last executing test programs: 1.506384601s ago: executing program 3 (id=4): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000040)={@remote, @remote, @empty}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa01000000"], 0x18) 1.427503328s ago: executing program 3 (id=6): r0 = socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xb}, @hci_ev_le_remote_conn_param_req={{}, {0xc9, 0x6, 0x8, 0x6, 0x7}}}}, 0xe) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0xca3c0, 0x104) fcntl$setsig(r1, 0xa, 0x21) fcntl$setlease(r1, 0x400, 0x1) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x3e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) write$binfmt_format(0xffffffffffffffff, 0x0, 0x0) r2 = semget$private(0x0, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r3, 0x0, 0x0, 0xd0) semtimedop(r2, 0x0, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r4, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {0x6}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x3, 0x1}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x48, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r8 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) r9 = shmat(r8, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmdt(r9) inotify_init1(0x800) 1.32187597s ago: executing program 1 (id=2): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) creat(&(0x7f0000000000)='./file0\x00', 0x100) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="9f0b7dab9beb0000180000001800000007000000050000000100000f080000000d0010000400060103000000005f"], 0x0, 0x37, 0x0, 0xa}, 0x28) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) (async) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000003c0)={'rti802\x00', [0x4f27, 0xb, 0x0, 0xa, 0x5, 0x6, 0x40004, 0x7, 0x7fffffff, 0x104, 0x7, 0x3ff, 0x5, 0x20003, 0x9, 0x101, 0x3, 0x80000000, 0x5, 0x40000003, 0x89, 0xcaab, 0xe, 0xffffffff, 0xb, 0xe69, 0x3c, 0xc, 0x8000, 0x40000, 0x3]}) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000240)="6507312c762422f9a30250a90def1a0daae37b838a60f60eb8dc258ded60aee476", 0x21) (async) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') read$FUSE(r4, &(0x7f0000001780)={0x2020}, 0x2020) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x45}, 0x8014) 1.302678355s ago: executing program 0 (id=8): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2c}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r0, 0x0, 0xc8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='nv\x00', 0x3) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.252114784s ago: executing program 1 (id=9): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x955a, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000002c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r4, 0x40045108, &(0x7f0000000280)=0xfffffff7) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000080)={0x0, {0x4, 0x200}}) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x26, 0x107, 0x70bd2d, 0x25dfdbfc, {0x7, 0x7c}, [@typed={0x4, 0x7a}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0xf, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x2c}}, 0x40080) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @win={{0x3, 0x964, 0x3, 0x8}, 0x7, 0xd8e6, &(0x7f0000000200)={{0x7, 0x10001, 0x3, 0x9}, &(0x7f00000001c0)={{0xab0, 0xde3, 0x280, 0xdaa}, &(0x7f0000000080)={{0x1, 0x5, 0x6, 0xfffffff8}}}}, 0x4, &(0x7f0000000240)="a5343a7511bc", 0x9}}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x7, 0x0}) 1.250823385s ago: executing program 3 (id=10): munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) personality(0x5000007) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x19, 0x1, 0x0, r0, 0x0, 0x2000, 0x1000000, 0x0, 0x10}]) 1.199380486s ago: executing program 1 (id=11): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x1}, {0x4, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x4) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x4f23, 0x5, 0xe, 0x1, 0x4, 0x80000cc7, 0x8, 0xc3a, 0xa, 0x1, 0x1, 0x3a, 0x1, 0x1, 0x440b, 0x102, 0x0, 0x1a449, 0x3, 0x8, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x7fff, 0x10000006, 0x10000006, 0x1, 0xfffffff8, 0x4]}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r4, 0x0, 0x3ff}, 0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r4, 0x80, 0xa6e0}, 0x8) 1.142404725s ago: executing program 0 (id=13): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002380)={0x20, r3, 0x301, 0x8, 0x25dfdbfc, {0x1c}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x200400c4}, 0x4040) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2c}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r4, 0x1, 0x14, &(0x7f0000000140)=0x4, 0x4) 1.142137932s ago: executing program 0 (id=14): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c008000886718db0692c3f1fc50fb85d0167c5cd6329aeb8081eef9471291b1ad028c7449a04e37d2b50145418d44309bc7ae68e061f56bd6b6dedf4ae75d3a9e6357c4baf67548d5a824053ed412556968ccd2577ba8dc184bfffcf6199588235c8ba9e440b467c86728e35876cfccd777a8d0f0e2ac35931fbe1772e5206cfbee3ef9bac19915bcdb20a5ef8c5ea097da564adb6e8089bed675009d7726bd0d2c519afad2dc1e4567ab9151b7a9b3247acb116c58f16389ed30c522f1983d3500fe630414cf9d509fdf115f20053f316a31752ac50a21ff160c14351e77b8e7cc3b07d50ecbbc6c19287cc423165edbc0d15109", @ANYRES16=r3, @ANYBLOB="040027bd7000ffdbdf251500000008000100", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc084}, 0x20000000) (async) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x325, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x10) 1.072290423s ago: executing program 0 (id=15): r0 = getpid() kcmp(r0, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000080)='\xfb.]\x00', 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x9) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, 0x0, &(0x7f0000000240)) getpid() (async) kcmp(r0, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000080)='\xfb.]\x00', 0x4) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) (async) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x9) (async) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), 0x4) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, 0x0, &(0x7f0000000240)) (async) 1.071421325s ago: executing program 0 (id=16): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_setup(0x593a, &(0x7f0000000340)={0x0, 0xeec1, 0x200, 0x0, 0x2f1}, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000040000000aaff020000000000000000000000000001"], 0xffe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) 231.910291ms ago: executing program 1 (id=28): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffa, 0x8000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x103) mount$cgroup(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x4000, &(0x7f0000000000)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r2, 0x6, {0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x6, 0x1d, 0x8, "933e43df49f50adba17dcd26bd9cfed7709ab9ec72fa28a221279a460549fe5f17a81509e0c978cd8376261d109ce3c01c516d97fe95914bd53343955b211ef3", "5d61653bbc2c451ee9d283be8e6a4967228db23903354f1d21417bfa35334ce5921fb17999942371569be24d063adf2ea75d7e0774bb08aeae6a3ae13b69b0da", "0a177aaaa56eb5c0434a79c8f9cd8446cede610e69e7b9cd386b1848ad234f4f", [0xc, 0x7]}}) syz_open_dev$sndctrl(0x0, 0x1, 0x48001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0400", 0x58, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x8, 0x6, "cd85b5", 0x7, 0x84, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [], "aad25a7f302d4579b298392ccf95e1e48f10658b1a1c7edc1ffd13d9ccbf356d"}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f0000000300)) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000340)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x1f, 0x4001000, 0x4a}, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x10, 0xa}, {0x8, 0x6}, {0x4, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x840}, 0x0) 231.014749ms ago: executing program 2 (id=29): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000040)={0x5, 0x80000000, 0x9, 0x4, 0x2}) ioctl$VT_RELDISP(r0, 0x5605) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000003c0)="93378e66cf9b48cb59638401fcd1730172853a9fa89527996042ab60ae29f9c1", 0x4e) r4 = accept4(r3, 0x0, 0x0, 0x80800) recvmmsg$unix(r4, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1}}], 0x1, 0x220, 0x0) recvmsg$can_bcm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)}, 0x40010101) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f00000001c0)=0xc) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000000c0)={0x80, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001840)={0x54, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0xa, 0x1, 0xe}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x2}], 0x1, 0x0, &(0x7f0000000200)="c3"}) 230.81668ms ago: executing program 2 (id=30): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2005000a00000a0000568c00007c"], 0x26}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0xffff, @remote, 0x7}}, 0x30c1, 0x9, 0x101, 0x0, 0x40, 0xfad4, 0xda}, &(0x7f00000000c0)=0x9c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a000000000000000000000008001900", @ANYRES32=0x0, @ANYBLOB="0041eec0c99d4e78b6c5e5a991255c28dd8d3f3e0ded6f58fe6f4a503ab75b4b1c000033433fe7e2507a118ffccf8530586df32579547f64e064e96ae17746f8868ebdf534be4bdad1b766a140971c626dc09cfec641af687130e767e969214bce0abd1e9bb5ee89b27f6c77929aa3ed16e194badaa60bac7c27b0"], 0x2c}}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={r1, 0x4, 0x2, [0xb, 0x7f2b]}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xb, 0x2}, {0x2}, {0x0, 0x2}]}, @const={0x2, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x30]}}, 0x0, 0x4b, 0x0, 0x1, 0x10001}, 0x20) 142.320287ms ago: executing program 3 (id=31): syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x10000001) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x45) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x0, 0x4, 0x1, 0x0, 0xffff, 0x4, 0x2, '\x00', 0x2}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x10000001) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x45) (async) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x0, 0x4, 0x1, 0x0, 0xffff, 0x4, 0x2, '\x00', 0x2}) (async) 141.632151ms ago: executing program 2 (id=32): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdb9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) 55.756871ms ago: executing program 1 (id=33): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x8000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) r1 = socket(0xa, 0x3, 0x87) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={@loopback, 0x27, r3}) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) mkdir(&(0x7f0000000080)='./file1\x00', 0xb) (async) mkdir(&(0x7f0000000080)='./file1\x00', 0xb) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x12, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472619653a059000000006f2c6e6f657839e26e642c00af34aa8572e35aadb404560766ab647fd07c272c60b9acc7efb96ff906000000000000000000"]) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x12, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472619653a059000000006f2c6e6f657839e26e642c00af34aa8572e35aadb404560766ab647fd07c272c60b9acc7efb96ff906000000000000000000"]) r4 = fsopen(&(0x7f00000010c0)='nfs4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000180)=0x14, 0x4) lseek(r4, 0x1, 0x0) (async) lseek(r4, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=0x0], 0x10}, 0x1, 0x0, 0x0, 0x20000051}, 0x24048095) 55.281065ms ago: executing program 2 (id=34): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a50a00000500000061110400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x10) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000340)=0x8, &(0x7f0000000380)=0x2) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000300)={{&(0x7f0000000700)={'Accelerator0\x00', {&(0x7f0000000440)=@adf_dec={@format={'Dc', '0', 'RingRx\x00'}, {0x3}, {&(0x7f00000000c0)=@adf_hex={@format={'Dc', '2', 'BankNumber\x00'}, {0x3}}}}}, {&(0x7f0000000680)={'Accelerator0\x00', {&(0x7f00000005c0)=@adf_hex={@format={'Dc', '0', 'NumConcurrentSymRequests\x00'}, {0x2934}, {&(0x7f0000000500)=@adf_str={@bank={'Bank', '1', 'InterruptCoalescingEnabled\x00'}, {"261fac9509f558a88ef3c6dbe60decc753b30907b47de45c9a7524a1eaa8ce4b3d83b8275638f077be4311dbda42885eb92a244a9ce535109c10f4aee1494df0"}}}}}}}}}, 0xb}) 55.10163ms ago: executing program 3 (id=35): madvise(&(0x7f0000d53000/0x3000)=nil, 0x3000, 0x4) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="582b73053b33e6ca0344a9351de9d2191008040094003508000425abd201fbd986e5bdc23e4ccd1d8d820831597930f86a50a8a6e0f35efaa6260bfce0810737"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40010) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mremap(&(0x7f00007db000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000a92000/0x4000)=nil, 0x4000}, 0x3}) 1.920637ms ago: executing program 2 (id=36): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f0000000000)="3272c9a2682da1285de95fe13d7d946a0a9038eddcc756fcad25ca3cc2fd6db1054dd8bc8fa99a105c1d953991a1b2b489a13ab7006a8c9f2b0bc3dfbf1c719518bc3c49f7fe6b93878837f4a3d1e1a25125590ac8473ff954df75a2aa676d0dca6014152d0d24cde92c160460e0324462ebd32fe4e019663052832357d17da0071b8b74613dbc290fa343ae39f9b2577abb8e582e2ffeaabc72052c16f24adc90511e393e8a5a6984a57aa433782ece8fcb22e08993ad7b74e89c0221eb3b248748d530ad1417e8b9e670401e339e22", &(0x7f0000000100)=""/66, &(0x7f0000000180)="9ac59ec4389b2c8e9e19b6874a1f61137a7d3738e1bf1b8a901dd837c47ed1adc218f84cc4fdb128f7039e5a1b1efd01752e71ccda0fd96c9eb3f22753921e3f61fc61b907771b13946834de8b9863", &(0x7f0000000200)="c6eb4ef258686ea3e88606179c3bf0271d954db29081619267729fd16bbbf953b842d8ab2f86f73475f08619361e34ba7541279ea9a0b2411bd377bf5c7546d620945e008417c3b9403b4fc88e51231ed52b61e8ad4fc1e1890757fc1bf852e9082560f2fb74c4fbbdcad380c166f48ad7bae26c9247cf937fe0fd3eac8de46ed3b5eb71b2e2e6c43641390702e3aad429d88cafd2fc22c155399494be4549f6cfc06e0e12d2d78f679c3699a6b838e16cacc1500d3838627610121dbf23dc7d7b182a23c7fbe93d317948246825b28857ef045d62bd332e8a605a5238ee55af69a12f1305fac0ffc639cde901c95e974986", 0x13}, 0x38) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff}, 0x84100) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '{'}}, {@debug={'debug', 0x3d, 0x14f0}}, {@uname={'uname', 0x3d, '^+'}}, {@directio}, {@cache_none}, {@cachetag={'cachetag', 0x3d, ',+'}}, {@ignoreqv}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@nodevmap}], [{@obj_user={'obj_user', 0x3d, '@,-&%['}}]}}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000005c0)={0x10200, 0x2, 0xeeef0000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r5, 0x4068aea3, &(0x7f0000000640)={0x74, 0x0, 0x8}) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000006c0), 0x40000, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000700)={0x0, r5}, 0x8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(r7, 0x0, &(0x7f0000000740)="0962db671f095c3cbde61599c2ca4d33d6f9760aad2d45fccdd831a96dd4840af7c1b74950f9d0b12ea7d4a84bab4c3e78b0a63f9b5dec245a38a538de4add2a896c96b14f0c30941a635080158a1df573ecf36cbe2295") r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r5) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r8, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x8004) openat$null(0xffffffffffffff9c, &(0x7f0000000940), 0x400002, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffc000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000980)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmsg$TIPC_NL_BEARER_DISABLE(r9, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a00)={0x16c, r8, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xcdd000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2b40}]}, @TIPC_NLA_NODE={0x120, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ID={0xfd, 0x3, "acbebe919fcd47cf7565e049e353870f1bb882f12454b3eb419d688e4c5c8c2c0945b680a4c9554c4381442abc48f2fff947ffc8b2ed59612d3b0ce97ee1c801556a79eaa671cb1713adfb5a132e6ddd1aed97f9eca6126b747dfe096507b7d6d6a9248c6fcbf54696b57c7af6160d72157e7fce1f3a5494690fed727d7352d1171f8ebc53d3169c195a2a946a0d07eba69e27a0cc4d9818a0008a12085f417a95dc2e85df43dc944ddf40d9adf6145f7743ee35f890ebc0d57cfa451556fd776c7bb35395ac096c4b3fa5c4a31db35792b4248dc671d312c47f74e4ecf7db3ba6549c201dcb0e19deebed32d8b8bbd15ff66fcb4afc505bef"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40044000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f0000000c00)) ioctl(r1, 0x1, &(0x7f0000000c40)="3c82c61c94c4fc382633831e67f14399706ff9e6a523a0acfa2277e364513e0a032fea797f968a48cdd34e059ad2c7") ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x48000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x240100c0}, 0x20090) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000ec0), 0xedfaf7c13eb3164d, 0x0) write$UHID_CREATE2(r11, &(0x7f0000000f00)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0xec, 0xa000, 0xc53, 0x40, 0x0, 0xb5, "96289a491c17f21b42e0c90f205e9634d5446eaaa9f46221e97e9498ee76a314db79630ac06e8329205afd914d19589a88349ef60f698b621f0cdc60197a5bd6ff90dcfd69e14ebad51c2f40c8d96427689462d2577db60da09efab8a2a464de1a69bd07433324623a23b8dbb97901b989e86826102d3d4f4e81fbb8caffab6fd1da05478553f5dc5f5d7df62a2f111ff07c5db14630921d08925b2c5d00c03ea2530aa3598692f492958288ff90544c29a53077ef7b26a367e50ab07d5fd68a3053496093cd1618d135ee04b25fea6af42cedffb10f760fc30c991d387ba83e04f3b8e1b44082d4bda0fc5e"}}, 0x204) ioctl$KVM_GET_LAPIC(r6, 0x8400ae8e, &(0x7f0000001140)) utime(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)={0x5, 0x4}) ioctl$SNDRV_PCM_IOCTL_RESUME(r6, 0x4147, 0x0) 640.756µs ago: executing program 1 (id=37): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x800481, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0x2, 0x1, 0x0, 0x8}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@mcast2, 0x200000, 0x2, 0x0, 0xb, 0x96}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x30, 0x20, 0x301, 0x8000000, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x9}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7fff}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x800481, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0x2, 0x1, 0x0, 0x8}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@mcast2, 0x200000, 0x2, 0x0, 0xb, 0x96}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x30, 0x20, 0x301, 0x8000000, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x9}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7fff}]}, 0x30}}, 0x0) (async) 434.152µs ago: executing program 0 (id=38): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000180)={0x0, 0x59, &(0x7f00000003c0)={&(0x7f0000000400)={0x2c, r2, 0x1, 0x20, 0x25dfdbfd, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e28, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="67d8901bdb", 0x5}], 0x1}, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10120, 0x0) 0s ago: executing program 2 (id=39): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00') fstat(r2, &(0x7f0000004800)) ioctl$TCFLSH(r1, 0x400455c8, 0x2) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x32) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000200)="0f01cbb805000000b9080000000f01d98fc93801f9d36f00b8010000000f01c1c4e1f910d66664660f63430e66ba4200b06deeb805000000b9e00000000f01d961", 0x41}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x800, 0x0, 0x25dfdbfe, {}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x2000c0b0) kernel console output (not intermixed with test programs): [ 44.119950][ T40] audit: type=1400 audit(1758038300.001:60): avc: denied { rlimitinh } for pid=5876 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.126589][ T40] audit: type=1400 audit(1758038300.001:61): avc: denied { siginh } for pid=5876 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:64745' (ED25519) to the list of known hosts. [ 45.200948][ T40] audit: type=1400 audit(1758038301.091:62): avc: denied { name_bind } for pid=5888 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.220665][ T40] audit: type=1400 audit(1758038301.111:63): avc: denied { write } for pid=5890 comm="sh" path="pipe:[5775]" dev="pipefs" ino=5775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.242064][ T40] audit: type=1400 audit(1758038301.131:64): avc: denied { execute } for pid=5890 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.251106][ T40] audit: type=1400 audit(1758038301.131:65): avc: denied { execute_no_trans } for pid=5890 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.459763][ T40] audit: type=1400 audit(1758038303.351:66): avc: denied { mounton } for pid=5890 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.462198][ T5890] cgroup: Unknown subsys name 'net' [ 47.657617][ T5890] cgroup: Unknown subsys name 'cpuset' [ 47.663307][ T5890] cgroup: Unknown subsys name 'rlimit' [ 47.901766][ T5950] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.827166][ T5890] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.708449][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 52.708467][ T40] audit: type=1400 audit(1758038308.601:80): avc: denied { execmem } for pid=5965 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.032804][ T40] audit: type=1400 audit(1758038308.921:81): avc: denied { create } for pid=5968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.040948][ T40] audit: type=1400 audit(1758038308.921:82): avc: denied { read write } for pid=5968 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.057552][ T40] audit: type=1400 audit(1758038308.921:83): avc: denied { open } for pid=5968 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.067408][ T40] audit: type=1400 audit(1758038308.931:84): avc: denied { ioctl } for pid=5968 comm="syz-executor" path="socket:[5807]" dev="sockfs" ino=5807 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.109198][ T5973] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.113340][ T5973] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.116978][ T5973] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.123011][ T5975] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.126797][ T5975] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.128330][ T5974] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.135125][ T5333] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.138719][ T5333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.144530][ T40] audit: type=1400 audit(1758038309.041:85): avc: denied { read } for pid=5968 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.145546][ T5974] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.152412][ T5977] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.152626][ T40] audit: type=1400 audit(1758038309.041:86): avc: denied { open } for pid=5968 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.153342][ T5977] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.153960][ T5977] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.154599][ T5977] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.155235][ T5977] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.165344][ T5973] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.166588][ T40] audit: type=1400 audit(1758038309.041:87): avc: denied { mounton } for pid=5968 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.171448][ T5977] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.179021][ T5973] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.181430][ T5977] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.202014][ T5977] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.206107][ T5977] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.436793][ T40] audit: type=1400 audit(1758038309.331:88): avc: denied { module_request } for pid=5976 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.476659][ T5968] chnl_net:caif_netlink_parms(): no params data found [ 53.491875][ T5976] chnl_net:caif_netlink_parms(): no params data found [ 53.684388][ T5971] chnl_net:caif_netlink_parms(): no params data found [ 53.779555][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.783796][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.787193][ T5976] bridge_slave_0: entered allmulticast mode [ 53.791592][ T5976] bridge_slave_0: entered promiscuous mode [ 53.796149][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.798524][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.800905][ T5968] bridge_slave_0: entered allmulticast mode [ 53.804633][ T5968] bridge_slave_0: entered promiscuous mode [ 53.807750][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.809884][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.812212][ T5968] bridge_slave_1: entered allmulticast mode [ 53.815277][ T5968] bridge_slave_1: entered promiscuous mode [ 53.822504][ T5980] chnl_net:caif_netlink_parms(): no params data found [ 53.830120][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.834088][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.836641][ T5976] bridge_slave_1: entered allmulticast mode [ 53.840594][ T5976] bridge_slave_1: entered promiscuous mode [ 53.929809][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.954374][ T5976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.959353][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.996484][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.998949][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.001470][ T5971] bridge_slave_0: entered allmulticast mode [ 54.004754][ T5971] bridge_slave_0: entered promiscuous mode [ 54.014631][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.016904][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.019162][ T5971] bridge_slave_1: entered allmulticast mode [ 54.021870][ T5971] bridge_slave_1: entered promiscuous mode [ 54.027133][ T5976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.111049][ T5968] team0: Port device team_slave_0 added [ 54.114399][ T5968] team0: Port device team_slave_1 added [ 54.148808][ T5971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.155026][ T5976] team0: Port device team_slave_0 added [ 54.170242][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.172649][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.175468][ T5980] bridge_slave_0: entered allmulticast mode [ 54.178053][ T5980] bridge_slave_0: entered promiscuous mode [ 54.182644][ T5971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.213519][ T5976] team0: Port device team_slave_1 added [ 54.251523][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.255177][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.263368][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.267447][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.269760][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.272507][ T5980] bridge_slave_1: entered allmulticast mode [ 54.276300][ T5980] bridge_slave_1: entered promiscuous mode [ 54.316483][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.318672][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.326775][ T5976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.330840][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.334069][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.343478][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.368048][ T5971] team0: Port device team_slave_0 added [ 54.371624][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.375404][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.383524][ T5976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.416213][ T5971] team0: Port device team_slave_1 added [ 54.452345][ T5980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.459020][ T5980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.514403][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.517257][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.527556][ T5971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.590293][ T5980] team0: Port device team_slave_0 added [ 54.619483][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.621706][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.631087][ T5971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.659415][ T5980] team0: Port device team_slave_1 added [ 54.691500][ T5968] hsr_slave_0: entered promiscuous mode [ 54.694238][ T5968] hsr_slave_1: entered promiscuous mode [ 54.701323][ T5976] hsr_slave_0: entered promiscuous mode [ 54.706309][ T5976] hsr_slave_1: entered promiscuous mode [ 54.709286][ T5976] debugfs: 'hsr0' already exists in 'hsr' [ 54.711623][ T5976] Cannot create hsr debugfs directory [ 54.751498][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.753865][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.761381][ T5980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.767266][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.769452][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.777546][ T5980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.977018][ T5980] hsr_slave_0: entered promiscuous mode [ 54.980280][ T5980] hsr_slave_1: entered promiscuous mode [ 54.984678][ T5980] debugfs: 'hsr0' already exists in 'hsr' [ 54.987078][ T5980] Cannot create hsr debugfs directory [ 55.009988][ T5971] hsr_slave_0: entered promiscuous mode [ 55.012472][ T5971] hsr_slave_1: entered promiscuous mode [ 55.015167][ T5971] debugfs: 'hsr0' already exists in 'hsr' [ 55.017103][ T5971] Cannot create hsr debugfs directory [ 55.213334][ T5974] Bluetooth: hci1: command tx timeout [ 55.213339][ T5977] Bluetooth: hci2: command tx timeout [ 55.213596][ T5977] Bluetooth: hci0: command tx timeout [ 55.292933][ T5977] Bluetooth: hci3: command tx timeout [ 55.360313][ T5968] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.366743][ T5968] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.370734][ T5968] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.381455][ T5968] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.432134][ T5980] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.437189][ T5980] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.442385][ T5980] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.455894][ T5980] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.501928][ T5976] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.513846][ T5976] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.521313][ T5976] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.531238][ T5976] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.587388][ T5971] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.597408][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.600380][ T5971] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.606084][ T5971] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.610448][ T5971] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.663122][ T5968] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.685568][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.687982][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.703207][ T90] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.706285][ T90] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.715484][ T5980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.758215][ T5976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.762525][ T5980] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.776342][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.779311][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.796430][ T225] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.798766][ T225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.810497][ T5971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.815682][ T5976] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.836443][ T225] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.839406][ T225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.847319][ T40] audit: type=1400 audit(1758038311.741:89): avc: denied { sys_module } for pid=5968 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.859761][ T225] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.862844][ T225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.872136][ T5971] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.896201][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.899106][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.920489][ T90] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.923327][ T90] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.987958][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.006903][ T5971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.042322][ T5968] veth0_vlan: entered promiscuous mode [ 56.057261][ T5968] veth1_vlan: entered promiscuous mode [ 56.064104][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.099108][ T5968] veth0_macvtap: entered promiscuous mode [ 56.109489][ T5968] veth1_macvtap: entered promiscuous mode [ 56.114563][ T5980] veth0_vlan: entered promiscuous mode [ 56.125193][ T5980] veth1_vlan: entered promiscuous mode [ 56.142923][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.155470][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.159672][ T5976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.171731][ T5971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.182239][ T225] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.191070][ T225] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.195278][ T225] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.205274][ T5980] veth0_macvtap: entered promiscuous mode [ 56.210362][ T225] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.222289][ T5980] veth1_macvtap: entered promiscuous mode [ 56.250094][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.258418][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.275694][ T1145] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.287657][ T1145] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.307401][ T1145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.311035][ T1145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.324399][ T5976] veth0_vlan: entered promiscuous mode [ 56.324697][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.330317][ T5971] veth0_vlan: entered promiscuous mode [ 56.330389][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.345869][ T5971] veth1_vlan: entered promiscuous mode [ 56.351482][ T5976] veth1_vlan: entered promiscuous mode [ 56.387623][ T225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.390997][ T225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.416615][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.420043][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.446004][ T5971] veth0_macvtap: entered promiscuous mode [ 56.454741][ T5971] veth1_macvtap: entered promiscuous mode [ 56.464551][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.466222][ T5968] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.467803][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.468149][ T5976] veth0_macvtap: entered promiscuous mode [ 56.487887][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.494674][ T5976] veth1_macvtap: entered promiscuous mode [ 56.502477][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.512000][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.518481][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.530492][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.542078][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.549126][ T6060] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.554542][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.560793][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.572624][ T1145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.576723][ T90] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.587767][ T90] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.608154][ T90] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.613737][ T5977] Bluetooth: to_multiplier 7 < 10 [ 56.645978][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.649632][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.660870][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.665109][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.681250][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.685276][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.695105][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.697570][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.706095][ T6067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6067 comm=syz.0.7 [ 56.727576][ T6065] dlm: no local IP address has been set [ 56.730900][ T6065] dlm: cannot start dlm midcomms -107 [ 56.757121][ T6079] random: crng reseeded on system resumption [ 56.800458][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'. [ 56.811142][ T6089] openvswitch: netlink: IPv4 tunnel dst address is zero [ 56.815843][ T6089] comedi comedi0: comedi_config --init_data is deprecated [ 56.820958][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'. [ 56.821058][ T41] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.829320][ T41] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.832247][ T6081] Zero length message leads to an empty skb [ 56.833810][ T41] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.838402][ T41] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.978327][ T6112] syz.0.16 uses obsolete (PF_INET,SOCK_PACKET) [ 57.087042][ T6115] hugetlbfs: syz.2.18 (6115): Using mlock ulimits for SHM_HUGETLB is obsolete [ 57.262371][ T6124] netlink: 172 bytes leftover after parsing attributes in process `syz.2.22'. [ 57.282937][ T5973] Bluetooth: hci1: command tx timeout [ 57.284777][ T5973] Bluetooth: hci2: command tx timeout [ 57.286604][ T5977] Bluetooth: hci0: command tx timeout [ 57.333971][ T6134] can0: slcan on ttyS3. [ 57.362979][ T5977] Bluetooth: hci3: command tx timeout [ 57.453779][ T6133] can0 (unregistered): slcan off ttyS3. [ 57.633636][ T6149] capability: warning: `syz.2.27' uses deprecated v2 capabilities in a way that may be insecure [ 57.749660][ T40] kauditd_printk_skb: 92 callbacks suppressed [ 57.749671][ T40] audit: type=1400 audit(1758038313.631:182): avc: denied { read write } for pid=6153 comm="syz.2.29" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.759835][ T40] audit: type=1400 audit(1758038313.631:183): avc: denied { open } for pid=6153 comm="syz.2.29" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.782829][ T40] audit: type=1400 audit(1758038313.631:184): avc: denied { accept } for pid=6153 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.790138][ T40] audit: type=1400 audit(1758038313.631:185): avc: denied { read } for pid=6153 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.797152][ T40] audit: type=1400 audit(1758038313.631:186): avc: denied { ioctl } for pid=6153 comm="syz.2.29" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.817164][ T6033] IPVS: starting estimator thread 0... [ 57.818364][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 57.819692][ T6152] tipc: Started in network mode [ 57.825047][ T6152] tipc: Node identity ac1414aa, cluster identity 4711 [ 57.828180][ T6152] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 57.830977][ T6152] tipc: Enabled bearer , priority 10 [ 57.867606][ T40] audit: type=1400 audit(1758038313.761:187): avc: denied { read append } for pid=6161 comm="syz.2.32" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 57.883722][ T40] audit: type=1400 audit(1758038313.781:188): avc: denied { open } for pid=6161 comm="syz.2.32" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 57.896633][ T40] audit: type=1400 audit(1758038313.781:189): avc: denied { map } for pid=6161 comm="syz.2.32" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 57.906247][ T40] audit: type=1400 audit(1758038313.781:190): avc: denied { write execute } for pid=6161 comm="syz.2.32" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 57.914681][ T6158] IPVS: using max 44 ests per chain, 105600 per kthread [ 57.956324][ T40] audit: type=1400 audit(1758038313.851:191): avc: denied { ioctl } for pid=6167 comm="syz.1.33" path="socket:[11286]" dev="sockfs" ino=11286 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.958235][ T6171] 9pnet_virtio: no channels available for device syz [ 57.973413][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 57.984543][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 57.988941][ T6174] team0: entered promiscuous mode [ 57.990704][ T6174] team_slave_0: entered promiscuous mode [ 57.992546][ T6174] team_slave_1: entered promiscuous mode [ 57.994743][ T6174] team0: entered allmulticast mode [ 57.996403][ T6174] team_slave_0: entered allmulticast mode [ 57.998262][ T6174] team_slave_1: entered allmulticast mode [ 58.036635][ T6181] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 58.040406][ T6181] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 58.044672][ T6181] CPU: 2 UID: 0 PID: 6181 Comm: syz.2.39 Not tainted syzkaller #0 PREEMPT(full) [ 58.047575][ T6181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.051052][ T6181] RIP: 0010:h5_recv+0x104/0x950 [ 58.052651][ T6181] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 a1 35 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 58.059349][ T6181] RSP: 0018:ffffc900048e7c00 EFLAGS: 00010293 [ 58.061552][ T6181] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887b675a [ 58.064084][ T6181] RDX: ffff888055834880 RSI: ffffffff887b679f RDI: 0000000000000005 [ 58.066529][ T6181] RBP: ffffc900048e7d88 R08: 0000000000000005 R09: 0000000000000000 [ 58.069003][ T6181] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 58.071465][ T6181] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb48720 [ 58.074014][ T6181] FS: 00007fa177c956c0(0000) GS:ffff8880d68b2000(0000) knlGS:0000000000000000 [ 58.076788][ T6181] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.078854][ T6181] CR2: 0000001b31a63fff CR3: 0000000054332000 CR4: 0000000000352ef0 [ 58.081410][ T6181] Call Trace: [ 58.082494][ T6181] [ 58.083565][ T6181] ? __pfx_h5_recv+0x10/0x10 [ 58.085444][ T6181] hci_uart_tty_receive+0x254/0x7e0 [ 58.087329][ T6181] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 58.089277][ T6181] tty_ioctl+0x580/0x1680 [ 58.090759][ T6181] ? __pfx_tty_ioctl+0x10/0x10 [ 58.092439][ T6181] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 58.094792][ T6181] ? hook_file_ioctl_common+0x145/0x410 [ 58.096626][ T6181] ? selinux_file_ioctl+0x180/0x270 [ 58.098308][ T6181] ? selinux_file_ioctl+0xb4/0x270 [ 58.100001][ T6181] ? __pfx_tty_ioctl+0x10/0x10 [ 58.101480][ T6181] __x64_sys_ioctl+0x18b/0x210 [ 58.103017][ T6181] do_syscall_64+0xcd/0x4e0 [ 58.104464][ T6181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.106302][ T6181] RIP: 0033:0x7fa176d8eba9 [ 58.107715][ T6181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.112887][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 58.113680][ T6181] RSP: 002b:00007fa177c95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.118446][ T6181] RAX: ffffffffffffffda RBX: 00007fa176fd6090 RCX: 00007fa176d8eba9 [ 58.120870][ T6181] RDX: 0000200000000040 RSI: 0000000000005412 RDI: 0000000000000004 [ 58.123342][ T6181] RBP: 00007fa176e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 58.125847][ T6181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.128418][ T6181] R13: 00007fa176fd6128 R14: 00007fa176fd6090 R15: 00007ffe42672bd8 [ 58.130945][ T6181] [ 58.132063][ T6181] Modules linked in: [ 58.133646][ T6181] ---[ end trace 0000000000000000 ]--- [ 58.136986][ T6181] RIP: 0010:h5_recv+0x104/0x950 [ 58.138936][ T6181] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 a1 35 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 58.146242][ T6181] RSP: 0018:ffffc900048e7c00 EFLAGS: 00010293 [ 58.148408][ T6181] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887b675a [ 58.151176][ T6181] RDX: ffff888055834880 RSI: ffffffff887b679f RDI: 0000000000000005 [ 58.154205][ T6181] RBP: ffffc900048e7d88 R08: 0000000000000005 R09: 0000000000000000 [ 58.156836][ T6181] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 58.159370][ T6181] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb48720 [ 58.162320][ T6181] FS: 00007fa177c956c0(0000) GS:ffff8880d68b2000(0000) knlGS:0000000000000000 [ 58.165882][ T6181] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.168081][ T6181] CR2: 0000001b31a63fff CR3: 0000000054332000 CR4: 0000000000352ef0 [ 58.170791][ T6181] Kernel panic - not syncing: Fatal exception [ 58.173277][ T6181] Kernel Offset: disabled [ 58.174642][ T6181] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:58:34 Registers: info registers vcpu 0 CPU#0 RAX=000000008204f877 RBX=00007fee1ad05720 RCX=ffffffff8204f877 RDX=0000000000001877 RSI=ffffffff8204f877 RDI=0000000000000006 RBP=ffffffff8204f877 RSP=00007ffc31abc618 R8 =00007fee1a1c0000 R9 =00007fee1a1c2000 R10=000000008204f87b R11=0000000000000006 R12=0000000000000006 R13=0000000000000000 R14=ffffffff8204f877 R15=000000000007ab2a RIP=00007fee19e4d9f3 RFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558b21c500 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555686725c8 CR3=000000003ba2a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000025dfdbfa 0070bd2500010010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc31abcaf6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc31abcaf6 00007ffc31abcafc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee1a012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee1a012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee1a012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee1a012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee1a012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee1a012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 370781e0fc0b26a6 fa5ef3e0a6a8506a f83079593108828d 1dcd4c3ec2bde586 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee1ad0d100 00007fee1a1a7460 00007fee1a1a0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee1a1a74b8 00007fee1a1a74b0 00007fee1a1a74a8 00007fee1a1a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000003 RBX=0000000000000003 RCX=ffffffff8a42ceeb RDX=0000000000000000 RSI=ffffffff8a42cf08 RDI=ffff888026162658 RBP=ffffc900006a04c0 RSP=ffffc900006a03b8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=ffffc900006a0ff8 R12=ffff8880314ad8df R13=ffff8880314ad8c8 R14=1ffff920000d4086 R15=0000000000000000 RIP=ffffffff8a42cf40 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555568657808 CR3=000000003ba2a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000025dfdbfa 0070bd2500010010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc31abcaf6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc31abcaf6 00007ffc31abcafc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee1a012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee1a012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee1a012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee1a012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee1a012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee1a012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 370781e0fc0b26a6 fa5ef3e0a6a8506a f83079593108828d 1dcd4c3ec2bde586 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee1ad0d100 00007fee1a1a7460 00007fee1a1a0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee1a1a74b8 00007fee1a1a74b0 00007fee1a1a74a8 00007fee1a1a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564b815 RDI=ffffffff9b1180e0 RBP=ffffffff9b1180a0 RSP=ffffc900048e7600 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b1180a0 R15=ffffffff8564b7b0 RIP=ffffffff8564b83f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa177c956c0 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b31a63fff CR3=0000000054332000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000280001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa177c94f90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe426730e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe426730e6 00007ffe426730ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa176e12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa176e12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa176e12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa176e12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa176e12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa176e12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666c65732f636f72 702f0073252f666c 65732d6461657268 742f636f72702f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434940560a464a57 550a0056000a4349 405608414440574d 510a464a57550a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000269ec RBX=0000000000000003 RCX=ffffffff8b94bb49 RDX=ffffed100d4e6656 RSI=ffffffff8c163280 RDI=ffffffff81914111 RBP=ffffed1003bda000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801ded0000 R14=ffffffff90ab7290 R15=0000000000000000 RIP=ffffffff8b94a68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000200000004800 CR3=000000002bbe5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000003bf12 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555575e038df 0000555575e02c50 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555575dfa30f 0000555575dfa120 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a0806060108 ea28080002800300 1000168004010000 0a080606015cfc00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0aa0030008000a90 030fffffffffffff 040a80030818880c 0502800418800401 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0007900320800400 078c032004000788 0360080007800307 8004038003038004 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a80300040007a403 00020007a2030002 0007a00304ddfeef fc08000798030008 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0104808682e01000 0a80040100000a08 06060168e0208008 000ae0030010000a ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d0030010000ac003 0210000ab0036010 000390030000000c 080607d803140400 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 07d40310040007d0 030a080007c8033e 040007c403100400 07c00300080007b8 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300080007b00300 080007a803000400 07a40300020007a2 0300020007a00304 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000