last executing test programs: 878.393597ms ago: executing program 1 (id=1034): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32, @ANYBLOB="010102000000000014004380"], 0x44}, 0x1, 0xba01}, 0x810) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0x1b, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xd2, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000840)=@newqdisc={0x1d8, 0x24, 0x10, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x2, 0xfff2}, {0x5, 0x3}, {0x5, 0xffff}}, [@TCA_STAB={0x188, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x2a, 0x5b62, 0x7, 0x0, 0x1, 0x5, 0x9}}, {0x16, 0x2, [0xd, 0x5, 0x8, 0x5, 0x0, 0x4, 0x0, 0x8000, 0x5]}}, {{0x1c, 0x1, {0x7, 0xff, 0x0, 0x9, 0x2, 0x2, 0x1, 0x3}}, {0xa, 0x2, [0x4, 0x5, 0x1]}}, {{0x1c, 0x1, {0x4, 0xbd, 0x6, 0x8, 0x0, 0x4, 0x8, 0x9}}, {0x16, 0x2, [0x3, 0x7838, 0x5, 0x9b1a, 0x1ff, 0x0, 0x2, 0x551, 0x3]}}, {{0x1c, 0x1, {0x4, 0x4, 0x100, 0x3ff, 0x1, 0x8001, 0xd2, 0x1}}, {0x6, 0x2, [0x47f]}}, {{0x1c, 0x1, {0xa, 0x3d, 0xd9b, 0x4, 0x2, 0x9, 0xb10, 0x3}}, {0xa, 0x2, [0x9, 0xfff5, 0x0]}}, {{0x1c, 0x1, {0x3, 0x7, 0x9, 0x6, 0x1, 0x4609, 0x5, 0x2}}, {0x8, 0x2, [0x80, 0x8000]}}, {{0x1c, 0x1, {0x9, 0x7, 0x7, 0x6, 0x0, 0x1, 0x8001, 0x8}}, {0x14, 0x2, [0x1, 0xfff3, 0x6, 0x7, 0x7f, 0xff, 0x7, 0x1]}}, {{0x1c, 0x1, {0x60, 0xfd, 0xfff7, 0x7f, 0x2, 0x1ff, 0x0, 0x2}}, {0x8, 0x2, [0x5, 0x8]}}, {{0x1c, 0x1, {0x8, 0x2, 0x100, 0x4e27, 0x1, 0xe, 0x9, 0x8}}, {0x14, 0x2, [0x4, 0x2, 0x3b0, 0x100, 0x5, 0x401, 0x5, 0x7f9]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9, 0xc25}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x1d8}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x34, r7, 0x1, 0x800, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}]]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan0\x00'}) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES16=r0, @ANYRESHEX, @ANYRESDEC], 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) 877.540137ms ago: executing program 1 (id=1036): r0 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x4, 0x20000002, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSLCKTRMIOS(r1, 0x80047437, &(0x7f00000010c0)) 829.963794ms ago: executing program 1 (id=1039): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async, rerun: 64) chdir(&(0x7f0000000100)='./file0\x00') (rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x24, &(0x7f00000003c0)={0x1, 0x0, 0x20000ad, 0x2000000}) (async, rerun: 64) landlock_restrict_self(r0, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 798.302369ms ago: executing program 1 (id=1041): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f00000001c0)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, 0x0, 0x0, 0x884}], 0x1, 0x4004) (async) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) r3 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x8, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x1, 0x0, 0xf407}, 0xfffffffb, 0x0, 0x0, 0x4, 0x7, 0x0, 0x40, 0x9, 0x0, 0x1ff, {0xffffffe4, 0x0, 0x0, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="fe6de1474dd8d2e287cfc0742af57264917994c9a0c647e5e4ea92ef9369ff17c4155f481aa7de310d0b9bf49213", @ANYBLOB="01030000000000000000010000000800010014000000080003"], 0x30}}, 0x44) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) splice(r9, 0x0, r7, 0x0, 0x7ffff040, 0x1200000000000000) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 749.98615ms ago: executing program 1 (id=1045): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x23, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x1, 0x1}}}}]}, 0x40}}, 0x44080) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000000c0)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'sed\x00', 0x4, 0x400, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x80, 0x12d5c}}, 0x44) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x23, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x1, 0x1}}}}]}, 0x40}}, 0x44080) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000000c0)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'sed\x00', 0x4, 0x400, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x80, 0x12d5c}}, 0x44) (async) 690.573482ms ago: executing program 1 (id=1046): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x58, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x44890) syz_usb_disconnect(0xffffffffffffffff) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0xe301, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000380)={&(0x7f0000000100)=@in={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="82840ffb8ae8e07a519b532c29f17e8298f2e8727fae09534f688a89456899fedd5375534bcd912711a5068db50b0b71c013285e0e0de80c9273a92005f61547f21d3b4d8e53301513553202", 0x4c}, {&(0x7f00000001c0)="b095bdae", 0x4}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x404c080}, 0x880) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) close_range(r0, r1, 0x0) syz_open_dev$mouse(&(0x7f00000002c0), 0x1, 0x20002) 605.233614ms ago: executing program 0 (id=1053): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x2, @raw_data="f210040fbc756187424138312bfac52370e3a80ce2d83cc3ab02a19ef300f39be6c49a56f6f1ab3326f93529c8638b6ca31251be3f023f281a3e60a98f4c6759800b8a4ee0d221fa1cc9d257fe8618afcaa64266e427705c1e60839bb4815a626ee41a04d3e7c4f5f0feb90ccb46897cec802a7807f971001d3c96939f554511221521bdaa90f4312622c36eb488a97ddb69f9718de293b79558e3b4c7ad8e9e0bb64f53c4ff85f1b0c84748007f3b54ff2b1dc14cbff1c832236c5f82dc31c725251361171e0159"}) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14}}, 0xa4}}, 0x0) (async, rerun: 32) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@local, @in=@initdev}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) 550.190551ms ago: executing program 0 (id=1055): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xda32}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000001300)={'nr0\x00'}) r2 = semget$private(0x0, 0x6, 0x3b1) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="ff73490100000000220000294a1f196f010838d9ee9f79ad3b332f97a7d859830481aedc3479d49205dde80edcfedcd5ef7ddd30d351b476a233bb2e8ecde3b9da8ae46581a86eb8872fbb7a62aee8b37af4afcca64d408c1d029185fd5064c91d1510ea66bd3880bde235aab422320d4a", 0x71, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r6, r5, 0x0, 0x20000023893) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r4, 0x0) setuid(0xee00) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x4, 0x0, 0x717e387b, 0x40, "1ae34e06a6ffffff7f0000000040794233a5bd", 0x4, 0x2}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r7, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x16, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0xff) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000200)=0x1) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000300)=0x3) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000380)=0x1) semop(r2, &(0x7f00000000c0)=[{}], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000fcdbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0009000000f6"], 0x3c}}, 0x4000050) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x8000000000000000, 0x3, 0x3}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r10) semop(r2, &(0x7f0000000080)=[{0x3, 0xff, 0x800}, {0x3, 0x2, 0x800}], 0x2) 546.576635ms ago: executing program 3 (id=1056): munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000b88ae4ef00000001000000080005"], 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002400048020000180080001006c6f6700140002800800064000008801080005400000000814000000110001"], 0x78}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{}, {}]}) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000040)=0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r3, 0xc02864c3, &(0x7f0000000080)={&(0x7f0000000000)=[r4], 0x400000080000001, 0x1, 0xa}) 479.480357ms ago: executing program 0 (id=1057): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040)=0x9, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0x1d0, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xffffffff, @loopback, 0x5}}}}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0xb, 0xa76, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x85}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x775b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff308}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x13b8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3c1}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x48040}, 0x40090) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000140)) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000040)=0x1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r3, 0x0) syz_clone3(&(0x7f00000003c0)={0x4000000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000200), {0x1c}, &(0x7f0000000240)=""/67, 0x43, &(0x7f00000002c0)=""/169, &(0x7f0000000380)=[0xffffffffffffffff], 0x1, {r3}}, 0x58) fcntl$lock(r3, 0x6, &(0x7f0000000440)={0x1, 0x4, 0x3, 0x5, r4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) write(r5, &(0x7f0000000000)=';\x00\x00\x00', 0x4) socket$xdp(0x2c, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r7, @ANYRES16=r8, @ANYBLOB="010100cd8b000000000000002b0000005da0", @ANYRESHEX=r3, @ANYBLOB="040046000a0034000101010101010000080026006c090000800051802000008009000100b168fa31670000000500020002"], 0xb4}}, 0x4008080) 421.058644ms ago: executing program 0 (id=1060): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "c8444943470da91b", "42f3ac0e0b8a32be8fe91c368e606900000000fbffff0e577e4f14c1f92a00", "e7198360", "f7a5c1777af05e75"}, 0x38) (async) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) (async) write$binfmt_aout(r0, 0x0, 0xfdef) (async) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0x11, 0x8040, 0x0, 0x0) (async) write$binfmt_elf64(r0, 0x0, 0x78) 420.604132ms ago: executing program 3 (id=1061): creat(&(0x7f0000000000)='./file0\x00', 0x180) socket$key(0xf, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55", 0x1b}], 0x1}, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) socket$inet(0x2, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4, 0x0, r2}, 0x48) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 419.759993ms ago: executing program 0 (id=1063): socket$nl_generic(0x10, 0x3, 0x10) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xe8780a0d75417c2d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x5b, &(0x7f0000000100), 0x1, 0x0, 0x0, 0x1f000801}, 0x40) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbffe, 0x16, "ec28a144f13d7607"}) futex(&(0x7f0000000340)=0x1, 0x8, 0x1, 0x0, 0x0, 0x2) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000003000)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}], 0x1, 0x800) r4 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x800, 0x2, 0x800001b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r4, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$char_usb(r7, &(0x7f0000000000)='-0', 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x44) recvmsg$kcm(r3, &(0x7f0000000380)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000580)=""/243, 0xf3}], 0x1, &(0x7f0000000780)=""/202, 0xca}, 0x0) 340.635234ms ago: executing program 3 (id=1064): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x62814608f0df8d6b, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000001c0)) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2f) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000ba7000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000100)={0x0, 0x1e000, 0x8}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2, 0x4, 0x9}, {0xf, 0xbf, 0x7, 0x206d}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000a94000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="0f01c50fc7b2d3000fc7a04809baf80c66b84846458166efbafc0c66ed66b9800000c00f326635008000000f30f30fc73066b96c0200000f320f00d70f01cb3e0f2214", 0x43}], 0x1, 0x40, &(0x7f0000000080)=[@flags={0x3, 0x8000}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) 340.253941ms ago: executing program 0 (id=1065): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() (async) r2 = getpid() r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x4, &(0x7f0000000040)=[{0x2, 0xa6, 0x2, 0x3}, {0x2, 0x8, 0x8, 0xfffc}, {0xaee, 0x2, 0xac, 0x1000}, {0x40, 0xaf, 0x5, 0x2}]}, 0x10) write$binfmt_misc(r5, &(0x7f0000000100), 0x6) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01}}}], 0x20}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x2, 0x1, 0xeeef0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) setsockopt$sock_attach_bpf(r1, 0x1, 0x22, &(0x7f00000018c0), 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x22, &(0x7f00000018c0), 0x4) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) (async) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) 338.780331ms ago: executing program 3 (id=1066): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'macsec0\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x14}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5c}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x14}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x46}]}, 0x40}, 0x1, 0x0, 0x0, 0x2404c041}, 0x4000) 280.044449ms ago: executing program 3 (id=1068): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x1d1, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000140)={0x1f}) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 220.282858ms ago: executing program 3 (id=1070): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) (async) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0x6, [{0xd}, {0x3, 0x8000}, {0xa64a88ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x6, 0xff, 0x1, 0x1, 0x5}}, 0x56a}) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 150.548659ms ago: executing program 2 (id=1073): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x84, &(0x7f0000000400)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x5}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @private=0xa010102}, @in6={0xa, 0x4e20, 0x9, @remote, 0x4}, @in6={0xa, 0x4e23, 0x0, @remote, 0x6}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000600)={r2, 0xfffe, 0xfb, "08b15a4e55dc1a465b9197f9f9abe72546c8d5eb125f22048170b7912cd602ee4ede9b60ba5426b1b37b5e273c6cff01e2c2246974e894f0a47db9ca9073c4d2fbdb4646cdbde85ccd77bb60a4eb81160ba0ae64a98a231e34635de66b47c5bc670f6454ef926cd02fc299d0efc6b4ed221ffe6e5d7754626ffed8ca75772b2b926d74d2a382d1d3a5b01063322274e85d948ffcb7ad3dc3cb2f48a5bef3e78c6b60fcc1901f56ae709d47a0119708404d44ef9ad1ca545758cb66be8d2b8281ea1f0f843b2cc07292b47eb7d7cc5a578aa8b38b1d0cba3e958022a4ccd06a065829648528407f4180b4ef4cbd9187bcfd741cf504c43f2b768086"}, 0x103) (async) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000600)={r2, 0xfffe, 0xfb, "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"}, 0x103) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x28, r5, 0x325, 0xfffbfffe, 0x400000, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1df) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1df) write$binfmt_elf64(r6, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d0000f0ffffffffec08000000000000f0ffffffffffffff0000000000000000080000000000000003"], 0x5b0) close(r6) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@ipv6_getroute={0x30, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_GATEWAY={0x14, 0x5, @empty}]}, 0x30}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@ipv6_getroute={0x30, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_GATEWAY={0x14, 0x5, @empty}]}, 0x30}}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x1, &(0x7f00000002c0)=0x5f53, 0x4) getsockopt$inet6_tcp_int(r7, 0x6, 0x2, 0x0, &(0x7f0000000340)) (async) getsockopt$inet6_tcp_int(r7, 0x6, 0x2, 0x0, &(0x7f0000000340)) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000005c0)=@get={0x1, &(0x7f0000000000)=""/182, 0x5e91}) 149.924007ms ago: executing program 2 (id=1074): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@rose, @remote, @null, @rose, @null, @default, @null, @rose]}, &(0x7f0000000080)=0x48, 0x81000) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x4230, 0x2, 0x4}, 0x18, 0x2) close_range(r0, r1, 0x0) (async) close_range(r0, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x0, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000140)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}) r4 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000180)=@id, &(0x7f00000001c0)=0x10, 0x40000) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000200)=0x2, 0x4) r5 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x440) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000280)={0x1, [[0x0, 0xa, 0xffff, 0x2, 0x1, 0x9b, 0x2, 0xaa], [0x0, 0x4, 0x0, 0x8, 0x9, 0x3, 0xeb8f, 0x8], [0x5, 0x0, 0xffff, 0x7, 0x0, 0x8, 0x0, 0x7]], '\x00', [{0x8, 0xfffffffc, 0x1, 0x1, 0x1, 0x1}, {0x710, 0x55b, 0x1}, {0x6, 0x6, 0x0, 0x0, 0x1}, {0x200, 0x599, 0x1, 0x1, 0x1, 0x1}, {0x4, 0x1}, {0xfffffff8, 0x6997, 0x1, 0x1, 0x0, 0x1}, {0x8, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x73, 0x1, 0x0, 0x1}, {0x64, 0x10001, 0x0, 0x1}, {0x0, 0x7f, 0x0, 0x1, 0x0, 0x1}, {0x2a1e, 0xffff}, {0x0, 0x8001, 0x0, 0x1, 0x1}], '\x00', 0x7f}) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000280)={0x1, [[0x0, 0xa, 0xffff, 0x2, 0x1, 0x9b, 0x2, 0xaa], [0x0, 0x4, 0x0, 0x8, 0x9, 0x3, 0xeb8f, 0x8], [0x5, 0x0, 0xffff, 0x7, 0x0, 0x8, 0x0, 0x7]], '\x00', [{0x8, 0xfffffffc, 0x1, 0x1, 0x1, 0x1}, {0x710, 0x55b, 0x1}, {0x6, 0x6, 0x0, 0x0, 0x1}, {0x200, 0x599, 0x1, 0x1, 0x1, 0x1}, {0x4, 0x1}, {0xfffffff8, 0x6997, 0x1, 0x1, 0x0, 0x1}, {0x8, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x73, 0x1, 0x0, 0x1}, {0x64, 0x10001, 0x0, 0x1}, {0x0, 0x7f, 0x0, 0x1, 0x0, 0x1}, {0x2a1e, 0xffff}, {0x0, 0x8001, 0x0, 0x1, 0x1}], '\x00', 0x7f}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x0, 0x4) mount$9p_rdma(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x100010, &(0x7f00000005c0)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@sq={'sq', 0x3d, 0x80}}, {@common=@posixacl}], [{@subj_user={'subj_user', 0x3d, '!#['}}, {@fsname={'fsname', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@smackfshat={'smackfshat', 0x3d, '#'}}]}}) (async) mount$9p_rdma(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x100010, &(0x7f00000005c0)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@sq={'sq', 0x3d, 0x80}}, {@common=@posixacl}], [{@subj_user={'subj_user', 0x3d, '!#['}}, {@fsname={'fsname', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@smackfshat={'smackfshat', 0x3d, '#'}}]}}) read$snddsp(r1, &(0x7f0000000640)=""/147, 0x93) (async) read$snddsp(r1, &(0x7f0000000640)=""/147, 0x93) sendmsg$sock(r3, &(0x7f00000008c0)={&(0x7f0000000700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4, 0x0, {0xa, 0x4e20, 0x4d3, @local, 0x2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000780)="ff00fe3ab07e16b111f5d53436063791e0fd40cd33dab51e9f83d0950236f788c07926f5def6fd54c912ecb639cb5930cf9095a7773aea9754540354e2b74b6d7f4bd5799be30a8d57db32985d1fb4557af17b26b816bd3cf5143185ec5045169accb7405d3ced7e8276dfe1b0b5a75a26ac61c547362894c48a0b314573d8c4b710fe59f771c56ca7a9c363191ae381bff1c7e62c6460d1aebb8a965b867d698e59bf47a7de43a7f27c3c86", 0xac}], 0x1, &(0x7f0000000880)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x30}, 0x4000800) openat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x4000, 0x1) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x4000, 0x1) ioctl$sock_rose_SIOCDELRT(r6, 0x890c, &(0x7f0000000940)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x47, @default, @bpq0, 0x1, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_open_dev$evdev(&(0x7f00000009c0), 0x1, 0x100) (async) r7 = syz_open_dev$evdev(&(0x7f00000009c0), 0x1, 0x100) ioctl$EVIOCGMASK(r7, 0x80104592, &(0x7f0000000a80)={0x16, 0x60, &(0x7f0000000a00)="44a0646a29d28803d64288b0308d90860e37b8ace3cf9f8a0241509cee0a5f3480494c2b123d268f882a6edf2c93678e67b3d8d32e346da872ca8cade1eab748806c4bc815114e9fecab256e23eea71824f2bdc094fb11aab94aad64343c542f"}) vmsplice(0xffffffffffffffff, &(0x7f0000000e00)=[{&(0x7f0000000ac0)="f49378b3a2e50c9ba3960fa02b4cede76f7fa34366030c5c8c7a7dfc4faff6a91e9e2e32789c2226ce0b177691247d4ceb8180914a0e9c1ac05a86b30f31dc2f84f8ec5a06712ca77756296723", 0x4d}, {&(0x7f0000000b40)="f3edf77cec60c6d4d68246b9afc98e51c3ea0d68bcaa87e01f56e1c06520d124359d1686ffbe58e5cfcf7f51a90906d7d4e97c7e2a14a3ee6b650cc03f7b3c2a45a49edf70fed21384eaac116b23aae2246a9a383f7667b2fa120a8cd1abab233393a3ef83d207b33e5f2762a05ac78af7562cfcd62d484d2a4ceda4a63a3b63b460c96dc5f893d513fb67485e90690f7e76eced40082dc4ef0bef449d4175385a", 0xa1}, {&(0x7f0000000c00)="7154c14e553c734b94519f0167881e0b7a6ad8c5343f20d98b65e6137f8cf19768f85ffe17ca4e265d68420218f56cf4887d9ed814ccd7b9e9cd316d89ff4fe4dad2c2cf8893534d9f25e907581cc7f3690ec6ac181952f7797bd985f3e812063e87301e6f5e828ec8f4ad8c2c8a497df956", 0x72}, {&(0x7f0000000c80)="1e2925fc57bb0b8e49dbeac147e5ab17365f072e80ab876aefbfe13a905f9b32ab1c6de814b3f0fe8a3c1d68107b74f734972ad7fd927393e5811e32403333fd51b345b114004e8dd042c2f50805e0cf7b85103db26135c9ff4c8228c2d7dce99dd89d080aab25a2e9a06bd3cd479b196f6ebea0a5d34ed27500ed22399dff1b81ab77618edacbfa15d7318ea4725696770fc687", 0x94}, {&(0x7f0000000d40)="c5eb6035aa2a00a41df5c7758de4ed8d0cc6bc9f55c795ea025acfa803fa4413a6e61a584b40cc8d338573c0f0e91623edcf3eec61d446b4e9626cc4650f3c555c301774d6979257ca993d0d984c891d43ac4cc34ce26d8c310d9b2987b0c9cd196c9bb5eb4b23d4b47efeaedab6db1c0cd0cdb08105b27a9a111a78d4f300d9a9bc7c5386e36db3b62fadf02cabcc9709eb800aefd6aa1ff6b85f2c9ec44338e8ebe5428e", 0xa5}], 0x5, 0x6) (async) vmsplice(0xffffffffffffffff, &(0x7f0000000e00)=[{&(0x7f0000000ac0)="f49378b3a2e50c9ba3960fa02b4cede76f7fa34366030c5c8c7a7dfc4faff6a91e9e2e32789c2226ce0b177691247d4ceb8180914a0e9c1ac05a86b30f31dc2f84f8ec5a06712ca77756296723", 0x4d}, {&(0x7f0000000b40)="f3edf77cec60c6d4d68246b9afc98e51c3ea0d68bcaa87e01f56e1c06520d124359d1686ffbe58e5cfcf7f51a90906d7d4e97c7e2a14a3ee6b650cc03f7b3c2a45a49edf70fed21384eaac116b23aae2246a9a383f7667b2fa120a8cd1abab233393a3ef83d207b33e5f2762a05ac78af7562cfcd62d484d2a4ceda4a63a3b63b460c96dc5f893d513fb67485e90690f7e76eced40082dc4ef0bef449d4175385a", 0xa1}, {&(0x7f0000000c00)="7154c14e553c734b94519f0167881e0b7a6ad8c5343f20d98b65e6137f8cf19768f85ffe17ca4e265d68420218f56cf4887d9ed814ccd7b9e9cd316d89ff4fe4dad2c2cf8893534d9f25e907581cc7f3690ec6ac181952f7797bd985f3e812063e87301e6f5e828ec8f4ad8c2c8a497df956", 0x72}, {&(0x7f0000000c80)="1e2925fc57bb0b8e49dbeac147e5ab17365f072e80ab876aefbfe13a905f9b32ab1c6de814b3f0fe8a3c1d68107b74f734972ad7fd927393e5811e32403333fd51b345b114004e8dd042c2f50805e0cf7b85103db26135c9ff4c8228c2d7dce99dd89d080aab25a2e9a06bd3cd479b196f6ebea0a5d34ed27500ed22399dff1b81ab77618edacbfa15d7318ea4725696770fc687", 0x94}, {&(0x7f0000000d40)="c5eb6035aa2a00a41df5c7758de4ed8d0cc6bc9f55c795ea025acfa803fa4413a6e61a584b40cc8d338573c0f0e91623edcf3eec61d446b4e9626cc4650f3c555c301774d6979257ca993d0d984c891d43ac4cc34ce26d8c310d9b2987b0c9cd196c9bb5eb4b23d4b47efeaedab6db1c0cd0cdb08105b27a9a111a78d4f300d9a9bc7c5386e36db3b62fadf02cabcc9709eb800aefd6aa1ff6b85f2c9ec44338e8ebe5428e", 0xa5}], 0x5, 0x6) close_range(r4, r5, 0x0) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000e80)=0x1) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000ec0)=0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x1, 0x0) ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, &(0x7f0000000f40)={0x3}) (async) ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, &(0x7f0000000f40)={0x3}) open(&(0x7f0000000f80)='./file0\x00', 0x40000, 0xb) (async) open(&(0x7f0000000f80)='./file0\x00', 0x40000, 0xb) socket$kcm(0x29, 0x2, 0x0) dup(r0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000fc0), 0x48182, 0x0) write$tun(r8, &(0x7f0000001000)={@void, @val={0x2, 0x0, 0x6, 0x3, 0xfff, 0x4}, @x25={0x2, 0x40, 0xf1, "72ca044605618ad9f9a1562649b3f5470a7c4c1615b224b4d1dfea18b683c23948afd8a7774a3721faf124cabeb227514dae64afd635cb10aa085ac46d18a928df6807baca4af4"}}, 0x54) (async) write$tun(r8, &(0x7f0000001000)={@void, @val={0x2, 0x0, 0x6, 0x3, 0xfff, 0x4}, @x25={0x2, 0x40, 0xf1, "72ca044605618ad9f9a1562649b3f5470a7c4c1615b224b4d1dfea18b683c23948afd8a7774a3721faf124cabeb227514dae64afd635cb10aa085ac46d18a928df6807baca4af4"}}, 0x54) 70.434536ms ago: executing program 2 (id=1075): keyctl$KEYCTL_MOVE(0x1c, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0360000000500000180012800e00010069703665727370616e000000fffc028008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08002800d57520"], 0x95}}, 0x10000800) socket$nl_generic(0x10, 0x3, 0x10) 70.111046ms ago: executing program 2 (id=1076): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f00000001c0)={0x0, 0x7}, 0x2) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x20200, 0x41) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4004) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r0, &(0x7f0000000480)=[{&(0x7f0000002640)="91eb51a7914356", 0x7}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) 408.586µs ago: executing program 2 (id=1077): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]}) sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x21c, 0x37, 0x400, 0x70bd26, 0x25dfdbfd, {0x17}, [@generic="e71823fec839dfe12f2894c7926db0a0b2dc55aa118f797eda141f4e0e591890ef639e11660f273c9ef668", @nested={0x1da, 0x3e, 0x0, 0x1, [@generic="4a0cc5ff764b0fa4a9", @typed={0x8, 0x93, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x123}, @generic="e29868bbd7df3ed01f607fc03bef56fa624d38d6a402ca98ff3df72f3250c9dee38e8722cac496c9aa5e16e2ed34827691b492e16959f8a5448465b3c4331158ae5a0832da5a668229619cabb3a96d2d9613ecb7e8fcc56bc1e313dc411d76936cd458ddaf5d910e3620c413b4f800ebd5d254687b33c75567e93f1e0cba9f7ab47ca145aaed6fe0fc8f2916cef3d47931d126bbd67bf4545b2f83b5101e8ed44538c6b2ac36c782f92d173e98e707bcfb44dd6e5340be40757d163c0f5826b4b6df0bff21ffacb2235f05519b902bf7b9a0af58235efb67f4e0b0a316ad7d4dfb0628aa67baa369961e2a822ce858859beaa0a1eab3", @generic="abd40b36c45ec08024c2a0991026aa1af86aec948f1aa6993c2043fc3c9a1edbd632af692aefd37d8b36eb962cdaeece235c3ca6d55594adb20dd5dc467b02022d3b3d7cc2ba4f95a67e03e1cf13a56db03f9309a527ed613735ef2ec9bbeea761f45cd853a5ac38f27a0cef01dbe750d48573f7a3136c408771b399a5a1324e15df6a9e40726b90427ad1904d1dbd33c2c2075487d55af2278aace4ea70eae1924a62e76b525e705fd3986e70d2e087919cb00890b9f63c0840906339b8caaa86a5b53a3d2a44cb143ff2"]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40010}, 0x4001) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) 0s ago: executing program 2 (id=1078): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x7f, 0x10000, 0x8, 0x4, 0x200003, 0x5, 0x7, 0x8008, 0x100, 0x2, 0x7, 0x1db, 0x2, 0x6, 0x101, 0xfffffffd, 0x6, 0x3, 0x8, 0x2, 0x100002, 0xf27, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x1) (async, rerun: 64) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0) (async, rerun: 64) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x3ff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x28}}, 0x0) unshare(0x6a040000) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:13018' (ED25519) to the list of known hosts. [ 54.675960][ T40] audit: type=1400 audit(1756226534.006:62): avc: denied { name_bind } for pid=5953 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 54.709970][ T40] audit: type=1400 audit(1756226534.046:63): avc: denied { execute } for pid=5954 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 54.719300][ T40] audit: type=1400 audit(1756226534.046:64): avc: denied { execute_no_trans } for pid=5954 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 57.035675][ T40] audit: type=1400 audit(1756226536.366:65): avc: denied { mounton } for pid=5954 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.040452][ T5954] cgroup: Unknown subsys name 'net' [ 57.044773][ T40] audit: type=1400 audit(1756226536.376:66): avc: denied { mount } for pid=5954 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.199190][ T5954] cgroup: Unknown subsys name 'cpuset' [ 57.204147][ T5954] cgroup: Unknown subsys name 'rlimit' [ 57.444213][ T5959] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.204317][ T5954] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.226149][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 62.230664][ T40] audit: type=1400 audit(1756226541.556:80): avc: denied { execmem } for pid=5961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 62.456262][ T40] audit: type=1400 audit(1756226541.786:81): avc: denied { create } for pid=5965 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.464812][ T40] audit: type=1400 audit(1756226541.786:82): avc: denied { read write } for pid=5965 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.473320][ T40] audit: type=1400 audit(1756226541.786:83): avc: denied { open } for pid=5965 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.481066][ T40] audit: type=1400 audit(1756226541.796:84): avc: denied { ioctl } for pid=5965 comm="syz-executor" path="socket:[3870]" dev="sockfs" ino=3870 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.518602][ T5976] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.519809][ T5974] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.523196][ T5981] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.524389][ T5974] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.526585][ T5977] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.527015][ T5981] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.527404][ T5978] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.528551][ T5978] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.529675][ T5981] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.532234][ T5977] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.536551][ T5981] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.538154][ T5977] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.539283][ T5982] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.540496][ T5327] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.542275][ T40] audit: type=1400 audit(1756226541.876:85): avc: denied { read } for pid=5965 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.542764][ T40] audit: type=1400 audit(1756226541.876:86): avc: denied { open } for pid=5965 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.545601][ T5982] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.545981][ T5981] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.547069][ T5970] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.547319][ T5970] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.548033][ T40] audit: type=1400 audit(1756226541.876:87): avc: denied { mounton } for pid=5965 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 62.555093][ T5982] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.600686][ T5982] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.827042][ T40] audit: type=1400 audit(1756226542.166:88): avc: denied { module_request } for pid=5965 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 62.871242][ T5966] chnl_net:caif_netlink_parms(): no params data found [ 62.939272][ T5965] chnl_net:caif_netlink_parms(): no params data found [ 62.985193][ T5968] chnl_net:caif_netlink_parms(): no params data found [ 63.064392][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.069350][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.072880][ T5966] bridge_slave_0: entered allmulticast mode [ 63.077678][ T5966] bridge_slave_0: entered promiscuous mode [ 63.118353][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.120913][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.123626][ T5966] bridge_slave_1: entered allmulticast mode [ 63.127813][ T5966] bridge_slave_1: entered promiscuous mode [ 63.136491][ T5979] chnl_net:caif_netlink_parms(): no params data found [ 63.241211][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.244013][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.247604][ T5968] bridge_slave_0: entered allmulticast mode [ 63.251560][ T5968] bridge_slave_0: entered promiscuous mode [ 63.327629][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.331133][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.334571][ T5968] bridge_slave_1: entered allmulticast mode [ 63.338916][ T5968] bridge_slave_1: entered promiscuous mode [ 63.370672][ T5966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.420989][ T5966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.424612][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.429621][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.432066][ T5965] bridge_slave_0: entered allmulticast mode [ 63.435113][ T5965] bridge_slave_0: entered promiscuous mode [ 63.440444][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.443693][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.447439][ T5965] bridge_slave_1: entered allmulticast mode [ 63.451421][ T5965] bridge_slave_1: entered promiscuous mode [ 63.476140][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.540294][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.543484][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.546292][ T5979] bridge_slave_0: entered allmulticast mode [ 63.549456][ T5979] bridge_slave_0: entered promiscuous mode [ 63.555971][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.605747][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.609153][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.612423][ T5979] bridge_slave_1: entered allmulticast mode [ 63.616823][ T5979] bridge_slave_1: entered promiscuous mode [ 63.664937][ T5966] team0: Port device team_slave_0 added [ 63.672153][ T5965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.679457][ T5965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.713639][ T5968] team0: Port device team_slave_0 added [ 63.718811][ T5968] team0: Port device team_slave_1 added [ 63.723116][ T5966] team0: Port device team_slave_1 added [ 63.785435][ T5979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.865223][ T5979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.959324][ T5965] team0: Port device team_slave_0 added [ 63.982055][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.984969][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.998612][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.004433][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.007679][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.020473][ T5966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.027773][ T5965] team0: Port device team_slave_1 added [ 64.031504][ T5979] team0: Port device team_slave_0 added [ 64.034440][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.037223][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.047030][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.054078][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.057592][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.068627][ T5966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.108570][ T5979] team0: Port device team_slave_1 added [ 64.123003][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.126060][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.137990][ T5965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.179885][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.182379][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.190774][ T5979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.195205][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.197862][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.209269][ T5979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.214788][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.222534][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.233629][ T5965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.348023][ T5966] hsr_slave_0: entered promiscuous mode [ 64.350535][ T5966] hsr_slave_1: entered promiscuous mode [ 64.357731][ T5968] hsr_slave_0: entered promiscuous mode [ 64.361099][ T5968] hsr_slave_1: entered promiscuous mode [ 64.364594][ T5968] debugfs: 'hsr0' already exists in 'hsr' [ 64.367687][ T5968] Cannot create hsr debugfs directory [ 64.444343][ T5979] hsr_slave_0: entered promiscuous mode [ 64.447362][ T5979] hsr_slave_1: entered promiscuous mode [ 64.449502][ T5979] debugfs: 'hsr0' already exists in 'hsr' [ 64.451321][ T5979] Cannot create hsr debugfs directory [ 64.472459][ T5965] hsr_slave_0: entered promiscuous mode [ 64.475310][ T5965] hsr_slave_1: entered promiscuous mode [ 64.479673][ T5965] debugfs: 'hsr0' already exists in 'hsr' [ 64.481610][ T5965] Cannot create hsr debugfs directory [ 64.617301][ T62] Bluetooth: hci3: command tx timeout [ 64.617322][ T5982] Bluetooth: hci2: command tx timeout [ 64.617652][ T5976] Bluetooth: hci1: command tx timeout [ 64.617875][ T5982] Bluetooth: hci0: command tx timeout [ 65.014186][ T5966] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.026992][ T5966] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.033959][ T5966] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.050145][ T5966] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.095748][ T5965] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.108702][ T5965] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.117118][ T5965] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.124388][ T5965] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.205236][ T5968] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.222389][ T5968] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.229122][ T5968] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.245315][ T5968] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.351310][ T5979] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.357635][ T5979] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.365252][ T5979] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.373247][ T5979] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.418886][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.439574][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.455738][ T5966] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.471380][ T5965] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.488192][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.491489][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.496293][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.498895][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.504502][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.507622][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.527487][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.530845][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.570518][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.593415][ T5979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.614349][ T5968] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.623505][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.626003][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.643954][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.646684][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.658821][ T5979] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.680143][ T40] audit: type=1400 audit(1756226545.016:89): avc: denied { sys_module } for pid=5966 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.695630][ T217] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.699322][ T217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.725550][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.728333][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.784582][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.821224][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.849185][ T5966] veth0_vlan: entered promiscuous mode [ 65.865107][ T5966] veth1_vlan: entered promiscuous mode [ 65.884307][ T5965] veth0_vlan: entered promiscuous mode [ 65.900634][ T5966] veth0_macvtap: entered promiscuous mode [ 65.908235][ T5966] veth1_macvtap: entered promiscuous mode [ 65.912972][ T5965] veth1_vlan: entered promiscuous mode [ 65.937101][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.955541][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.971081][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.977590][ T5965] veth0_macvtap: entered promiscuous mode [ 65.990569][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.995399][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.000276][ T5965] veth1_macvtap: entered promiscuous mode [ 66.007363][ T5979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.013121][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.018019][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.046897][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.067349][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.087249][ T1151] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.090981][ T1151] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.103148][ T1151] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.107661][ T1151] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.119852][ T5968] veth0_vlan: entered promiscuous mode [ 66.153486][ T5968] veth1_vlan: entered promiscuous mode [ 66.165401][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.169570][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.175622][ T5979] veth0_vlan: entered promiscuous mode [ 66.217824][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.221642][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.223074][ T5979] veth1_vlan: entered promiscuous mode [ 66.232245][ T5968] veth0_macvtap: entered promiscuous mode [ 66.255705][ T5968] veth1_macvtap: entered promiscuous mode [ 66.272256][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.282451][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.282514][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.298320][ T5966] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.323167][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.324170][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.331671][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.341847][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.345390][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.362554][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.379700][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.384960][ T5979] veth0_macvtap: entered promiscuous mode [ 66.392180][ T5979] veth1_macvtap: entered promiscuous mode [ 66.429003][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.439689][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.466444][ T217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.469794][ T217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.469820][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.475927][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.489508][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.493466][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.510941][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.514678][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.555380][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.562755][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.584924][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.588542][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.600614][ T6071] could not allocate digest TFM handle cryptd(blake2b-160) [ 66.640772][ T6082] tipc: Started in network mode [ 66.642550][ T6082] tipc: Node identity 8a7e0057fd66, cluster identity 4711 [ 66.645199][ T6082] tipc: Enabled bearer , priority 0 [ 66.648840][ T6055] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 66.649693][ T6082] syzkaller0: entered promiscuous mode [ 66.654112][ T6082] syzkaller0: entered allmulticast mode [ 66.656644][ T6083] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 66.660296][ T6083] block device autoloading is deprecated and will be removed. [ 66.665241][ T6082] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.667743][ T6082] IPv6: NLM_F_CREATE should be set when creating new route [ 66.670032][ T6082] IPv6: NLM_F_CREATE should be set when creating new route [ 66.672892][ T6082] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.675594][ T6082] Zero length message leads to an empty skb [ 66.680707][ T6082] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 66.689928][ T6082] tipc: Resetting bearer [ 66.694214][ T6081] tipc: Resetting bearer [ 66.696617][ T5976] Bluetooth: hci3: command tx timeout [ 66.701836][ T6081] tipc: Disabling bearer [ 66.707029][ T5976] Bluetooth: hci1: command tx timeout [ 66.707890][ T62] Bluetooth: hci0: command tx timeout [ 66.707958][ T6078] md2: using deprecated bitmap file support [ 66.707978][ T6078] md2: error: failed to get bitmap file [ 66.708035][ T5970] Bluetooth: hci2: command tx timeout [ 66.831940][ T6055] usb 7-1: not running at top speed; connect to a high speed hub [ 66.837397][ T6055] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 66.841922][ T6055] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 66.845621][ T6055] usb 7-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.851705][ T6055] usb 7-1: config 1 interface 0 has no altsetting 0 [ 66.865370][ T6055] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.870108][ T6055] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.873519][ T6055] usb 7-1: Product: 㬪阇拌㫒኿弨ൿ冭Ὸ澞뉌蔆䚡谹磞ᮗ龱龱蜷ึﺺ核༒瓍䬔♬섽뤆邿鴨歞ﯲ̣䲏쀊㢈쨨ꕌ儱ꥬ퉹Ჸ넰헐ꆬ䁗⨛爛ﯡ儈봆낇챧⿴쉞䜪쒤齐财㑛Ⴃ㩁湡佢맢鴏⿛곢Ⅽ匪ퟚ힩뵟℩諨躷뱽⩁ớ㇩顟쵉喜궯౧郈ꉲ跧곑旿 [ 66.888136][ T6055] usb 7-1: Manufacturer: а [ 66.890105][ T6055] usb 7-1: SerialNumber: 軤皲傭긓헒㞈◩䱰᯷䐹甆꫺媎胔笆闅䫁쿎责᫕⩻輗䳤덊ዣꨒ䆞ﾼ垃딪樛粚ۨ浇伓豦裊섙翋ἱ䣕ⷀ園 [ 66.901887][ T6065] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 66.905586][ T6065] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 67.078044][ T6092] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 67.115440][ T6065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.122242][ T6065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.128288][ T6065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.134233][ T6065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.140386][ T6065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.144611][ T6065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.162165][ T6055] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 67.173293][ T6055] usb 7-1: USB disconnect, device number 2 [ 67.198102][ T6092] fuse: blksize only supported for fuseblk [ 67.437396][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 67.437412][ T40] audit: type=1400 audit(1756226546.776:135): avc: denied { write } for pid=6118 comm="syz.3.9" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.453145][ T40] audit: type=1400 audit(1756226546.786:136): avc: denied { write } for pid=6118 comm="syz.3.9" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.463576][ T40] audit: type=1400 audit(1756226546.786:137): avc: denied { open } for pid=6118 comm="syz.3.9" path="/dev/input/event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.471522][ T40] audit: type=1400 audit(1756226546.786:138): avc: denied { perfmon } for pid=6118 comm="syz.3.9" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 67.479513][ T40] audit: type=1400 audit(1756226546.806:139): avc: denied { prog_run } for pid=6118 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 67.486015][ T40] audit: type=1400 audit(1756226546.806:140): avc: denied { ioctl } for pid=6118 comm="syz.3.9" path="socket:[10436]" dev="sockfs" ino=10436 ioctlcmd=0x451b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.646793][ T6128] mkiss: ax0: crc mode is auto. [ 67.655029][ T40] audit: type=1400 audit(1756226546.986:141): avc: denied { search } for pid=5679 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.662080][ T40] audit: type=1400 audit(1756226546.986:142): avc: denied { search } for pid=5679 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.676998][ T40] audit: type=1400 audit(1756226546.986:143): avc: denied { search } for pid=5679 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.684789][ T40] audit: type=1400 audit(1756226547.006:144): avc: denied { create } for pid=6122 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 67.926792][ T1338] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 68.776579][ T62] Bluetooth: hci1: command tx timeout [ 68.776616][ T5970] Bluetooth: hci0: command tx timeout [ 68.776976][ T5976] Bluetooth: hci3: command tx timeout [ 68.786334][ T5970] Bluetooth: hci2: command tx timeout [ 68.812577][ T6145] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 68.950555][ T6156] capability: warning: `syz.2.23' uses deprecated v2 capabilities in a way that may be insecure [ 69.091551][ T6163] netlink: ct family unspecified [ 69.096529][ T6163] openvswitch: netlink: Actions may not be safe on all matching packets [ 69.101168][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 69.104457][ T6163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.27'. [ 69.169515][ T6178] netlink: 'syz.3.32': attribute type 2 has an invalid length. [ 69.172041][ T6178] netlink: 'syz.3.32': attribute type 1 has an invalid length. [ 69.218034][ T6187] No control pipe specified [ 69.223486][ T6187] binder: 6185:6187 unknown command 808464432 [ 69.225826][ T6187] binder: 6185:6187 ioctl c0306201 200000000080 returned -22 [ 69.230751][ T6187] binder: 6185:6187 ioctl ae41 2 returned -22 [ 69.283895][ T6193] wireguard0: entered promiscuous mode [ 69.285698][ T6193] wireguard0: entered allmulticast mode [ 69.296388][ T6198] netlink: 16 bytes leftover after parsing attributes in process `syz.3.38'. [ 69.300548][ T6198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.38'. [ 69.304462][ T6198] netlink: 31 bytes leftover after parsing attributes in process `syz.3.38'. [ 69.307746][ T6198] netlink: 'syz.3.38': attribute type 3 has an invalid length. [ 69.310205][ T6198] netlink: 'syz.3.38': attribute type 2 has an invalid length. [ 69.314885][ T6198] netlink: 31 bytes leftover after parsing attributes in process `syz.3.38'. [ 69.465795][ T6211] can: request_module (can-proto-5) failed. [ 69.486450][ T6220] futex_wake_op: syz.1.43 tries to shift op by -1; fix this program [ 69.489104][ T6220] futex_wake_op: syz.1.43 tries to shift op by -1; fix this program [ 69.491737][ T6220] futex_wake_op: syz.1.43 tries to shift op by -1; fix this program [ 69.506802][ T6220] futex_wake_op: syz.1.43 tries to shift op by -1; fix this program [ 69.510416][ T6220] futex_wake_op: syz.1.43 tries to shift op by -1; fix this program [ 69.514154][ T6220] futex_wake_op: syz.1.43 tries to shift op by -1; fix this program [ 69.534395][ T6222] overlayfs: missing 'lowerdir' [ 69.542638][ T6220] futex_wake_op: syz.1.43 tries to shift op by -1; fix this program [ 69.546100][ T6220] futex_wake_op: syz.1.43 tries to shift op by -1; fix this program [ 69.550024][ T6220] futex_wake_op: syz.1.43 tries to shift op by -1; fix this program [ 69.553902][ T6220] futex_wake_op: syz.1.43 tries to shift op by -1; fix this program [ 69.790846][ T6234] netlink: 76 bytes leftover after parsing attributes in process `syz.0.48'. [ 69.843437][ T6187] syz.2.34 (6187): drop_caches: 2 [ 69.900649][ T6246] netlink: 'syz.0.51': attribute type 1 has an invalid length. [ 69.903354][ T6246] netlink: 600 bytes leftover after parsing attributes in process `syz.0.51'. [ 69.986112][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'. [ 69.989096][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'. [ 69.992119][ T6251] netlink: 'syz.2.53': attribute type 12 has an invalid length. [ 70.024019][ T6254] devpts: Bad value for 'max' [ 70.248416][ T6265] block nbd2: Attempted send on invalid socket [ 70.251224][ T6265] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.254439][ T6265] block nbd2: Attempted send on invalid socket [ 70.259765][ T6265] I/O error, dev nbd2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.263164][ T6265] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 70.269459][ T1207] block nbd2: Attempted send on invalid socket [ 70.271454][ T1207] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.275403][ T6265] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 70.280497][ T6265] block nbd2: Attempted send on invalid socket [ 70.282540][ T6265] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.285900][ T6265] block nbd2: Attempted send on invalid socket [ 70.288447][ T6265] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.292090][ T6265] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 70.296081][ T6265] block nbd2: Attempted send on invalid socket [ 70.304899][ T6265] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.310183][ T6265] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 70.314692][ T6265] block nbd2: Attempted send on invalid socket [ 70.316975][ T6265] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.320061][ T6265] block nbd2: Attempted send on invalid socket [ 70.322217][ T6265] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.326904][ T6265] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 70.331363][ T6265] block nbd2: Attempted send on invalid socket [ 70.334002][ T6265] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.337231][ T6265] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 70.340476][ T6265] block nbd2: Attempted send on invalid socket [ 70.342423][ T6265] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.345979][ T6265] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 70.350708][ T6265] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 70.354591][ T6265] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 70.684774][ T6283] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 70.691570][ T6283] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 70.751344][ T6296] tmpfs: Bad value for 'nr_inodes' [ 70.758264][ T6296] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 70.784127][ T6299] syz.0.67 uses obsolete (PF_INET,SOCK_PACKET) [ 70.857738][ T5970] Bluetooth: hci1: command tx timeout [ 70.859530][ T62] Bluetooth: hci3: command tx timeout [ 70.859577][ T5976] Bluetooth: hci2: command tx timeout [ 71.007743][ T62] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 71.108927][ T6264] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 71.399966][ T6365] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 71.412053][ T6361] pim6reg1: entered promiscuous mode [ 71.414411][ T6361] pim6reg1: entered allmulticast mode [ 71.479382][ T6370] netlink: 'syz.3.84': attribute type 8 has an invalid length. [ 71.558916][ T6378] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 71.567782][ T6378] CIFS mount error: No usable UNC path provided in device string! [ 71.567782][ T6378] [ 71.571092][ T6378] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 71.692773][ T6400] netlink: 'syz.3.94': attribute type 10 has an invalid length. [ 71.697548][ T6400] dummy0: entered promiscuous mode [ 71.702943][ T6400] bridge0: port 3(dummy0) entered blocking state [ 71.704930][ T6399] capability: warning: `syz.1.92' uses 32-bit capabilities (legacy support in use) [ 71.705215][ T6400] bridge0: port 3(dummy0) entered disabled state [ 71.713112][ T6400] dummy0: entered allmulticast mode [ 71.716103][ T6400] bridge0: port 3(dummy0) entered blocking state [ 71.719011][ T6400] bridge0: port 3(dummy0) entered forwarding state [ 71.808844][ T1123] sr 2:0:0:0: [sr0] tag#22 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 71.812518][ T1123] sr 2:0:0:0: [sr0] tag#22 Sense Key : Illegal Request [current] [ 71.815088][ T1123] sr 2:0:0:0: [sr0] tag#22 Add. Sense: Invalid command operation code [ 71.817992][ T1123] sr 2:0:0:0: [sr0] tag#22 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 71.820702][ T1123] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 71.841445][ T6418] bond1: entered promiscuous mode [ 71.843260][ T6418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.898484][ T6421] overlay: ./bus is not a directory [ 71.996130][ T6428] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 72.075223][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 72.112060][ C2] vkms_vblank_simulate: vblank timer overrun [ 72.173713][ T6435] mmap: syz.3.104 (6435) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 72.296532][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 72.299594][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.302781][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 72.307702][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 72.310845][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.315111][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 72.318402][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.459627][ T6448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53120 sclass=netlink_route_socket pid=6448 comm=syz.1.108 [ 72.524563][ T6453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6453 comm=syz.1.110 [ 72.525189][ T24] usb 7-1: GET_CAPABILITIES returned 0 [ 72.532422][ T24] usbtmc 7-1:16.0: can't read capabilities [ 72.561771][ T40] kauditd_printk_skb: 151 callbacks suppressed [ 72.561782][ T40] audit: type=1400 audit(1756226551.896:296): avc: denied { mounton } for pid=6455 comm="syz.1.111" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 72.592200][ T40] audit: type=1400 audit(1756226551.926:297): avc: denied { write } for pid=6458 comm="syz.1.112" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.601101][ T40] audit: type=1400 audit(1756226551.926:298): avc: denied { ioctl } for pid=6458 comm="syz.1.112" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.609494][ T40] audit: type=1400 audit(1756226551.926:299): avc: denied { write } for pid=6458 comm="syz.1.112" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 72.618516][ T40] audit: type=1400 audit(1756226551.946:300): avc: denied { bind } for pid=6462 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.724647][ T40] audit: type=1400 audit(1756226552.056:301): avc: denied { write } for pid=6467 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.728164][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 72.731007][ T40] audit: type=1400 audit(1756226552.056:302): avc: denied { listen } for pid=6467 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.734265][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 72.740481][ T40] audit: type=1400 audit(1756226552.056:303): avc: denied { accept } for pid=6467 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.744098][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 72.751890][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 72.755358][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 72.758604][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 72.762011][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 72.765121][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 72.768032][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 72.770892][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 72.773708][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 72.777689][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 72.781210][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 72.784714][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 72.788542][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 72.793008][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 72.904874][ T6055] usb 7-1: USB disconnect, device number 3 [ 72.937096][ T62] Bluetooth: hci3: command tx timeout [ 73.566900][ T40] audit: type=1400 audit(1756226552.906:304): avc: denied { create } for pid=6488 comm="syz.0.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 73.575204][ T40] audit: type=1400 audit(1756226552.906:305): avc: denied { sys_admin } for pid=6488 comm="syz.0.121" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 73.613415][ T6493] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 73.619289][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 73.773019][ T6505] openvswitch: netlink: IPv4 tun info is not correct [ 73.868308][ T6508] netlink: 'syz.0.127': attribute type 1 has an invalid length. [ 74.620073][ T6529] netlink: 'syz.2.133': attribute type 5 has an invalid length. [ 74.636722][ T6534] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.692453][ T6542] warning: `syz.2.138' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.713985][ T6547] __nla_validate_parse: 10 callbacks suppressed [ 74.713996][ T6547] netlink: 56 bytes leftover after parsing attributes in process `syz.0.139'. [ 74.885640][ T6561] netlink: 328 bytes leftover after parsing attributes in process `syz.0.145'. [ 74.896422][ T6562] ipvlan2: entered promiscuous mode [ 74.900805][ T6562] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 74.920990][ T6565] netlink: 272 bytes leftover after parsing attributes in process `syz.0.147'. [ 74.984589][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'. [ 75.362670][ T6580] openvswitch: netlink: Flow actions attr not present in new flow. [ 75.376850][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 75.546415][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 75.552784][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.558228][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.562402][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 75.570095][ T10] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 75.574061][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.585685][ T10] usb 7-1: config 0 descriptor?? [ 75.617052][ T1462] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.649567][ T6584] netlink: 68 bytes leftover after parsing attributes in process `syz.3.154'. [ 75.656996][ T5970] Bluetooth: hci4: command 0x1003 tx timeout [ 75.660432][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 75.690797][ T6055] Process accounting resumed [ 75.711334][ T6587] Process accounting resumed [ 75.778617][ T1462] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 75.783960][ T1462] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 75.788824][ T1462] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.792623][ T1462] usb 5-1: Product: syz [ 75.794446][ T1462] usb 5-1: Manufacturer: syz [ 75.796546][ T1462] usb 5-1: SerialNumber: syz [ 75.799935][ T1462] usb 5-1: config 0 descriptor?? [ 75.817850][ T1462] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 75.836105][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.000285][ T10] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 76.002615][ T10] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 76.005401][ T10] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 76.007931][ T10] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 76.010160][ T10] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 76.014851][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input5 [ 76.038813][ T10] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 76.042047][ T10] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 76.198713][ T6571] netlink: 'syz.2.150': attribute type 2 has an invalid length. [ 76.201454][ T6571] netlink: 244 bytes leftover after parsing attributes in process `syz.2.150'. [ 76.249714][ T839] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 76.254317][ T839] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 76.261369][ T10] usb 7-1: USB disconnect, device number 4 [ 76.264938][ T839] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 76.270409][ T839] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 76.343018][ T6595] netlink: 33 bytes leftover after parsing attributes in process `syz.3.157'. [ 76.579887][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 76.620718][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.622987][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.829281][ T6616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.163'. [ 76.832198][ T6616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.163'. [ 76.960634][ T6628] netlink: 'syz.1.169': attribute type 64 has an invalid length. [ 76.963813][ T6628] netlink: 'syz.1.169': attribute type 4 has an invalid length. [ 77.356297][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 77.426404][ T6056] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 77.507635][ T10] usb 8-1: config 0 has no interfaces? [ 77.511059][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 77.513990][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 77.516732][ T10] usb 8-1: Product: syz [ 77.518078][ T10] usb 8-1: Manufacturer: syz [ 77.519618][ T10] usb 8-1: SerialNumber: syz [ 77.522735][ T10] usb 8-1: config 0 descriptor?? [ 77.578226][ T6056] usb 6-1: Using ep0 maxpacket: 8 [ 77.581568][ T6056] usb 6-1: config 0 interface 0 has no altsetting 0 [ 77.584102][ T6056] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 77.587367][ T6056] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.591193][ T6056] usb 6-1: config 0 descriptor?? [ 77.731480][ T40] kauditd_printk_skb: 48 callbacks suppressed [ 77.731493][ T40] audit: type=1400 audit(1756226557.066:354): avc: denied { execute } for pid=6667 comm="syz.2.180" path="/38/cpuset.memory_pressure_enabled" dev="tmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.831228][ T6056] usbhid 6-1:0.0: can't add hid device: -71 [ 77.833424][ T6056] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 77.854053][ T6056] usb 6-1: USB disconnect, device number 2 [ 77.867728][ T40] audit: type=1400 audit(1756226557.206:355): avc: denied { ioctl } for pid=6674 comm="syz.1.182" path="socket:[13576]" dev="sockfs" ino=13576 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 77.934964][ T40] audit: type=1326 audit(1756226557.266:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.1.183" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f702f38ebe9 code=0x0 [ 78.135225][ T40] audit: type=1400 audit(1756226557.466:357): avc: denied { create } for pid=6680 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 78.161955][ T40] audit: type=1400 audit(1756226557.496:358): avc: denied { bind } for pid=6680 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 78.213498][ T40] audit: type=1400 audit(1756226557.546:359): avc: denied { write } for pid=6680 comm="syz.1.184" path="socket:[14421]" dev="sockfs" ino=14421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 78.229370][ T40] audit: type=1400 audit(1756226557.566:360): avc: denied { read } for pid=6680 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 78.348396][ T6688] netlink: 'syz.1.186': attribute type 3 has an invalid length. [ 78.353772][ T6688] netlink: 'syz.1.186': attribute type 3 has an invalid length. [ 78.386097][ T71] usb 5-1: USB disconnect, device number 2 [ 78.410664][ T40] audit: type=1400 audit(1756226557.746:361): avc: denied { connect } for pid=6689 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.429621][ T40] audit: type=1400 audit(1756226557.756:362): avc: denied { setopt } for pid=6689 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.546688][ T40] audit: type=1400 audit(1756226557.876:363): avc: denied { create } for pid=6689 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 78.615314][ T6695] process 'syz.0.188' launched '/dev/fd/10' with NULL argv: empty string added [ 79.005678][ T6058] usb 8-1: USB disconnect, device number 2 [ 79.397653][ T6699] kvm: kvm [6698]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 79.870472][ T6709] overlayfs: workdir and upperdir must be separate subtrees [ 79.878298][ T6709] misc userio: The device must be registered before sending interrupts [ 80.084588][ T6720] netlink: 'syz.3.196': attribute type 1 has an invalid length. [ 80.112730][ T6722] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.163753][ T6726] netlink: 'syz.0.199': attribute type 1 has an invalid length. [ 80.171313][ T6726] __nla_validate_parse: 4 callbacks suppressed [ 80.171329][ T6726] netlink: 600 bytes leftover after parsing attributes in process `syz.0.199'. [ 80.233935][ T6729] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 80.611484][ T6751] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 80.615258][ T6751] block device autoloading is deprecated and will be removed. [ 80.750654][ T6759] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 80.874692][ T6765] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 80.881794][ T6765] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 80.945026][ T6774] overlayfs: failed to resolve './file0': -2 [ 80.950904][ T6774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.210'. [ 80.960166][ T6774] team_slave_0: entered promiscuous mode [ 80.962305][ T6774] team_slave_1: entered promiscuous mode [ 80.964952][ T6774] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 81.046325][ T6055] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 81.060759][ T6777] netlink: 44 bytes leftover after parsing attributes in process `syz.0.212'. [ 81.093432][ T6779] binder: Bad value for 'max' [ 81.197832][ T6055] usb 6-1: Using ep0 maxpacket: 32 [ 81.208323][ T6055] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 81.211820][ T6055] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 81.216970][ T6055] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 81.221622][ T6055] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 81.228355][ T6055] usb 6-1: config 0 interface 0 has no altsetting 0 [ 81.236313][ T6055] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 81.240192][ T6055] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 81.243631][ T6055] usb 6-1: Product: syz [ 81.248183][ T6055] usb 6-1: Manufacturer: syz [ 81.250202][ T6055] usb 6-1: SerialNumber: syz [ 81.260210][ T6055] usb 6-1: config 0 descriptor?? [ 81.274717][ T6055] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 81.286467][ T6055] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 81.467135][ T6055] usb 6-1: USB disconnect, device number 3 [ 81.468015][ T6818] ldusb 6-1:0.0: Couldn't submit interrupt_in_urb -19 [ 81.475323][ T6055] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 81.533624][ T6824] Bluetooth: MGMT ver 1.23 [ 81.654109][ T6828] netlink: 'syz.2.228': attribute type 1 has an invalid length. [ 81.681283][ T6828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.688997][ T6828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.228'. [ 81.698699][ T6828] vlan2: entered allmulticast mode [ 81.700926][ T6828] bond1: entered allmulticast mode [ 82.056381][ T5970] Bluetooth: hci3: command 0x0405 tx timeout [ 82.202593][ T6862] Bluetooth: Invalid esc byte 0xf7 [ 82.224902][ T6865] netlink: 'syz.3.237': attribute type 1 has an invalid length. [ 82.238180][ T6865] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.264722][ T6866] vlan2: entered allmulticast mode [ 82.267192][ T6866] batadv0: entered allmulticast mode [ 82.272310][ T6866] bond1: (slave vlan2): making interface the new active one [ 82.276688][ T6866] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 82.312725][ T12] Bluetooth: (null): Invalid header checksum [ 82.315046][ T12] Bluetooth: (null): Invalid header checksum [ 82.417520][ T1145] Bluetooth: (null): Invalid header checksum [ 82.518536][ T6882] usb usb8: usbfs: process 6882 (syz.3.241) did not claim interface 0 before use [ 82.530514][ T1145] Bluetooth: (null): Invalid header checksum [ 82.530623][ T6882] usb usb8: usbfs: process 6882 (syz.3.241) did not claim interface 0 before use [ 82.636443][ T1151] Bluetooth: (null): Invalid header checksum [ 82.737108][ T40] kauditd_printk_skb: 210 callbacks suppressed [ 82.737120][ T40] audit: type=1400 audit(2000000000.590:574): avc: denied { map_create } for pid=6918 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 82.747924][ T12] Bluetooth: (null): Invalid header checksum [ 82.749055][ T40] audit: type=1400 audit(2000000000.590:575): avc: denied { read write } for pid=5966 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 82.751415][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 82.759736][ T40] audit: type=1400 audit(2000000000.590:576): avc: denied { prog_load } for pid=6918 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 82.770009][ T40] audit: type=1400 audit(2000000000.590:577): avc: denied { read write } for pid=6918 comm="syz.1.253" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 82.779520][ T40] audit: type=1400 audit(2000000000.590:578): avc: denied { create } for pid=6918 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 82.787780][ T40] audit: type=1400 audit(2000000000.590:579): avc: denied { create } for pid=6918 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 82.794288][ T40] audit: type=1400 audit(2000000000.590:580): avc: denied { read } for pid=6918 comm="syz.1.253" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=0 [ 82.802890][ T40] audit: type=1400 audit(2000000000.600:581): avc: denied { read } for pid=6921 comm="syz.3.254" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 82.810411][ T40] audit: type=1400 audit(2000000000.600:582): avc: denied { execute } for pid=6920 comm="syz.2.255" dev="hugetlbfs" ino=15055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=0 [ 82.817700][ T40] audit: type=1400 audit(2000000000.620:583): avc: denied { mount } for pid=6921 comm="syz.3.254" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=0 [ 82.843804][ T6935] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 82.843804][ T6935] The task syz.2.256 (6935) triggered the difference, watch for misbehavior. [ 82.858911][ T1151] Bluetooth: (null): Invalid header checksum [ 83.080978][ T1151] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.083905][ T1151] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.090629][ T1151] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.093211][ T1151] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.458551][ T6959] macvlan0: entered promiscuous mode [ 83.503462][ T6963] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 83.718508][ T6975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6975 comm=syz.1.272 [ 83.860529][ T6992] netlink: 'syz.2.278': attribute type 10 has an invalid length. [ 83.865478][ T6992] team0: Device ipvlan1 failed to register rx_handler [ 84.098743][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.287'. [ 84.243156][ T7047] netlink: 'syz.0.297': attribute type 10 has an invalid length. [ 84.265085][ T7047] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 84.450953][ T7089] netlink: 'syz.3.308': attribute type 3 has an invalid length. [ 84.531959][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 84.535192][ T7103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.313'. [ 84.538306][ T7103] netlink: 'syz.3.313': attribute type 5 has an invalid length. [ 85.085235][ T7137] syz_tun: entered promiscuous mode [ 85.088850][ T7137] macvtap1: entered promiscuous mode [ 85.093136][ T7137] syz_tun: left promiscuous mode [ 85.188865][ T7140] sp0: Synchronizing with TNC [ 85.269775][ T7146] gtp0: entered promiscuous mode [ 85.365186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.383475][ T7148] netlink: 'syz.2.331': attribute type 10 has an invalid length. [ 85.408910][ T7148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.411340][ T7148] team0: Device bond0 failed to register rx_handler [ 85.559423][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.336'. [ 85.636412][ T7183] bridge_slave_0: left allmulticast mode [ 85.638467][ T7183] bridge_slave_0: left promiscuous mode [ 85.641102][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.646648][ T7174] netlink: 'syz.3.341': attribute type 1 has an invalid length. [ 85.648185][ T7183] bridge_slave_1: left allmulticast mode [ 85.650894][ T7183] bridge_slave_1: left promiscuous mode [ 85.652673][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.661834][ T7183] bond0: (slave bond_slave_0): Releasing backup interface [ 85.669175][ T7183] bond0: (slave bond_slave_1): Releasing backup interface [ 85.675970][ T7183] team0: Port device team_slave_0 removed [ 85.682801][ T7183] team0: Port device team_slave_1 removed [ 85.685080][ T7183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.687791][ T7183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.691303][ T7183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.693998][ T7183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.742550][ T7184] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 85.752601][ T7192] netlink: 33 bytes leftover after parsing attributes in process `syz.2.345'. [ 85.949394][ T7203] syzkaller0: entered promiscuous mode [ 85.951111][ T7203] syzkaller0: entered allmulticast mode [ 86.034776][ T7207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.350'. [ 86.042854][ T7207] netem: change failed [ 86.252781][ T7238] netlink: 'syz.1.363': attribute type 3 has an invalid length. [ 86.255459][ T7238] netlink: 132 bytes leftover after parsing attributes in process `syz.1.363'. [ 86.298162][ T7241] syzkaller0: entered promiscuous mode [ 86.300451][ T7241] syzkaller0: entered allmulticast mode [ 86.477229][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.375'. [ 86.865131][ T840] cfg80211: failed to load regulatory.db [ 87.726698][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.381'. [ 87.742095][ T7321] bond0: entered promiscuous mode [ 87.746237][ T40] kauditd_printk_skb: 18791 callbacks suppressed [ 87.746249][ T40] audit: type=1400 audit(2000000005.590:18052): avc: denied { read } for pid=5679 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 87.746858][ T7321] bond0: left promiscuous mode [ 87.752040][ T40] audit: type=1400 audit(2000000005.600:18053): avc: denied { read } for pid=5679 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 87.765201][ T5679] audit: audit_backlog=65 > audit_backlog_limit=64 [ 87.767151][ T7323] audit: audit_backlog=65 > audit_backlog_limit=64 [ 87.768132][ T5679] audit: audit_lost=442 audit_rate_limit=0 audit_backlog_limit=64 [ 87.770938][ T40] audit: type=1400 audit(2000000005.600:18054): avc: denied { read } for pid=5679 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 87.771372][ T7323] audit: audit_lost=443 audit_rate_limit=0 audit_backlog_limit=64 [ 87.771389][ T7323] audit: backlog limit exceeded [ 87.771955][ T7323] audit: audit_backlog=65 > audit_backlog_limit=64 [ 87.771968][ T7323] audit: audit_lost=444 audit_rate_limit=0 audit_backlog_limit=64 [ 87.774172][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'. [ 87.800113][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.390'. [ 87.803326][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.390'. [ 87.808514][ T7330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=7330 comm=syz.3.390 [ 88.143440][ T7364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7364 comm=syz.2.400 [ 88.466113][ T7401] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.580421][ T7419] ptrace attach of "/syz-executor exec"[7421] was attempted by "/syz-executor exec"[7419] [ 88.584286][ T7419] ptrace attach of "/syz-executor exec"[7421] was attempted by "/syz-executor exec"[7419] [ 88.588338][ T7419] ptrace attach of "/syz-executor exec"[7421] was attempted by "/syz-executor exec"[7419] [ 88.596054][ T7419] ptrace attach of "/syz-executor exec"[7421] was attempted by "/syz-executor exec"[7419] [ 88.752260][ T7442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.427'. [ 88.890828][ T7449] i2c i2c-1: Invalid block write size 34 [ 89.018929][ T7459] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=7459 comm=syz.0.434 [ 89.298864][ T7492] netlink: 'syz.3.445': attribute type 10 has an invalid length. [ 89.338350][ T7492] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 89.490190][ T7513] netlink: 'syz.2.453': attribute type 30 has an invalid length. [ 89.611504][ T7525] netlink: 'syz.3.456': attribute type 1 has an invalid length. [ 89.650138][ T7525] bond3: (slave geneve2): making interface the new active one [ 89.653741][ T7525] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 89.662335][ T74] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 89.671344][ T74] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 89.675021][ T74] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 89.683758][ T74] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 90.598071][ T7618] __nla_validate_parse: 8 callbacks suppressed [ 90.598085][ T7618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.493'. [ 90.682191][ T7633] netlink: 40 bytes leftover after parsing attributes in process `syz.2.497'. [ 90.687226][ T7633] netlink: 40 bytes leftover after parsing attributes in process `syz.2.497'. [ 91.436893][ T7616] Process accounting resumed [ 91.457524][ T7640] netlink: 'syz.1.499': attribute type 29 has an invalid length. [ 91.603270][ T7650] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 91.644475][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.504'. [ 91.773403][ T7684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5179 sclass=netlink_route_socket pid=7684 comm=syz.0.508 [ 92.440359][ T7764] netlink: 132 bytes leftover after parsing attributes in process `syz.3.539'. [ 92.505786][ T7770] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 92.508398][ T7770] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 92.513010][ T7770] vhci_hcd vhci_hcd.0: Device attached [ 92.516100][ T7771] vhci_hcd: connection closed [ 92.517567][ T13] vhci_hcd: stop threads [ 92.522463][ T13] vhci_hcd: release socket [ 92.524215][ T13] vhci_hcd: disconnect device [ 92.757502][ T40] kauditd_printk_skb: 37971 callbacks suppressed [ 92.757515][ T40] audit: type=1400 audit(2000000010.609:53201): avc: denied { read } for pid=5679 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 92.765550][ T5679] audit: audit_backlog=65 > audit_backlog_limit=64 [ 92.766406][ T40] audit: type=1400 audit(2000000010.609:53202): avc: denied { read } for pid=5679 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 92.768874][ T5679] audit: audit_lost=1386 audit_rate_limit=0 audit_backlog_limit=64 [ 92.775264][ T40] audit: type=1400 audit(2000000010.609:53203): avc: denied { read } for pid=5679 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 92.778776][ T5679] audit: backlog limit exceeded [ 92.785340][ T40] audit: type=1400 audit(2000000010.609:53204): avc: denied { read } for pid=5679 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 92.788280][ T5679] audit: audit_backlog=65 > audit_backlog_limit=64 [ 92.794848][ T40] audit: type=1400 audit(2000000010.609:53205): avc: denied { read } for pid=5679 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 92.797557][ T5679] audit: audit_lost=1387 audit_rate_limit=0 audit_backlog_limit=64 [ 93.062448][ T7788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.548'. [ 93.065167][ T7788] netlink: 'syz.3.548': attribute type 21 has an invalid length. [ 93.147930][ T7796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7796 comm=syz.0.552 [ 93.156402][ T7799] netlink: 'syz.2.550': attribute type 4 has an invalid length. [ 93.274433][ T7813] netlink: 'syz.2.559': attribute type 10 has an invalid length. [ 93.292014][ T7813] team0: Port device netdevsim0 added [ 93.589741][ T7839] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.598315][ T7839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7839 comm=syz.0.568 [ 93.944866][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.575'. [ 94.085579][ T7859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7859 comm=syz.3.577 [ 94.474602][ T7892] netlink: 'syz.0.591': attribute type 4 has an invalid length. [ 94.515725][ T7900] netlink: 'syz.2.594': attribute type 7 has an invalid length. [ 94.567599][ T7905] netlink: 32 bytes leftover after parsing attributes in process `syz.3.596'. [ 94.572920][ T7905] netlink: 32 bytes leftover after parsing attributes in process `syz.3.596'. [ 94.644638][ T7911] bond3: entered allmulticast mode [ 94.646591][ T7911] 8021q: adding VLAN 0 to HW filter on device bond3 [ 94.671542][ T7916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.601'. [ 95.348481][ T5970] Bluetooth: hci1: unexpected cc 0x1408 length: 9 > 4 [ 95.352058][ T5970] Bluetooth: hci1: failed to read key size for handle 200 [ 95.529116][ T7996] vlan0: entered promiscuous mode [ 95.531229][ T7996] bridge0: entered promiscuous mode [ 95.795995][ T8029] __nla_validate_parse: 3 callbacks suppressed [ 95.796007][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 95.845535][ T8035] sp0: Synchronizing with TNC [ 95.851839][ T8035] sp0: Found TNC [ 95.854869][ T8034] [U] ` [ 96.274053][ T8056] sp0: Synchronizing with TNC [ 96.447544][ T8062] netlink: 'syz.0.653': attribute type 3 has an invalid length. [ 96.450265][ T8062] netlink: 'syz.0.653': attribute type 3 has an invalid length. [ 96.523470][ T8066] netlink: 32 bytes leftover after parsing attributes in process `syz.0.655'. [ 96.528049][ T8067] netlink: 32 bytes leftover after parsing attributes in process `syz.0.655'. [ 96.789926][ T8092] syz.0.663 (8092): /proc/8088/oom_adj is deprecated, please use /proc/8088/oom_score_adj instead. [ 97.224883][ T8135] netlink: 'syz.3.678': attribute type 11 has an invalid length. [ 97.305379][ T8138] netlink: 'syz.3.679': attribute type 14 has an invalid length. [ 97.517366][ T8154] bond0: entered promiscuous mode [ 97.519522][ T8154] bond_slave_0: entered promiscuous mode [ 97.522263][ T8154] bond_slave_1: entered promiscuous mode [ 97.524902][ T8154] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 97.531290][ T8154] batadv0: entered promiscuous mode [ 97.536380][ T8154] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 97.542987][ T8154] bond0: left promiscuous mode [ 97.545241][ T8154] bond_slave_0: left promiscuous mode [ 97.547882][ T8154] bond_slave_1: left promiscuous mode [ 97.549746][ T8154] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 97.554126][ T8154] batadv0: left promiscuous mode [ 97.656574][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'. [ 97.721350][ T8165] team0: Port device team_slave_0 removed [ 97.767067][ T40] kauditd_printk_skb: 39288 callbacks suppressed [ 97.767079][ T40] audit: type=1400 audit(2000000015.619:90909): avc: denied { read } for pid=5679 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 97.775616][ T5679] audit: audit_backlog=65 > audit_backlog_limit=64 [ 97.775972][ T40] audit: type=1400 audit(2000000015.619:90910): avc: denied { read } for pid=5679 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 97.778527][ T5679] audit: audit_lost=1916 audit_rate_limit=0 audit_backlog_limit=64 [ 97.789484][ T5679] audit: backlog limit exceeded [ 97.791290][ T5679] audit: audit_backlog=65 > audit_backlog_limit=64 [ 97.792751][ T40] audit: type=1400 audit(2000000015.619:90911): avc: denied { read } for pid=5679 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 97.793252][ T5679] audit: audit_lost=1917 audit_rate_limit=0 audit_backlog_limit=64 [ 97.800382][ T40] audit: type=1400 audit(2000000015.619:90912): avc: denied { read } for pid=5679 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 97.803055][ T5679] audit: backlog limit exceeded [ 97.935839][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.694'. [ 98.007373][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.699'. [ 98.010438][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.699'. [ 98.013694][ T8193] netlink: 'syz.3.699': attribute type 20 has an invalid length. [ 98.016737][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.699'. [ 98.019640][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.699'. [ 98.022354][ T8193] netlink: 'syz.3.699': attribute type 20 has an invalid length. [ 98.092816][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.703'. [ 98.099786][ T8202] bridge0: port 1(macvlan0) entered blocking state [ 98.101971][ T8202] bridge0: port 1(macvlan0) entered disabled state [ 98.103994][ T8202] macvlan0: entered allmulticast mode [ 98.105611][ T8202] bridge0: entered allmulticast mode [ 98.109594][ T8202] macvlan0: left allmulticast mode [ 98.111198][ T8202] bridge0: left allmulticast mode [ 98.127137][ T8204] bridge0: port 1(macvlan0) entered blocking state [ 98.129507][ T8204] bridge0: port 1(macvlan0) entered disabled state [ 98.131929][ T8204] macvlan0: entered allmulticast mode [ 98.136120][ T8204] bridge0: entered allmulticast mode [ 98.147753][ T8204] macvlan0: left allmulticast mode [ 98.149494][ T8204] bridge0: left allmulticast mode [ 98.575869][ T8249] vlan3: entered promiscuous mode [ 98.577822][ T8249] bridge0: entered promiscuous mode [ 98.883736][ T8290] pim6reg1: entered promiscuous mode [ 98.886112][ T8290] pim6reg1: entered allmulticast mode [ 98.939044][ T8296] ip6tnl2: entered promiscuous mode [ 98.941842][ T8296] ip6tnl2: entered allmulticast mode [ 99.047955][ T8303] IPv6: NLM_F_CREATE should be specified when creating new route [ 99.121979][ T8312] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 100.778533][ T8447] mkiss: ax0: crc mode is auto. [ 101.009568][ T8463] __nla_validate_parse: 6 callbacks suppressed [ 101.009583][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 101.218090][ T8494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8494 comm=syz.1.804 [ 101.480329][ T12] Bluetooth: (null): Too short H5 packet [ 101.483735][ T12] Bluetooth: (null): Invalid header checksum [ 101.486388][ T12] Bluetooth: (null): Invalid header checksum [ 101.514691][ T8522] netlink: 'syz.3.812': attribute type 2 has an invalid length. [ 101.569115][ T8444] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 101.572855][ T8444] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 101.587135][ T1151] Bluetooth: (null): Invalid header checksum [ 101.593225][ T8444] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 101.598857][ T8444] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 101.604934][ T8444] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 101.608655][ T8444] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 101.697180][ T1151] Bluetooth: (null): Invalid header checksum [ 101.807627][ T1151] Bluetooth: (null): Invalid header checksum [ 101.916804][ T74] Bluetooth: (null): Invalid header checksum [ 102.027271][ T74] Bluetooth: (null): Invalid header checksum [ 102.063320][ T8575] mkiss: ax0: crc mode is auto. [ 102.137271][ T12] Bluetooth: (null): Invalid header checksum [ 102.234859][ T8589] kernel profiling enabled (shift: 6) [ 102.283063][ T8589] netlink: 32 bytes leftover after parsing attributes in process `syz.2.833'. [ 102.407480][ T8613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.840'. [ 102.656489][ T8650] gtp0: entered allmulticast mode [ 102.685974][ T8651] 8021q: adding VLAN 0 to HW filter on device bond4 [ 102.691004][ T8653] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 102.776356][ T40] kauditd_printk_skb: 26034 callbacks suppressed [ 102.776376][ T40] audit: type=1400 audit(2000000020.619:116770): avc: denied { read } for pid=5679 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 102.785447][ T5679] audit: audit_backlog=65 > audit_backlog_limit=64 [ 102.791974][ T40] audit: type=1400 audit(2000000020.619:116771): avc: denied { read } for pid=5679 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 102.792567][ T5679] audit: audit_lost=1977 audit_rate_limit=0 audit_backlog_limit=64 [ 102.793487][ T8666] audit: audit_backlog=65 > audit_backlog_limit=64 [ 102.793502][ T8666] audit: audit_lost=1978 audit_rate_limit=0 audit_backlog_limit=64 [ 102.793514][ T8666] audit: backlog limit exceeded [ 102.793528][ T8666] audit: audit_backlog=65 > audit_backlog_limit=64 [ 102.793538][ T8666] audit: audit_lost=1979 audit_rate_limit=0 audit_backlog_limit=64 [ 102.793549][ T8666] audit: backlog limit exceeded [ 102.841138][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'. [ 102.960878][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.868'. [ 102.964695][ T8688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 102.969067][ T8688] netlink: 'syz.3.868': attribute type 25 has an invalid length. [ 103.009043][ T8692] netlink: 'syz.1.869': attribute type 1 has an invalid length. [ 103.042844][ T8692] bond3: (slave bridge5): making interface the new active one [ 103.046963][ T8692] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 103.352270][ T8733] netlink: 6 bytes leftover after parsing attributes in process `syz.1.881'. [ 103.473280][ T8741] snd_dummy snd_dummy.0: control 1:96:0:syz0:211 is already present [ 104.019150][ T8762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.022683][ T8762] IPv6: NLM_F_CREATE should be set when creating new route [ 104.372982][ T8776] netlink: 40 bytes leftover after parsing attributes in process `syz.2.900'. [ 104.380595][ T8776] netlink: 24 bytes leftover after parsing attributes in process `syz.2.900'. [ 104.832960][ T8812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8812 comm=syz.1.913 [ 105.241889][ T8825] could not allocate digest TFM handle cryptd(blake2b-160) [ 105.401808][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.923'. [ 105.990761][ T8890] Bluetooth: Invalid byte 01 after esc byte [ 106.576469][ T8931] netlink: 'syz.0.954': attribute type 5 has an invalid length. [ 106.582046][ T8931] ip6erspan0: entered promiscuous mode [ 106.761162][ T8945] __nla_validate_parse: 3 callbacks suppressed [ 106.761174][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.964'. [ 106.890141][ T8959] mkiss: ax0: crc mode is auto. [ 107.048504][ T8973] netlink: 'syz.1.976': attribute type 1 has an invalid length. [ 107.069626][ T8978] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 107.083563][ T8973] 8021q: adding VLAN 0 to HW filter on device bond4 [ 107.094811][ T8973] bond4: (slave geneve2): making interface the new active one [ 107.099007][ T8973] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 107.205715][ T8990] netlink: 68 bytes leftover after parsing attributes in process `syz.3.981'. [ 107.312930][ T9007] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.392233][ T9017] netlink: 'syz.3.992': attribute type 13 has an invalid length. [ 107.441447][ T9024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.995'. [ 107.465138][ T9024] netlink: 132 bytes leftover after parsing attributes in process `syz.0.995'. [ 107.471992][ T9024] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9024 comm=syz.0.995 [ 107.652320][ T9040] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1002'. [ 107.654995][ T9043] futex_atomic_op_inuser: 23 callbacks suppressed [ 107.655005][ T9043] futex_wake_op: syz.3.1004 tries to shift op by -1; fix this program [ 107.786261][ T40] kauditd_printk_skb: 35280 callbacks suppressed [ 107.786272][ T40] audit: type=1400 audit(2000000025.629:151094): avc: denied { read } for pid=5679 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 107.791470][ T9058] bond5: entered allmulticast mode [ 107.795950][ T40] audit: type=1400 audit(2000000025.639:151095): avc: denied { read } for pid=5679 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 107.795978][ T40] audit: type=1400 audit(2000000025.639:151096): avc: denied { read } for pid=5679 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 107.798071][ T9058] 8021q: adding VLAN 0 to HW filter on device bond5 [ 107.804919][ T40] audit: type=1400 audit(2000000025.639:151097): avc: denied { read } for pid=5679 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 107.813356][ T5679] audit: audit_backlog=65 > audit_backlog_limit=64 [ 107.821278][ T40] audit: type=1400 audit(2000000025.639:151098): avc: denied { read } for pid=5679 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 107.821974][ T5679] audit: audit_lost=2299 audit_rate_limit=0 audit_backlog_limit=64 [ 107.831091][ T5679] audit: backlog limit exceeded [ 107.831288][ T40] audit: type=1400 audit(2000000025.639:151099): avc: denied { read } for pid=5679 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 107.831660][ T9061] batman_adv: batadv0: Adding interface: dummy0 [ 107.831673][ T9061] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.831698][ T9061] batman_adv: batadv0: Interface activated: dummy0 [ 107.833007][ T9061] audit: audit_backlog=65 > audit_backlog_limit=64 [ 107.859624][ T9061] netlink: 'syz.0.1009': attribute type 10 has an invalid length. [ 107.867664][ T9061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.870834][ T9061] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 107.875160][ T9061] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1009'. [ 108.056456][ T5970] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 108.062004][ T9076] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.064324][ T9076] IPv6: NLM_F_CREATE should be set when creating new route [ 108.066645][ T9076] IPv6: NLM_F_CREATE should be set when creating new route [ 108.069771][ T9076] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.075602][ T9076] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 108.227272][ T9098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=9098 comm=syz.0.1026 [ 108.295590][ T9109] bond0: entered promiscuous mode [ 108.297474][ T9109] bond_slave_0: entered promiscuous mode [ 108.299314][ T9109] bond_slave_1: entered promiscuous mode [ 108.301323][ T9109] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 108.306440][ T9109] batadv0: entered promiscuous mode [ 108.309644][ T9109] bond0: left promiscuous mode [ 108.311720][ T9109] bond_slave_0: left promiscuous mode [ 108.314211][ T9109] bond_slave_1: left promiscuous mode [ 108.319469][ T9109] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 108.327576][ T9109] batadv0: left promiscuous mode [ 108.342229][ T9110] bond0: entered promiscuous mode [ 108.344178][ T9110] bond_slave_0: entered promiscuous mode [ 108.348327][ T9110] bond_slave_1: entered promiscuous mode [ 108.350373][ T9110] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 108.352974][ T9110] batadv0: entered promiscuous mode [ 108.357628][ T9110] bond0: left promiscuous mode [ 108.359967][ T9110] bond_slave_0: left promiscuous mode [ 108.362647][ T9110] bond_slave_1: left promiscuous mode [ 108.365538][ T9110] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 108.368641][ T9110] batadv0: left promiscuous mode [ 108.387371][ T9119] netlink: 'syz.1.1033': attribute type 10 has an invalid length. [ 108.387839][ T9116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.390416][ T9119] bond0: (slave wlan1): Opening slave failed [ 108.392306][ T9116] IPv6: NLM_F_CREATE should be set when creating new route [ 108.396801][ T9116] IPv6: NLM_F_CREATE should be set when creating new route [ 108.400552][ T9116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.408141][ T9116] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 108.639135][ T9154] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9154 comm=syz.1.1046 [ 108.899500][ T9182] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1059'. [ 109.154126][ T9217] netlink: 'syz.2.1073': attribute type 5 has an invalid length. [ 109.154143][ T9216] netlink: 'syz.2.1073': attribute type 5 has an invalid length. [ 109.238500][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1075'. [ 109.350291][ T9231] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN NOPTI [ 109.354648][ T9231] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 109.358175][ T9231] CPU: 2 UID: 0 PID: 9231 Comm: syz.2.1078 Not tainted syzkaller #0 PREEMPT(full) [ 109.362621][ T9231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.365872][ T9231] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 109.368245][ T9231] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 4a 30 41 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 109.374665][ T9231] RSP: 0018:ffffc90005a7fbf0 EFLAGS: 00010293 [ 109.376718][ T9231] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff887a5b6a [ 109.379283][ T9231] RDX: ffff888032470000 RSI: ffffffff887a5bb6 RDI: 0000000000000005 [ 109.381822][ T9231] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 109.384458][ T9231] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90005a7fd88 [ 109.386900][ T9231] R13: ffffc90005a7fd88 R14: 0000000000000001 R15: ffff888046c75000 [ 109.389357][ T9231] FS: 00007f058fcbb6c0(0000) GS:ffff8880d68b9000(0000) knlGS:0000000000000000 [ 109.392881][ T9231] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.395510][ T9231] CR2: 00007f058fcbaf98 CR3: 000000002c7a8000 CR4: 0000000000352ef0 [ 109.398102][ T9231] Call Trace: [ 109.399279][ T9231] [ 109.400253][ T9231] ? __pfx_bcsp_recv+0x10/0x10 [ 109.401757][ T9231] hci_uart_tty_receive+0x251/0x7e0 [ 109.403369][ T9231] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 109.405239][ T9231] tty_ioctl+0x583/0x1680 [ 109.406845][ T9231] ? __pfx_tty_ioctl+0x10/0x10 [ 109.408664][ T9231] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 109.410792][ T9231] ? hook_file_ioctl_common+0x145/0x410 [ 109.412608][ T9231] ? selinux_file_ioctl+0x180/0x270 [ 109.414369][ T9231] ? selinux_file_ioctl+0xb4/0x270 [ 109.416032][ T9231] ? __pfx_tty_ioctl+0x10/0x10 [ 109.417603][ T9231] __x64_sys_ioctl+0x18b/0x210 [ 109.419058][ T9231] do_syscall_64+0xcd/0x4c0 [ 109.420484][ T9231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.422301][ T9231] RIP: 0033:0x7f058ed8ebe9 [ 109.423610][ T9231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.429800][ T9231] RSP: 002b:00007f058fcbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.432727][ T9231] RAX: ffffffffffffffda RBX: 00007f058efb6090 RCX: 00007f058ed8ebe9 [ 109.435255][ T9231] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000004 [ 109.437875][ T9231] RBP: 00007f058ee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 109.440569][ T9231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.442985][ T9231] R13: 00007f058efb6128 R14: 00007f058efb6090 R15: 00007ffcaf304d48 [ 109.445517][ T9231] [ 109.446510][ T9231] Modules linked in: [ 109.448358][ T9231] ---[ end trace 0000000000000000 ]--- [ 109.451142][ T9231] RIP: 0010:bcsp_recv+0x10a/0x17f0 May 18 03:33:47 [ 109.453947][ T9231] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 4a 30 41 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 syzkaller kern.a[ 109.462228][ T9231] RSP: 0018:ffffc90005a7fbf0 EFLAGS: 00010293 lert kernel: [ [ 109.465362][ T9231] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff887a5b6a 109.354648][ T92[ 109.469275][ T9231] RDX: ffff888032470000 RSI: ffffffff887a5bb6 RDI: 0000000000000005 31] KASAN: null-[ 109.472624][ T9231] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 109.475913][ T9231] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90005a7fd88 ptr-deref in ran[ 109.478645][ T9231] R13: ffffc90005a7fd88 R14: 0000000000000001 R15: ffff888046c75000 [ 109.482217][ T9231] FS: 00007f058fcbb6c0(0000) GS:ffff8880d68b9000(0000) knlGS:0000000000000000 ge [0x0000000000[ 109.485483][ T9231] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 000108-0x0000000[ 109.488962][ T9231] CR2: 00007f058fcbaf98 CR3: 000000002c7a8000 CR4: 0000000000352ef0 000[0 0 01100f]9.4 93021][ T9231] Kernel panic - not syncing: Fatal exception [ 109.496401][ T9231] Kernel Offset: disabled [ 109.498190][ T9231] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:43:08 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000046 RBX=0000000000000201 RCX=ffffffff8b60ab7f RDX=ffff888029a82440 RSI=0000000000000201 RDI=ffffffff8b60aa59 RBP=0000000000000246 RSP=ffffc90005bb7a88 R8 =0000000000000004 R9 =0000000000000080 R10=0000000000000000 R11=ffffffff9b01f878 R12=ffffffff8b60ad30 R13=ffff88802f685140 R14=ffff88802d05cd80 R15=ffff88803be0aa28 RIP=ffffffff817c1654 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f058fc9ad58 CR3=000000002c7a8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcaf305256 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcaf305256 00007ffcaf30525c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f058ee12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f058ee12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f058ee12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f058ee12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f058ee12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f058ee12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f058ef874a8 00007f058ef874a0 00007f058ef87498 00007f058ef87470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f058faed100 00007f058ef87460 00007f058ef87478 00007f058ef874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f058ef874b8 00007f058ef874b0 00007f058ef874a8 00007f058ef874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000acbec RBX=0000000000000001 RCX=ffffffff8b93bc29 RDX=ffffed100d4a6656 RSI=ffffffff8c162880 RDI=ffffffff81913331 RBP=ffffed1003bd2488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801de92440 R14=ffffffff90ab4c90 R15=0000000000000000 RIP=ffffffff8b93a78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f058fcdbf98 CR3=0000000032fd4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde4fa2b16 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde4fa2b16 00007ffde4fa2b1c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb03da12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb03da12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb03da12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb03da12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb03da12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb03da12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a34c788662bb9e9e 28094c1cb3b47c5a 8af358d728e9b4f6 1422600a837628a5 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb03e6ed100 00007fb03db87460 00007fb03db87478 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb03db874b8 00007fb03db874b0 00007fb03db874a8 00007fb03db874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643c85 RDI=ffffffff9b1110a0 RBP=ffffffff9b111060 RSP=ffffc90005a7f560 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552032203a555043 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9b111060 R15=ffffffff85643c20 RIP=ffffffff85643caf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f058fcbb6c0 ffffffff 00c00000 GS =0000 ffff8880d68b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f058fcbaf98 CR3=000000002c7a8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcaf305256 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcaf305256 00007ffcaf30525c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f058ee12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f058ee12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f058ee12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f058ee12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f058ee12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f058ee12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f058ef874a8 00007f058ef874a0 00007f058ef87498 00007f058ef87470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f058faed100 00007f058ef87460 00007f058ef87478 00007f058ef874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f058ef874b8 00007f058ef874b0 00007f058ef874a8 00007f058ef874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000010 RBX=ffff88803771c680 RCX=00000000001720eb RDX=00000000001720e3 RSI=ffffffff93d85830 RDI=ffff88803771c240 RBP=ffffc90003a67c80 RSP=ffffc90003a67c20 R8 =0000000000000001 R9 =0000000000000000 R10=00000000ffffffff R11=0000000000000001 R12=ffff88801b842780 R13=0000000000000dc0 R14=0000000000000018 R15=ffffffff896b3727 RIP=ffffffff82174131 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f058fc9a6c0 ffffffff 00c00000 GS =0000 ffff8880d69b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f058fc99f98 CR3=000000002c7a8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcaf305256 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcaf305256 00007ffcaf30525c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f058ee12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f058ee12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f058ee12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f058ee12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f058ee12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f058ee12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f058ef874a8 00007f058ef874a0 00007f058ef87498 00007f058ef87470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f058faed100 00007f058ef87460 00007f058ef87478 00007f058ef874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f058ef874b8 00007f058ef874b0 00007f058ef874a8 00007f058ef874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000