last executing test programs: 18.302785949s ago: executing program 2 (id=166): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000180)=[@decrefs], 0x0, 0x0, 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000000)=0x102d100, 0x4) 18.223385881s ago: executing program 2 (id=168): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x41, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x2000006, 0x5f, 0x80000000, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x10006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000004, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x0, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x7, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x101, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0xfffffffb, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x7, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xffffeffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0xd, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a0ed, 0x2, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x9, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x2, 0xf40, 0x7, 0x1, 0x6c1c, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 18.223195199s ago: executing program 2 (id=169): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008, 0x40000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000001}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0x6}}}}}, 0x0) 18.143690127s ago: executing program 2 (id=170): ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000080)=0x200) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x1000000, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91124fc60", 0x8c0}], 0x1}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0xfc, 0x9, 0xfffff028}, {0x6, 0x0, 0x0, 0x2}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001f0000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYBLOB="86fbb2e908", @ANYRES32], 0x38}, 0x1, 0xba01, 0x0, 0x40800}, 0x40000d5) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x8000, 0x1) ioctl$USBDEVFS_FORBID_SUSPEND(r5, 0x5521) 18.143255147s ago: executing program 2 (id=171): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x40040) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001e00995e00000000000000000c00000000000000000001"], 0x1c}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180), 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES32=r0, @ANYRESDEC=r1], 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 18.053412856s ago: executing program 2 (id=172): prctl$PR_SET_KEEPCAPS(0x8, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0d, &(0x7f0000000040)) 17.553218887s ago: executing program 0 (id=184): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x40, 0x7847, 0x6, 0x890, {{0xd, 0x4, 0x0, 0x35, 0x34, 0x64, 0x0, 0x5, 0x4, 0x0, @loopback, @remote, {[@timestamp_addr={0x44, 0xc, 0xba, 0x1, 0xd, [{@local, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x72, 0x3, 0xa, [{@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x5}]}]}}}}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r3, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f0000000800)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x18, 0x11, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x77ad, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x9, 0x1, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0xf7, 0x4, &(0x7f0000000140)=""/4, 0x41000, 0x41, '\x00', r1, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xa, 0x2d4, 0x2}, 0x10, r3, r5, 0x5, &(0x7f0000000880)=[r6, r7, 0x1, r8], &(0x7f00000008c0)=[{0x1, 0x5, 0x9}, {0x5, 0x1, 0xf, 0x8}, {0x2, 0x4, 0x5, 0xf}, {0x5, 0x1, 0x5, 0xd}, {0x1, 0x2, 0x0, 0x1}]}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_off}]}) r9 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r9, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002380)={0x20, r11, 0x301, 0x8, 0x25dfdbfc, {0x1c}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x200400c4}, 0x4040) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') chdir(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 17.483595831s ago: executing program 0 (id=185): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x18, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) read$FUSE(r0, &(0x7f0000002600)={0x2020}, 0x2020) mount$bind(&(0x7f0000004640)='./file0\x00', &(0x7f0000004680)='./file0\x00', &(0x7f0000000580), 0x2000000, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@gettaction={0x18, 0x32, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x800) mbind(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x3, 0x4) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x5, &(0x7f0000001e80)=ANY=[@ANYRES8=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x200}, 0x10, 0x0, r0}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff}) membarrier(0x40, 0x0) io_setup(0x6, &(0x7f0000000200)=0x0) io_submit(r4, 0x2, &(0x7f0000000480)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x6, r2, &(0x7f0000000280)="d5fb1f8b99528a5474a716ae955ca50c2b0b201e86a73cffc255183736ce2a619ad90cf34eea74f974bb4df926fb1d84d1b77de6d891230ec94d967eac648405fb8bd55d9c71118535391bdb7e0bfdee16db6b84", 0x54, 0x2, 0x0, 0x1, r3}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0xc, r3, &(0x7f0000000400)="02b5ff9f40a60c26680edbe1b31feb0b1b7d48b61ddb652b72e553508525dc787775c3ba7c86cae7a97f7946935dc8cc49245026dfb78fe07b368215f1535a1acfa1a31d3ba8e7a878", 0x49, 0x6, 0x0, 0x0, r3}]) r5 = socket$isdn_base(0x22, 0x2, 0x10) ioctl$IMGETCOUNT(r5, 0x80044943, &(0x7f0000005f00)) r6 = syz_open_dev$swradio(&(0x7f0000000940), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000a80)={0xb, @win={{0x38305543, 0x9, 0xfff, 0x2}, 0x1, 0x2, 0x0, 0x5, 0x0, 0x8f}}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cd", 0x3f}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x7fffffff) timerfd_create(0x9, 0x80000) splice(r3, 0x0, r7, 0x0, 0x4ffe7, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x2, 0x6, 0x2) 16.773449794s ago: executing program 0 (id=186): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0xfffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x7}, @initr0, @exit, @alu={0x7, 0x0, 0x2, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x1}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x59}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 16.702301266s ago: executing program 0 (id=189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f00000002c0)={&(0x7f0000000480)=""/81, 0x51, 0x7f, 0x8}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022052598fd2a1a3952b5"], 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r12 = syz_open_dev$vcsu(&(0x7f0000000280), 0x4, 0x2) r13 = syz_io_uring_setup(0x69b7, &(0x7f0000000400)={0x0, 0xa26c, 0x1000, 0x5, 0x1d7, 0x0, r12}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r14, r15, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r11, 0xc000000, 0x0, 0x0, 0x1e}) io_uring_enter(r13, 0x847ba, 0x20000000, 0xe, 0x0, 0x0) sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 16.123043052s ago: executing program 1 (id=200): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000380)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9", 0x9c}, {&(0x7f0000000c40)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c", 0x25}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="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", 0xc71}, {&(0x7f0000003000)='B', 0x1}], 0x8}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)=0x40) 16.04289359s ago: executing program 1 (id=202): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x80) accept$netrom(r0, 0x0, 0x0) 16.042666322s ago: executing program 1 (id=203): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC], 0x48) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x25, &(0x7f0000000880)=ANY=[@ANYBLOB="85100000fbffffff059193c18d000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r1, @ANYBLOB="00000200b70500000800000085000000a5000000b7080000000000007b8af8ff80000000b708000004"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000080)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000600)={0x2, 'vcan0\x00', {0x3}, 0x1}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000700)="ec76b3b81f8baf", 0x7}], 0x1}}], 0x2, 0x404c041) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r8, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a", 0xc2}], 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r10, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) 15.983209612s ago: executing program 3 (id=205): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x41, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x2000006, 0x5f, 0x80000000, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x10006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000004, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x0, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x7, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x101, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0xfffffffb, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x7, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xffffeffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0xd, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a0ed, 0x2, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x9, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x2, 0xf40, 0x7, 0x1, 0x6c1c, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 15.982869183s ago: executing program 1 (id=206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x6, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x0, 0x2, {{0x3, 0xfffffff7, 0x6, 0x4d27}, 0x3}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x80000001, 0xf5f6, 0x8, 0x5, 0x55de5cb1}, 0x2}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x6, 0x5, 0x0, 0x2, 0x6}, 0x4}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x3, 0x8, 0x1, 0x8, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = getpid() syz_pidfd_open(r4, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0), 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x80) ioctl$EVIOCGREP(r6, 0x80084503, &(0x7f00000000c0)=""/179) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats\x00') pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) ioctl$EVIOCGUNIQ(r7, 0x80404508, &(0x7f00000002c0)=""/186) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r0}, 0x8) sendmsg$NL80211_CMD_LEAVE_IBSS(r5, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc6a085505b4fb023}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r8, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x59}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) 15.982479332s ago: executing program 3 (id=207): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)}, 0x4000800) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000540)='reno', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x100}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x1214040, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x8) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0xfffffffe) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r7 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback, 0x1}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x13, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) sendto$inet6(r7, &(0x7f00000000c0)='\x00', 0x1, 0xc041, &(0x7f0000000040)={0xa, 0x4e24, 0xb, @loopback, 0x9}, 0x1c) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) accept4$unix(r5, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 2.159452ms ago: executing program 1 (id=208): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x891d, &(0x7f0000000040)={'erspan0\x00', 0x0}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000180)={0x28, 0x2, 0x0, {0x4, 0x7ffd, 0x7c94}}, 0x28) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r1, 0x4010e501, &(0x7f0000002840)={r2}) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r4, &(0x7f00000000c0)={0x2020}, 0x2020) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe81a10a0015400100142603600e1208000b0000000401a800080008000a400600000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) write$FUSE_DIRENT(r4, &(0x7f0000002140)=ANY=[@ANYBLOB="100000000000000005ee80886d46369f"], 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0xc20, 0xadb12e32f182386c, 0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) 1.590241ms ago: executing program 3 (id=209): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @void}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB, @ANYRES64=0x0], 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r3, r5}, 0x5) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0xa1, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r8 = signalfd4(r1, &(0x7f0000000080)={[0x1]}, 0x8, 0x80000) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000180)=r8) 1.382076ms ago: executing program 1 (id=210): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cf5fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r1], 0xfdef) 1.122966ms ago: executing program 3 (id=211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000380)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434", 0xa1}, {&(0x7f0000000c40)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c", 0x25}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="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", 0xc71}, {&(0x7f0000003000)='B', 0x1}], 0x8}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)=0x40) 768.775µs ago: executing program 0 (id=212): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x80) accept$netrom(r0, 0x0, 0x0) 457.027µs ago: executing program 3 (id=213): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000000c40)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0xf, 0x6, "d56d2f", 0xd4b, 0x2f, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xc83, 0x2, [], "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"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x6, 0x4]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x3], "d7d689b285e16baaf829e1a68e0172c25c10fb53a234eb229b14817f6b53704c06ecc4372db1"}, {0x8, 0x88be, 0x1, {{0x7, 0x1, 0xe, 0x2, 0x0, 0x2, 0x3, 0x5}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x1, {{0x6, 0x2, 0xd, 0x2, 0x1, 0x0, 0x5, 0xfc}, 0x2, {0xfffffffe, 0xffff, 0x1, 0x3, 0x1, 0x0, 0x2, 0x1}}}, {0x8, 0x6558, 0x2, "4fca9f4023fd33b20e3b450cba36a38a303965c4d302787163379dde938c75078daa635096c987fa6fa22f133a10ee9a3c70425067da7faad5d8439c52d24bb134acf30c316efb7ba5befa97ad2f6e5a0ca17b7ab1882c72"}}}}}}}, 0x0) 316.158µs ago: executing program 0 (id=214): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x1c}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) r1 = socket$caif_seqpacket(0x25, 0x5, 0x1) recvmsg(r1, &(0x7f0000001640)={&(0x7f0000000080)=@phonet, 0x80, &(0x7f0000001580)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000100)=""/125, 0x7d}, {&(0x7f0000000180)=""/225, 0xe1}, {&(0x7f0000001300)=""/128, 0x80}, {&(0x7f0000001380)=""/228, 0xe4}, {&(0x7f0000000280)=""/44, 0x2c}, {&(0x7f0000001480)=""/249, 0xf9}], 0x7, &(0x7f0000001600)}, 0x40000001) 112.886µs ago: executing program 3 (id=215): r0 = semget$private(0x0, 0x1, 0x200) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000016c0)=""/152) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000540)) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="00000008010800007f004000"]) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000010001000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300293b7d5825c3cac307cb18cfbb000000000000000000"], 0x48) r1 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfd2, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x20000000000000, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) r3 = syz_open_dev$sndpcmc(&(0x7f00000016c0), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x9, 0x12, r3, 0x83000000) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000180)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee88197c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r4, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) socket(0x2b, 0x5, 0xff) syz_emit_ethernet(0x22, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}], 0x18}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket(0x10, 0x3, 0xc) write(r8, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) mmap(&(0x7f0000d43000/0x6000)=nil, 0x6000, 0x1000007, 0x40010, 0xffffffffffffffff, 0xf952e000) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) socket$inet(0x2, 0x80006, 0x7) 0s ago: executing program 32 (id=210): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cf5fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r1], 0xfdef) kernel console output (not intermixed with test programs): [ 44.161303][ T40] audit: type=1400 audit(1763951362.599:60): avc: denied { rlimitinh } for pid=5844 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.169836][ T40] audit: type=1400 audit(1763951362.599:61): avc: denied { siginh } for pid=5844 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:26014' (ED25519) to the list of known hosts. [ 45.728636][ T40] audit: type=1400 audit(1763951364.189:62): avc: denied { name_bind } for pid=5906 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.754445][ T40] audit: type=1400 audit(1763951364.209:63): avc: denied { write } for pid=5908 comm="sh" path="pipe:[6637]" dev="pipefs" ino=6637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.770631][ T40] audit: type=1400 audit(1763951364.229:64): avc: denied { execute } for pid=5908 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.781334][ T40] audit: type=1400 audit(1763951364.229:65): avc: denied { execute_no_trans } for pid=5908 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.886879][ T40] audit: type=1400 audit(1763951366.349:66): avc: denied { mounton } for pid=5908 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.897589][ T5908] cgroup: Unknown subsys name 'net' [ 48.107629][ T5908] cgroup: Unknown subsys name 'cpuset' [ 48.112098][ T5908] cgroup: Unknown subsys name 'rlimit' [ 48.293773][ T5920] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.002291][ T5908] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.447279][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 52.447289][ T40] audit: type=1400 audit(1763951370.909:80): avc: denied { execmem } for pid=5925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.676960][ T40] audit: type=1400 audit(1763951371.139:81): avc: denied { create } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.684232][ T40] audit: type=1400 audit(1763951371.139:82): avc: denied { create } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.693582][ T40] audit: type=1400 audit(1763951371.139:83): avc: denied { read write } for pid=5929 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.701192][ T40] audit: type=1400 audit(1763951371.139:84): avc: denied { read write } for pid=5930 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.709654][ T40] audit: type=1400 audit(1763951371.139:86): avc: denied { open } for pid=5930 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.713102][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.717179][ T40] audit: type=1400 audit(1763951371.139:85): avc: denied { open } for pid=5929 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.717202][ T40] audit: type=1400 audit(1763951371.139:87): avc: denied { ioctl } for pid=5929 comm="syz-executor" path="socket:[1871]" dev="sockfs" ino=1871 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.735971][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.736302][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.736737][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.737327][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.737553][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.738029][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.738514][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.738563][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.738931][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.739186][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.741543][ T5938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.745337][ T40] audit: type=1400 audit(1763951371.199:88): avc: denied { read } for pid=5929 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.747706][ T5938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.749458][ T40] audit: type=1400 audit(1763951371.199:89): avc: denied { open } for pid=5929 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.752341][ T5938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.754132][ T5945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.759124][ T5938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.761618][ T5945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.792589][ T5945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.804003][ T5945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.808193][ T5945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.000737][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 53.038551][ T5929] chnl_net:caif_netlink_parms(): no params data found [ 53.194120][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.197310][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.200567][ T5936] bridge_slave_0: entered allmulticast mode [ 53.204495][ T5936] bridge_slave_0: entered promiscuous mode [ 53.236512][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.239554][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.242509][ T5936] bridge_slave_1: entered allmulticast mode [ 53.246515][ T5936] bridge_slave_1: entered promiscuous mode [ 53.335929][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.339060][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.342077][ T5929] bridge_slave_0: entered allmulticast mode [ 53.349382][ T5929] bridge_slave_0: entered promiscuous mode [ 53.353104][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.355786][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.358130][ T5929] bridge_slave_1: entered allmulticast mode [ 53.361983][ T5929] bridge_slave_1: entered promiscuous mode [ 53.388649][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.391950][ T5930] chnl_net:caif_netlink_parms(): no params data found [ 53.441329][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.507311][ T5929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.566628][ T5929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.576600][ T5936] team0: Port device team_slave_0 added [ 53.586562][ T5936] team0: Port device team_slave_1 added [ 53.608877][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 53.681771][ T5929] team0: Port device team_slave_0 added [ 53.693601][ T5929] team0: Port device team_slave_1 added [ 53.741832][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.744182][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.752893][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.809326][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.811670][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.814323][ T5930] bridge_slave_0: entered allmulticast mode [ 53.817287][ T5930] bridge_slave_0: entered promiscuous mode [ 53.820244][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.822454][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.830778][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.839006][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.841529][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.849789][ T5929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.853593][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.858232][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.862408][ T5930] bridge_slave_1: entered allmulticast mode [ 53.866687][ T5930] bridge_slave_1: entered promiscuous mode [ 53.892819][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.895092][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.903662][ T5929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.958775][ T5936] hsr_slave_0: entered promiscuous mode [ 53.962046][ T5936] hsr_slave_1: entered promiscuous mode [ 53.991057][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.048244][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.051768][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.054488][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.057246][ T5941] bridge_slave_0: entered allmulticast mode [ 54.059981][ T5941] bridge_slave_0: entered promiscuous mode [ 54.064085][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.066553][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.069125][ T5941] bridge_slave_1: entered allmulticast mode [ 54.072059][ T5941] bridge_slave_1: entered promiscuous mode [ 54.178709][ T5930] team0: Port device team_slave_0 added [ 54.222202][ T5930] team0: Port device team_slave_1 added [ 54.256150][ T5929] hsr_slave_0: entered promiscuous mode [ 54.259603][ T5929] hsr_slave_1: entered promiscuous mode [ 54.262635][ T5929] debugfs: 'hsr0' already exists in 'hsr' [ 54.265199][ T5929] Cannot create hsr debugfs directory [ 54.270035][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.304469][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.307559][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.320374][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.326861][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.347825][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.350382][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.358569][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.433506][ T5941] team0: Port device team_slave_0 added [ 54.440213][ T5941] team0: Port device team_slave_1 added [ 54.550003][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.552292][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.560736][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.581846][ T5930] hsr_slave_0: entered promiscuous mode [ 54.588100][ T5930] hsr_slave_1: entered promiscuous mode [ 54.590194][ T5930] debugfs: 'hsr0' already exists in 'hsr' [ 54.592016][ T5930] Cannot create hsr debugfs directory [ 54.594536][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.597317][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.606627][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.764080][ T5941] hsr_slave_0: entered promiscuous mode [ 54.769462][ T5941] hsr_slave_1: entered promiscuous mode [ 54.772253][ T5941] debugfs: 'hsr0' already exists in 'hsr' [ 54.774770][ T5941] Cannot create hsr debugfs directory [ 54.816752][ T5942] Bluetooth: hci0: command tx timeout [ 54.816768][ T5945] Bluetooth: hci2: command tx timeout [ 54.817026][ T5945] Bluetooth: hci1: command tx timeout [ 54.825007][ T5945] Bluetooth: hci3: command tx timeout [ 54.868384][ T5936] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.876372][ T5936] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.905319][ T5936] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.914507][ T5936] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.004493][ T5929] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.011947][ T5929] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.018830][ T5929] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.034561][ T5929] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.102204][ T5930] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.110022][ T5930] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.117055][ T5930] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.122191][ T5930] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.191541][ T5941] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.198035][ T5941] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.202819][ T5941] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.208447][ T5941] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.253972][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.283076][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.300853][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.303535][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.315794][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.327688][ T1225] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.330742][ T1225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.357924][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.366305][ T5929] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.398270][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.407049][ T1225] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.410169][ T1225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.421991][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.425134][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.433179][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.436241][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.447535][ T5936] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.459250][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.479203][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.482098][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.515295][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.529312][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.532322][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.538675][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.541649][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.579614][ T5929] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.644504][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.690454][ T5936] veth0_vlan: entered promiscuous mode [ 55.698468][ T5936] veth1_vlan: entered promiscuous mode [ 55.724852][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.727941][ T5936] veth0_macvtap: entered promiscuous mode [ 55.735444][ T5936] veth1_macvtap: entered promiscuous mode [ 55.751740][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.763984][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.780487][ T80] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.791436][ T80] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.794326][ T80] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.803325][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.815317][ T80] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.821615][ T5929] veth0_vlan: entered promiscuous mode [ 55.828934][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.840453][ T5929] veth1_vlan: entered promiscuous mode [ 55.875677][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.878706][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.904569][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.908769][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.909068][ T5930] veth0_vlan: entered promiscuous mode [ 55.918006][ T5929] veth0_macvtap: entered promiscuous mode [ 55.922789][ T5941] veth0_vlan: entered promiscuous mode [ 55.929476][ T5929] veth1_macvtap: entered promiscuous mode [ 55.933005][ T5930] veth1_vlan: entered promiscuous mode [ 55.942804][ T5941] veth1_vlan: entered promiscuous mode [ 55.948038][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.950327][ T5936] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.960835][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.976706][ T80] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.989791][ T80] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.993479][ T80] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.001412][ T5941] veth0_macvtap: entered promiscuous mode [ 56.006833][ T80] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.011377][ T5930] veth0_macvtap: entered promiscuous mode [ 56.017781][ T5941] veth1_macvtap: entered promiscuous mode [ 56.020398][ T5930] veth1_macvtap: entered promiscuous mode [ 56.039020][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.043137][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.054328][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.069719][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.080353][ T220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.083821][ T220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.095431][ T220] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.098309][ T220] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.111926][ T220] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.115530][ T220] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.118734][ T220] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.132135][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.132393][ T220] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.136184][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.138462][ T220] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.156646][ T220] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.212709][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.221662][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.233467][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.237382][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.263163][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.266209][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.286161][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.288711][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.351052][ T6028] syzkaller1: entered promiscuous mode [ 56.353425][ T6028] syzkaller1: entered allmulticast mode [ 56.778931][ T6042] cgroup: fork rejected by pids controller in /syz1 [ 56.905786][ T5945] Bluetooth: hci2: command tx timeout [ 56.908394][ T5945] Bluetooth: hci3: command tx timeout [ 56.909956][ T5942] Bluetooth: hci1: command tx timeout [ 57.389148][ T6114] syz.3.12 uses obsolete (PF_INET,SOCK_PACKET) [ 57.393746][ T6114] syzkaller1: entered promiscuous mode [ 57.398313][ T6114] syzkaller1: entered allmulticast mode [ 57.681316][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 57.681326][ T40] audit: type=1400 audit(1763951376.139:148): avc: denied { bind } for pid=6117 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.689812][ T40] audit: type=1400 audit(1763951376.139:149): avc: denied { setopt } for pid=6117 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.696688][ T40] audit: type=1400 audit(1763951376.139:150): avc: denied { write } for pid=6117 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.704049][ T40] audit: type=1400 audit(1763951376.139:151): avc: denied { create } for pid=6117 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 57.712037][ T40] audit: type=1400 audit(1763951376.139:152): avc: denied { ioctl } for pid=6117 comm="syz.1.14" path="socket:[8739]" dev="sockfs" ino=8739 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 57.798540][ T40] audit: type=1400 audit(1763951376.259:153): avc: denied { create } for pid=6123 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 57.799022][ T6124] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.823097][ T6126] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16'. [ 57.864598][ T40] audit: type=1400 audit(1763951376.319:154): avc: denied { read write } for pid=6127 comm="syz.1.17" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 57.874598][ T40] audit: type=1400 audit(1763951376.329:155): avc: denied { open } for pid=6127 comm="syz.1.17" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 57.917111][ T40] audit: type=1400 audit(1763951376.379:156): avc: denied { name_bind } for pid=6130 comm="syz.1.18" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 57.925516][ T40] audit: type=1400 audit(1763951376.379:157): avc: denied { view } for pid=6130 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 58.020105][ T6134] Zero length message leads to an empty skb [ 58.032480][ T6134] syzkaller0: entered promiscuous mode [ 58.034338][ T6134] syzkaller0: entered allmulticast mode [ 58.078107][ T6136] xt_ipcomp: unknown flags 1D [ 58.080572][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.083533][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.152996][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.162836][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.238206][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.241013][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.263535][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.267572][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.415340][ T5938] Bluetooth: hci0: command tx timeout [ 58.645790][ T6172] syzkaller0: entered promiscuous mode [ 58.647618][ T6172] syzkaller0: entered allmulticast mode [ 58.974991][ T5942] Bluetooth: hci1: command tx timeout [ 58.975006][ T5945] Bluetooth: hci2: command tx timeout [ 58.975466][ T5938] Bluetooth: hci3: command tx timeout [ 59.009822][ T6179] No control pipe specified [ 59.016009][ T6179] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 59.081576][ T6181] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.182059][ T6187] syzkaller0: entered promiscuous mode [ 59.183775][ T6187] syzkaller0: entered allmulticast mode [ 59.352248][ T6193] fuse: Bad value for 'fd' [ 59.668354][ T6204] syzkaller0: entered promiscuous mode [ 59.670275][ T6204] syzkaller0: entered allmulticast mode [ 59.815255][ T5999] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.995014][ T5999] usb 6-1: Using ep0 maxpacket: 8 [ 60.005612][ T5999] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 60.010438][ T5999] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 60.016565][ T5999] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 60.020387][ T5999] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.027582][ T5999] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 60.031446][ T5999] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.082813][ T6214] fuse: Bad value for 'fd' [ 60.266850][ T5999] usb 6-1: usb_control_msg returned -32 [ 60.269501][ T5999] usbtmc 6-1:16.0: can't read capabilities [ 60.408301][ T59] usb 6-1: USB disconnect, device number 2 [ 60.438095][ T6227] binder: 6226:6227 ioctl 4004af61 200000000140 returned -22 [ 60.500665][ T6229] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.638100][ T6238] netlink: 44 bytes leftover after parsing attributes in process `syz.0.50'. [ 60.640941][ T6238] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 60.810041][ T6249] netlink: 'syz.3.54': attribute type 1 has an invalid length. [ 61.055936][ T5938] Bluetooth: hci3: command tx timeout [ 61.055965][ T5942] Bluetooth: hci2: command tx timeout [ 61.137835][ T6266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.60'. [ 61.608250][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'. [ 61.610833][ T6272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.63'. [ 61.640058][ T6272] trusted_key: encrypted_key: insufficient parameters specified [ 62.724057][ T6295] netlink: 68 bytes leftover after parsing attributes in process `syz.3.72'. [ 62.780325][ T40] kauditd_printk_skb: 112 callbacks suppressed [ 62.780341][ T40] audit: type=1400 audit(1763951381.239:270): avc: denied { read } for pid=6298 comm="syz.3.74" lport=47497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.797232][ T40] audit: type=1400 audit(1763951381.259:271): avc: denied { write } for pid=6296 comm="syz.0.73" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 62.806652][ T40] audit: type=1400 audit(1763951381.259:272): avc: denied { ioctl } for pid=6296 comm="syz.0.73" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 62.880029][ T6302] syz.3.75: vmalloc error: size 16105472, failed to allocated page array size 31456, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 62.886529][ T6302] CPU: 2 UID: 0 PID: 6302 Comm: syz.3.75 Not tainted syzkaller #0 PREEMPT(full) [ 62.886544][ T6302] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.886550][ T6302] Call Trace: [ 62.886554][ T6302] [ 62.886559][ T6302] dump_stack_lvl+0x16c/0x1f0 [ 62.886573][ T6302] warn_alloc+0x248/0x3a0 [ 62.886590][ T6302] ? __pfx_warn_alloc+0x10/0x10 [ 62.886611][ T6302] ? __vcalloc_noprof+0x4d/0x80 [ 62.886665][ T6302] ? __vmalloc_node_noprof+0xad/0xf0 [ 62.886685][ T6302] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 62.886698][ T6302] ? __pfx___mutex_trylock_common+0x10/0x10 [ 62.886713][ T6302] ? __vcalloc_noprof+0x4d/0x80 [ 62.886726][ T6302] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 62.886740][ T6302] ? __pfx___mutex_lock+0x10/0x10 [ 62.886755][ T6302] ? __vcalloc_noprof+0x4d/0x80 [ 62.886764][ T6302] __vmalloc_node_noprof+0xad/0xf0 [ 62.886777][ T6302] ? __vcalloc_noprof+0x4d/0x80 [ 62.886788][ T6302] __vcalloc_noprof+0x4d/0x80 [ 62.886798][ T6302] kvm_set_memslot+0xee3/0x1380 [ 62.886814][ T6302] ? kasan_save_track+0x14/0x30 [ 62.886826][ T6302] kvm_set_memory_region+0xe53/0x1610 [ 62.886844][ T6302] ? __pfx_kvm_set_memory_region+0x10/0x10 [ 62.886862][ T6302] kvm_vm_ioctl+0x151b/0x3fd0 [ 62.886879][ T6302] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 62.886899][ T6302] ? kasan_quarantine_put+0x10a/0x240 [ 62.886909][ T6302] ? lockdep_hardirqs_on+0x7c/0x110 [ 62.886921][ T6302] ? find_held_lock+0x2b/0x80 [ 62.886934][ T6302] ? tomoyo_path_number_perm+0x295/0x580 [ 62.886947][ T6302] ? tomoyo_path_number_perm+0x18d/0x580 [ 62.886958][ T6302] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 62.886973][ T6302] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 62.886998][ T6302] ? hook_file_ioctl_common+0x145/0x410 [ 62.887017][ T6302] ? selinux_file_ioctl+0x180/0x270 [ 62.887035][ T6302] ? selinux_file_ioctl+0xb4/0x270 [ 62.887052][ T6302] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 62.887070][ T6302] __x64_sys_ioctl+0x18e/0x210 [ 62.887096][ T6302] do_syscall_64+0xcd/0xfa0 [ 62.887113][ T6302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.887129][ T6302] RIP: 0033:0x7fdc2618f749 [ 62.887143][ T6302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.887158][ T6302] RSP: 002b:00007fdc27019038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.887173][ T6302] RAX: ffffffffffffffda RBX: 00007fdc263e5fa0 RCX: 00007fdc2618f749 [ 62.887185][ T6302] RDX: 0000200000000080 RSI: 000000004020ae46 RDI: 0000000000000004 [ 62.887196][ T6302] RBP: 00007fdc26213f91 R08: 0000000000000000 R09: 0000000000000000 [ 62.887205][ T6302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.887213][ T6302] R13: 00007fdc263e6038 R14: 00007fdc263e5fa0 R15: 00007ffe9b27b1a8 [ 62.887239][ T6302] [ 62.887254][ T6302] Mem-Info: [ 62.935942][ T40] audit: type=1400 audit(1763951381.399:273): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 62.937419][ T6302] active_anon:7656 inactive_anon:0 isolated_anon:0 [ 62.937419][ T6302] active_file:1589 inactive_file:40633 isolated_file:0 [ 62.937419][ T6302] unevictable:1768 dirty:1709 writeback:0 [ 62.937419][ T6302] slab_reclaimable:12606 slab_unreclaimable:66079 [ 62.937419][ T6302] mapped:24366 shmem:2393 pagetables:1171 [ 62.937419][ T6302] sec_pagetables:308 bounce:0 [ 62.937419][ T6302] kernel_misc_reclaimable:0 [ 62.937419][ T6302] free:470351 free_pcp:20957 free_cma:0 [ 62.938221][ T6307] netlink: 'syz.0.76': attribute type 4 has an invalid length. [ 62.940731][ T40] audit: type=1400 audit(1763951381.399:274): avc: denied { write } for pid=6306 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 62.942361][ T6302] Node 0 active_anon:30624kB inactive_anon:0kB active_file:6356kB inactive_file:162328kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:97464kB dirty:6836kB writeback:0kB shmem:6036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12464kB pagetables:4472kB sec_pagetables:1232kB all_unreclaimable? no Balloon:0kB [ 63.039396][ T6302] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 63.049086][ T6302] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 63.061441][ T6302] lowmem_reserve[]: 0 1239 1239 1239 1239 [ 63.063927][ T6302] Node 0 DMA32 free:267436kB boost:0kB min:27580kB low:34472kB high:41364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30624kB inactive_anon:0kB active_file:6356kB inactive_file:162328kB unevictable:3536kB writepending:6836kB zspages:0kB present:2080628kB managed:1269468kB mlocked:0kB bounce:0kB free_pcp:67996kB local_pcp:23808kB free_cma:0kB [ 63.076279][ T6302] lowmem_reserve[]: 0 0 0 0 0 [ 63.078347][ T6302] Node 1 Normal free:1598608kB boost:0kB min:39660kB low:49572kB high:59484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:15252kB local_pcp:3584kB free_cma:0kB [ 63.090345][ T6302] lowmem_reserve[]: 0 0 0 0 0 [ 63.091865][ T6302] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 63.095897][ T6302] Node 0 DMA32: 2*4kB (ME) 3*8kB (UME) 0*16kB 372*32kB (UME) 52*64kB (U) 12*128kB (UE) 9*256kB (UME) 9*512kB (UM) 6*1024kB (UM) 4*2048kB (UME) 56*4096kB (UM) = 267424kB [ 63.102305][ T6302] Node 1 Normal: 10*4kB (UME) 13*8kB (UME) 18*16kB (UME) 35*32kB (UME) 18*64kB (UME) 12*128kB (UME) 0*256kB 4*512kB (UM) 1*1024kB (E) 1*2048kB (M) 388*4096kB (M) = 1598608kB [ 63.109378][ T6302] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 63.112279][ T6302] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 63.115164][ T6302] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 63.118421][ T6302] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 63.121821][ T6302] 44611 total pagecache pages [ 63.123295][ T6302] 0 pages in swap cache [ 63.124599][ T6302] Free swap = 124996kB [ 63.125953][ T6302] Total swap = 124996kB [ 63.127548][ T6302] 1048443 pages RAM [ 63.129168][ T6302] 0 pages HighMem/MovableOnly [ 63.131089][ T6302] 281763 pages reserved [ 63.132823][ T6302] 0 pages cma reserved [ 63.135262][ T5938] Bluetooth: hci4: command 0x1003 tx timeout [ 63.135273][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 63.252112][ T6313] process 'syz.1.78' launched './file1' with NULL argv: empty string added [ 63.252819][ T40] audit: type=1400 audit(1763951381.709:275): avc: denied { execute } for pid=6309 comm="syz.1.78" name="file1" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.265975][ T40] audit: type=1400 audit(1763951381.719:276): avc: denied { execute_no_trans } for pid=6309 comm="syz.1.78" path="/20/file1" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.280142][ T40] audit: type=1400 audit(1763951381.739:277): avc: denied { unmount } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.296263][ T6317] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 63.307076][ T6317] CIFS mount error: No usable UNC path provided in device string! [ 63.307076][ T6317] [ 63.311517][ T6317] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 63.378131][ T40] audit: type=1400 audit(1763951381.839:278): avc: denied { read } for pid=6318 comm="syz.3.79" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 63.387591][ T40] audit: type=1400 audit(1763951381.839:279): avc: denied { open } for pid=6318 comm="syz.3.79" path="/17/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 63.401324][ T6321] netlink: 156 bytes leftover after parsing attributes in process `syz.1.81'. [ 63.424162][ T6324] netlink: 'syz.3.82': attribute type 1 has an invalid length. [ 63.462464][ T6325] syz.1.81 uses old SIOCAX25GETINFO [ 63.533854][ T6327] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 63.538851][ T6327] block device autoloading is deprecated and will be removed. [ 63.724016][ T6335] syzkaller0: entered promiscuous mode [ 63.726410][ T6335] syzkaller0: entered allmulticast mode [ 63.846112][ T5709] hid-generic 0005:15C2:1010.0002: item fetching failed at offset 0/1 [ 63.849021][ T5709] hid-generic 0005:15C2:1010.0002: probe with driver hid-generic failed with error -22 [ 64.041011][ T6348] erofs (device nbd0): cannot find valid erofs superblock [ 64.046756][ T6359] tmpfs: Too few inodes for current use [ 64.107505][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.90'. [ 64.228942][ T6370] syzkaller0: entered promiscuous mode [ 64.230756][ T6370] syzkaller0: entered allmulticast mode [ 64.288270][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'. [ 64.439944][ T6386] netlink: 'syz.3.105': attribute type 1 has an invalid length. [ 64.774748][ T5709] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 64.815797][ T5942] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 64.818600][ T5942] Bluetooth: hci1: Injecting HCI hardware error event [ 64.821621][ T5942] Bluetooth: hci1: hardware error 0x00 [ 64.898612][ T6409] overlayfs: failed to resolve './file1/file0': -2 [ 64.924779][ T5709] usb 8-1: Using ep0 maxpacket: 8 [ 64.928558][ T5709] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 64.932204][ T5709] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 64.936716][ T5709] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 64.940797][ T5709] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 64.945252][ T5709] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 64.950618][ T5709] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 64.954353][ T5709] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.164735][ T5709] usb 8-1: GET_CAPABILITIES returned 0 [ 65.166635][ T5709] usbtmc 8-1:16.0: can't read capabilities [ 65.272317][ T6422] 9pnet_fd: Insufficient options for proto=fd [ 65.390183][ T6425] syzkaller0: entered promiscuous mode [ 65.393078][ T6425] syzkaller0: entered allmulticast mode [ 65.581125][ T6431] netlink: 44 bytes leftover after parsing attributes in process `syz.1.119'. [ 65.608468][ T6434] netlink: 204 bytes leftover after parsing attributes in process `syz.0.120'. [ 65.616014][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 65.619775][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'. [ 65.623565][ T6434] netlink: 'syz.0.120': attribute type 18 has an invalid length. [ 65.628297][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 66.179592][ T6455] Driver unsupported XDP return value 0 on prog (id 22) dev N/A, expect packet loss! [ 66.187462][ T6455] overlayfs: maximum fs stacking depth exceeded [ 66.375838][ T5999] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 66.386284][ T6466] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.464613][ T6466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.478401][ T6466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.526218][ T5999] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.530488][ T5999] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.533752][ T5999] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 66.537996][ T5999] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.540866][ T5999] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.546109][ T5999] usb 7-1: config 0 descriptor?? [ 66.594965][ T1150] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.597955][ T1150] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.601648][ T1150] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.604783][ T1150] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.797150][ T6473] Can't find ip_set type [ 66.895602][ T5942] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 66.971519][ T5999] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 66.994803][ T5999] plantronics 0003:047F:FFFF.0003: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 67.053001][ T6491] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 67.203249][ T6500] Bluetooth: MGMT ver 1.23 [ 67.209196][ T5709] usb 7-1: USB disconnect, device number 2 [ 67.785103][ T40] kauditd_printk_skb: 78 callbacks suppressed [ 67.785117][ T40] audit: type=1400 audit(1763951386.239:358): avc: denied { create } for pid=6520 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=0 [ 67.793653][ T40] audit: type=1400 audit(1763951386.249:359): avc: denied { create } for pid=6520 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 67.800880][ T40] audit: type=1400 audit(1763951386.249:360): avc: denied { read write } for pid=5930 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 67.809225][ T40] audit: type=1400 audit(1763951386.259:361): avc: denied { read write } for pid=5941 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 67.816966][ T40] audit: type=1400 audit(1763951386.269:362): avc: denied { read } for pid=6522 comm="syz.0.153" dev="nsfs" ino=4026533183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 67.823994][ T40] audit: type=1400 audit(1763951386.279:363): avc: denied { create } for pid=6524 comm="syz.2.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 67.831934][ T40] audit: type=1400 audit(1763951386.279:364): avc: denied { create } for pid=6524 comm="syz.2.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 67.839863][ T40] audit: type=1400 audit(1763951386.279:365): avc: denied { create } for pid=6524 comm="syz.2.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 67.848730][ T40] audit: type=1400 audit(1763951386.289:366): avc: denied { create } for pid=6524 comm="syz.2.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 67.857920][ T40] audit: type=1400 audit(1763951386.289:367): avc: denied { read write } for pid=5930 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 67.945062][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.158'. [ 68.896190][ T6550] netlink: 10 bytes leftover after parsing attributes in process `syz.1.165'. [ 68.901805][ T6550] capability: warning: `syz.1.165' uses 32-bit capabilities (legacy support in use) [ 68.987458][ T6558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.169'. [ 68.990219][ T6558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.169'. [ 70.265754][ T6593] syz.0.185 (6593): drop_caches: 1 [ 70.415892][ T6401] usbtmc 8-1:16.0: usb_control_msg returned -110 [ 70.433179][ T1347] usb 8-1: USB disconnect, device number 2 [ 70.494393][ T6602] syzkaller0: entered promiscuous mode [ 70.496363][ T6602] syzkaller0: entered allmulticast mode [ 70.606046][ T6610] netlink: 32 bytes leftover after parsing attributes in process `syz.3.192'. [ 70.661743][ T6614] FAULT_INJECTION: forcing a failure. [ 70.661743][ T6614] name failslab, interval 1, probability 0, space 0, times 1 [ 70.666497][ T6614] CPU: 2 UID: 0 PID: 6614 Comm: syz.1.187 Not tainted syzkaller #0 PREEMPT(full) [ 70.666519][ T6614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.666529][ T6614] Call Trace: [ 70.666537][ T6614] [ 70.666545][ T6614] dump_stack_lvl+0x16c/0x1f0 [ 70.666567][ T6614] should_fail_ex+0x512/0x640 [ 70.666588][ T6614] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 70.666617][ T6614] should_failslab+0xc2/0x120 [ 70.666638][ T6614] kmem_cache_alloc_node_noprof+0x78/0x770 [ 70.666663][ T6614] ? __alloc_skb+0x2b2/0x380 [ 70.666690][ T6614] ? __alloc_skb+0x2b2/0x380 [ 70.666709][ T6614] ? __pfx_netlink_insert+0x10/0x10 [ 70.666732][ T6614] __alloc_skb+0x2b2/0x380 [ 70.666752][ T6614] ? __pfx___alloc_skb+0x10/0x10 [ 70.666774][ T6614] ? netlink_autobind.isra.0+0x158/0x370 [ 70.666806][ T6614] netlink_alloc_large_skb+0x69/0x140 [ 70.666832][ T6614] netlink_sendmsg+0x698/0xdd0 [ 70.666859][ T6614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.666893][ T6614] ____sys_sendmsg+0xa98/0xc70 [ 70.666911][ T6614] ? copy_msghdr_from_user+0x10a/0x160 [ 70.666935][ T6614] ? __pfx_____sys_sendmsg+0x10/0x10 [ 70.666962][ T6614] ___sys_sendmsg+0x134/0x1d0 [ 70.666985][ T6614] ? __pfx____sys_sendmsg+0x10/0x10 [ 70.667005][ T6614] ? __lock_acquire+0x622/0x1c90 [ 70.667046][ T6614] __sys_sendmsg+0x16d/0x220 [ 70.667070][ T6614] ? __pfx___sys_sendmsg+0x10/0x10 [ 70.667101][ T6614] ? fput+0x9b/0xd0 [ 70.667125][ T6614] do_syscall_64+0xcd/0xfa0 [ 70.667144][ T6614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.667161][ T6614] RIP: 0033:0x7f9743f8f749 [ 70.667175][ T6614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.667190][ T6614] RSP: 002b:00007f9744e86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.667206][ T6614] RAX: ffffffffffffffda RBX: 00007f97441e5fa0 RCX: 00007f9743f8f749 [ 70.667222][ T6614] RDX: 0000000000000800 RSI: 00002000000002c0 RDI: 0000000000000007 [ 70.667232][ T6614] RBP: 00007f9744e86090 R08: 0000000000000000 R09: 0000000000000000 [ 70.667242][ T6614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.667251][ T6614] R13: 00007f97441e6038 R14: 00007f97441e5fa0 R15: 00007ffd0565d1d8 [ 70.667274][ T6614] [ 71.180055][ T6641] netlink: 56 bytes leftover after parsing attributes in process `syz.1.206'. [ 71.182979][ T6641] netlink: 56 bytes leftover after parsing attributes in process `syz.1.206'. [ 71.225985][ T6645] netlink: 'syz.1.208': attribute type 21 has an invalid length. [ 71.229246][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.231473][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 81.467861][ T1338] cfg80211: failed to load regulatory.db [ 87.149356][ T40] kauditd_printk_skb: 266 callbacks suppressed [ 87.149372][ T40] audit: type=1400 audit(1763951405.609:634): avc: denied { execute } for pid=6665 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=0 [ 87.160720][ T40] audit: type=1400 audit(1763951405.609:635): avc: denied { write } for pid=5908 comm="syz-executor" path="pipe:[6638]" dev="pipefs" ino=6638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 87.170344][ T40] audit: type=1400 audit(1763951405.609:636): avc: denied { write } for pid=5908 comm="syz-executor" path="pipe:[6638]" dev="pipefs" ino=6638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 87.185075][ T1423] ================================================================== [ 87.187807][ T1423] BUG: KASAN: slab-use-after-free in handle_tx+0x5a5/0x630 [ 87.190039][ T1423] Read of size 8 at addr ffff888035f4d020 by task aoe_tx0/1423 [ 87.194345][ T1423] [ 87.195716][ T1423] CPU: 1 UID: 0 PID: 1423 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 87.195730][ T1423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.195737][ T1423] Call Trace: [ 87.195742][ T1423] [ 87.195746][ T1423] dump_stack_lvl+0x116/0x1f0 [ 87.195761][ T1423] print_report+0xcd/0x630 [ 87.195773][ T1423] ? __virt_addr_valid+0x81/0x610 [ 87.195789][ T1423] ? __phys_addr+0xe8/0x180 [ 87.195803][ T1423] ? handle_tx+0x5a5/0x630 [ 87.195817][ T1423] kasan_report+0xe0/0x110 [ 87.195828][ T1423] ? handle_tx+0x5a5/0x630 [ 87.195843][ T1423] handle_tx+0x5a5/0x630 [ 87.195859][ T1423] dev_hard_start_xmit+0x97/0x740 [ 87.195872][ T1423] __dev_queue_xmit+0xa46/0x4490 [ 87.195885][ T1423] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.195894][ T1423] ? finish_task_switch.isra.0+0x221/0xc10 [ 87.195908][ T1423] ? rcu_is_watching+0x12/0xc0 [ 87.195921][ T1423] ? __pfx___dev_queue_xmit+0x10/0x10 [ 87.195932][ T1423] ? __schedule+0x11a3/0x5de0 [ 87.195947][ T1423] ? __lock_acquire+0xb8a/0x1c90 [ 87.195957][ T1423] ? __lock_acquire+0xb8a/0x1c90 [ 87.195967][ T1423] ? do_raw_spin_lock+0x12c/0x2b0 [ 87.195979][ T1423] ? find_held_lock+0x2b/0x80 [ 87.195991][ T1423] ? skb_dequeue+0x126/0x180 [ 87.196005][ T1423] ? find_held_lock+0x2b/0x80 [ 87.196020][ T1423] ? rcu_is_watching+0x12/0xc0 [ 87.196041][ T1423] tx+0xcc/0x190 [ 87.196053][ T1423] ? __pfx_tx+0x10/0x10 [ 87.196062][ T1423] kthread+0x1e4/0x3e0 [ 87.196073][ T1423] ? find_held_lock+0x2b/0x80 [ 87.196085][ T1423] ? __pfx_kthread+0x10/0x10 [ 87.196093][ T1423] ? __pfx_default_wake_function+0x10/0x10 [ 87.196107][ T1423] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.196116][ T1423] ? __kthread_parkme+0x19e/0x250 [ 87.196131][ T1423] ? __pfx_kthread+0x10/0x10 [ 87.196139][ T1423] kthread+0x3c5/0x780 [ 87.196149][ T1423] ? __pfx_kthread+0x10/0x10 [ 87.196159][ T1423] ? rcu_is_watching+0x12/0xc0 [ 87.196171][ T1423] ? __pfx_kthread+0x10/0x10 [ 87.196181][ T1423] ret_from_fork+0x675/0x7d0 [ 87.196190][ T1423] ? __pfx_kthread+0x10/0x10 [ 87.196199][ T1423] ret_from_fork_asm+0x1a/0x30 [ 87.196217][ T1423] [ 87.196221][ T1423] [ 87.215407][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.215938][ T1423] Allocated by task 6140: [ 87.215947][ T1423] kasan_save_stack+0x33/0x60 [ 87.215960][ T1423] kasan_save_track+0x14/0x30 [ 87.271377][ T1423] __kasan_kmalloc+0xaa/0xb0 [ 87.272848][ T1423] alloc_tty_struct+0x96/0x8c0 [ 87.274380][ T1423] tty_init_dev.part.0+0x1e/0x500 [ 87.275987][ T1423] tty_open+0xa4f/0xf90 [ 87.277337][ T1423] chrdev_open+0x234/0x6a0 [ 87.278768][ T1423] do_dentry_open+0x982/0x1530 [ 87.280280][ T1423] vfs_open+0x82/0x3f0 [ 87.281641][ T1423] path_openat+0x1de4/0x2cb0 [ 87.283138][ T1423] do_filp_open+0x20b/0x470 [ 87.284518][ T1423] do_sys_openat2+0x11b/0x1d0 [ 87.285993][ T1423] __x64_sys_openat+0x174/0x210 [ 87.287555][ T1423] do_syscall_64+0xcd/0xfa0 [ 87.288988][ T1423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.290853][ T1423] [ 87.291623][ T1423] Freed by task 24: [ 87.292843][ T1423] kasan_save_stack+0x33/0x60 [ 87.294350][ T1423] kasan_save_track+0x14/0x30 [ 87.295830][ T1423] __kasan_save_free_info+0x3b/0x60 [ 87.297476][ T1423] __kasan_slab_free+0x5f/0x80 [ 87.298918][ T1423] kfree+0x2b8/0x6d0 [ 87.300087][ T1423] process_one_work+0x9cf/0x1b70 [ 87.301585][ T1423] worker_thread+0x6c8/0xf10 [ 87.303064][ T1423] kthread+0x3c5/0x780 [ 87.304362][ T1423] ret_from_fork+0x675/0x7d0 [ 87.305845][ T1423] ret_from_fork_asm+0x1a/0x30 [ 87.307295][ T1423] [ 87.308054][ T1423] Last potentially related work creation: [ 87.309820][ T1423] kasan_save_stack+0x33/0x60 [ 87.311275][ T1423] kasan_record_aux_stack+0xa7/0xc0 [ 87.312907][ T1423] insert_work+0x36/0x230 [ 87.314302][ T1423] __queue_work+0x97e/0x1160 [ 87.315763][ T1423] queue_work_on+0x1a4/0x1f0 [ 87.317241][ T1423] release_tty+0x4de/0x5d0 [ 87.318764][ T1423] tty_release_struct+0xb7/0xe0 [ 87.320356][ T1423] tty_release+0xe2d/0x1430 [ 87.321835][ T1423] __fput+0x402/0xb70 [ 87.323155][ T1423] task_work_run+0x150/0x240 [ 87.324648][ T1423] do_exit+0x86f/0x2bf0 [ 87.326028][ T1423] do_group_exit+0xd3/0x2a0 [ 87.327553][ T1423] get_signal+0x2671/0x26d0 [ 87.329009][ T1423] arch_do_signal_or_restart+0x8f/0x7c0 [ 87.330824][ T1423] exit_to_user_mode_loop+0x85/0x130 [ 87.332506][ T1423] do_syscall_64+0x426/0xfa0 [ 87.334004][ T1423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.336105][ T1423] [ 87.337088][ T1423] The buggy address belongs to the object at ffff888035f4d000 [ 87.337088][ T1423] which belongs to the cache kmalloc-cg-2k of size 2048 [ 87.341636][ T1423] The buggy address is located 32 bytes inside of [ 87.341636][ T1423] freed 2048-byte region [ffff888035f4d000, ffff888035f4d800) [ 87.346203][ T1423] [ 87.346972][ T1423] The buggy address belongs to the physical page: [ 87.349245][ T1423] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888035f49000 pfn:0x35f48 [ 87.353347][ T1423] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 87.356753][ T1423] memcg:ffff888052789601 [ 87.358515][ T1423] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 87.361492][ T1423] page_type: f5(slab) [ 87.362732][ T1423] raw: 00fff00000000240 ffff88801b44c140 ffffea0000c3da10 ffffea00014eea10 [ 87.365487][ T1423] raw: ffff888035f49000 0000000000080006 00000000f5000000 ffff888052789601 [ 87.368203][ T1423] head: 00fff00000000240 ffff88801b44c140 ffffea0000c3da10 ffffea00014eea10 [ 87.371073][ T1423] head: ffff888035f49000 0000000000080006 00000000f5000000 ffff888052789601 [ 87.374041][ T1423] head: 00fff00000000003 ffffea0000d7d201 00000000ffffffff 00000000ffffffff [ 87.376865][ T1423] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 87.379569][ T1423] page dumped because: kasan: bad access detected [ 87.381559][ T1423] page_owner tracks the page as allocated [ 87.383312][ T1423] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6042, tgid 6038 (syz.1.9), ts 56526985174, free_ts 50838143400 [ 87.390223][ T1423] post_alloc_hook+0x1af/0x220 [ 87.391734][ T1423] get_page_from_freelist+0x10a3/0x3a30 [ 87.393457][ T1423] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 87.395797][ T1423] alloc_pages_mpol+0x1fb/0x550 [ 87.397691][ T1423] new_slab+0x24a/0x360 [ 87.399037][ T1423] ___slab_alloc+0xd79/0x1a50 [ 87.400506][ T1423] __slab_alloc.constprop.0+0x63/0x110 [ 87.402256][ T1423] __kvmalloc_node_noprof+0x5aa/0x9c0 [ 87.403956][ T1423] alloc_fdtable+0x110/0x2d0 [ 87.405443][ T1423] dup_fd+0x83b/0xb90 [ 87.406738][ T1423] copy_process+0x2312/0x76a0 [ 87.408246][ T1423] kernel_clone+0xfc/0x930 [ 87.409622][ T1423] __do_sys_clone+0xce/0x120 [ 87.411405][ T1423] do_syscall_64+0xcd/0xfa0 [ 87.413352][ T1423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.415315][ T1423] page last free pid 28 tgid 28 stack trace: [ 87.417208][ T1423] __free_frozen_pages+0x7df/0x1160 [ 87.418905][ T1423] __folio_put+0x329/0x450 [ 87.420315][ T1423] skb_release_data+0x81a/0x9e0 [ 87.421870][ T1423] napi_consume_skb+0x1b7/0x220 [ 87.423399][ T1423] e1000_unmap_and_free_tx_resource+0x144/0x200 [ 87.425413][ T1423] e1000_clean+0x4a0/0x2670 [ 87.426879][ T1423] __napi_poll.constprop.0+0xba/0x550 [ 87.428581][ T1423] net_rx_action+0x97f/0xef0 [ 87.430168][ T1423] handle_softirqs+0x219/0x8e0 [ 87.431718][ T1423] run_ksoftirqd+0x3a/0x60 [ 87.433280][ T1423] smpboot_thread_fn+0x3f7/0xae0 [ 87.434992][ T1423] kthread+0x3c5/0x780 [ 87.436313][ T1423] ret_from_fork+0x675/0x7d0 [ 87.437882][ T1423] ret_from_fork_asm+0x1a/0x30 [ 87.439422][ T1423] [ 87.440210][ T1423] Memory state around the buggy address: [ 87.441984][ T1423] ffff888035f4cf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 87.444512][ T1423] ffff888035f4cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 87.447081][ T1423] >ffff888035f4d000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 87.449537][ T1423] ^ [ 87.451124][ T1423] ffff888035f4d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 87.453688][ T1423] ffff888035f4d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 87.456783][ T1423] ================================================================== [ 87.459421][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.461364][ T1423] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 87.464414][ T1423] CPU: 1 UID: 0 PID: 1423 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 87.467694][ T1423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.471610][ T1423] Call Trace: [ 87.472731][ T1423] [ 87.473719][ T1423] dump_stack_lvl+0x3d/0x1f0 [ 87.475288][ T1423] vpanic+0x640/0x6f0 [ 87.476648][ T1423] panic+0xca/0xd0 [ 87.478005][ T1423] ? __pfx_panic+0x10/0x10 [ 87.479476][ T1423] ? check_panic_on_warn+0x1f/0xb0 [ 87.481132][ T1423] check_panic_on_warn+0xab/0xb0 [ 87.482779][ T1423] end_report+0x107/0x170 [ 87.484192][ T1423] kasan_report+0xee/0x110 [ 87.485754][ T1423] ? handle_tx+0x5a5/0x630 [ 87.487358][ T1423] handle_tx+0x5a5/0x630 [ 87.488773][ T1423] dev_hard_start_xmit+0x97/0x740 [ 87.490443][ T1423] __dev_queue_xmit+0xa46/0x4490 [ 87.492065][ T1423] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.493793][ T1423] ? finish_task_switch.isra.0+0x221/0xc10 [ 87.495698][ T1423] ? rcu_is_watching+0x12/0xc0 [ 87.497327][ T1423] ? __pfx___dev_queue_xmit+0x10/0x10 [ 87.499135][ T1423] ? __schedule+0x11a3/0x5de0 [ 87.500641][ T1423] ? __lock_acquire+0xb8a/0x1c90 [ 87.502229][ T1423] ? __lock_acquire+0xb8a/0x1c90 [ 87.503855][ T1423] ? do_raw_spin_lock+0x12c/0x2b0 [ 87.505501][ T1423] ? find_held_lock+0x2b/0x80 [ 87.507136][ T1423] ? skb_dequeue+0x126/0x180 [ 87.509077][ T1423] ? find_held_lock+0x2b/0x80 [ 87.510668][ T1423] ? rcu_is_watching+0x12/0xc0 [ 87.512276][ T1423] tx+0xcc/0x190 [ 87.513483][ T1423] ? __pfx_tx+0x10/0x10 [ 87.514856][ T1423] kthread+0x1e4/0x3e0 [ 87.516362][ T1423] ? find_held_lock+0x2b/0x80 [ 87.518374][ T1423] ? __pfx_kthread+0x10/0x10 [ 87.520323][ T1423] ? __pfx_default_wake_function+0x10/0x10 [ 87.522767][ T1423] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.524974][ T1423] ? __kthread_parkme+0x19e/0x250 [ 87.526851][ T1423] ? __pfx_kthread+0x10/0x10 [ 87.528356][ T1423] kthread+0x3c5/0x780 [ 87.529685][ T1423] ? __pfx_kthread+0x10/0x10 [ 87.531180][ T1423] ? rcu_is_watching+0x12/0xc0 [ 87.532698][ T1423] ? __pfx_kthread+0x10/0x10 [ 87.534200][ T1423] ret_from_fork+0x675/0x7d0 [ 87.535814][ T1423] ? __pfx_kthread+0x10/0x10 [ 87.537386][ T1423] ret_from_fork_asm+0x1a/0x30 [ 87.539011][ T1423] [ 87.540803][ T1423] Kernel Offset: disabled [ 87.542240][ T1423] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:30:05 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffff888033aaafd8 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8e3c4760 RDI=ffff888033aaafd8 RBP=ffffffff8e3c4760 RSP=ffffc9000292f6f0 R8 =0000000000000006 R9 =0000000000001000 R10=0000000000000000 R11=0000000000000001 R12=ffff888033aaa480 R13=ffff888033aaafb0 R14=00000000ffffffff R15=0000000000000001 RIP=ffffffff8b60c690 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa446b17d60 CR3=000000004e315000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa445fba6c3 00007fa445fba6c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd946a6910 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa445e15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa445e1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa445e15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa445e1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa445e150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa445e151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852983d5 RDI=ffffffff9addb780 RBP=ffffffff9addb740 RSP=ffffc90006def448 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9addb740 R15=ffffffff85298370 RIP=ffffffff852983ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6b05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9744e23d58 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73c471af4143b228 377114e4f4121fcd ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 59e14a02ec401081 1939d36e1db497f5 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 62718be1cd734d0f 8cee42bd082aa544 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e3011aecd610fa12 93109295a032cbf1 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001840 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ef240000fb5a0000 002c504b000000b0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 283a00000a0b0000 ad7b0000dd4e0000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7e960000002c5006 002c4fcd002c4f9a ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 002c5087002c508c b02a0000002c4f14 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 02208cf9743eb4e7 08a7b2322f7ea780 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5ba882a24d5733f6 b09bdb4c99056f4c ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97441ba4a8 00007f97441ba4a0 00007f97441ba498 00007f97441ba470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9744d1d100 00007f97441ba460 00007f97441ba478 00007f97441ba4c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97441ba4b8 00007f97441ba4b0 00007f97441ba4a8 00007f97441ba4a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000046 RBX=ffff8880350acf00 RCX=ffff8880316d2fd8 RDX=ffff888031582d08 RSI=0000000000000100 RDI=ffff8880350acf00 RBP=ffff8880350acf00 RSP=ffffc900034ef920 R8 =0000000000000900 R9 =1ffff11003956cf6 R10=0000000000000000 R11=0000000000000001 R12=ffff8880350ad000 R13=0000000000000202 R14=ffff8880316d2480 R15=ffff88801cab6780 RIP=ffffffff81987efb RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555b0bb3060 CR3=000000002a368000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055950d658600 000055950d658600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2a2ace00 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 75636578652d7a79 73223d6d6d6f6320 383039353d646970 2020726f66207d20 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6873733a725f6d65 747379733a755f6d 65747379733d7478 65746e6f63742074 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f6d64617379733a 725f6d6461737973 3a746f6f723d7478 65746e6f63732038 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3336363d6f6e6920 2273666570697022 3d76656420225d38 3336365b3a657069 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 70223d6874617020 22726f7475636578 652d7a7973223d6d 6d6f632038303935 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=0000000000000000 RCX=ffffc90003bc76c4 RDX=1ffff11004fc2091 RSI=ffffffff8da06b82 RDI=ffff888027e10488 RBP=ffff888027e10000 RSP=ffffc90003bc76d0 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=0000000000012558 R12=ffff888027e10000 R13=ffffc90003bc7770 R14=ffffc90003bc7b00 R15=ffffc90003bc77a4 RIP=ffffffff81a2ed9c RFL=00000802 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555580c5c500 ffffffff 00c00000 GS =0000 ffff8880d6d05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdc26f17d60 CR3=0000000029c05000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100822 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=1e7b838acded63ac 99c8928b6f09458e 1e7b838acded63ac 99c8928b6f09458e 1e7b838acded63ac 99c8928b6f09458e 1e7b838acded63ac 99c8928b6f09458e ZMM18=3a968bd4b1e2e7d5 950b457193fff592 3a968bd4b1e2e7d5 950b457193fff592 3a968bd4b1e2e7d5 950b457193fff592 3a968bd4b1e2e7d5 950b457193fff592 ZMM19=fe03000000000000 0000000000000004 fe03000000000000 0000000000000003 fe03000000000000 0000000000000002 fe03000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01fc000002100000 02240000023c0000 0254000002780000 028c000002b00000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 001e000000000000 0000000000000000 00210000000002eb ae40000000180000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00200000000e0014 000c000000080004 0020000e00000000 0000000000000000 ZMM24=93fff59293fff592 93fff59293fff592 93fff59293fff592 93fff59293fff592 93fff59293fff592 93fff59293fff592 93fff59293fff592 93fff59293fff592 ZMM25=950b4571950b4571 950b4571950b4571 950b4571950b4571 950b4571950b4571 950b4571950b4571 950b4571950b4571 950b4571950b4571 950b4571950b4571 ZMM26=b1e2e7d5b1e2e7d5 b1e2e7d5b1e2e7d5 b1e2e7d5b1e2e7d5 b1e2e7d5b1e2e7d5 b1e2e7d5b1e2e7d5 b1e2e7d5b1e2e7d5 b1e2e7d5b1e2e7d5 b1e2e7d5b1e2e7d5 ZMM27=3a968bd43a968bd4 3a968bd43a968bd4 3a968bd43a968bd4 3a968bd43a968bd4 3a968bd43a968bd4 3a968bd43a968bd4 3a968bd43a968bd4 3a968bd43a968bd4 ZMM28=000000800000007f 0000007e0000007d 0000007c0000007b 0000007a00000079 0000007800000077 0000007600000075 0000007400000073 0000007200000071 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=fb030000fb030000 fb030000fb030000 fb030000fb030000 fb030000fb030000 fb030000fb030000 fb030000fb030000 fb030000fb030000 fb030000fb030000