79.241474][ T6504] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.242216][ T1260] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.249499][ T6504] Buffer I/O error on dev nbd0, logical block 0, async page read [ 79.250164][ T6588] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.257034][ T6504] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.257792][ T6588] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 79.264535][ T6504] Buffer I/O error on dev nbd0, logical block 1, async page read [ 79.272258][ T6504] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.276359][ T6588] I/O error, dev nbd0, sector 67108880 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.280254][ T6588] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16777220, location=16777220 [ 79.283749][ T6504] Buffer I/O error on dev nbd0, logical block 0, async page read [ 79.285006][ T6588] I/O error, dev nbd0, sector 67107856 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.286813][ T6504] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.297180][ T6504] Buffer I/O error on dev nbd0, logical block 1, async page read [ 79.300263][ T6504] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.301539][ T6588] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16776964, location=16776964 [ 79.303272][ T6504] Buffer I/O error on dev nbd0, logical block 0, async page read [ 79.309929][ T6504] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.312811][ T6504] Buffer I/O error on dev nbd0, logical block 1, async page read [ 79.314499][ T6588] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16777219, location=16777219 [ 79.317370][ T6504] Buffer I/O error on dev nbd0, logical block 0, async page read [ 79.319465][ T6588] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16776963, location=16776963 [ 79.321802][ T6504] Buffer I/O error on dev nbd0, logical block 1, async page read [ 79.325790][ T6588] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16777218, location=16777218 [ 79.329233][ T6504] Buffer I/O error on dev nbd0, logical block 0, async page read [ 79.332954][ T6588] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16776962, location=16776962 [ 79.334723][ T6504] Buffer I/O error on dev nbd0, logical block 1, async page read [ 79.337717][ T6588] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16777070, location=16777070 [ 79.341520][ T6504] ldm_validate_partition_table(): Disk read failed. [ 79.343795][ T6588] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16776814, location=16776814 [ 79.346903][ T6504] Dev nbd0: unable to read RDB block 0 [ 79.348948][ T6588] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16777068, location=16777068 [ 79.351380][ T6504] nbd0: unable to read partition table [ 79.354659][ T6588] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16776812, location=16776812 [ 79.362510][ T6504] ldm_validate_partition_table(): Disk read failed. [ 79.365145][ T6504] Dev nbd0: unable to read RDB block 0 [ 79.367294][ T6504] nbd0: unable to read partition table [ 79.373794][ T6588] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 79.377421][ T6588] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 79.380544][ T6588] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388609, location=8388609 [ 79.385642][ T6588] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388353, location=8388353 [ 79.394675][ T6588] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388608, location=8388608 [ 79.400131][ T6581] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.407288][ T6588] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388352, location=8388352 [ 79.412712][ T6588] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388607, location=8388607 [ 79.413621][ T6581] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.417534][ T6588] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388351, location=8388351 [ 79.418759][ T6581] bridge_slave_0: entered allmulticast mode [ 79.424334][ T6581] bridge_slave_0: entered promiscuous mode [ 79.432635][ T6588] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388459, location=8388459 [ 79.437208][ T6581] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.437234][ T6588] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388203, location=8388203 [ 79.439700][ T6581] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.443329][ T6588] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388457, location=8388457 [ 79.451372][ T6588] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388201, location=8388201 [ 79.453126][ T6581] bridge_slave_1: entered allmulticast mode [ 79.460534][ T6588] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 79.461159][ T6581] bridge_slave_1: entered promiscuous mode [ 79.465181][ T6588] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 79.566032][ T6581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.568471][ T6614] netlink: 'syz.1.209': attribute type 1 has an invalid length. [ 79.572278][ T6581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.618760][ T1142] bridge_slave_1: left allmulticast mode [ 79.621206][ T1142] bridge_slave_1: left promiscuous mode [ 79.624513][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.630077][ T1142] bridge_slave_0: left allmulticast mode [ 79.631942][ T1142] bridge_slave_0: left promiscuous mode [ 79.634406][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.865838][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.870754][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.874512][ T1142] bond0 (unregistering): Released all slaves [ 79.901575][ T6581] team0: Port device team_slave_0 added [ 79.912753][ T6581] team0: Port device team_slave_1 added [ 79.971403][ T6581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.973868][ T6581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.981763][ T6581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.990583][ T6581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.995392][ T6581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.006565][ T6581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.096136][ T6581] hsr_slave_0: entered promiscuous mode [ 80.098920][ T6581] hsr_slave_1: entered promiscuous mode [ 80.101001][ T6581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.103318][ T6581] Cannot create hsr debugfs directory [ 80.131534][ T6648] FAULT_INJECTION: forcing a failure. [ 80.131534][ T6648] name failslab, interval 1, probability 0, space 0, times 0 [ 80.138142][ T6648] CPU: 1 UID: 0 PID: 6648 Comm: syz.3.219 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 80.138159][ T6648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.138166][ T6648] Call Trace: [ 80.138170][ T6648] [ 80.138174][ T6648] dump_stack_lvl+0x16c/0x1f0 [ 80.138194][ T6648] should_fail_ex+0x512/0x640 [ 80.138210][ T6648] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 80.138222][ T6648] should_failslab+0xc2/0x120 [ 80.138234][ T6648] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 80.138244][ T6648] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 80.138256][ T6648] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 80.138273][ T6648] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 80.138288][ T6648] mmu_topup_memory_caches+0x25/0x170 [ 80.138306][ T6648] kvm_mmu_load+0xd9/0x22a0 [ 80.138322][ T6648] ? kvm_apic_has_interrupt+0xb5/0x190 [ 80.138336][ T6648] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 80.138349][ T6648] ? vmx_get_rflags+0x100/0x420 [ 80.138364][ T6648] ? kvm_apic_accept_pic_intr+0xe8/0x1a0 [ 80.138381][ T6648] ? __pfx_kvm_mmu_load+0x10/0x10 [ 80.138396][ T6648] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 80.138408][ T6648] ? kvm_check_and_inject_events+0x71c/0x1310 [ 80.138427][ T6648] vcpu_run+0x3446/0x5390 [ 80.138441][ T6648] ? kvm_mmu_post_init_vm+0x269/0x370 [ 80.138459][ T6648] ? __lock_acquire+0xaa4/0x1ba0 [ 80.138480][ T6648] ? __pfx_vcpu_run+0x10/0x10 [ 80.138498][ T6648] ? fpu_swap_kvm_fpstate+0x235/0x4a0 [ 80.138513][ T6648] ? __local_bh_enable_ip+0xa4/0x120 [ 80.138529][ T6648] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 80.138545][ T6648] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 80.138565][ T6648] kvm_vcpu_ioctl+0x5e9/0x1680 [ 80.138583][ T6648] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 80.138603][ T6648] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 80.138622][ T6648] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 80.138645][ T6648] ? hook_file_ioctl_common+0x145/0x410 [ 80.138660][ T6648] ? selinux_file_ioctl+0x180/0x270 [ 80.138677][ T6648] ? selinux_file_ioctl+0xb4/0x270 [ 80.138694][ T6648] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 80.138711][ T6648] __x64_sys_ioctl+0x190/0x200 [ 80.138728][ T6648] do_syscall_64+0xcd/0x260 [ 80.138745][ T6648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.138756][ T6648] RIP: 0033:0x7f9e75b8e969 [ 80.138765][ T6648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.138775][ T6648] RSP: 002b:00007f9e76925038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.138786][ T6648] RAX: ffffffffffffffda RBX: 00007f9e75db5fa0 RCX: 00007f9e75b8e969 [ 80.138792][ T6648] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 80.138798][ T6648] RBP: 00007f9e76925090 R08: 0000000000000000 R09: 0000000000000000 [ 80.138804][ T6648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 80.138810][ T6648] R13: 0000000000000000 R14: 00007f9e75db5fa0 R15: 00007ffd7bd46a38 [ 80.138824][ T6648] [ 80.413265][ T1142] hsr_slave_0: left promiscuous mode [ 80.416312][ T1142] hsr_slave_1: left promiscuous mode [ 80.418860][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.421269][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.426400][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.428933][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.446980][ T1142] veth1_macvtap: left promiscuous mode [ 80.449247][ T1142] veth0_macvtap: left promiscuous mode [ 80.451238][ T1142] veth1_vlan: left promiscuous mode [ 80.452838][ T1142] veth0_vlan: left promiscuous mode [ 80.530880][ T6674] FAULT_INJECTION: forcing a failure. [ 80.530880][ T6674] name failslab, interval 1, probability 0, space 0, times 0 [ 80.537128][ T6674] CPU: 0 UID: 0 PID: 6674 Comm: syz.1.224 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 80.537144][ T6674] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.537151][ T6674] Call Trace: [ 80.537155][ T6674] [ 80.537160][ T6674] dump_stack_lvl+0x16c/0x1f0 [ 80.537180][ T6674] should_fail_ex+0x512/0x640 [ 80.537196][ T6674] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 80.537209][ T6674] should_failslab+0xc2/0x120 [ 80.537221][ T6674] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 80.537231][ T6674] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 80.537242][ T6674] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 80.537258][ T6674] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 80.537272][ T6674] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 80.537287][ T6674] mmu_topup_memory_caches+0x25/0x170 [ 80.537309][ T6674] kvm_mmu_load+0xd9/0x22a0 [ 80.537326][ T6674] ? kvm_apic_has_interrupt+0xb5/0x190 [ 80.537340][ T6674] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 80.537354][ T6674] ? kvm_deliver_exception_payload+0x47/0x200 [ 80.537369][ T6674] ? __pfx_kvm_mmu_load+0x10/0x10 [ 80.537385][ T6674] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 80.537397][ T6674] ? kvm_check_and_inject_events+0x71c/0x1310 [ 80.537416][ T6674] vcpu_run+0x3446/0x5390 [ 80.537430][ T6674] ? kvm_mmu_post_init_vm+0x269/0x370 [ 80.537448][ T6674] ? __lock_acquire+0xaa4/0x1ba0 [ 80.537485][ T6674] ? __pfx_vcpu_run+0x10/0x10 [ 80.537504][ T6674] ? fpu_swap_kvm_fpstate+0x235/0x4a0 [ 80.537518][ T6674] ? __local_bh_enable_ip+0xa4/0x120 [ 80.537535][ T6674] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 80.537551][ T6674] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 80.537571][ T6674] kvm_vcpu_ioctl+0x5e9/0x1680 [ 80.537589][ T6674] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 80.537609][ T6674] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 80.537632][ T6674] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 80.537664][ T6674] ? hook_file_ioctl_common+0x145/0x410 [ 80.537685][ T6674] ? selinux_file_ioctl+0x180/0x270 [ 80.537710][ T6674] ? selinux_file_ioctl+0xb4/0x270 [ 80.537735][ T6674] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 80.537759][ T6674] __x64_sys_ioctl+0x190/0x200 [ 80.537784][ T6674] do_syscall_64+0xcd/0x260 [ 80.537821][ T6674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.537833][ T6674] RIP: 0033:0x7ff06658e969 [ 80.537843][ T6674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.537853][ T6674] RSP: 002b:00007ff06740a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.537864][ T6674] RAX: ffffffffffffffda RBX: 00007ff0667b5fa0 RCX: 00007ff06658e969 [ 80.537871][ T6674] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 80.537877][ T6674] RBP: 00007ff06740a090 R08: 0000000000000000 R09: 0000000000000000 [ 80.537883][ T6674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 80.537889][ T6674] R13: 0000000000000000 R14: 00007ff0667b5fa0 R15: 00007fff177a68c8 [ 80.537902][ T6674] [ 80.649411][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.053545][ T5932] Bluetooth: hci2: command tx timeout [ 81.104593][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 81.154884][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 81.389970][ T57] cfg80211: failed to load regulatory.db [ 81.564096][ T6581] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.573985][ T6581] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.584458][ T6581] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.605850][ T6581] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.678738][ T6581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.691000][ T6581] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.698852][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.701485][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.714673][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.717068][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.759678][ T6700] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=6700 comm=syz.1.230 [ 81.773104][ T6700] hub 2-0:1.0: USB hub found [ 81.777215][ T6700] hub 2-0:1.0: 2 ports detected [ 81.893187][ T6581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.051375][ T6581] veth0_vlan: entered promiscuous mode [ 82.059332][ T6581] veth1_vlan: entered promiscuous mode [ 82.077188][ T6581] veth0_macvtap: entered promiscuous mode [ 82.082736][ T6581] veth1_macvtap: entered promiscuous mode [ 82.097499][ T6581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.105169][ T6581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.110018][ T6581] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.113025][ T6581] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.117404][ T6581] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.120075][ T6581] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.163654][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.167596][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.184924][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.187692][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.378885][ T6752] random: crng reseeded on system resumption [ 82.527103][ T6740] Hibernate inconsistent memory map detected! [ 82.530499][ T6740] PM: hibernation: Image mismatch: architecture specific data [ 82.539331][ T6756] xt_hashlimit: size too large, truncated to 1048576 [ 82.737961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.753706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.756929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.762670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.934069][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.938340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.941837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.945650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.949365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.133961][ T5932] Bluetooth: hci2: command tx timeout [ 83.763973][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 83.763984][ T40] audit: type=1400 audit(1748163343.926:343): avc: denied { create } for pid=6828 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 83.847543][ T40] audit: type=1400 audit(1748163344.006:344): avc: denied { setopt } for pid=6836 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.878983][ T6839] __nla_validate_parse: 9 callbacks suppressed [ 83.878998][ T6839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.256'. [ 83.930383][ T6844] FAULT_INJECTION: forcing a failure. [ 83.930383][ T6844] name failslab, interval 1, probability 0, space 0, times 0 [ 83.935955][ T6844] CPU: 2 UID: 0 PID: 6844 Comm: syz.0.258 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 83.935972][ T6844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.935979][ T6844] Call Trace: [ 83.935983][ T6844] [ 83.935987][ T6844] dump_stack_lvl+0x16c/0x1f0 [ 83.936010][ T6844] should_fail_ex+0x512/0x640 [ 83.936025][ T6844] ? fs_reclaim_acquire+0xae/0x150 [ 83.936041][ T6844] ? p9_fcall_init+0x97/0x260 [ 83.936056][ T6844] should_failslab+0xc2/0x120 [ 83.936068][ T6844] __kmalloc_noprof+0xd2/0x510 [ 83.936079][ T6844] ? rcu_is_watching+0x12/0xc0 [ 83.936092][ T6844] ? trace_kmem_cache_alloc+0x28/0xc0 [ 83.936107][ T6844] p9_fcall_init+0x97/0x260 [ 83.936123][ T6844] p9_tag_alloc+0x161/0x640 [ 83.936141][ T6844] ? __pfx_p9_tag_alloc+0x10/0x10 [ 83.936162][ T6844] p9_client_prepare_req+0x19b/0x4d0 [ 83.936179][ T6844] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 83.936201][ T6844] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 83.936214][ T6844] p9_client_rpc+0x1c4/0xc50 [ 83.936231][ T6844] ? __pfx_p9_client_rpc+0x10/0x10 [ 83.936247][ T6844] ? __lock_acquire+0xaa4/0x1ba0 [ 83.936275][ T6844] ? do_raw_spin_lock+0x12c/0x2b0 [ 83.936287][ T6844] ? look_up_lock_class+0x59/0x150 [ 83.936305][ T6844] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 83.936318][ T6844] p9_client_write+0x245/0x6f0 [ 83.936333][ T6844] ? __pfx_p9_client_write+0x10/0x10 [ 83.936347][ T6844] v9fs_issue_write+0xe3/0x1b0 [ 83.936359][ T6844] ? __pfx_v9fs_issue_write+0x10/0x10 [ 83.936368][ T6844] ? netfs_advance_write+0x81f/0xc40 [ 83.936383][ T6844] ? rcu_is_watching+0x12/0xc0 [ 83.936397][ T6844] netfs_do_issue_write+0x92/0x110 [ 83.936410][ T6844] netfs_end_issue_write+0x14c/0x200 [ 83.936425][ T6844] netfs_unbuffered_write+0x4c3/0x670 [ 83.936441][ T6844] ? __pfx_netfs_unbuffered_write+0x10/0x10 [ 83.936454][ T6844] ? trace_netfs_folioq+0x188/0x210 [ 83.936466][ T6844] ? iov_iter_folio_queue+0x3e/0x1f0 [ 83.936483][ T6844] ? rolling_buffer_init+0x8a/0xb0 [ 83.936494][ T6844] ? netfs_create_write_req+0x511/0x880 [ 83.936509][ T6844] netfs_unbuffered_write_iter_locked+0x808/0xd40 [ 83.936530][ T6844] netfs_unbuffered_write_iter+0x414/0x6d0 [ 83.936550][ T6844] v9fs_file_write_iter+0xbf/0x100 [ 83.936561][ T6844] iter_file_splice_write+0x91c/0x1150 [ 83.936588][ T6844] ? __pfx_iter_file_splice_write+0x10/0x10 [ 83.936616][ T6844] ? __pfx_iter_file_splice_write+0x10/0x10 [ 83.936635][ T6844] direct_splice_actor+0x192/0x6c0 [ 83.936653][ T6844] splice_direct_to_actor+0x345/0xa30 [ 83.936670][ T6844] ? __pfx_direct_splice_actor+0x10/0x10 [ 83.936690][ T6844] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 83.936707][ T6844] ? __pfx___might_resched+0x10/0x10 [ 83.936748][ T6844] do_splice_direct+0x174/0x240 [ 83.936770][ T6844] ? __pfx_do_splice_direct+0x10/0x10 [ 83.936787][ T6844] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 83.936805][ T6844] ? rw_verify_area+0xcf/0x680 [ 83.936822][ T6844] do_sendfile+0xafd/0xe50 [ 83.936840][ T6844] ? __pfx_do_sendfile+0x10/0x10 [ 83.936861][ T6844] __x64_sys_sendfile64+0x154/0x220 [ 83.936873][ T6844] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 83.936885][ T6844] ? rcu_is_watching+0x12/0xc0 [ 83.936901][ T6844] do_syscall_64+0xcd/0x260 [ 83.936918][ T6844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.936930][ T6844] RIP: 0033:0x7eff0ff8e969 [ 83.936939][ T6844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.936950][ T6844] RSP: 002b:00007eff10ed2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 83.936961][ T6844] RAX: ffffffffffffffda RBX: 00007eff101b5fa0 RCX: 00007eff0ff8e969 [ 83.936968][ T6844] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 83.936974][ T6844] RBP: 00007eff10ed2090 R08: 0000000000000000 R09: 0000000000000000 [ 83.936980][ T6844] R10: 0000000000007f04 R11: 0000000000000246 R12: 0000000000000002 [ 83.936986][ T6844] R13: 0000000000000000 R14: 00007eff101b5fa0 R15: 00007ffc40933ef8 [ 83.936999][ T6844] [ 83.938681][ T6844] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI [ 84.079184][ T6844] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 84.083063][ T6844] CPU: 2 UID: 0 PID: 6844 Comm: syz.0.258 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 84.087413][ T6844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.090565][ T6844] RIP: 0010:iter_file_splice_write+0xa4e/0x1150 [ 84.092672][ T6844] Code: 00 48 89 fa 48 c1 ea 03 80 3c 1a 00 0f 85 1a 05 00 00 4d 8b 65 10 49 c7 45 10 00 00 00 00 49 8d 7c 24 08 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 0f 85 ee 04 00 00 49 8b 54 24 08 4c 89 ee 4c 89 f7 83 [ 84.098580][ T6844] RSP: 0018:ffffc90005c27918 EFLAGS: 00010202 [ 84.100483][ T6844] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff824343c5 [ 84.103189][ T6844] RDX: 0000000000000001 RSI: ffffffff82434266 RDI: 0000000000000008 [ 84.106076][ T6844] RBP: 0000000000000001 R08: 0000000000000006 R09: 0000000000000000 [ 84.108668][ T6844] R10: 7fffffffffffff5f R11: 0000000000000000 R12: 0000000000000000 [ 84.111150][ T6844] R13: ffff888027f98028 R14: ffff88804fff7c00 R15: 7fffffffffffff5f [ 84.113657][ T6844] FS: 00007eff10ed26c0(0000) GS:ffff8880d6bda000(0000) knlGS:0000000000000000 [ 84.116461][ T6844] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.118522][ T6844] CR2: 00007eff101b7bac CR3: 000000004c192000 CR4: 0000000000352ef0 [ 84.121010][ T6844] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.123914][ T6844] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 84.126693][ T6844] Call Trace: [ 84.127771][ T6844] [ 84.128979][ T6844] ? __pfx_iter_file_splice_write+0x10/0x10 [ 84.131020][ T6844] ? __pfx_iter_file_splice_write+0x10/0x10 [ 84.132953][ T6844] direct_splice_actor+0x192/0x6c0 [ 84.134617][ T6844] splice_direct_to_actor+0x345/0xa30 [ 84.136362][ T6844] ? __pfx_direct_splice_actor+0x10/0x10 [ 84.138210][ T6844] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 84.140126][ T6844] ? __pfx___might_resched+0x10/0x10 [ 84.141683][ T6844] do_splice_direct+0x174/0x240 [ 84.143272][ T6844] ? __pfx_do_splice_direct+0x10/0x10 [ 84.145090][ T6844] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 84.146931][ T6844] ? rw_verify_area+0xcf/0x680 [ 84.148374][ T6844] do_sendfile+0xafd/0xe50 [ 84.149766][ T6844] ? __pfx_do_sendfile+0x10/0x10 [ 84.151300][ T6844] __x64_sys_sendfile64+0x154/0x220 [ 84.152956][ T6844] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 84.154802][ T6844] ? rcu_is_watching+0x12/0xc0 [ 84.156340][ T6844] do_syscall_64+0xcd/0x260 [ 84.157768][ T6844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.159597][ T6844] RIP: 0033:0x7eff0ff8e969 [ 84.161014][ T6844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.167498][ T6844] RSP: 002b:00007eff10ed2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 84.170294][ T6844] RAX: ffffffffffffffda RBX: 00007eff101b5fa0 RCX: 00007eff0ff8e969 SYZFAIL: failed to recv rpc [ 84.172963][ T6844] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 84.175570][ T6844] RBP: 00007eff10ed2090 R08: 0000000000000000 R09: 0000000000000000 [ 84.178131][ T6844] R10: 0000000000007f04 R11: 0000000000000246 R12: 0000000000000002 [ 84.180591][ T6844] R13: 0000000000000000 R14: 00007eff101b5fa0 R15: 00007ffc40933ef8 [ 84.183333][ T6844] [ 84.184667][ T6844] Modules linked in: fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 84.187299][ T6844] ---[ end trace 0000000000000000 ]--- [ 84.189585][ T6844] RIP: 0010:iter_file_splice_write+0xa4e/0x1150 [ 84.192407][ T6844] Code: 00 48 89 fa 48 c1 ea 03 80 3c 1a 00 0f 85 1a 05 00 00 4d 8b 65 10 49 c7 45 10 00 00 00 00 49 8d 7c 24 08 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 0f 85 ee 04 00 00 49 8b 54 24 08 4c 89 ee 4c 89 f7 83 [ 84.195367][ T40] audit: type=1400 audit(1748163344.346:345): avc: denied { read } for pid=5325 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 84.201474][ T6844] RSP: 0018:ffffc90005c27918 EFLAGS: 00010202 [ 84.210821][ T6844] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff824343c5 [ 84.213649][ T6844] RDX: 0000000000000001 RSI: ffffffff82434266 RDI: 0000000000000008 [ 84.227567][ T6844] RBP: 0000000000000001 R08: 0000000000000006 R09: 0000000000000000 [ 84.230086][ T6844] R10: 7fffffffffffff5f R11: 0000000000000000 R12: 0000000000000000 [ 84.233159][ T6844] R13: ffff888027f98028 R14: ffff88804fff7c00 R15: 7fffffffffffff5f [ 84.234718][ T40] audit: type=1400 audit(1748163344.346:346): avc: denied { search } for pid=5325 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.236217][ T6844] FS: 00007eff10ed26c0(0000) GS:ffff8880d6ada000(0000) knlGS:0000000000000000 [ 84.242516][ T40] audit: type=1400 audit(1748163344.346:347): avc: denied { write } for pid=5325 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.245844][ T6844] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.256154][ T6844] CR2: 000055f3d495eb08 CR3: 000000004c192000 CR4: 0000000000352ef0 [ 84.258761][ T40] audit: type=1400 audit(1748163344.346:348): avc: denied { add_name } for pid=5325 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.258854][ T6844] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.269948][ T6844] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 84.270836][ T40] audit: type=1400 audit(1748163344.346:349): avc: denied { create } for pid=5325 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.272478][ T6844] Kernel panic - not syncing: Fatal exception [ 84.279961][ T6844] Kernel Offset: disabled VM DIAGNOSIS: 08:55:44 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffff88806a63f740 RCX=ffffffff81af2e99 RDX=ffff88801d2c8000 RSI=ffffffff81af2e73 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90000107930 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffffffff9ad6e4c8 R12=ffffed100d4c7ee9 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88806a43b040 RIP=ffffffff81bb462b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69da000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007eff10eb0f98 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7bd46dc0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e75c11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e75c11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e75c11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e75c11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e75c11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e75c11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88806a6415c0 RCX=ffffffff81af2e99 RDX=ffff888024f40000 RSI=ffffffff81af2e73 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000c9873a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=1ffffffff1c79551 R12=ffffed100d4c82b9 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88806a53b040 RIP=ffffffff81af2e75 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ada000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000180 CR3=00000000499b5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc40934280 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff10011a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff10011a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff10011a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff10011aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff10011b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff10011c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff854faab5 RDI=ffffffff9adfe5a0 RBP=ffffffff9adfe560 RSP=ffffc90005c27260 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552032203a555043 R12=0000000000000000 R13=0000000000000000 R14=ffffffff9adfe560 R15=ffffffff9adfe820 RIP=ffffffff854faadf RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007eff10ed26c0 ffffffff 00c00000 GS =0000 ffff8880d6bda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007eff101b7bac CR3=000000004c192000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff177a6c50 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff066611a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff066611a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff066611a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff066611aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff066611b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff066611c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000005092c RBX=0000000000000003 RCX=ffffffff8b6d4419 RDX=ffffed100d4e65be RSI=ffffffff8bf4a460 RDI=ffffffff8191adf1 RBP=ffffed1003b5f000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e65bd R10=ffff88806a732deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801daf8000 R14=ffffffff90853110 R15=0000000000000000 RIP=ffffffff8b6d2caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007eff10eb1d58 CR3=000000004c192000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff10011a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff10011a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff10011a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff10011aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff10011b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff10011c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff10183488 00007eff10183480 00007eff10183478 00007eff10183450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff10ced100 00007eff10183440 00007eff10183458 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff10183498 00007eff10183490 00007eff10183488 00007eff10183480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000