last executing test programs: 912.146299ms ago: executing program 3 (id=813): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xf93, 0x80, 0x8, 0x5}}}}]}, 0x48}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x8, 0xa}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x1, 0x70bd25, 0xa5dfdbfb, {0x0, 0x0, 0x0, r5, 0xa2e00, 0x16215}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c041}, 0x2) 813.361108ms ago: executing program 3 (id=814): r0 = socket(0x2, 0x80805, 0x0) (async) r1 = gettid() (async) r2 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) sendmmsg$inet(r2, &(0x7f0000000b40)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)="c1", 0x1}], 0x1}}], 0x1, 0x0) (async) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0) (async) timer_create(0x6, &(0x7f0000000240)={0x0, 0x28, 0x1, @tid=r1}, &(0x7f0000000280)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f00000", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) pselect6(0x40, &(0x7f0000000040)={0x6, 0x133, 0x80, 0xb68f, 0x6f0480c4, 0x6, 0xd2, 0x8}, &(0x7f0000000340)={0x5, 0x1000, 0x6f, 0x5, 0x3ff, 0x7, 0x2, 0x2}, &(0x7f0000000140)={0x8, 0x8001, 0x3, 0x7, 0x8, 0x9b6, 0x7}, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x3]}, 0x8}) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0xa0) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f0000000400)={0x53, 0x54, 0xcd4b, {0x3, 0x23}, {0x3, 0x5}, @const={0x800, {0x5, 0x22, 0x80, 0x4}}}) (async) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000440)="896e6ffac58370bf657f0500000000cbf749488bf057", 0x16}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[], 0x20}}], 0x2, 0x20000000) (async) r8 = socket(0xa, 0x6, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000480)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000580)=0xe8) fstat(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r8, r9, r10) syz_open_dev$dri(&(0x7f00000002c0), 0x7fffffff, 0x220101) 809.912221ms ago: executing program 3 (id=816): ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x2002}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) io_uring_enter(r0, 0x567, 0x0, 0xe00000000000000, 0x0, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000010000000800000002"], 0x48) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r5}, 0x20) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902"], 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) (async) r7 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7730, 0x1000, 0x0, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r10 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r10, 0x0, 0x484, &(0x7f0000001980)=""/236, &(0x7f0000000080)=0x18) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) (async) io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f00000000c0)=[{r5, 0x2000}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) (async) r11 = dup(r6) ioctl$BLKGETDISKSEQ(r11, 0x80081280, &(0x7f00000001c0)) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028014000300e1a0b063bae294fe8f45a9b02fdf068408000240000000010d000100434f4e4e4d41524b000000000900010073797a30000000000900020073797a32"], 0x98}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r3}, 0x10) (async) madvise(&(0x7f000094c000/0x3000)=nil, 0x3000, 0x2) 721.644554ms ago: executing program 3 (id=818): r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="07e326bd7000ffdbdf2502"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000000)={0x1, 0x4, [0xf86, 0x210, 0x7fd, 0x39a]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) write$qrtrtun(r2, &(0x7f0000000100)="c2ff4f8d5db2268e", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x2, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x7], 0x0, 0x0, 0x1}}, 0x87) chdir(&(0x7f0000000180)='./file0\x00') 662.552192ms ago: executing program 0 (id=819): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x7800, 0x7, 0x5, 0x9f3, {{0x9, 0x4, 0x2, 0x6, 0x24, 0x67, 0x0, 0x8, 0x4, 0x0, @remote, @private=0xa010101, {[@timestamp={0x44, 0x10, 0x3b, 0x0, 0x5, [0x6, 0xe, 0x6]}]}}}}}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x4, 0x3, 0xffff, @vifc_lcl_ifindex=r0, @local}, 0x10) syz_emit_ethernet(0x1012, &(0x7f0000000100)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@generic={0x8811, "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"}}}, &(0x7f0000001140)={0x2, 0x1, [0xdf2, 0xaf3, 0xaeb, 0xb04]}) 662.157102ms ago: executing program 3 (id=820): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}], 0x1c) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000001000370401000000f8dbdf2500000000", @ANYRES32=r2, @ANYBLOB="890c040031810000300012800900010069706970000000002000028008000200ac1414bb06000f000200000004001300050005000100000008001f0006"], 0x58}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000001680)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @loopback}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000500)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x2, 0x4040880) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000d40)={0x8, 0x8, 0x6, 0x3, 0x3, 0x0, [{0x7, 0x8001, 0xffffffffffffffc0, '\x00', 0x2180}, {0x5, 0x3, 0xfffffffeffffffff, '\x00', 0x200}, {0xfffffffffffffffd, 0x9, 0x8}]}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000d00)='rxrpc_local\x00', r9}, 0x18) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)="61b15e9a265bbbce30c199089a6084f7e59386a6e9540380c1df11d49fd6ab872184ac2b1d52e188d9e57d04b32bfa820220ba31655c21f0608d2619005c34caa65cde61eb36cb9876c3b005", 0x4c}, {&(0x7f00000001c0)="1f2cd75fcc6459f0d7a908bc3523bdc8afe6a686f4c45be6f44f5860a6cc75be110e3e59377b1594ed56ddbce5a2196a90a3a4ed1fb9d19624d7c98817e4efe211675089d39472fbc72378f0a354a1fb582d277d71bbcf2b7be2999a6e61f8923ae97ed57dd9aab7845a29fb22d13b5dc51f4bc0cf8d498c6c3f74f87ace4fa2b6b9f94bd0eee4579feba2ead4ac8e5ba255292260684e1865c0f207d8c8359fa670582541db1cf4b41110439997a7b27266d3154d96cb3c74bfd85d1ade1663e6fc4aa4f93f90b235876b0247647c07aa01211bbca7a731bb191c", 0xdb}, {&(0x7f0000000340)="1214e37645d17fe5a68447bace848590787fb5515ae009cc0c1f9e5487aafc711cae0dec2cf69273c748b2a1ccb38fb57904424d7d597ca856e6a17aef1b5bc084f5f52f913ea14379df7bfd20e84fa5b5df9e5b67aad6e282aa1e422f196b2965d08c8485c84f6b6f381afe9d566d4133292656a45c1c55abb7e03ee8e89859374f5b5f63155e0b2540db770faeff2a78ef3e94c950a2f590d0e9400af37ccb396206b88d3c062eb1b4663a37c8f317d57e525abe39ef9d8581322fe3b4e1d027f6e0041960eb793a94a59ff3ec34cae73579c1f3f3dcaaca8766e4fc86f786d455ceecc61c3d", 0xe7}, {&(0x7f0000000440)="6e31d58654edd69daf028322be8c73962fb852ed18af8204cf59ac1cb66958304426236069459d7a9c07bb319b38572764736fd467a1886b8dc8190d4dd6c51dcf0fa82fc1d11f680fbe4ac61dee2e9679743ad54eef3971ead5d42342d0abd6a7818bc3ba326c0b177adbbd5cf32502b8607a259c7a9f37e2bf16990f3203730bab68481ac85e3076e962e6b3853608aedeaea39bd91d5355fdb571c175458260e9fb1d0c5621e73501e557d9baf2199033d8b57a74e889fd7ced01ccb88a7e26c7fcf0959535ca05aaa6adf5d8c5d68b30c24fade2fae7e6a3e391ce61984da4ab1f860882cc802307828a1bba", 0xee}, {&(0x7f0000000540)="3e3a614d2d5d211ff79670cd86614fe18fe01e5732e49a751aad95aa87a8832ee22a4f55a38f8c57a84e5311a2e31382d2a32699a60b2559f97c0d840581bdf1362dfc289ee444ebf42dfd0cb82d0c3974b6096b0f53fbd160dd67a419133adca86dc30ed834056559624306ada0631ee577813acaf7", 0x76}, {&(0x7f00000002c0)="f191cbe90267efc391eaab", 0xb}], 0x6, &(0x7f0000000700)=[{0xf8, 0x10b, 0xfffffffc, "00b515fa54893ca020661b52a2c8925664ba36766b1ca2dff55a7bcee9a97b913d5815de5fa0d356321a185be7fd4f0457de904b1716c740879b539a6d17b01c275b305486e56426c4e34f63a8c055e0681afb66c24f8a72f5186510e0d429873091e10b203d8bffffe77918798b8d94b8e040d127e0861de19541fa802e86ed398bc51c9bb6e94839665d564a8feb835cea9194ea520256b4c45b3b0fbd66aa1d672a22e2e615e23df097241643658684f6c19ceb2972596887bf99275de52262c710d45e05dee80aa7d74093f135fbad8f406422e8977d1b82ba08816bb12ec1b0e476e3"}, {0xd0, 0x110, 0x799d2acc, "cec63d1f27a7fa231a468e1324fa2f4847e3573d8ee793f92bdce12c5c4da13d80871ca24aedf72b3821b271c21836d99e862a6769fce38812475ee450df2d9286c83575f79902c5ee03688913be894a9b6392f2849d7bc15552ce92d6b8a2fa673746fcfe36f7e7c26e54289efa30782bdcabb171267b4e6dbebe83cc2209ae34611ef3fcc1752cfc796287aba00e02270728c6def69b875a8bb4063c68ae744f1917a4ea14f2f1db7c118cdb18f21f5b9995f8af4c8c8a31c73f80b5"}, {0xe0, 0x1, 0xd16, "c162eb8f06c342c0f3acfc75222c7510659746708f2431f3559c4fb59008262123d15452e074dad93c952d27a22b3e3763960183653f71cd8c573c8ec4b48dc6a1bf976b363de227bfba2cabad7ce10c7cbb104d99148d32d7853a9ba0c10664519735c85cf53951e7fa09ee070a6514ca1f34d1f06adf04e08dab70aa84ec302cd5668baa2476f8d32706c283042ddec6f974bf8bd19a1dc0de4d27a1f32e12dab4928bcd9c4ff074e61c6451498a8a01aa8d5930a6e4487f8ba7cba14937173a50c12537e70ed535"}, {0x30, 0x10e, 0x910000, "3ecf694d794a35f5713cd02d979802fb347e3e68ce6455999cd2"}, {0x100, 0x109, 0x8, "c7b19c6a06f1c7b046390c834f9485ca8e2ab8017056551bcbcfd8ea2246108d92b61cada49652d1d235acbfe8dc9ed5b613e753b60da62e3ee4745f2ddc934af283de3bfb9d0eb368ae872158e36f942c25e8cad12c27438e2dd3280b9a1822b46b46a33ef19f1ed75d6d729211bf90e172e054f79a4c45c508c01721e965158ca90f8cd1c6f8e1e4b6664ee7ec5cae7beaee5309a1fe65984878eab418fbce00e69e4bbbf2ebf4a307d3b4f25a4ec5e121ccd00f3f370134c94e236c92bfd313908a6b3cfbc4c3c333cf2c0eafe9888b54b49196fc8a30efb8beb0434a2d0f28dcc8d47c83dd2568d4ccbcac30"}, {0xa0, 0x10d, 0x0, "cf91003a41307d745fb626c4eec471eb246e3f358e5c952e69161f5b298abee9baf46e6da243904640bb263164f701f529cef7e013e82507281a10a861aad2ba7f4785c6d78cc7b3c7a7ef646542e9be205e3f0ef4258be0d67cb5a57a7b5267b3cbc090a6228b1f34b50ab28b3317b64a516f931cb8968e45e0e05709d6380faefb8e60c82f607520"}, {0x68, 0x0, 0x0, "b7168cb7b8e746f067c77c46242834db3e28ea732f78b5f5c9386a9cd52aa0a96e44a77c7dc8abc87702388db794068c7894ea66a2273021a774ff5d29039f0b669caeda1ef59f355c2f96b32e12d30c9c5b5932"}, {0x40, 0x113, 0x9, "b7846b50ef932d09a79b76f79cb1396fe97d8a7e7aa7bd69b26378969d576ce1f1ae274ce1c6a940b1c69952ca1c"}, {0x90, 0x11, 0x8a1, "4ce421a20243a31769a72011cf21fbcad68b2683e835af7c369f525e0f82e431d86a538242ba4416f595171d418b365736dfd27940ea32fc13539173e7bc96422c99a1c04e0f242bed1949ecb77a08e14ee386233b91da2d452944628d85ed5ca70b455abb763d66051688083d500f1ef72d839a991076e80109"}], 0x5b0}, 0x4040000) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x7ff}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0xf}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) r13 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000e40), 0x0, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f00)=@newtclass={0x6c, 0x28, 0x4, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x8, 0xa3abc6bffba041f1}, {0xe, 0x8}, {0x1, 0x2}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x2c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x2}, @TCA_QFQ_LMAX={0x8, 0x2, 0x35}, @TCA_QFQ_LMAX={0x8, 0x2, 0x10000}, @TCA_QFQ_LMAX={0x8, 0x2, 0xfffffffc}, @TCA_QFQ_LMAX={0x8, 0x2, 0x7fff}]}}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_cbs={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 661.976925ms ago: executing program 0 (id=821): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x3c, r1, 0x1, 0xfffffffd, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000894}, 0x24048800) mknod$loop(&(0x7f0000000040)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000c4d83, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) finit_module(0xffffffffffffffff, &(0x7f00000004c0)='filter\x00', 0x1) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)={0x110, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_PEERS={0xe0, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1000}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00', 0x3}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x110}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r8 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) io_uring_enter(r8, 0x627, 0x4c1, 0x43, 0x0, 0x0) r9 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bb, 0x1, 0x5, 0xfe, 0x0, r8}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r12, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x2, 0x4, 0x3c8, 0x0, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x3e}, @dev, 0x0, 0xff0000ff, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x108}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) mlockall(0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0xc000000, 0x0, 0x0, 0x17}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_uring_enter(r9, 0x847ba, 0xe033, 0xe, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000d40)={0x2020}, 0x2020) 473.424231ms ago: executing program 3 (id=823): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) syz_usb_connect(0x3, 0x36, 0x0, 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) read$dsp(r0, &(0x7f00000000c0)=""/69, 0x45) 410.926461ms ago: executing program 1 (id=826): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r0, 0x1, 0x0) r1 = syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000000)={[0x10000, 0x6, 0x8, 0x1, 0xe5d, 0x5, 0x400, 0xfffffffffffffff9, 0x3, 0x7, 0x8, 0x7b000000000000, 0x7ff, 0x3, 0x7ff, 0xfffffffffffffff9], 0x80a0000, 0x25002}) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f00000010c0)={0xd52, 0x8000, 0x6, 0x0, 0x1fc, 0x7, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x5c, 0x3, 0x1, 0x4, 0x9c, 0xff}) 333.38252ms ago: executing program 2 (id=827): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@dellink={0x34, 0x11, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40400, 0x810}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r3, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c010}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0xc4, r3, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x10, 0xa, "fb92ff82bdca9bd282ac91c8"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "7916d2cd2fd7169010205512e79d"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4a5b14eab4"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "55d3cde34caa14939460"}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "3691180a0a"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0xb, 0x4, "e1341a1726a61b"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "3bb37fefd5"}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0xc040}, 0x14) 333.193619ms ago: executing program 1 (id=828): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="78224fc427ed619f319b73733d616e792c63616368653d66736361636865"]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4000000, 0x28011, r0, 0x4000) write$vhost_msg_v2(r0, &(0x7f0000000580)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) 283.797792ms ago: executing program 2 (id=829): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="62000000004000001c0012800900010069706970000000000c"], 0x3c}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000003c0)={0x0, 0x0, r1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r3 = socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}}}, 0x9) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 268.693659ms ago: executing program 1 (id=830): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="2d1104001c0012800b00010062726964676500000c0002800500160001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x50) 268.283169ms ago: executing program 2 (id=831): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x40, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x14, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331ba40dfabcc81c75"]}]}, 0x40}}, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='omfs\x00', 0x208000, 0x0) read$FUSE(r0, &(0x7f0000001500)={0x2020}, 0x2020) r2 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r2, 0x0) write$FUSE_NOTIFY_RESEND(r2, &(0x7f0000000040)={0x14}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r4, 0x21eae}}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x2f, 0xf0, 0x6, 0x5, 0x11, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x20, 0xa0000, 0x5}}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0x7, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0xf}, @cb_func={0x18, 0x7}]}, &(0x7f00000005c0)='GPL\x00', 0x8, 0x91, &(0x7f0000000600)=""/145, 0x693714a3d898869d, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x20, r2, 0x8, &(0x7f00000006c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x1, 0x9, 0x4}, 0x10, 0x0, r2, 0x7, &(0x7f0000000740)=[r2, r2, r2], &(0x7f0000000780)=[{0x2, 0x2, 0x5, 0x6}, {0x3, 0x1}, {0x2, 0x5, 0x9}, {0x5, 0x3, 0x0, 0x9}, {0x2, 0x5, 0xf, 0x6}, {0x2, 0x4, 0x3, 0x1}, {0x5, 0x4, 0x4, 0x8}], 0x10, 0x6, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtfilter={0x78, 0x2c, 0x800, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffe0}, {0x10, 0x9}, {0x3, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0xfff3}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0xf}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0xf}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c451}, 0x8000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000004000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005"], 0xfc}}, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='f2fs\x00', 0x1104040, 0x0) 183.116357ms ago: executing program 0 (id=832): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x800, 0x820) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) socket$nl_route(0x10, 0x3, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000380)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netstat\x00') write$nbd(r3, 0x0, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040), 0xc) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) close(0x4) 182.725239ms ago: executing program 1 (id=833): r0 = creat(&(0x7f0000000000)='./bus\x00', 0x8) mount(&(0x7f00000003c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000380)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x200000, &(0x7f0000000300)='trans=rdma,') getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x2, &(0x7f0000000380)=[{0x80, 0x7, 0x0, 0x2}, {0x16}]}) 180.348713ms ago: executing program 2 (id=834): r0 = inotify_init1(0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x4e20, 0x0, @mcast2}, r2}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, r4}}, 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x75, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x9, 0x11, 0x8, 0xa, 0xd2}}}, 0x14) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r5, &(0x7f0000000180)=""/174, 0xae) 102.59271ms ago: executing program 0 (id=835): mkdir(&(0x7f0000000040)='./file0\x00', 0x1e) (async) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x2000000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r0) 101.610919ms ago: executing program 2 (id=836): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01e5c300000000fb04003b1c2100080003"], 0x448}}, 0x0) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x24000420) r3 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x800, 0x1000, 0xffffffff, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x48e9, 0x8daf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3}) r6 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r6, 0x8b32, &(0x7f0000000040)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x74, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x3}, @IFLA_GRE_OKEY={0x8, 0x5, 0x846}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_LOCAL={0x8, 0x6, @private=0xa010101}, @IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_TTL={0x5}, @IFLA_GRE_TTL={0x5, 0x8, 0x81}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x74}}, 0x0) 101.37211ms ago: executing program 0 (id=837): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000f, 0x20010, r1, 0xa455a000) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40080, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030000", @ANYRES32=0x0, @ANYBLOB="0040000020020100990000000b00010069703667726500000c0002800600030081ff0000ba74cd5cebe4225fac111be10d78edf88c5bab9e0f177e8316ce64afcb165b8990cc9eee89aa74dca1a154825cfc72a2f72e411e2d50b013fe729ca8f49febcfd6daf236"], 0x3c}, 0x1, 0x0, 0x0, 0x4c040}, 0x800) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000030429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000001800128008000100707070000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001f"], 0x40}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="190000000000000067650000450c0d0000000000000000ef040019008400000d00000000000000b0680ed24e"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x10}, {0xffff, 0x1}, {0xe, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) dup(r0) (async) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000900)=ANY=[@ANYBLOB="1201410130f56920e8051903000010000904550280000000000000012c31db4441ced0d2859547d47ea06576c20f05aa35fda000489aa8d16c0cf01e03952ec5725a602d586a1bf4c693091c9dc44b63420dc5d1b0bca200346d5e64"], 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) (async) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r9, 0xc0bc5351, &(0x7f0000000000)={0x97, 0x0, 'client1\x00', 0x4, "e07fd187e36823c5", "d969d205213edd5063b70042ff0d395b1d75a50b05e5e7d5a8bd20f7a444d1e8", 0x2, 0x100}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="0100002010ff"}) (async) ioctl$RTC_RD_TIME(r8, 0x80247009, &(0x7f0000000080)) (async) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x178, &(0x7f0000000140)=ANY=[]) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x0, 0x0) (async) syz_usb_control_io(r7, &(0x7f0000000400)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0034527c1b78437ac306759edb3754057fb654295f163438368f2d6aeab4be8514d64d096b762a508252987b5dbb116a6d946c9a09ef3f1b46abdf43864f8398f9fbb391b9"], &(0x7f0000000240)=ANY=[@ANYRES16], &(0x7f0000000240)=ANY=[], &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x1, 0x7, 0x0, "f5e977af", "e1bca83f"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x60, 0x4, 0xfe, 0xfe, 0x65, 0x9}}}, &(0x7f0000000840)={0x84, &(0x7f0000000b40)=ANY=[@ANYBLOB="420a35000000880ddc20ed12c788a984173f5a3683d5abdddc56e47fc03112c5e68651b0f32e2700e37a3b20515db801105495a527d1dc", @ANYRES8=r2, @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES32=r4, @ANYBLOB="8e3eb4d48cb995bf10de7b7f78e7f2f3a06cbffaeac296d965491bd6dc4efba391eeff33aa925ab2069c7c3f2c5f1cdcff61c5a89750f17c1f1af9cf2972fa63113583b307c9c6bc6755eecef3454dcfe3aa6175958a7855261ff076561b92afbedf9e7fa7ec63c94e250c74caa161116a739bc10695bcbc15b9b5ea7f301e89080409d7427e65bf29f360da3a591e8c6c607e1fc0bcc1743d65df5ae11fbc88f6a8615158675ecba4181168944d14ea4e283526cee4705015f8b779419c6d367a", @ANYRES64=r5], &(0x7f0000000480)={0x0, 0xa, 0x1, 0xd9}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00'/14], &(0x7f0000000580)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000600)={0x40, 0xb, 0x2, "ac09"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x69dc}, &(0x7f0000000680)={0x40, 0x13, 0x6}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "b4b4"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x5}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x80}}) 53.72829ms ago: executing program 1 (id=838): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000240)="14550ba9f59fcf6f7c35b2c667360b84a45684192e9291ee8283c2defa1522ff1e4bf365802f9e821f2903ca689c9dfd043a6f1a", 0x34}, {0x0}], 0x2}}], 0x2, 0x40010) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000000c0)={0x800000, 0x1, 0x4, 0xfffffffe, 0x10fe, 0x1}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000140)={0x800, 0x1, {0x2, 0x2, 0x2800, 0x3, 0x3}, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) listen(r0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) (async) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000240)="14550ba9f59fcf6f7c35b2c667360b84a45684192e9291ee8283c2defa1522ff1e4bf365802f9e821f2903ca689c9dfd043a6f1a", 0x34}, {0x0}], 0x2}}], 0x2, 0x40010) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000000c0)={0x800000, 0x1, 0x4, 0xfffffffe, 0x10fe, 0x1}) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400000) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000140)={0x800, 0x1, {0x2, 0x2, 0x2800, 0x3, 0x3}, 0x2}) (async) 53.398343ms ago: executing program 2 (id=839): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r1) (async) close(r1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x49001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x8}, @IFLA_BR_PRIORITY={0x6, 0x6, 0xc45}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040850}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x49001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x8}, @IFLA_BR_PRIORITY={0x6, 0x6, 0xc45}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040850}, 0x0) socket(0x1a, 0x6, 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f513b"], 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0xd}}}}, ["", ""]}, 0x28}}, 0x20040000) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0xd}}}}, ["", ""]}, 0x28}}, 0x20040000) 1.320224ms ago: executing program 0 (id=840): r0 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)=ANY=[@ANYBLOB="030000006c6d6e6f70"], 0x18, 0xfffffffffffffffb) keyctl$revoke(0x3, r0) (async) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) (async) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) (async) r1 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r1, &(0x7f0000ff6000/0x4000)=nil, 0x400c) (async) mremap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ff9000/0x3000)=nil) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ff7000/0x2000)=nil) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) (async, rerun: 32) sendto$inet6(r6, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) (rerun: 32) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r8, 0x4008ae61, &(0x7f0000000000)={0xcddd, 0x10001}) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) (async) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000140)={0x1, 0x6, 0x2, 0x0}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) 0s ago: executing program 1 (id=841): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f0000000140)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="90000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="03010000208802005c005f736c6176650000000044000580050019000300000005001c000100000005002100010000000500e8190000000000050004000207000005001e000000000005000a00010000000500060001000000140003006272696467655f736c6176655f3000"], 0x90}, 0x1, 0x0, 0x0, 0x44801}, 0x48000) bpf$PROG_LOAD(0x5, &(0x7f0000002e40)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18001b0000000000000000000000000018110000", @ANYRES32, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 32) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r6}, 0x10) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 32) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r7}, 0x10) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x75, 0x0, 0x1, 0xffff, '\x00', 0x0, r5, 0x2, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r10 = open(&(0x7f0000000000)='./file0/file0\x00', 0xa02, 0x1) write$UHID_INPUT(r10, &(0x7f0000000840)={0x8, {"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", 0x1000}}, 0x1006) (async) ioctl$TCSETSW(r10, 0x5403, &(0x7f00000000c0)={0x10001, 0x1d943040, 0x1, 0xe, 0x1b, "3946464f9290b018baa3fc113b6649dbdd4117"}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'erspan0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x40, 0x7, 0x10000, 0x20be, {{0x1e, 0x4, 0x1, 0xa, 0x78, 0x66, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@ra={0x94, 0x4, 0x1}, @generic={0x82, 0x4, '46'}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0xb7, 0x0, 0x5, [0x2, 0x67, 0x10001, 0x6, 0x6]}, @ssrr={0x89, 0xf, 0xfa, [@remote, @dev={0xac, 0x14, 0x14, 0x2e}, @local]}, @timestamp={0x44, 0x8, 0xe4, 0x0, 0x1, [0xca2]}, @cipso={0x86, 0xa, 0xffffffffffffffff, [{0x1, 0x4, "ec0f"}]}, @lsrr={0x83, 0x17, 0xcc, [@empty, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x2e}, @empty]}, @noop]}}}}}) r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async, rerun: 32) r13 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r13, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) (async, rerun: 64) r14 = fcntl$dupfd(r13, 0x406, r12) (rerun: 64) setsockopt$ALG_SET_AEAD_AUTHSIZE(r14, 0x117, 0x5, 0x0, 0x5) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x20, &(0x7f00000007c0)={&(0x7f0000000900)=""/82, 0x52, 0x0, &(0x7f0000000980)=""/132, 0x84}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xd, 0x2b, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@alu={0x7, 0x1, 0x4, 0x3, 0x4, 0x7fffffffffffffd6, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x40}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xa}, @jmp={0x5, 0x1, 0x0, 0x9, 0x1, 0x50, 0x1}, @jmp={0x5, 0x0, 0x4, 0x6, 0x7, 0xfffffffffffffff4, 0x4}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x7fffffff, 0x1000, &(0x7f0000001e40)=""/4096, 0x41100, 0x21, '\x00', r11, @sock_ops=0x3, r14, 0x8, &(0x7f0000000580)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, r15, r7, 0x8, &(0x7f0000000c00)=[r1, r16, r17], &(0x7f0000000c40)=[{0x1, 0x5, 0x7, 0x7}, {0x0, 0x2, 0xa, 0x9}, {0x2, 0x2, 0xd, 0x3}, {0x0, 0x1, 0x7, 0x6}, {0x0, 0x1, 0xa, 0xb}, {0x4, 0x1, 0x7, 0x5}, {0x3, 0x5, 0x0, 0x6}, {0x0, 0x4, 0x6, 0xc}], 0x10, 0x0, @void, @value}, 0x94) (async) recvmsg(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x4, 0x8, 0x0, 'queue0\x00', 0x15b}) kernel console output (not intermixed with test programs): [ 44.058732][ T40] audit: type=1400 audit(1749778239.318:60): avc: denied { rlimitinh } for pid=5870 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.069396][ T40] audit: type=1400 audit(1749778239.318:61): avc: denied { siginh } for pid=5870 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:42617' (ED25519) to the list of known hosts. [ 45.181005][ T40] audit: type=1400 audit(1749778240.458:62): avc: denied { name_bind } for pid=5901 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.203984][ T40] audit: type=1400 audit(1749778240.488:63): avc: denied { write } for pid=5904 comm="sh" path="pipe:[5532]" dev="pipefs" ino=5532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.216465][ T40] audit: type=1400 audit(1749778240.498:64): avc: denied { execute } for pid=5904 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.225183][ T40] audit: type=1400 audit(1749778240.498:65): avc: denied { execute_no_trans } for pid=5904 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.208649][ T40] audit: type=1400 audit(1749778242.488:66): avc: denied { mounton } for pid=5904 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.211341][ T5904] cgroup: Unknown subsys name 'net' [ 47.385464][ T5904] cgroup: Unknown subsys name 'cpuset' [ 47.389577][ T5904] cgroup: Unknown subsys name 'rlimit' [ 47.586476][ T5929] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.232317][ T5904] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.293072][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 51.293083][ T40] audit: type=1400 audit(1749778246.568:80): avc: denied { execmem } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.502846][ T40] audit: type=1400 audit(1749778246.778:81): avc: denied { create } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.509543][ T40] audit: type=1400 audit(1749778246.778:82): avc: denied { create } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.515933][ T40] audit: type=1400 audit(1749778246.778:83): avc: denied { read write } for pid=5939 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.523393][ T40] audit: type=1400 audit(1749778246.788:85): avc: denied { open } for pid=5939 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.530679][ T40] audit: type=1400 audit(1749778246.778:84): avc: denied { read write } for pid=5938 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.536595][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.537658][ T5952] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.538099][ T5952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.538212][ T40] audit: type=1400 audit(1749778246.788:86): avc: denied { ioctl } for pid=5941 comm="syz-executor" path="socket:[6276]" dev="sockfs" ino=6276 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.542635][ T5953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.545138][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.553600][ T5953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.553651][ T5950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.553890][ T5950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.554350][ T5950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.556374][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.557203][ T5953] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.558261][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.558282][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.559432][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.559436][ T5950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.559507][ T5950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.562569][ T40] audit: type=1400 audit(1749778246.838:87): avc: denied { read } for pid=5938 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.565347][ T5952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.567630][ T40] audit: type=1400 audit(1749778246.838:88): avc: denied { open } for pid=5938 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.570037][ T5952] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.571595][ T40] audit: type=1400 audit(1749778246.848:89): avc: denied { mounton } for pid=5938 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.574014][ T5949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.574236][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.772438][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 51.832704][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 51.900531][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 51.931533][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.934004][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.936418][ T5938] bridge_slave_0: entered allmulticast mode [ 51.939080][ T5938] bridge_slave_0: entered promiscuous mode [ 51.946164][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.948414][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.950674][ T5938] bridge_slave_1: entered allmulticast mode [ 51.953348][ T5938] bridge_slave_1: entered promiscuous mode [ 52.026715][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.029034][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.031291][ T5940] bridge_slave_0: entered allmulticast mode [ 52.034047][ T5940] bridge_slave_0: entered promiscuous mode [ 52.070531][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.087851][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.090787][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.093879][ T5940] bridge_slave_1: entered allmulticast mode [ 52.097524][ T5940] bridge_slave_1: entered promiscuous mode [ 52.117301][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.202287][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.207411][ T5938] team0: Port device team_slave_0 added [ 52.222887][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 52.228537][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.232627][ T5938] team0: Port device team_slave_1 added [ 52.248225][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.250683][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.253940][ T5941] bridge_slave_0: entered allmulticast mode [ 52.256540][ T5941] bridge_slave_0: entered promiscuous mode [ 52.338000][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.340284][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.343696][ T5941] bridge_slave_1: entered allmulticast mode [ 52.346876][ T5941] bridge_slave_1: entered promiscuous mode [ 52.355110][ T5940] team0: Port device team_slave_0 added [ 52.427395][ T5940] team0: Port device team_slave_1 added [ 52.429828][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.432055][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.440068][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.445721][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.467874][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.470433][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.479096][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.484873][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.501350][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.503864][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.511682][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.570229][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.572445][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.580817][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.609374][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.612438][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.616140][ T5939] bridge_slave_0: entered allmulticast mode [ 52.620047][ T5939] bridge_slave_0: entered promiscuous mode [ 52.640049][ T5941] team0: Port device team_slave_0 added [ 52.646075][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.648339][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.650562][ T5939] bridge_slave_1: entered allmulticast mode [ 52.653241][ T5939] bridge_slave_1: entered promiscuous mode [ 52.684736][ T5941] team0: Port device team_slave_1 added [ 52.729631][ T5938] hsr_slave_0: entered promiscuous mode [ 52.732990][ T5938] hsr_slave_1: entered promiscuous mode [ 52.779584][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.784964][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.790476][ T5940] hsr_slave_0: entered promiscuous mode [ 52.792773][ T5940] hsr_slave_1: entered promiscuous mode [ 52.794848][ T5940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.797310][ T5940] Cannot create hsr debugfs directory [ 52.809573][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.811772][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.819926][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.824177][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.826342][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.834211][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.905738][ T5939] team0: Port device team_slave_0 added [ 52.943460][ T5939] team0: Port device team_slave_1 added [ 53.056080][ T5941] hsr_slave_0: entered promiscuous mode [ 53.059214][ T5941] hsr_slave_1: entered promiscuous mode [ 53.062101][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.068097][ T5941] Cannot create hsr debugfs directory [ 53.091800][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.094080][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.102027][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.106319][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.108509][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.116333][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.307999][ T5939] hsr_slave_0: entered promiscuous mode [ 53.310212][ T5939] hsr_slave_1: entered promiscuous mode [ 53.312234][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.314863][ T5939] Cannot create hsr debugfs directory [ 53.432304][ T5938] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.452149][ T5938] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.460012][ T5938] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.483434][ T5938] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.525943][ T5940] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.530424][ T5940] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.538252][ T5940] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.544213][ T5940] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.573215][ T63] Bluetooth: hci1: command tx timeout [ 53.578575][ T5939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.590493][ T5939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.603699][ T5939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.611523][ T5939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.652715][ T63] Bluetooth: hci0: command tx timeout [ 53.652756][ T5949] Bluetooth: hci2: command tx timeout [ 53.652803][ T5303] Bluetooth: hci3: command tx timeout [ 53.671729][ T5941] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.677289][ T5941] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.681414][ T5941] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.688145][ T5941] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.715142][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.734714][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.749664][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.752085][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.762350][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.764666][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.774097][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.797983][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.804461][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.817408][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.819672][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.829022][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.831857][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.841665][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.846600][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.848981][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.863751][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.866017][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.876726][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.890170][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.908505][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.911240][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.919519][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.921789][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.982016][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.005614][ T5938] veth0_vlan: entered promiscuous mode [ 54.011016][ T5938] veth1_vlan: entered promiscuous mode [ 54.039069][ T5938] veth0_macvtap: entered promiscuous mode [ 54.046478][ T5938] veth1_macvtap: entered promiscuous mode [ 54.056201][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.065246][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.072014][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.079769][ T5938] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.082805][ T5938] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.085521][ T5938] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.088203][ T5938] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.099570][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.111589][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.157119][ T5940] veth0_vlan: entered promiscuous mode [ 54.165143][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.167658][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.174695][ T5939] veth0_vlan: entered promiscuous mode [ 54.185337][ T5941] veth0_vlan: entered promiscuous mode [ 54.188404][ T5939] veth1_vlan: entered promiscuous mode [ 54.193471][ T5940] veth1_vlan: entered promiscuous mode [ 54.197298][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.198454][ T5941] veth1_vlan: entered promiscuous mode [ 54.199723][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.230173][ T5939] veth0_macvtap: entered promiscuous mode [ 54.235685][ T5938] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.242057][ T5939] veth1_macvtap: entered promiscuous mode [ 54.246811][ T5941] veth0_macvtap: entered promiscuous mode [ 54.255343][ T5941] veth1_macvtap: entered promiscuous mode [ 54.261216][ T5940] veth0_macvtap: entered promiscuous mode [ 54.266581][ T5940] veth1_macvtap: entered promiscuous mode [ 54.281545][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.290001][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.294043][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.297659][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.305712][ T5939] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.308472][ T5939] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.311177][ T5939] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.314437][ T5939] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.319315][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.324362][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.330350][ T5940] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.333523][ T5940] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.336989][ T5940] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.340357][ T5940] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.347090][ T5941] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.350490][ T5941] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.354367][ T5941] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.357733][ T5941] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.400434][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.408255][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.423027][ T6031] syz.0.5 (6031): /proc/6030/oom_adj is deprecated, please use /proc/6030/oom_score_adj instead. [ 54.445976][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.449079][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.451091][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.455394][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.485260][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.488419][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.515596][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.517278][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.519684][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.521367][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.527973][ T6035] netlink: 'syz.1.2': attribute type 2 has an invalid length. [ 54.531126][ T6035] netlink: 'syz.1.2': attribute type 2 has an invalid length. [ 54.591683][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.604329][ T6035] libceph: resolve ' [ 54.604329][ T6035] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 54.604329][ T6035] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 54.779071][ T6053] sctp: [Deprecated]: syz.1.7 (pid 6053) Use of struct sctp_assoc_value in delayed_ack socket option. [ 54.779071][ T6053] Use struct sctp_sack_info instead [ 54.831180][ T6047] infiniband syz1: set active [ 54.833980][ T6047] infiniband syz1: added syz_tun [ 54.842543][ T52] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.851115][ T6056] Bluetooth: MGMT ver 1.23 [ 54.856308][ T6047] RDS/IB: syz1: added [ 54.857949][ T6047] smc: adding ib device syz1 with port count 1 [ 54.860264][ T6047] smc: ib device syz1 port 1 has pnetid [ 55.025873][ T52] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 55.029367][ T52] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 55.032717][ T52] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 55.035716][ T52] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.044155][ T6041] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 55.052795][ T52] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 55.132223][ T6067] overlayfs: overlapping lowerdir path [ 55.281042][ T6000] usb 8-1: USB disconnect, device number 2 [ 55.450093][ T6084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18'. [ 55.652734][ T5949] Bluetooth: hci1: command tx timeout [ 55.726022][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'. [ 55.732984][ T5949] Bluetooth: hci3: command tx timeout [ 55.733014][ T5303] Bluetooth: hci0: command tx timeout [ 55.735783][ T63] Bluetooth: hci2: command tx timeout [ 56.003615][ T6110] rdma_rxe: rxe_newlink: failed to add syz_tun [ 56.010571][ T6110] sctp: [Deprecated]: syz.3.26 (pid 6110) Use of struct sctp_assoc_value in delayed_ack socket option. [ 56.010571][ T6110] Use struct sctp_sack_info instead [ 56.210373][ T6125] capability: warning: `syz.2.33' uses deprecated v2 capabilities in a way that may be insecure [ 56.313406][ T40] kauditd_printk_skb: 94 callbacks suppressed [ 56.313422][ T40] audit: type=1400 audit(1749778251.598:184): avc: denied { watch } for pid=6128 comm="syz.2.35" path="/12/control" dev="tmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.360413][ T6131] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 56.364146][ T6131] overlayfs: missing 'lowerdir' [ 56.409935][ T40] audit: type=1400 audit(1749778251.688:185): avc: denied { setopt } for pid=6132 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.418226][ T40] audit: type=1400 audit(1749778251.688:186): avc: denied { getopt } for pid=6132 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.426289][ T40] audit: type=1400 audit(1749778251.688:187): avc: denied { create } for pid=6132 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 56.461518][ T6136] netlink: 27 bytes leftover after parsing attributes in process `syz.2.38'. [ 56.729229][ T6144] Zero length message leads to an empty skb [ 56.764146][ T40] audit: type=1400 audit(1749778252.048:188): avc: denied { ioctl } for pid=6147 comm="syz.0.43" path="socket:[8978]" dev="sockfs" ino=8978 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.775273][ T40] audit: type=1400 audit(1749778252.048:189): avc: denied { write } for pid=6147 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.800657][ T6142] kvm: kvm [6141]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x9bf9 [ 56.825965][ T6142] kvm: kvm [6141]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xc0cb [ 56.837495][ T6142] kvm_intel: kvm [6141]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xd639 [ 56.838449][ T40] audit: type=1400 audit(1749778252.118:190): avc: denied { read } for pid=6152 comm="syz.0.45" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 56.850558][ T40] audit: type=1400 audit(1749778252.118:191): avc: denied { open } for pid=6152 comm="syz.0.45" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 56.852905][ T6142] kvm_intel: kvm [6141]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x6449 [ 56.951582][ T40] audit: type=1400 audit(1749778252.228:192): avc: denied { read } for pid=6157 comm="syz.3.47" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 56.964624][ T40] audit: type=1400 audit(1749778252.228:193): avc: denied { open } for pid=6157 comm="syz.3.47" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 57.131497][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.50'. [ 57.136328][ T6175] netlink: 44 bytes leftover after parsing attributes in process `syz.0.50'. [ 57.346524][ T6195] fuse: Bad value for 'fd' [ 57.482700][ T6000] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 57.632686][ T61] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 57.643347][ T6000] usb 5-1: Using ep0 maxpacket: 16 [ 57.646267][ T6000] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 57.649259][ T6000] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 170, changing to 11 [ 57.653057][ T6000] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 34661, setting to 1024 [ 57.657891][ T6000] usb 5-1: config 0 interface 0 has no altsetting 0 [ 57.661576][ T6000] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 57.665161][ T6000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.667898][ T6000] usb 5-1: Product: syz [ 57.669311][ T6000] usb 5-1: Manufacturer: syz [ 57.670886][ T6000] usb 5-1: SerialNumber: syz [ 57.674821][ T6000] usb 5-1: config 0 descriptor?? [ 57.677740][ T6190] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 57.733050][ T63] Bluetooth: hci1: command tx timeout [ 57.785025][ T61] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 57.790571][ T61] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.793911][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 57.796467][ T61] usb 7-1: SerialNumber: syz [ 57.812604][ T63] Bluetooth: hci2: command tx timeout [ 57.812621][ T5303] Bluetooth: hci3: command tx timeout [ 57.823476][ T5303] Bluetooth: hci0: command tx timeout [ 57.882733][ T6190] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 57.888255][ T6000] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input5 [ 58.049340][ T6224] xt_CT: You must specify a L4 protocol and not use inversions on it [ 58.052636][ T6224] netlink: 'syz.3.61': attribute type 1 has an invalid length. [ 58.055169][ T6224] netlink: 224 bytes leftover after parsing attributes in process `syz.3.61'. [ 58.206306][ T6244] netlink: 164 bytes leftover after parsing attributes in process `syz.3.62'. [ 58.357681][ T6267] netlink: 20 bytes leftover after parsing attributes in process `syz.3.66'. [ 58.361679][ T6267] netlink: 'syz.3.66': attribute type 7 has an invalid length. [ 58.365551][ T6267] netlink: 'syz.3.66': attribute type 8 has an invalid length. [ 59.813343][ T5303] Bluetooth: hci1: command tx timeout [ 59.892547][ T5303] Bluetooth: hci3: command tx timeout [ 59.902693][ T5303] Bluetooth: hci0: command tx timeout [ 59.903465][ T63] Bluetooth: hci2: command tx timeout [ 60.240536][ T5946] usb 5-1: USB disconnect, device number 2 [ 60.401183][ T61] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 60.407992][ T61] usb 7-1: USB disconnect, device number 2 [ 60.433510][ T6281] netlink: 36 bytes leftover after parsing attributes in process `syz.2.70'. [ 60.436565][ T6281] netlink: 36 bytes leftover after parsing attributes in process `syz.2.70'. [ 60.489674][ T6291] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 60.492612][ T6291] netlink: 'syz.3.74': attribute type 1 has an invalid length. [ 60.495161][ T6291] netlink: 56 bytes leftover after parsing attributes in process `syz.3.74'. [ 60.505137][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.75'. [ 60.507347][ T6297] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 60.507710][ T6291] netlink: 'syz.3.74': attribute type 1 has an invalid length. [ 60.507721][ T6291] netlink: 56 bytes leftover after parsing attributes in process `syz.3.74'. [ 60.579288][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'. [ 60.782617][ T6258] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 60.832561][ T6000] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 60.944203][ T6258] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 60.948792][ T6258] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 60.952862][ T6258] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 60.956462][ T6258] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.962717][ T6000] usb 6-1: device descriptor read/64, error -71 [ 60.963091][ T6302] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 60.971542][ T6258] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 61.186230][ T60] usb 8-1: USB disconnect, device number 3 [ 61.203011][ T6000] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 61.342972][ T6000] usb 6-1: device descriptor read/64, error -71 [ 61.358615][ T6316] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.393483][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 61.393500][ T40] audit: type=1400 audit(1749778256.678:230): avc: denied { read write } for pid=6321 comm="syz.0.82" name="rdma_cm" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 61.397037][ T6322] 9pnet: Limiting 'msize' to 512000 as this is the maximum supported by transport virtio [ 61.406318][ T40] audit: type=1400 audit(1749778256.678:231): avc: denied { open } for pid=6321 comm="syz.0.82" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 61.426229][ T40] audit: type=1400 audit(1749778256.708:232): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 61.453362][ T6000] usb usb6-port1: attempt power cycle [ 61.528083][ T40] audit: type=1400 audit(1749778256.808:233): avc: denied { map } for pid=6323 comm="syz.0.83" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.535326][ T40] audit: type=1400 audit(1749778256.808:234): avc: denied { execute } for pid=6323 comm="syz.0.83" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.546480][ T40] audit: type=1400 audit(1749778256.828:235): avc: denied { ioctl } for pid=6323 comm="syz.0.83" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.559513][ T6324] netlink: 20 bytes leftover after parsing attributes in process `syz.0.83'. [ 61.640743][ T40] audit: type=1400 audit(1749778256.918:236): avc: denied { ioctl } for pid=6328 comm="syz.0.85" path="socket:[10824]" dev="sockfs" ino=10824 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 61.652907][ T6329] syz.0.85 uses obsolete (PF_INET,SOCK_PACKET) [ 61.656326][ T6329] ======================================================= [ 61.656326][ T6329] WARNING: The mand mount option has been deprecated and [ 61.656326][ T6329] and is ignored by this kernel. Remove the mand [ 61.656326][ T6329] option from the mount to silence this warning. [ 61.656326][ T6329] ======================================================= [ 61.667583][ T40] audit: type=1400 audit(1749778256.948:237): avc: denied { read } for pid=6328 comm="syz.0.85" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 61.674751][ T40] audit: type=1400 audit(1749778256.948:238): avc: denied { open } for pid=6328 comm="syz.0.85" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 61.682057][ T40] audit: type=1400 audit(1749778256.948:239): avc: denied { ioctl } for pid=6328 comm="syz.0.85" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 61.792858][ T6000] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 61.796602][ T6336] netlink: 44 bytes leftover after parsing attributes in process `syz.0.88'. [ 61.829096][ T6000] usb 6-1: device descriptor read/8, error -71 [ 61.917616][ T6345] netlink: 16 bytes leftover after parsing attributes in process `syz.3.90'. [ 61.921461][ T6345] ip_vti0: Master is either lo or non-ether device [ 62.084721][ T6000] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 62.105136][ T6000] usb 6-1: device descriptor read/8, error -71 [ 62.187100][ T6353] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 62.191194][ T81] Bluetooth: hci4: Frame reassembly failed (-84) [ 62.212996][ T6000] usb usb6-port1: unable to enumerate USB device [ 62.240656][ T6363] netlink: 'syz.3.95': attribute type 11 has an invalid length. [ 62.317293][ T6369] tipc: Started in network mode [ 62.318840][ T6369] tipc: Node identity ac1414aa, cluster identity 4711 [ 62.321666][ T6369] tipc: Enabled bearer , priority 10 [ 62.369831][ T6373] netlink: 36 bytes leftover after parsing attributes in process `syz.2.100'. [ 62.452670][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 62.452933][ T5948] Bluetooth: hci2: command 0x0405 tx timeout [ 62.584320][ T6378] netlink: 28 bytes leftover after parsing attributes in process `syz.2.101'. [ 62.590040][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.101'. [ 62.608378][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 62.613308][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 62.617467][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 62.621329][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.633014][ T6360] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 62.636949][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 62.858770][ T24] usb 5-1: USB disconnect, device number 3 [ 62.863120][ T6386] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 63.069658][ T6395] process 'syz.2.107' launched '/dev/fd/3' with NULL argv: empty string added [ 63.148567][ T5949] block nbd3: Receive control failed (result -104) [ 63.149512][ T6369] block nbd3: shutting down sockets [ 63.323361][ T60] tipc: Node number set to 2886997162 [ 63.369634][ T6401] bridge_slave_0: left allmulticast mode [ 63.371460][ T6401] bridge_slave_0: left promiscuous mode [ 63.373607][ T6401] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.379530][ T6401] bridge_slave_1: left allmulticast mode [ 63.381869][ T6401] bridge_slave_1: left promiscuous mode [ 63.384387][ T6401] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.391803][ T6401] bond0: (slave bond_slave_0): Releasing backup interface [ 63.400227][ T6401] bond0: (slave bond_slave_1): Releasing backup interface [ 63.411226][ T6401] team0: Port device team_slave_0 removed [ 63.417837][ T6404] netlink: 'syz.3.109': attribute type 10 has an invalid length. [ 63.419027][ T6401] team0: Port device team_slave_1 removed [ 63.423384][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.427172][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.430758][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.433420][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.458349][ T6404] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 63.650460][ T6418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.654429][ T6418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.992623][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 64.040772][ T6433] netlink: 'syz.2.119': attribute type 1 has an invalid length. [ 64.103394][ T6258] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 64.163781][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.168045][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.171745][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 64.176783][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 64.180319][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.191029][ T24] usb 6-1: config 0 descriptor?? [ 64.212633][ T5949] Bluetooth: hci4: command 0x1003 tx timeout [ 64.216119][ T5303] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 64.264260][ T6258] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 64.268786][ T6258] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 64.273412][ T6258] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 64.276782][ T6258] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.281470][ T6431] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 64.286543][ T6258] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 64.401288][ T24] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 64.409055][ T24] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 64.502800][ T24] usb 5-1: USB disconnect, device number 4 [ 64.794772][ T9] usb 6-1: USB disconnect, device number 6 [ 65.178110][ T6460] afs: Unknown parameter 'autoceµi' [ 65.290309][ T6465] bridge0: port 3(syz_tun) entered blocking state [ 65.294206][ T6465] bridge0: port 3(syz_tun) entered disabled state [ 65.298966][ T6465] syz_tun: entered allmulticast mode [ 65.301819][ T6465] syz_tun: entered promiscuous mode [ 65.304480][ T6465] bridge0: port 3(syz_tun) entered blocking state [ 65.307353][ T6465] bridge0: port 3(syz_tun) entered forwarding state [ 65.324958][ T6465] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 65.445448][ T6477] netlink: 'syz.1.133': attribute type 62 has an invalid length. [ 65.452555][ T6473] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4090ae82, magic ae != 6b] [ 65.488951][ T6482] openvswitch: netlink: Flow key attribute not present in set flow. [ 65.584256][ T6492] loop6: detected capacity change from 0 to 63 [ 65.590646][ T5951] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.597656][ T6492] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 65.601301][ T6492] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 65.605052][ T6492] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 65.608255][ T6492] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 65.611685][ T6492] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 65.615769][ T6492] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 65.619922][ T6492] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 65.623234][ T6492] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 65.702582][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 65.853754][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 65.857746][ T9] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 65.860637][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 65.863800][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.867913][ T6479] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 65.871830][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 65.932636][ T6258] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 65.948142][ T6508] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.987575][ T6508] __nla_validate_parse: 1 callbacks suppressed [ 65.987590][ T6508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 66.084487][ T34] usb 7-1: USB disconnect, device number 3 [ 66.102528][ T6258] usb 6-1: Using ep0 maxpacket: 32 [ 66.105662][ T6258] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.108864][ T6258] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.111755][ T6258] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 66.114673][ T6258] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.118802][ T6258] usb 6-1: config 0 descriptor?? [ 66.541712][ T40] kauditd_printk_skb: 60 callbacks suppressed [ 66.541727][ T40] audit: type=1400 audit(1749778261.818:300): avc: denied { write } for pid=6531 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 66.592917][ T6258] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 66.647318][ T5976] usb 6-1: USB disconnect, device number 7 [ 66.730501][ T40] audit: type=1400 audit(1749778262.008:301): avc: denied { ioctl } for pid=6553 comm="syz.3.156" path="socket:[9924]" dev="sockfs" ino=9924 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.737480][ T6568] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(75) [ 66.741038][ T6568] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 66.745401][ T6568] vhci_hcd vhci_hcd.0: Device attached [ 66.922698][ T24] vhci_hcd: vhci_device speed not set [ 66.992601][ T24] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 67.032572][ T60] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 67.083985][ T6590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.166'. [ 67.123432][ T6590] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6590 comm=syz.0.166 [ 67.208245][ T60] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 67.211691][ T60] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 67.215068][ T60] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 67.217963][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.227253][ T6577] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 67.231826][ T60] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 67.316129][ T40] audit: type=1400 audit(1749778262.598:302): avc: denied { setopt } for pid=6597 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.320027][ T6598] tipc: Started in network mode [ 67.325886][ T6598] tipc: Node identity 4, cluster identity 4711 [ 67.327909][ T6598] tipc: Node number set to 4 [ 67.371982][ T6570] vhci_hcd: connection reset by peer [ 67.377074][ T46] vhci_hcd: stop threads [ 67.380433][ T46] vhci_hcd: release socket [ 67.383200][ T46] vhci_hcd: disconnect device [ 67.384644][ T6599] warning: `syz.0.168' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 67.406534][ T6601] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 67.449860][ T9] usb 7-1: USB disconnect, device number 4 [ 67.577327][ T40] audit: type=1400 audit(1749778262.858:303): avc: denied { write } for pid=6611 comm="syz.3.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 67.785637][ T40] audit: type=1400 audit(1749778263.068:304): avc: denied { create } for pid=6625 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 67.853811][ T6621] /dev/sr0: Can't open blockdev [ 67.933346][ T6627] /dev/sr0: Can't open blockdev [ 68.013036][ T40] audit: type=1400 audit(1749778263.288:305): avc: denied { setopt } for pid=6646 comm="syz.2.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.033891][ T40] audit: type=1400 audit(1749778263.318:306): avc: denied { read } for pid=6634 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.106075][ T6653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.184'. [ 68.109298][ T6653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.184'. [ 68.211515][ T6662] FAT-fs (nullb0): bogus number of reserved sectors [ 68.215296][ T6662] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 68.293021][ T5976] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 68.454688][ T5976] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 68.458028][ T5976] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 68.461033][ T5976] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 68.463898][ T5976] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.467985][ T6651] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 68.472428][ T5976] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 68.502579][ T6258] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 68.530626][ T40] audit: type=1400 audit(1749778263.808:307): avc: denied { name_bind } for pid=6670 comm="syz.3.190" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 68.620538][ T5949] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 68.624724][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.191'. [ 68.627639][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.191'. [ 68.655254][ T6258] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 68.659277][ T6258] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 68.663233][ T6258] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 68.666257][ T6258] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.676160][ T5976] usb 7-1: USB disconnect, device number 5 [ 68.676266][ T6666] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 68.690009][ T6258] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 68.692686][ T5303] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 68.693095][ T5949] Bluetooth: hci0: command 0x0c1a tx timeout [ 68.891728][ T40] audit: type=1400 audit(1749778264.168:308): avc: denied { execute } for pid=6650 comm="syz.2.183" path="/dev/audio1" dev="devtmpfs" ino=1317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 68.894745][ T6258] usb 5-1: USB disconnect, device number 5 [ 68.898660][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.898835][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.004437][ T6691] netlink: 'syz.1.196': attribute type 25 has an invalid length. [ 69.031675][ T5949] Bluetooth: hci0: unexpected event for opcode 0x1804 [ 69.154781][ T60] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 69.168163][ T40] audit: type=1400 audit(1749778264.448:309): avc: denied { load_policy } for pid=6698 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 69.168701][ T6699] SELinux: truncated policydb string identifier [ 69.179897][ T6699] SELinux: failed to load policy [ 69.292610][ T60] usb 7-1: device descriptor read/64, error -71 [ 69.380966][ T6717] netlink: 48 bytes leftover after parsing attributes in process `syz.3.206'. [ 69.402141][ T6717] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.542658][ T60] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 69.660256][ T6736] random: crng reseeded on system resumption [ 69.674577][ T60] usb 7-1: device descriptor read/64, error -71 [ 69.687506][ T6736] Hibernate inconsistent memory map detected! [ 69.690336][ T6736] PM: hibernation: Image mismatch: architecture specific data [ 69.757233][ T6740] overlayfs: failed to resolve './bus': -2 [ 69.795192][ T60] usb usb7-port1: attempt power cycle [ 69.811379][ T6740] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 69.838444][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 69.849037][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 69.860656][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 69.873633][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 69.880486][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 69.892256][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 69.909481][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 69.923214][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 69.932322][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 69.940327][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 69.950178][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 69.960760][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 69.971648][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 69.981808][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 69.989999][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 70.000302][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 70.009118][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 70.016879][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 70.023466][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 70.030198][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 70.039465][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 70.049369][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 70.059271][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 70.071333][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 70.081143][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 70.090996][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 70.100855][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 70.111296][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 70.121379][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 70.127413][ T837] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 70.136824][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 70.146881][ T6740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 70.163008][ T60] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 70.193992][ T60] usb 7-1: device descriptor read/8, error -71 [ 70.295146][ T837] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 70.299504][ T837] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 70.303730][ T837] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 70.307512][ T837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.324239][ T6747] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 70.332082][ T837] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 70.432548][ T60] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 70.469058][ T60] usb 7-1: device descriptor read/8, error -71 [ 70.583427][ T60] usb usb7-port1: unable to enumerate USB device [ 71.082322][ T837] usb 5-1: USB disconnect, device number 6 [ 71.098535][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.100599][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.582280][ T40] kauditd_printk_skb: 252 callbacks suppressed [ 71.582292][ T40] audit: type=1400 audit(1749778266.858:562): avc: denied { prog_load } for pid=6768 comm="syz.1.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 71.591253][ T40] audit: type=1400 audit(1749778266.858:563): avc: denied { bpf } for pid=6768 comm="syz.1.223" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.598570][ T40] audit: type=1400 audit(1749778266.858:564): avc: denied { perfmon } for pid=6768 comm="syz.1.223" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.605296][ T40] audit: type=1400 audit(1749778266.858:565): avc: denied { perfmon } for pid=6768 comm="syz.1.223" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.611603][ T40] audit: type=1400 audit(1749778266.858:566): avc: denied { perfmon } for pid=6768 comm="syz.1.223" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.618864][ T40] audit: type=1400 audit(1749778266.858:567): avc: denied { perfmon } for pid=6768 comm="syz.1.223" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.625224][ T40] audit: type=1400 audit(1749778266.858:568): avc: denied { perfmon } for pid=6768 comm="syz.1.223" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.631509][ T40] audit: type=1400 audit(1749778266.858:569): avc: denied { bpf } for pid=6768 comm="syz.1.223" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.639788][ T40] audit: type=1400 audit(1749778266.878:570): avc: denied { read write } for pid=5938 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.651321][ T40] audit: type=1400 audit(1749778266.888:571): avc: denied { read write open } for pid=5938 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.804861][ T6775] syzkaller0: entered promiscuous mode [ 71.806660][ T6775] syzkaller0: entered allmulticast mode [ 72.122641][ T24] vhci_hcd: vhci_device speed not set [ 72.287370][ T6789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6789 comm=syz.2.230 [ 72.693553][ T5949] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 72.697537][ T5949] Bluetooth: hci2: Injecting HCI hardware error event [ 72.699982][ T5949] Bluetooth: hci2: hardware error 0x00 [ 73.103443][ T6825] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 73.103443][ T6825] The task syz.2.244 (6825) triggered the difference, watch for misbehavior. [ 73.549239][ T6842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.251'. [ 73.549705][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.251'. [ 73.723287][ T6848] capability: warning: `syz.3.252' uses 32-bit capabilities (legacy support in use) [ 74.205311][ T6864] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 74.527462][ T6874] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 74.529497][ T6874] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 74.533100][ T6874] vhci_hcd vhci_hcd.0: Device attached [ 74.542385][ T6876] vhci_hcd: connection closed [ 74.545126][ T12] vhci_hcd: stop threads [ 74.548173][ T12] vhci_hcd: release socket [ 74.549679][ T12] vhci_hcd: disconnect device [ 74.772580][ T5949] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 74.891471][ T6891] netlink: 'syz.3.267': attribute type 1 has an invalid length. [ 74.894741][ T6891] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.267'. [ 75.594772][ T6932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6932 comm=syz.1.281 [ 76.138320][ T6968] xt_l2tp: unknown flags: 17 [ 76.192823][ T6970] netlink: 24 bytes leftover after parsing attributes in process `syz.3.298'. [ 76.331443][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.300'. [ 76.335141][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.300'. [ 76.337900][ T6977] netlink: 'syz.3.300': attribute type 12 has an invalid length. [ 76.540177][ T6991] netlink: 32 bytes leftover after parsing attributes in process `syz.3.307'. [ 76.545775][ T6991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=6991 comm=syz.3.307 [ 76.562786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.587724][ T40] kauditd_printk_skb: 404 callbacks suppressed [ 76.587733][ T40] audit: type=1400 audit(1749778271.868:976): avc: denied { read } for pid=6993 comm="syz.2.309" name="cec2" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 76.625246][ T40] audit: type=1400 audit(1749778271.878:977): avc: denied { read } for pid=6993 comm="syz.2.309" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 76.631825][ T40] audit: type=1400 audit(1749778271.878:978): avc: denied { read } for pid=6994 comm="syz.3.310" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 76.639017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 76.649152][ T40] audit: type=1400 audit(1749778271.878:979): avc: denied { read write } for pid=6993 comm="syz.2.309" name="video6" dev="devtmpfs" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 76.657399][ T40] audit: type=1400 audit(1749778271.878:980): avc: denied { read } for pid=6994 comm="syz.3.310" name="video8" dev="devtmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 76.668671][ T40] audit: type=1400 audit(1749778271.878:981): avc: denied { execmem } for pid=6994 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 76.675700][ T40] audit: type=1400 audit(1749778271.888:982): avc: denied { mounton } for pid=6993 comm="syz.2.309" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=0 [ 76.684862][ T40] audit: type=1400 audit(1749778271.888:984): avc: denied { read write } for pid=6993 comm="syz.2.309" name="rdma_cm" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=0 [ 76.692187][ T40] audit: type=1400 audit(1749778271.888:983): avc: denied { create } for pid=6994 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 76.713751][ T40] audit: type=1400 audit(1749778271.898:985): avc: denied { read } for pid=6994 comm="syz.3.310" dev="nsfs" ino=4026533088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 76.723714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.728412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.732930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.742990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.748655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.753126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.644629][ T7061] netlink: 'syz.0.335': attribute type 10 has an invalid length. [ 78.074975][ T7074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7074 comm=syz.1.340 [ 78.087068][ T7075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7075 comm=syz.1.340 [ 78.317165][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 78.320235][ T7091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.345'. [ 78.351888][ T7093] netlink: 44 bytes leftover after parsing attributes in process `syz.2.346'. [ 79.834445][ T7151] netlink: 'syz.1.368': attribute type 17 has an invalid length. [ 79.836879][ T7151] __nla_validate_parse: 1 callbacks suppressed [ 79.836887][ T7151] netlink: 5 bytes leftover after parsing attributes in process `syz.1.368'. [ 79.841718][ T7151] macvtap0: entered allmulticast mode [ 79.844271][ T7151] veth0_macvtap: entered allmulticast mode [ 79.846641][ T7151] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 80.332938][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.374'. [ 80.336436][ T7173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.374'. [ 80.425426][ T7183] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 80.578353][ T7192] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 80.994093][ T7213] bridge0: port 3(syz_tun) entered disabled state [ 81.010152][ T7213] syz_tun (unregistering): left allmulticast mode [ 81.017356][ T7213] syz_tun (unregistering): left promiscuous mode [ 81.020095][ T7213] bridge0: port 3(syz_tun) entered disabled state [ 81.101530][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.392'. [ 81.334477][ T836] cfg80211: failed to load regulatory.db [ 81.371632][ T7243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.820209][ T40] kauditd_printk_skb: 453 callbacks suppressed [ 81.820220][ T40] audit: type=1400 audit(1749778277.098:1439): avc: denied { read write } for pid=5941 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 81.832678][ T40] audit: type=1400 audit(1749778277.108:1440): avc: denied { read write } for pid=5939 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 81.868229][ T40] audit: type=1400 audit(1749778277.148:1441): avc: denied { prog_load } for pid=7244 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 81.875525][ T40] audit: type=1400 audit(1749778277.148:1442): avc: denied { map_create } for pid=7244 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 81.881506][ T40] audit: type=1400 audit(1749778277.148:1443): avc: denied { prog_load } for pid=7244 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 81.889440][ T40] audit: type=1400 audit(1749778277.148:1444): avc: denied { read write } for pid=7244 comm="syz.2.402" name="video5" dev="devtmpfs" ino=963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 81.898905][ T40] audit: type=1400 audit(1749778277.158:1445): avc: denied { create } for pid=7244 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 81.907913][ T40] audit: type=1400 audit(1749778277.158:1446): avc: denied { map_create } for pid=7246 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 81.914897][ T40] audit: type=1400 audit(1749778277.158:1447): avc: denied { map_create } for pid=7246 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 81.921037][ T40] audit: type=1400 audit(1749778277.158:1448): avc: denied { map_create } for pid=7246 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 82.177105][ T7263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.408'. [ 83.355841][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.439'. [ 83.358666][ T7350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.439'. [ 83.546766][ T7361] sctp: [Deprecated]: syz.3.444 (pid 7361) Use of struct sctp_assoc_value in delayed_ack socket option. [ 83.546766][ T7361] Use struct sctp_sack_info instead [ 84.157075][ T7411] netlink: 60 bytes leftover after parsing attributes in process `syz.3.461'. [ 84.160806][ T7411] netem: invalid attributes len -17 [ 84.164541][ T7411] netem: change failed [ 84.167769][ T7411] netlink: 60 bytes leftover after parsing attributes in process `syz.3.461'. [ 84.170561][ T7411] netem: invalid attributes len -17 [ 84.172565][ T7411] netem: change failed [ 84.175817][ T7411] netlink: 60 bytes leftover after parsing attributes in process `syz.3.461'. [ 84.178702][ T7411] netem: invalid attributes len -17 [ 84.180365][ T7411] netem: change failed [ 84.183061][ T7411] netem: invalid attributes len -17 [ 84.193014][ T7411] netem: change failed [ 84.198302][ T7411] netem: invalid attributes len -17 [ 84.200152][ T7411] netem: change failed [ 84.203221][ T7411] netem: invalid attributes len -17 [ 84.204898][ T7411] netem: change failed [ 84.208738][ T7411] netem: invalid attributes len -17 [ 84.210956][ T7411] netem: change failed [ 84.214644][ T7411] netem: invalid attributes len -17 [ 84.216920][ T7411] netem: change failed [ 84.228343][ T7411] netem: invalid attributes len -17 [ 84.230574][ T7411] netem: change failed [ 84.234865][ T7411] netem: invalid attributes len -17 [ 84.236583][ T7411] netem: change failed [ 84.239817][ T7411] netem: invalid attributes len -17 [ 84.241691][ T7411] netem: change failed [ 84.246675][ T7411] netem: invalid attributes len -17 [ 84.248353][ T7411] netem: change failed [ 84.254033][ T7411] netem: invalid attributes len -17 [ 84.255691][ T7411] netem: change failed [ 84.258905][ T7411] netem: invalid attributes len -17 [ 84.260581][ T7411] netem: change failed [ 84.263189][ T7411] netem: invalid attributes len -17 [ 84.264950][ T7411] netem: change failed [ 84.268039][ T7411] netem: invalid attributes len -17 [ 84.269834][ T7411] netem: change failed [ 84.272430][ T7411] netem: invalid attributes len -17 [ 84.274209][ T7411] netem: change failed [ 84.278450][ T7411] netem: invalid attributes len -17 [ 84.280659][ T7411] netem: change failed [ 84.286089][ T7411] netem: invalid attributes len -17 [ 84.288270][ T7411] netem: change failed [ 84.291551][ T7411] netem: invalid attributes len -17 [ 84.295010][ T7411] netem: change failed [ 84.298847][ T7411] netem: invalid attributes len -17 [ 84.301072][ T7411] netem: change failed [ 84.305597][ T7411] netem: invalid attributes len -17 [ 84.307251][ T7411] netem: change failed [ 84.309804][ T7411] netem: invalid attributes len -17 [ 84.312002][ T7411] netem: change failed [ 84.315961][ T7411] netem: invalid attributes len -17 [ 84.317628][ T7411] netem: change failed [ 84.320581][ T7411] netem: invalid attributes len -17 [ 84.322850][ T7411] netem: change failed [ 84.327038][ T7411] netem: invalid attributes len -17 [ 84.329093][ T7411] netem: change failed [ 84.332114][ T7411] netem: invalid attributes len -17 [ 84.337793][ T7411] netem: change failed [ 84.344261][ T7411] netem: invalid attributes len -17 [ 84.346428][ T7411] netem: change failed [ 84.363127][ T7411] netem: invalid attributes len -17 [ 84.365309][ T7411] netem: change failed [ 84.368571][ T7411] netem: invalid attributes len -17 [ 84.370624][ T7411] netem: change failed [ 84.378247][ T7411] netem: invalid attributes len -17 [ 84.380352][ T7411] netem: change failed [ 84.383053][ T7411] netem: invalid attributes len -17 [ 84.385213][ T7411] netem: change failed [ 84.388807][ T7411] netem: invalid attributes len -17 [ 84.390942][ T7411] netem: change failed [ 84.520536][ T7424] sp0: Synchronizing with TNC [ 84.708874][ T7441] mkiss: ax0: crc mode is auto. [ 85.064154][ T7471] FAULT_INJECTION: forcing a failure. [ 85.064154][ T7471] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 85.068374][ T7471] CPU: 1 UID: 0 PID: 7471 Comm: syz.0.484 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 85.068389][ T7471] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.068396][ T7471] Call Trace: [ 85.068401][ T7471] [ 85.068405][ T7471] dump_stack_lvl+0x16c/0x1f0 [ 85.068443][ T7471] should_fail_ex+0x512/0x640 [ 85.068467][ T7471] _copy_to_user+0x32/0xd0 [ 85.068484][ T7471] simple_read_from_buffer+0xcb/0x170 [ 85.068500][ T7471] proc_fail_nth_read+0x197/0x270 [ 85.068514][ T7471] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 85.068528][ T7471] ? rw_verify_area+0xcf/0x680 [ 85.068540][ T7471] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 85.068553][ T7471] vfs_read+0x1e4/0xc60 [ 85.068568][ T7471] ? __pfx___mutex_lock+0x10/0x10 [ 85.068585][ T7471] ? __pfx_vfs_read+0x10/0x10 [ 85.068601][ T7471] ? __fget_files+0x20e/0x3c0 [ 85.068620][ T7471] ksys_read+0x12a/0x250 [ 85.068633][ T7471] ? __pfx_ksys_read+0x10/0x10 [ 85.068646][ T7471] ? fdget+0x187/0x210 [ 85.068662][ T7471] do_syscall_64+0xcd/0x4c0 [ 85.068680][ T7471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.068692][ T7471] RIP: 0033:0x7ff79e58d33c [ 85.068701][ T7471] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 85.068711][ T7471] RSP: 002b:00007ff79f451030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 85.068721][ T7471] RAX: ffffffffffffffda RBX: 00007ff79e7b5fa0 RCX: 00007ff79e58d33c [ 85.068728][ T7471] RDX: 000000000000000f RSI: 00007ff79f4510a0 RDI: 0000000000000003 [ 85.068733][ T7471] RBP: 00007ff79f451090 R08: 0000000000000000 R09: 0000000000000000 [ 85.068739][ T7471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.068745][ T7471] R13: 0000000000000000 R14: 00007ff79e7b5fa0 R15: 00007ffe2820e7a8 [ 85.068758][ T7471] [ 85.211282][ T7475] __nla_validate_parse: 30 callbacks suppressed [ 85.211294][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 85.216681][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 85.270990][ T7478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.487'. [ 85.272857][ T7480] trusted_key: encrypted_key: master key parameter is missing [ 85.480645][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.497'. [ 85.764297][ T7525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7525 comm=syz.1.505 [ 86.341634][ T7549] batadv_slave_0: entered promiscuous mode [ 86.343693][ T7549] batadv_slave_0: entered allmulticast mode [ 86.564653][ T7569] Bluetooth: (null): Invalid header checksum [ 86.613009][ T7571] netlink: 'syz.3.523': attribute type 10 has an invalid length. [ 86.627553][ T7571] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 86.639899][ T7573] x_tables: duplicate underflow at hook 1 [ 86.848925][ T40] kauditd_printk_skb: 672 callbacks suppressed [ 86.848942][ T40] audit: type=1400 audit(1749778282.128:2121): avc: denied { read } for pid=7582 comm="syz.3.528" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 86.863409][ T7589] audit: audit_backlog=65 > audit_backlog_limit=64 [ 86.864431][ T5939] audit: audit_backlog=65 > audit_backlog_limit=64 [ 86.866218][ T7589] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 86.868285][ T5939] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 86.871510][ T7589] audit: backlog limit exceeded [ 86.872808][ T40] audit: type=1400 audit(1749778282.128:2122): avc: denied { map_create } for pid=7587 comm="syz.0.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 86.872845][ T40] audit: type=1400 audit(1749778282.128:2123): avc: denied { map_create } for pid=7587 comm="syz.0.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 86.872879][ T40] audit: type=1400 audit(1749778282.128:2124): avc: denied { map_create } for pid=7587 comm="syz.0.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 86.872911][ T40] audit: type=1400 audit(1749778282.128:2125): avc: denied { map_create } for pid=7587 comm="syz.0.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 86.917514][ T5949] Bluetooth: hci0: connection err: -111 [ 87.945392][ T7673] mkiss: ax0: crc mode is auto. [ 88.238814][ T7686] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode broadcast(3) [ 91.391090][ T7793] netlink: 'syz.1.604': attribute type 21 has an invalid length. [ 91.394624][ T7793] netlink: 156 bytes leftover after parsing attributes in process `syz.1.604'. [ 91.448600][ T7799] netlink: 'syz.2.606': attribute type 21 has an invalid length. [ 91.595324][ T7823] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7823 comm=syz.3.612 [ 91.703113][ T7829] netlink: 'syz.2.613': attribute type 21 has an invalid length. [ 91.705778][ T7829] IPv6: NLM_F_CREATE should be specified when creating new route [ 91.869045][ T40] kauditd_printk_skb: 597 callbacks suppressed [ 91.869056][ T40] audit: type=1400 audit(1749778287.148:2722): avc: denied { read write } for pid=5940 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 91.881058][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'. [ 91.918158][ T40] audit: type=1400 audit(1749778287.198:2723): avc: denied { mounton } for pid=7837 comm="syz.3.619" path="/165/file0" dev="tmpfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 91.927451][ T40] audit: type=1400 audit(1749778287.198:2724): avc: denied { mounton } for pid=7837 comm="syz.3.619" path="/165/file0" dev="tmpfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 91.938752][ T40] audit: type=1400 audit(1749778287.198:2725): avc: denied { mounton } for pid=7837 comm="syz.3.619" path="/165/file0" dev="tmpfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 91.947283][ T40] audit: type=1400 audit(1749778287.198:2726): avc: denied { mounton } for pid=7837 comm="syz.3.619" path="/165/file0" dev="tmpfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 91.957698][ T40] audit: type=1400 audit(1749778287.198:2727): avc: denied { mounton } for pid=7837 comm="syz.3.619" path="/165/file0" dev="tmpfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 91.965313][ T40] audit: type=1400 audit(1749778287.198:2728): avc: denied { mounton } for pid=7837 comm="syz.3.619" path="/165/file0" dev="tmpfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 91.974041][ T40] audit: type=1400 audit(1749778287.198:2729): avc: denied { mounton } for pid=7837 comm="syz.3.619" path="/165/file0" dev="tmpfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 91.981393][ T40] audit: type=1400 audit(1749778287.198:2730): avc: denied { mounton } for pid=7837 comm="syz.3.619" path="/165/file0" dev="tmpfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 91.988322][ T40] audit: type=1400 audit(1749778287.198:2731): avc: denied { mounton } for pid=7837 comm="syz.3.619" path="/165/file0" dev="tmpfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 92.665884][ T7861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46079 sclass=netlink_route_socket pid=7861 comm=syz.3.627 [ 93.153851][ T7884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.635'. [ 93.575561][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'. [ 94.100447][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.656'. [ 94.954379][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'. [ 94.957447][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.676'. [ 94.960312][ T7993] netlink: 'syz.2.676': attribute type 11 has an invalid length. [ 95.706933][ T8030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.685'. [ 96.591932][ T10] IPVS: starting estimator thread 0... [ 96.702679][ T8083] IPVS: using max 45 ests per chain, 108000 per kthread [ 96.897367][ T40] kauditd_printk_skb: 485 callbacks suppressed [ 96.897382][ T40] audit: type=1400 audit(1749778292.178:3217): avc: denied { read write } for pid=8096 comm="syz.1.713" name="vhost-vsock" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 96.911306][ T40] audit: type=1400 audit(1749778292.178:3218): avc: denied { read write } for pid=8096 comm="syz.1.713" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 96.920962][ T40] audit: type=1400 audit(1749778292.178:3219): avc: denied { read } for pid=8096 comm="syz.1.713" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 96.928036][ T40] audit: type=1400 audit(1749778292.178:3220): avc: denied { bpf } for pid=8096 comm="syz.1.713" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 96.936768][ T40] audit: type=1400 audit(1749778292.188:3221): avc: denied { create } for pid=8097 comm="syz.0.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 96.942756][ T40] audit: type=1400 audit(1749778292.208:3222): avc: denied { read write } for pid=5939 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 96.950276][ T40] audit: type=1400 audit(1749778292.218:3223): avc: denied { read write } for pid=5938 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 96.976102][ T40] audit: type=1400 audit(1749778292.258:3224): avc: denied { read } for pid=8102 comm="syz.0.715" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 96.984406][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.714'. [ 96.984423][ T40] audit: type=1400 audit(1749778292.258:3225): avc: denied { prog_load } for pid=8103 comm="syz.1.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 96.993993][ T40] audit: type=1400 audit(1749778292.258:3226): avc: denied { create } for pid=8103 comm="syz.1.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 97.339574][ T8125] xt_l2tp: unknown flags: 17 [ 97.479283][ T8138] netlink: 'syz.3.728': attribute type 9 has an invalid length. [ 97.482532][ T8138] netlink: 'syz.3.728': attribute type 7 has an invalid length. [ 97.485048][ T8138] netlink: 'syz.3.728': attribute type 8 has an invalid length. [ 97.536181][ T8142] netlink: 28 bytes leftover after parsing attributes in process `syz.3.732'. [ 97.539045][ T8142] netlink: 'syz.3.732': attribute type 7 has an invalid length. [ 97.541489][ T8142] netlink: 20 bytes leftover after parsing attributes in process `syz.3.732'. [ 98.104558][ T8180] netlink: 'syz.1.745': attribute type 13 has an invalid length. [ 98.107019][ T8180] macvtap0: entered promiscuous mode [ 98.108889][ T8180] macvtap0: left allmulticast mode [ 98.110498][ T8180] veth0_macvtap: left allmulticast mode [ 98.127649][ T8180] macvtap0: refused to change device tx_queue_len [ 98.411862][ T8215] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.536058][ T8223] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 98.806338][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.763'. [ 98.872199][ T8240] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 98.874249][ T8240] [U] J"—e:ÀÆ" [ 98.927705][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.767'. [ 100.189628][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.781'. [ 100.692882][ T8292] netlink: 'syz.0.783': attribute type 8 has an invalid length. [ 101.656258][ T8324] netlink: 'syz.3.794': attribute type 1 has an invalid length. [ 101.670181][ T8324] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.785327][ T8339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.799'. [ 101.911317][ T40] kauditd_printk_skb: 385 callbacks suppressed [ 101.911329][ T40] audit: type=1400 audit(1749778297.188:3612): avc: denied { read write } for pid=5940 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 101.921175][ T40] audit: type=1400 audit(1749778297.198:3613): avc: denied { read write } for pid=5941 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 101.946272][ T40] audit: type=1400 audit(1749778297.228:3614): avc: denied { block_suspend } for pid=8346 comm="syz.3.802" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 101.952528][ T40] audit: type=1400 audit(1749778297.228:3615): avc: denied { block_suspend } for pid=8346 comm="syz.3.802" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 101.958524][ T40] audit: type=1400 audit(1749778297.228:3616): avc: denied { read } for pid=8347 comm="syz.2.803" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=0 [ 101.965260][ T40] audit: type=1400 audit(1749778297.228:3617): avc: denied { mounton } for pid=8347 comm="syz.2.803" path="/189/file0" dev="tmpfs" ino=1034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 101.971522][ T40] audit: type=1400 audit(1749778297.228:3618): avc: denied { remount } for pid=8347 comm="syz.2.803" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=0 [ 101.977688][ T40] audit: type=1400 audit(1749778297.238:3619): avc: denied { read write } for pid=5940 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 101.984423][ T40] audit: type=1400 audit(1749778297.248:3620): avc: denied { read write } for pid=5941 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 102.000202][ T8353] netlink: 27 bytes leftover after parsing attributes in process `syz.3.804'. [ 102.004281][ T40] audit: type=1400 audit(1749778297.288:3621): avc: denied { map_create } for pid=8351 comm="syz.3.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 102.156732][ T8370] xt_cgroup: path and classid specified [ 102.450950][ T8399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8399 comm=syz.3.818 [ 102.929995][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.830'. [ 102.942039][ T8435] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 103.076677][ T8448] gretap1: entered allmulticast mode [ 103.102357][ T8450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.837'. [ 103.103517][ T8452] netlink: 36 bytes leftover after parsing attributes in process `syz.0.837'. [ 103.166053][ T8466] ================================================================== [ 103.169785][ T8466] BUG: KASAN: slab-out-of-bounds in _raw_spin_lock+0x2e/0x40 [ 103.169969][ T8465] netlink: 'syz.0.840': attribute type 1 has an invalid length. [ 103.172816][ T8466] Read of size 1 at addr ffff888025ce8f60 by task syz.0.840/8466 [ 103.172836][ T8466] [ 103.172845][ T8466] CPU: 3 UID: 0 PID: 8466 Comm: syz.0.840 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 103.172866][ T8466] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.172877][ T8466] Call Trace: [ 103.172884][ T8466] [ 103.172891][ T8466] dump_stack_lvl+0x116/0x1f0 [ 103.172919][ T8466] print_report+0xcd/0x680 [ 103.172943][ T8466] ? __virt_addr_valid+0x81/0x610 [ 103.172962][ T8466] ? __phys_addr+0xe8/0x180 [ 103.172980][ T8466] ? _raw_spin_lock+0x2e/0x40 [ 103.173000][ T8466] kasan_report+0xe0/0x110 [ 103.173023][ T8466] ? _raw_spin_lock+0x2e/0x40 [ 103.173045][ T8466] ? _raw_spin_lock+0x2e/0x40 [ 103.173066][ T8466] __kasan_check_byte+0x36/0x50 [ 103.173088][ T8466] lock_acquire+0xfc/0x350 [ 103.173113][ T8466] ? __pfx___mutex_lock+0x10/0x10 [ 103.173140][ T8466] _raw_spin_lock+0x2e/0x40 [ 103.173160][ T8466] ? __futex_pivot_hash+0x1dd/0x540 [ 103.173182][ T8466] __futex_pivot_hash+0x1dd/0x540 [ 103.173207][ T8466] futex_hash_allocate+0xad1/0xf00 [ 103.173230][ T8466] ? __pfx_futex_hash_allocate+0x10/0x10 [ 103.173253][ T8466] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 103.173274][ T8466] ? cap_task_prctl+0x2af/0xa80 [ 103.173294][ T8466] ? static_key_count+0x5a/0x70 [ 103.173314][ T8466] futex_hash_prctl+0x1f4/0x650 [ 103.173338][ T8466] __do_sys_prctl+0x171f/0x24c0 [ 103.173357][ T8466] ? __pfx___do_sys_prctl+0x10/0x10 [ 103.173377][ T8466] do_syscall_64+0xcd/0x4c0 [ 103.173404][ T8466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.173422][ T8466] RIP: 0033:0x7ff79e58e929 [ 103.173435][ T8466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.173452][ T8466] RSP: 002b:00007ff79f40f038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 103.173468][ T8466] RAX: ffffffffffffffda RBX: 00007ff79e7b6160 RCX: 00007ff79e58e929 [ 103.173480][ T8466] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 103.173490][ T8466] RBP: 00007ff79e610b39 R08: 0000000000000000 R09: 0000000000000000 [ 103.173501][ T8466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.173511][ T8466] R13: 0000000000000001 R14: 00007ff79e7b6160 R15: 00007ffe2820e7a8 [ 103.173526][ T8466] [ 103.173532][ T8466] [ 103.180893][ T8469] netlink: 20 bytes leftover after parsing attributes in process `syz.1.841'. [ 103.181296][ T8466] Allocated by task 8465: [ 103.257158][ T8466] kasan_save_stack+0x33/0x60 [ 103.258661][ T8466] kasan_save_track+0x14/0x30 [ 103.260182][ T8466] __kasan_kmalloc+0xaa/0xb0 [ 103.261742][ T8466] __kvmalloc_node_noprof+0x27b/0x620 [ 103.263767][ T8466] futex_hash_allocate+0x49d/0xf00 [ 103.265370][ T8466] futex_hash_prctl+0x1f4/0x650 [ 103.266902][ T8466] __do_sys_prctl+0x171f/0x24c0 [ 103.268542][ T8466] do_syscall_64+0xcd/0x4c0 [ 103.270014][ T8466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.271887][ T8466] [ 103.272703][ T8466] The buggy address belongs to the object at ffff888025ce8f00 [ 103.272703][ T8466] which belongs to the cache kmalloc-cg-64 of size 64 [ 103.277757][ T8466] The buggy address is located 32 bytes to the right of [ 103.277757][ T8466] allocated 64-byte region [ffff888025ce8f00, ffff888025ce8f40) [ 103.282184][ T8466] [ 103.282954][ T8466] The buggy address belongs to the physical page: [ 103.284959][ T8466] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25ce8 [ 103.287665][ T8466] memcg:ffff88802b776e01 [ 103.289039][ T8466] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 103.291375][ T8466] page_type: f5(slab) [ 103.292643][ T8466] raw: 00fff00000000000 ffff88801b849a40 0000000000000000 0000000000000001 [ 103.295304][ T8466] raw: 0000000000000000 0000000080200020 00000000f5000000 ffff88802b776e01 [ 103.297974][ T8466] page dumped because: kasan: bad access detected [ 103.299969][ T8466] page_owner tracks the page as allocated [ 103.301733][ T8466] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5940, tgid 5940 (syz-executor), ts 80297654056, free_ts 80296906465 [ 103.307613][ T8466] post_alloc_hook+0x1c0/0x230 [ 103.309073][ T8466] get_page_from_freelist+0x1321/0x3890 [ 103.310727][ T8466] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 103.312519][ T8466] alloc_pages_mpol+0x1fb/0x550 [ 103.314017][ T8466] new_slab+0x23b/0x330 [ 103.315320][ T8466] ___slab_alloc+0xd9c/0x1940 [ 103.316758][ T8466] __slab_alloc.constprop.0+0x56/0xb0 [ 103.318382][ T8466] __kmalloc_cache_noprof+0xfb/0x3e0 [ 103.320039][ T8466] alloc_fdtable+0xa0/0x2b0 [ 103.321466][ T8466] dup_fd+0x83b/0xb90 [ 103.322749][ T8466] copy_process+0x230c/0x76a0 [ 103.324211][ T8466] kernel_clone+0xfc/0x960 [ 103.325582][ T8466] __do_sys_clone+0xce/0x120 [ 103.327019][ T8466] do_syscall_64+0xcd/0x4c0 [ 103.328443][ T8466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.330281][ T8466] page last free pid 5940 tgid 5940 stack trace: [ 103.332243][ T8466] __free_frozen_pages+0x7fe/0x1180 [ 103.333889][ T8466] vfree+0x1fd/0xb50 [ 103.335123][ T8466] __do_replace+0x7d1/0x9f0 [ 103.336577][ T8466] do_ip6t_set_ctl+0x87c/0xb00 [ 103.338076][ T8466] nf_setsockopt+0x8d/0xf0 [ 103.339486][ T8466] ipv6_setsockopt+0x135/0x170 [ 103.340992][ T8466] tcp_setsockopt+0xa7/0x100 [ 103.342448][ T8466] do_sock_setsockopt+0x221/0x470 [ 103.344048][ T8466] __sys_setsockopt+0x1a0/0x230 [ 103.345579][ T8466] __x64_sys_setsockopt+0xbd/0x160 [ 103.347185][ T8466] do_syscall_64+0xcd/0x4c0 [ 103.348679][ T8466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.350517][ T8466] [ 103.351278][ T8466] Memory state around the buggy address: [ 103.353052][ T8466] ffff888025ce8e00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 103.355525][ T8466] ffff888025ce8e80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 103.357995][ T8466] >ffff888025ce8f00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 103.360463][ T8466] ^ [ 103.362702][ T8466] ffff888025ce8f80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 103.365183][ T8466] ffff888025ce9000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 103.367659][ T8466] ================================================================== [ 103.370453][ T8466] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 103.372718][ T8466] CPU: 3 UID: 0 PID: 8466 Comm: syz.0.840 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 103.376329][ T8466] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.379637][ T8466] Call Trace: [ 103.380688][ T8466] [ 103.381625][ T8466] dump_stack_lvl+0x3d/0x1f0 [ 103.383095][ T8466] panic+0x71c/0x800 [ 103.384346][ T8466] ? __pfx_panic+0x10/0x10 [ 103.385751][ T8466] ? irqentry_exit+0x3b/0x90 [ 103.387246][ T8466] ? lockdep_hardirqs_on+0x7c/0x110 [ 103.388882][ T8466] ? _raw_spin_lock+0x2e/0x40 [ 103.390354][ T8466] ? check_panic_on_warn+0x1f/0xb0 [ 103.391968][ T8466] ? _raw_spin_lock+0x2e/0x40 [ 103.393467][ T8466] check_panic_on_warn+0xab/0xb0 [ 103.395025][ T8466] end_report+0x107/0x170 [ 103.396406][ T8466] kasan_report+0xee/0x110 [ 103.397819][ T8466] ? _raw_spin_lock+0x2e/0x40 [ 103.399302][ T8466] ? _raw_spin_lock+0x2e/0x40 [ 103.400806][ T8466] __kasan_check_byte+0x36/0x50 [ 103.402334][ T8466] lock_acquire+0xfc/0x350 [ 103.403766][ T8466] ? __pfx___mutex_lock+0x10/0x10 [ 103.405347][ T8466] _raw_spin_lock+0x2e/0x40 [ 103.406772][ T8466] ? __futex_pivot_hash+0x1dd/0x540 [ 103.408402][ T8466] __futex_pivot_hash+0x1dd/0x540 [ 103.409978][ T8466] futex_hash_allocate+0xad1/0xf00 [ 103.411584][ T8466] ? __pfx_futex_hash_allocate+0x10/0x10 [ 103.413352][ T8466] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 103.415193][ T8466] ? cap_task_prctl+0x2af/0xa80 [ 103.416735][ T8466] ? static_key_count+0x5a/0x70 [ 103.418260][ T8466] futex_hash_prctl+0x1f4/0x650 [ 103.419801][ T8466] __do_sys_prctl+0x171f/0x24c0 [ 103.421327][ T8466] ? __pfx___do_sys_prctl+0x10/0x10 [ 103.422968][ T8466] do_syscall_64+0xcd/0x4c0 [ 103.424411][ T8466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.426247][ T8466] RIP: 0033:0x7ff79e58e929 [ 103.427653][ T8466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.433546][ T8466] RSP: 002b:00007ff79f40f038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 103.436115][ T8466] RAX: ffffffffffffffda RBX: 00007ff79e7b6160 RCX: 00007ff79e58e929 [ 103.438563][ T8466] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 103.441006][ T8466] RBP: 00007ff79e610b39 R08: 0000000000000000 R09: 0000000000000000 [ 103.443496][ T8466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.445938][ T8466] R13: 0000000000000001 R14: 00007ff79e7b6160 R15: 00007ffe2820e7a8 [ 103.448399][ T8466] [ 103.449898][ T8466] Kernel Offset: disabled [ 103.451248][ T8466] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:31:38 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b6495 RDI=ffffffff9b0883a0 RBP=ffffffff9b088360 RSP=ffffc90003eb6e48 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000069 R14=ffffffff9b088360 R15=ffffffff855b6430 RIP=ffffffff855b64bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007ff79f4306c0 ffffffff 00c00000 GS =0000 ffff8880d6754000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff79f42ff98 CR3=00000000598d8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000004 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff79e611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff79e611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff79e611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff79e611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff79e611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff79e611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff79e784488 00007ff79e784480 00007ff79e784478 00007ff79e784450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff79f2ed100 00007ff79e784440 00007ff79e784458 00007ff79e7844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff79e784498 00007ff79e784490 00007ff79e784488 00007ff79e784480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000000bb RBX=0000000000000000 RCX=0000000000000000 RDX=00000000000000bb RSI=0000000000000000 RDI=00000000000000bb RBP=ffff88802896c880 RSP=ffffc90003fc7760 R8 =0000000000080000 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=ffff88802896d370 R13=ffff88802896d370 R14=0000000000008000 R15=ffffffff9af339a0 RIP=ffffffff81985a93 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055555c4f9500 ffffffff 00c00000 GS =0000 ffff8880d6854000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055555b3ca808 CR3=000000003327b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000014 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555c513638 000055555c5135b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555c5414fe 000055555c53fe30 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0b9a000800058003 0008000a10001410 0006026fbe001000 0010000383800406 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060106b2000200 070580041cc00800 010800060119e00f 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0006126fcc000800 0610002010000601 6ffa000200072280 8010000810000108 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c01ffffffffff ffffffdf08328003 0008000410001410 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100003fffe10 000fffffffffffff 040108000fffffff ffffff040108000c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0170d00010000fff ffffffffff040108 0006015bac000200 0732800404a4e608 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001000012080606 013ac80000000000 0000000000000000 006f6c01ffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffdf083280 0300080004100014 100006126fcc0008 0006100020100006 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000003 RBX=ffff88801d85af98 RCX=dffffc0000000000 RDX=0000000000000000 RSI=0000000000000004 RDI=ffff88801d85af98 RBP=0000000000000000 RSP=ffffc9000602f998 R8 =0000000000000000 R9 =ffffed1003b0b5f3 R10=ffff88801d85af9b R11=0000000000000001 R12=ffff88801d85af50 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff822ea166 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055555b3ca500 ffffffff 00c00000 GS =0000 ffff8880d6954000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa66f000000 CR3=000000003b202000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcb02df0d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa66f611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa66f611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa66f611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa66f611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa66f611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa66f611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c667265766f20 6772612061746164 000a747261745374 6f687370616e5300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49435740534a05 4257440544514441 000a515744515351 4a4d5655444b5300 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff819b8392 RDX=ffff888032080000 RSI=ffffffff819b8380 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90003ea79c0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff920007d4f3a R13=0000000000000000 R14=ffff888055ac4880 R15=ffffc90003ea7a88 RIP=ffffffff819b8382 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff79f40f6c0 ffffffff 00c00000 GS =0000 ffff8880d6a54000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff79f40ef98 CR3=00000000598d8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff79e611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff79e611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff79e611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff79e611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff79e611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff79e611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff79e784488 00007ff79e784480 00007ff79e784478 00007ff79e784450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff79f2ed100 00007ff79e784440 00007ff79e784458 00007ff79e7844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff79e784498 00007ff79e784490 00007ff79e784488 00007ff79e784480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000