last executing test programs: 31.564592218s ago: executing program 1 (id=78): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc3}, &(0x7f00000001c0)={0x0, "f4965dc85ee155e888a6d6a42d57c86b931f78a74beac7338010ece6a4c51e035525340e2a564cbc6c44a6663bd0ebd2bb4c9396bb05f9f0cb5d6728b9f4bfb6", 0x31}, 0x48, r1) (async) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x1f) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x100000000000f7) read$watch_queue(r2, &(0x7f0000000280)=""/162, 0xa2) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="bb64753734e50b1e3f220065b7a35d32", 0x10) close_range(r4, 0xffffffffffffffff, 0x0) (async) keyctl$revoke(0x3, r0) 31.5145725s ago: executing program 1 (id=79): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x34, 0x2e, 0xc, 0x8, @rand_addr=' \x01\x00', @local, 0x7, 0x7, 0x7645, 0xfffffffe}}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delchain={0x54, 0x65, 0x4, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x9, 0xfff1}, {0xe}, {0x3, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0xf0, 0xf3}}, @TCA_CHAIN={0x8, 0xb, 0x91}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}, @TCA_RATE={0x6, 0x5, {0x6, 0xf9}}]}, 0x54}}, 0x0) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket(0x2, 0x2, 0x1) bind$unix(r4, &(0x7f0000000000)=@abs, 0x6e) r5 = socket(0x25, 0xa, 0x3) bind$unix(r5, &(0x7f0000000000)=@abs, 0x6e) (async) r6 = socket(0x2, 0x2, 0x1) bind$unix(r6, &(0x7f0000000000)=@abs, 0x6e) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r7, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) sendmsg$nl_netfilter(r1, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x3, 0xa, 0x401, 0x70bd28, 0x25dfdbff, {0x5, 0x0, 0x4}, [@typed={0xc, 0xbb, 0x0, 0x0, @u64=0x69ba}, @typed={0x8, 0xfe, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0x6b, 0x0, 0x0, @uid}, @typed={0x8, 0x123, 0x0, 0x0, @uid}, @nested={0x8, 0x10d, 0x0, 0x1, [@nested={0x4, 0x124}]}, @typed={0xc, 0x79, 0x0, 0x0, @str='syztnl2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) (async) rt_tgsigqueueinfo(0x0, 0x0, 0x400000a, &(0x7f0000000600)={0x81, 0x3, 0xfffff2bb}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) (async) ptrace$poke(0x4, r8, &(0x7f0000000080), 0x0) write$P9_RGETLOCK(r3, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TCFLSH(r9, 0x540b, 0x2) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000e300000000000000140007800802004000000000050015000600000005000100060000e005000500020005000500040000ed0f6ade75cb704d1e0000000900020073797a310000000011000300686173683a69702c706f7274ea31fe8dff28278ede009c3947a5cfcf5585ee9327adc39e4e404af1c16a419f1ad55c5eecdeb8c4edbcb4f424266d99886e7bfc6495fbb895a3b10d746399080000008ed7b7a4f771800ee2f7747a6da53c6919028b995c8ede193d237ece66a76f1d7b9d04bfd90583a0dd43aa0e1a16bc707fc57d331e9d9e62dd6e4fcb09b0f2bf9397079e21a0689e7c6fce6d6d262639c40a7f025435fd8700"/272], 0x60}}, 0x200440d0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x0) (async) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x187e00) 31.43487951s ago: executing program 1 (id=81): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) sendto$inet6(r1, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000002c0)={0xa, 0x2, 0x395, @empty}, 0x1c) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="810100"], 0x8) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0x8c, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r7, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x60, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_SEL={0x54, 0x5, {0x0, 0x9, 0x4, 0x9e, 0x8, 0x0, 0x4, 0x5, [{0x6, 0xfffffff8, 0x2, 0xffff}, {0x6, 0xfffff801, 0x1000, 0x6}, {0x0, 0x20000000, 0x8, 0x1a15}, {0x9, 0x8, 0xb, 0x4}]}}]}}]}, 0x8c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@delchain={0x2c, 0x65, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff1, 0xfff2}, {0xe, 0x3}, {0x1, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}}, 0x20000080) r8 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000000)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "3377f877c734c40400", "000100", "0200", "be4d22a4", ["c3d452871700", "51f3ffcb3a1000", "e100"]}) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000080)={0x7ff, r8, 0x2}) ioctl$IOC_PR_RELEASE(r9, 0x401070ca, &(0x7f00000000c0)={0x8, 0xec8d, 0x1}) mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, &(0x7f0000001900)=ANY=[@ANYBLOB='mode=00000000,\x00'/26]) 31.373224222s ago: executing program 1 (id=82): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x40202, 0x0) write$FUSE_WRITE(r0, &(0x7f0000002500)={0x18, 0x0, 0x0, {0x4}}, 0x18) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) r1 = inotify_init() r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000340), 0x8) inotify_add_watch(r1, &(0x7f0000000080)='./file1\x00', 0x424) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84bc36e98a7ee39260663a6ffffffffffffff7fbdca5386103a5ccbe47b9aa6d8d701a3ba08000000b97800001022f987617c3185003400", 0x3a}, 0x60) getsockopt$inet_buf(r5, 0x118, 0x2, 0x0, &(0x7f00000003c0)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x48, r7, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}]}]}, 0x48}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002200000327bd7000fedbdf250a1480010400070810000100"], 0x1c}}, 0x4001) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000007, 0x40010, r4, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) 31.233892379s ago: executing program 1 (id=88): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)={0x50, r1, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffffb, 0xfffffffc}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x2) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)={0x50, r1, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffffb, 0xfffffffc}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) 30.954511697s ago: executing program 1 (id=96): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x10}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e20, 0x6, @local, 0x3}}, 0xffff, 0x10}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1159b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x200}]}}}]}, 0x44}}, 0x0) 30.918304808s ago: executing program 32 (id=96): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x10}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e20, 0x6, @local, 0x3}}, 0xffff, 0x10}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1159b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x200}]}}}]}, 0x44}}, 0x0) 2.784208835s ago: executing program 0 (id=541): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x10000) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x401, 0x6}) 1.604377916s ago: executing program 3 (id=565): r0 = fsopen(&(0x7f0000000000)='iso9660\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) (async) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 1.064296902s ago: executing program 3 (id=566): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x300, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4040810) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000140)={0x4}) (async) r2 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x80) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r3) ioctl$VHOST_VDPA_GET_DEVICE_ID(r1, 0x8004af70, &(0x7f0000000200)) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000240)={0xc, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f0000000280)={0x18, r4}) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f00000002c0)) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={'pim6reg\x00', {0x2, 0x4e22, @loopback}}) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d12, &(0x7f0000000340)) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000380)) (async) accept4$unix(r2, &(0x7f00000003c0), &(0x7f0000000440)=0x6e, 0xc00) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r5, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000001}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x250000, 0x80) (async) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000640)=0x81, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)) (async) dup(r1) r6 = openat(0xffffffffffffffff, &(0x7f00000006c0)='./file1\x00', 0x8300, 0x80) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) syz_open_dev$vim2m(&(0x7f0000000700), 0x8000000000000000, 0x2) (async) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x400}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x8081) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80010}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x3e7d9b05f633ad8d}, 0x20000001) 1.048656626s ago: executing program 3 (id=567): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64) syz_clone(0xc0080, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) (rerun: 64) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000001100)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 64) r4 = dup2(r1, r1) (rerun: 64) sendmmsg$unix(r4, &(0x7f0000008380), 0x400000000000174, 0x4008890) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) 923.754691ms ago: executing program 2 (id=569): r0 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000100)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="80fd01fff140", 0x6}], 0x1, 0x2, 0x3) lsm_get_self_attr(0x67, &(0x7f0000000340)={0x0, 0x0, 0x94, 0x74, ""/116}, &(0x7f0000000100)=0x94, 0x0) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r2) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, r2, &(0x7f0000000140)='./file0\x00') cachestat(r0, &(0x7f00000001c0)={0x5, 0x6}, &(0x7f0000000200), 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000911053000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900400000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) 814.184645ms ago: executing program 3 (id=571): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='source', &(0x7f0000000500)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xc1\t\xb7b\x12A\x1d`\x16\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\xb7\x8a\":\xc1I;\x03\xe2<\xdf;\xce\x93\xd3\xd2\x19\x964\xeb\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1H\x9a_\xe3*\xc6\xca>\xe0\xb9\x1e\xe1\xf4\x90\xe2\x12]\x01v\xbd\x0e\x0f J\x1d\xcb\xd9:\xa6U\f|\xce\b\x00\x00\x00$\xa5&\x1fu\x1b\x15v\xd0\xd8\x9fH54\xaa\xf2t.I\x96\x1c\t\xe42\x02\x85\xa0\xc2T\x02\x99\"K\f\x03i\xba', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x922ecbcc}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 714.347714ms ago: executing program 3 (id=572): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000800000000000000004000000180100002020702500000000002020207b1af8ff00000000bfa108000000000047010000f6ffffffb702000008001000b703000000000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x1}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 713.929913ms ago: executing program 2 (id=573): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x30, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) remap_file_pages(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x0, 0x3, 0x100000) 713.273339ms ago: executing program 3 (id=574): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x1c, 0x14, 0x1, 0x800000, 0x0, "", [@typed={0xa, 0x15, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = socket(0x10, 0x803, 0x0) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xd}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xba}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000800) r3 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x1000, 0x0, {0xa, 0x78, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x1000000, 0xfffff001}}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x54}}, 0x0) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) write$UHID_CREATE2(r1, &(0x7f0000000140)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0xca, 0x5, 0x4, 0x3, 0x2, 0x5, "5e6a45bd194ea1bfc91c953a6fdd019d1d3d3bf6f57e5577584c4c638bbf59bd8153d28e60ad6f06aa7e3aa0372642a9653fac4f603ff1b13d9610ebc41b719576930c9b81261398e7cd44b5e40c7bde4f77c011d7eda321c131b24ea44c81f2d81ce664e1911b5e1e9f7369972d413516a4eb56d1f3a9deef1ac58f142d6d0a081610ca53d436a49ed454667a973bdd10d00ded222bf15122563116e73b14d0b0c4ac12b13ecffaa4686c0d3a6ad81d9ac70109fbb7b5f2f0ca7f20d4dc37eadd656e1c43fbb231d376"}}, 0x1e2) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r6, &(0x7f0000000240)={0x1000000, 0x0, 0x2, 0xffff, 0x3, "82b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700"/48}, 0x40) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) sendmmsg$inet(r5, &(0x7f0000001280), 0x0, 0x8011) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept(r7, &(0x7f0000000000)=@generic, &(0x7f0000000100)=0x80) syz_clone3(&(0x7f0000000080)={0x2d088c00, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) 643.970149ms ago: executing program 2 (id=575): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FITHAW(r0, 0xc0045878) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$BLKOPENZONE(r1, 0x40101286, &(0x7f0000000040)={0xfff, 0x509}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x44, r4, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3d07, 0x74}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x80) sendto$inet6(r3, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d270015000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160016000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0xfffffffffffffe6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r8}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4008014) 643.611161ms ago: executing program 4 (id=576): setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000280)=[{0x3, 0x0, {0x1, 0x0, 0x2}, {0x1, 0xff, 0x4}, 0x1, 0xfe}, {0x1, 0x2, {0x1}, {0x1, 0xff, 0x2}, 0xfe}, {0x0, 0xfffffffffffffffb, {0x0, 0xf0, 0x2}, {0x1}, 0x0, 0xff}], 0x60) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r3, 0x0, 0x0) close(r3) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000300)={0xc, @sliced={0x5, [0x800, 0x11, 0x4, 0x8bb, 0x5, 0x8, 0x81, 0x6, 0x0, 0x9, 0x4, 0x7ff, 0x4e71, 0x7, 0x68e, 0xbb0, 0xbc, 0x0, 0x7, 0x9, 0x5, 0x0, 0x10c, 0x1, 0x8, 0x3, 0x6eaf, 0xa, 0x7, 0x4, 0x7, 0xea8, 0x1, 0x9, 0x4, 0xf3, 0xfff, 0xb3b, 0x1, 0xc, 0x6, 0x1, 0xff1e, 0x7, 0xe, 0x3, 0xf001, 0x8001], 0x1}}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000440)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000500)=0x90) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000280)=[{0x3, 0x0, {0x1, 0x0, 0x2}, {0x1, 0xff, 0x4}, 0x1, 0xfe}, {0x1, 0x2, {0x1}, {0x1, 0xff, 0x2}, 0xfe}, {0x0, 0xfffffffffffffffb, {0x0, 0xf0, 0x2}, {0x1}, 0x0, 0xff}], 0x60) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) bind$tipc(r3, 0x0, 0x0) (async) close(r3) (async) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000300)={0xc, @sliced={0x5, [0x800, 0x11, 0x4, 0x8bb, 0x5, 0x8, 0x81, 0x6, 0x0, 0x9, 0x4, 0x7ff, 0x4e71, 0x7, 0x68e, 0xbb0, 0xbc, 0x0, 0x7, 0x9, 0x5, 0x0, 0x10c, 0x1, 0x8, 0x3, 0x6eaf, 0xa, 0x7, 0x4, 0x7, 0xea8, 0x1, 0x9, 0x4, 0xf3, 0xfff, 0xb3b, 0x1, 0xc, 0x6, 0x1, 0xff1e, 0x7, 0xe, 0x3, 0xf001, 0x8001], 0x1}}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000440)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000500)=0x90) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) (async) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) (async) 643.178484ms ago: executing program 0 (id=577): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bridge0\x00', @ifru_mtu=0x4}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 564.180206ms ago: executing program 4 (id=578): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000580), 0xd21, 0x200) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x800004, 0x0, 0x0, 0x0, [], [0x0, 0xffffffff, 0x8], [], [0x0, 0x4]}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x800004, 0xc, 0x10, 0x2, [], [0x0, 0xffffffff, 0x4], [0x0, 0x4, 0xffffffff, 0xfffffffe], [0x0, 0x4, 0x9]}) getsockopt(r0, 0x28, 0x2, &(0x7f0000001680)=""/59, &(0x7f0000000000)=0x3b) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000200)={0x0, 0x0, 0xc0000}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000560000000000000066ba2100b066eeb9e00a00000f"], 0x56}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000380)={0x2, 0x102000, 0x1}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000002340)={0x0, 0x0, @pic={0x7, 0x10, 0x4, 0x81, 0x0, 0xb, 0x7, 0x9, 0x5d, 0x1, 0x8, 0x40, 0x31, 0x0, 0x5, 0x4b}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_cache\x00') read$FUSE(r8, &(0x7f0000002240)={0x2020}, 0x202c) 563.931786ms ago: executing program 0 (id=579): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8001, 0x8005, @loopback, 0x1}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000280)={0x6, 0x1, 0x0, "cb9649f4ad7d527a0e7447de4048315cdd8a771b391c208d2bd399e0a56bade4"}) 563.148218ms ago: executing program 2 (id=580): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000080)=ANY=[@ANYRES64=r0]) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf93", 0xa1}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000040)="f30f00d5260fdc26b5a1bad00466b8a235000066efba2000b000eef26f0f01c90feeb18348c0f4000fc7b6020066a20200", 0x31}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x80, 0x0, 0x84, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0x6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 494.106736ms ago: executing program 0 (id=581): r0 = socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xd, 0x0, 0x10, r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x10) write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@void, @val={0x1, 0x0, 0x7, 0x7, 0x3, 0x5}, @ipv4=@tipc={{0x23, 0x4, 0x3, 0x1, 0xba, 0x67, 0x0, 0xe9, 0x6, 0x0, @empty, @rand_addr=0x64010101, {[@timestamp={0x44, 0x1c, 0xf2, 0x0, 0xa, [0x9, 0xfffffffb, 0x3, 0x0, 0x10001, 0x7]}, @noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0xe0, 0x0, 0xf, [0x5, 0x1ff, 0xca, 0x6, 0x5]}, @timestamp={0x44, 0x28, 0xa5, 0x0, 0x9, [0x401, 0xfff, 0x3, 0x1, 0x372, 0x40, 0xfff, 0x4, 0x9]}, @ssrr={0x89, 0x17, 0x98, [@remote, @empty, @multicast2, @broadcast, @empty]}]}}, @payload_named={{{{{0x2e, 0x0, 0x1, 0x0, 0x1, 0xa, 0x2, 0x2, 0x1, 0x0, 0x3, 0x9, 0x0, 0x2, 0x81, 0xfff0, 0x4, 0x4e23, 0x4e22}, 0x3, 0x3}, 0x2, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}, 0xc4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_open_dev$rtc(0xfffffffffffffffc, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$kcm(r2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000c40), 0x12) setsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000200)=0x100082, 0x4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002ebd7000000000001400000018000180140006006e657464657673696d300000000000000900040000000080"], 0x34}}, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0) 294.403906ms ago: executing program 0 (id=582): r0 = socket(0x28, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x7ffd, 0x2, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0x800a9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x40, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x2d, 0x4, 0x7, 0x20003, 0x8, 0x2, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x100003e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x8, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x1, 0x1, 0x40], [0x10000007, 0x3ff, 0x8000012f, 0x8001, 0x5, 0xffffffb3, 0x129432f6, 0xc8, 0xf1, 0xa, 0x2bf, 0x6c7, 0x6, 0xfffffffc, 0x8, 0x0, 0x0, 0x3, 0x2f, 0x575e, 0x312, 0x66abcbd2, 0xea4, 0x1000000, 0x4, 0x7, 0x7f, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0xe, 0x9, 0x8, 0x2, 0x2, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0x10, 0x48c93690, 0x42, 0x3], [0x4, 0x404, 0x4, 0x3, 0xfffffffd, 0x100, 0x4, 0xb, 0x5, 0x8000, 0x0, 0x401, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x7, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x400, 0x5, 0x38, 0x7f67, 0x200, 0x7d, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac7, 0xbf, 0x2, 0x7, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x807ff, 0x2004, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1935, 0x6, 0x10006, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0x8000, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a5, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x7, 0x1, 0x80007b, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x5c, 0x30b1d693, 0xa, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xe) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, 0x0) socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x6a, 0x2, 0x20000000, 0xb) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) getsockname$ax25(r7, &(0x7f0000000100)={{}, [@netrom, @bcast, @rose, @null, @netrom, @netrom, @default, @null]}, &(0x7f0000000180)=0x48) 293.281868ms ago: executing program 4 (id=583): r0 = socket$netlink(0x10, 0x3, 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{}, {0x0, 0xea60}}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4) read$char_usb(r1, &(0x7f0000000040)=""/236, 0xec) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 214.068772ms ago: executing program 0 (id=584): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x121000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x7, 0x9, 0x3, 0x0, 0x4, 0xb8, 0x1, 0x5, 0x2e, 0xd, 0x4, 0xb, 0x0, 0xc23, 0x2, 0x0, 0x0, 0x7, 0x7, '\x00', 0x2, 0x6}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000140)={[{0x5, 0x71c, 0x7d, 0x80, 0x2, 0x40, 0x4, 0xf6, 0xfd, 0x7, 0x66, 0x81, 0xc}, {0x3, 0x30a2, 0x1, 0x2, 0x3, 0x9, 0x1, 0x98, 0x3, 0xf1, 0x40, 0xff, 0x2}, {0x7fffffff, 0x5, 0x1, 0x2e, 0x3, 0x4, 0xdf, 0x5, 0x80, 0x1, 0xb, 0x4, 0xffffffffffff8001}], 0x8}) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32) 213.77669ms ago: executing program 2 (id=585): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) sendto$inet6(r1, &(0x7f00000001c0)="1f7bf742f341d8b7a4640fc90ab915317cc16a34f1f67818e1ffb5b3746d4a95d63f4487df7157ac6e4c58c186d66e468ff4f3", 0x33, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0xfffffffc, @private0, 0x5}, 0x1c) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000100)={0x8, 0x4, 0x1b6}) pread64(r4, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000140)={0xb}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) write$tun(r7, &(0x7f00000003c0)={@void, @val={0x3, 0x1, 0x1, 0xff, 0x7, 0xbdd0}, @mpls={[{0x1}, {0x1}, {0x7fff, 0x0, 0x1}, {0x8}, {0x4, 0x0, 0x1}, {0xffffe, 0x0, 0x1}, {0xf0e8d, 0x0, 0x1}]}}, 0x26) r8 = dup(r6) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000000000000000fffff000000000000900020073792b32000000000500040000000000050005000200000010000300686173683a69702c6d616300050001"], 0x54}}, 0x0) ioctl$TCGETS2(r8, 0x802c542a, &(0x7f0000000340)) r9 = syz_open_dev$audion(&(0x7f0000000200), 0xf, 0x4800) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000280)={0x3a0000, 0x7, 0x1, r9, 0x0, &(0x7f0000000240)={0x9a090b, 0x5f, '\x00', @value=0x7}}) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r10, 0x117, 0x6, 0x0, 0x5) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1000}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffffffff}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}]}, 0x80}, 0x1, 0x0, 0x0, 0xa42742cc92b600c6}, 0x40000) 74.108794ms ago: executing program 4 (id=586): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x80}}, 0x8000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000100)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000080)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000100)=0x2, 0x4) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 68.512902ms ago: executing program 4 (id=587): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) (async, rerun: 64) r3 = accept4(r2, 0x0, 0x0, 0x0) (rerun: 64) sendmmsg$alg(r3, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d", 0x5}], 0x2}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r4 = accept4(r1, 0x0, 0x0, 0x800) (async, rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (rerun: 64) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='io_uring_link\x00', r5, 0x0, 0x4}, 0x18) (async) r7 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000440)={0x53, 0x22, 0x10, 0x0, @scatter={0x0, 0x3e00, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0x10, 0x39, 0x0, 0x0}) ioctl$SG_GET_REQUEST_TABLE(r7, 0x2286, &(0x7f00000000c0)) (async, rerun: 64) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r6, @ANYRESOCT=r0, @ANYRES64=r6, @ANYRES8=0x0, @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRESHEX=r7], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='io_uring_link\x00', r8, 0x0, 0x4}, 0x18) r9 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0xfffffff8, 0x100, 0x2000000}, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x44, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000022}) (async, rerun: 32) io_uring_enter(r9, 0x47f6, 0x0, 0x0, 0x0, 0x0) (rerun: 32) sendmmsg$alg(r4, &(0x7f00000213c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="f78d9ca38fff48f3be5216", 0xb}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372", 0x15}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f", 0x70}], 0x3}], 0x1, 0x40800) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x0) 378.056µs ago: executing program 2 (id=588): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000050000000200"], 0x48) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x4f23, 0x5, 0xe, 0x1, 0x7ff, 0x9, 0x8, 0xc3a, 0xa, 0x1, 0x4, 0x9, 0x1, 0x1, 0x440b, 0x102, 0x9, 0x1a449, 0x3, 0x8001, 0xbe, 0xcaa7, 0x0, 0x20001e58, 0x800b, 0xe69, 0x3c, 0x10000006, 0x10000006, 0x1, 0xfffffff8]}) getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f00000006c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000019110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000810000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 0s ago: executing program 4 (id=589): r0 = socket$inet(0x2, 0x800, 0x0) getsockopt$sock_buf(r0, 0x6, 0x37, &(0x7f0000003340)=""/4096, &(0x7f0000000380)=0x1000) r1 = socket(0x2, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x38, r4, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0xd8, 0x10004, 0x5, 0x2, r3}, &(0x7f0000000440)=0xffffff6b) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e23, 0x4, @private2, 0x3}}}, &(0x7f00000000c0)=0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d440e8b089b3f380068090890e0878f0e1ac6e7049b334d959b669a240d5b67f3988f7ef319520120ffe8d178708c523c921b1b5b5b070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f00000001c0)={r8, @in6={{0xa, 0x4e20, 0x3, @private2, 0xffffffff}}}, 0x90) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={r8, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r5, 0x2860}, 0x8) kernel console output (not intermixed with test programs): [ 38.103088][ T40] audit: type=1400 audit(1756984328.034:60): avc: denied { rlimitinh } for pid=5871 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.111269][ T40] audit: type=1400 audit(1756984328.034:61): avc: denied { siginh } for pid=5871 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:42967' (ED25519) to the list of known hosts. [ 38.995486][ T40] audit: type=1400 audit(1756984328.954:62): avc: denied { name_bind } for pid=5881 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.018944][ T40] audit: type=1400 audit(1756984328.974:63): avc: denied { write } for pid=5882 comm="sh" path="pipe:[7239]" dev="pipefs" ino=7239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.030678][ T40] audit: type=1400 audit(1756984328.994:64): avc: denied { execute } for pid=5882 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.037582][ T40] audit: type=1400 audit(1756984328.994:65): avc: denied { execute_no_trans } for pid=5882 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.104961][ T40] audit: type=1400 audit(1756984331.064:66): avc: denied { mounton } for pid=5882 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.107557][ T5882] cgroup: Unknown subsys name 'net' [ 41.276442][ T5882] cgroup: Unknown subsys name 'cpuset' [ 41.280688][ T5882] cgroup: Unknown subsys name 'rlimit' [ 41.529978][ T5896] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.270859][ T5882] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.369983][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 45.369994][ T40] audit: type=1400 audit(1756984335.324:80): avc: denied { execmem } for pid=5961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.571310][ T40] audit: type=1400 audit(1756984335.524:81): avc: denied { create } for pid=5965 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.589087][ T40] audit: type=1400 audit(1756984335.524:82): avc: denied { read write } for pid=5965 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.598117][ T40] audit: type=1400 audit(1756984335.524:83): avc: denied { open } for pid=5965 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.604107][ T5967] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.605399][ T40] audit: type=1400 audit(1756984335.534:84): avc: denied { ioctl } for pid=5965 comm="syz-executor" path="socket:[6117]" dev="sockfs" ino=6117 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.608733][ T5972] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.623253][ T5972] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.625991][ T5972] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.628499][ T5972] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.634407][ T40] audit: type=1400 audit(1756984335.594:85): avc: denied { read } for pid=5965 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.635635][ T5971] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.636865][ T5974] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.641349][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.641462][ T40] audit: type=1400 audit(1756984335.594:86): avc: denied { open } for pid=5965 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.641487][ T40] audit: type=1400 audit(1756984335.594:87): avc: denied { mounton } for pid=5965 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.643917][ T5971] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.646288][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.647924][ T5971] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.655228][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.662721][ T5971] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.664338][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.666238][ T5971] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.668202][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.670176][ T5967] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.681882][ T5967] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.686947][ T5967] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.689874][ T5967] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.757615][ T40] audit: type=1400 audit(1756984335.714:88): avc: denied { module_request } for pid=5965 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.789803][ T5965] chnl_net:caif_netlink_parms(): no params data found [ 45.958043][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.960676][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.963007][ T5965] bridge_slave_0: entered allmulticast mode [ 45.965826][ T5965] bridge_slave_0: entered promiscuous mode [ 46.003478][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.005746][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.007981][ T5965] bridge_slave_1: entered allmulticast mode [ 46.010545][ T5965] bridge_slave_1: entered promiscuous mode [ 46.017874][ T5973] chnl_net:caif_netlink_parms(): no params data found [ 46.108447][ T5969] chnl_net:caif_netlink_parms(): no params data found [ 46.113705][ T5976] chnl_net:caif_netlink_parms(): no params data found [ 46.129157][ T5965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.140418][ T5965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.276074][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.278347][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.280566][ T5973] bridge_slave_0: entered allmulticast mode [ 46.283100][ T5973] bridge_slave_0: entered promiscuous mode [ 46.288034][ T5965] team0: Port device team_slave_0 added [ 46.302806][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.305247][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.307812][ T5973] bridge_slave_1: entered allmulticast mode [ 46.310560][ T5973] bridge_slave_1: entered promiscuous mode [ 46.313893][ T5965] team0: Port device team_slave_1 added [ 46.410149][ T5973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.439553][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.442015][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.444572][ T5969] bridge_slave_0: entered allmulticast mode [ 46.447286][ T5969] bridge_slave_0: entered promiscuous mode [ 46.450510][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.452967][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.456079][ T5976] bridge_slave_0: entered allmulticast mode [ 46.458662][ T5976] bridge_slave_0: entered promiscuous mode [ 46.462051][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.464615][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.466949][ T5976] bridge_slave_1: entered allmulticast mode [ 46.469526][ T5976] bridge_slave_1: entered promiscuous mode [ 46.473421][ T5973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.477639][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.480250][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.490272][ T5965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.495590][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.497939][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.500228][ T5969] bridge_slave_1: entered allmulticast mode [ 46.502904][ T5969] bridge_slave_1: entered promiscuous mode [ 46.550042][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.552232][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.560416][ T5965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.621883][ T5976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.627014][ T5973] team0: Port device team_slave_0 added [ 46.658180][ T5976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.662390][ T5973] team0: Port device team_slave_1 added [ 46.667204][ T5965] hsr_slave_0: entered promiscuous mode [ 46.669523][ T5965] hsr_slave_1: entered promiscuous mode [ 46.674027][ T5969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.719499][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.721641][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.729724][ T5973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.735615][ T5969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.753423][ T5976] team0: Port device team_slave_0 added [ 46.756653][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.758851][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.767145][ T5973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.807979][ T5976] team0: Port device team_slave_1 added [ 46.898764][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.900946][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.908822][ T5976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.913683][ T5969] team0: Port device team_slave_0 added [ 46.920873][ T5969] team0: Port device team_slave_1 added [ 46.941817][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.944213][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.952087][ T5976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.990265][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.992503][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.000995][ T5969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.030010][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.032350][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.040889][ T5969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.060845][ T5973] hsr_slave_0: entered promiscuous mode [ 47.063971][ T5973] hsr_slave_1: entered promiscuous mode [ 47.066276][ T5973] debugfs: 'hsr0' already exists in 'hsr' [ 47.068227][ T5973] Cannot create hsr debugfs directory [ 47.133556][ T5976] hsr_slave_0: entered promiscuous mode [ 47.136929][ T5976] hsr_slave_1: entered promiscuous mode [ 47.139141][ T5976] debugfs: 'hsr0' already exists in 'hsr' [ 47.141161][ T5976] Cannot create hsr debugfs directory [ 47.254582][ T5969] hsr_slave_0: entered promiscuous mode [ 47.256798][ T5969] hsr_slave_1: entered promiscuous mode [ 47.259398][ T5969] debugfs: 'hsr0' already exists in 'hsr' [ 47.261169][ T5969] Cannot create hsr debugfs directory [ 47.412385][ T5965] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.427463][ T5965] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.432193][ T5965] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.439607][ T5965] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.538002][ T5976] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.546648][ T5976] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.553903][ T5976] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.562261][ T5976] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.622291][ T5973] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.628471][ T5973] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.636545][ T5973] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.646291][ T5973] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.663798][ T5967] Bluetooth: hci0: command tx timeout [ 47.667305][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.719406][ T5969] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.723671][ T5969] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.728898][ T5965] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.733517][ T5974] Bluetooth: hci2: command tx timeout [ 47.733540][ T63] Bluetooth: hci1: command tx timeout [ 47.735487][ T5967] Bluetooth: hci3: command tx timeout [ 47.739334][ T5969] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.750288][ T5969] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.761533][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.764033][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.783785][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.785977][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.813111][ T5976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.830625][ T5976] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.844250][ T5973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.853709][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.856063][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.869644][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.871658][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.894374][ T5973] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.906527][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.908798][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.911317][ T40] audit: type=1400 audit(1756984337.864:89): avc: denied { sys_module } for pid=5965 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.917913][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.920782][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.950302][ T5969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.985636][ T5969] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.998809][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.001553][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.012147][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.014978][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.024340][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.049979][ T5969] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.053154][ T5969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.079595][ T5965] veth0_vlan: entered promiscuous mode [ 48.087126][ T5965] veth1_vlan: entered promiscuous mode [ 48.099586][ T5976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.111484][ T5965] veth0_macvtap: entered promiscuous mode [ 48.121311][ T5965] veth1_macvtap: entered promiscuous mode [ 48.155247][ T5976] veth0_vlan: entered promiscuous mode [ 48.159434][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.167295][ T5973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.175466][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.184854][ T5976] veth1_vlan: entered promiscuous mode [ 48.191040][ T73] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.207013][ T73] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.210152][ T73] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.217528][ T73] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.250470][ T5973] veth0_vlan: entered promiscuous mode [ 48.275486][ T5976] veth0_macvtap: entered promiscuous mode [ 48.282306][ T5969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.287211][ T5976] veth1_macvtap: entered promiscuous mode [ 48.292341][ T5973] veth1_vlan: entered promiscuous mode [ 48.292771][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.300091][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.327742][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.343463][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.344499][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.346072][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.356930][ T73] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.362855][ T1178] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.371918][ T1178] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.375516][ T1178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.395734][ T5965] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.399777][ T5973] veth0_macvtap: entered promiscuous mode [ 48.410578][ T5969] veth0_vlan: entered promiscuous mode [ 48.414096][ T5973] veth1_macvtap: entered promiscuous mode [ 48.424550][ T5969] veth1_vlan: entered promiscuous mode [ 48.453799][ T6053] Zero length message leads to an empty skb [ 48.456078][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.458908][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.460338][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.484061][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.502973][ T5969] veth0_macvtap: entered promiscuous mode [ 48.509318][ T5969] veth1_macvtap: entered promiscuous mode [ 48.509371][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.512597][ T73] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.516761][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.517772][ T73] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.534962][ T73] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.538732][ T73] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.554182][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.562771][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.579840][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.583130][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.594460][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.606275][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.609767][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.612294][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.634428][ T6058] IPVS: persistence engine module ip_vs_pe_s not found [ 48.661184][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.661195][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.675907][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.675921][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.694691][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.694710][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.716972][ T6062] tty tty20: ldisc open failed (-12), clearing slot 19 [ 48.922081][ T6090] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12'. [ 48.927910][ T6090] netlink: 84 bytes leftover after parsing attributes in process `syz.1.12'. [ 48.931754][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 48.938083][ T6090] dummy0: entered promiscuous mode [ 48.942393][ T6090] dummy0: left promiscuous mode [ 49.224943][ T6105] IPVS: persistence engine module ip_vs_pe_s not found [ 49.354907][ T6111] fuse: Unknown parameter 'v/ZOʅ6zBv 5xr--0KkB+z/0x0000000000000003' [ 49.378879][ T6111] Bluetooth: hci4: Frame reassembly failed (-84) [ 49.382576][ T1144] Bluetooth: hci4: Frame reassembly failed (-84) [ 49.669585][ T61] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 49.734635][ T63] Bluetooth: hci0: command tx timeout [ 49.813296][ T63] Bluetooth: hci3: command tx timeout [ 49.814342][ T5972] Bluetooth: hci1: command tx timeout [ 49.816124][ T5974] Bluetooth: hci2: command tx timeout [ 49.827404][ T61] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 49.831000][ T61] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.834763][ T61] usb 6-1: Product: syz [ 49.836542][ T61] usb 6-1: Manufacturer: syz [ 49.838483][ T61] usb 6-1: SerialNumber: syz [ 49.847624][ T61] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 49.871594][ T6027] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 50.152237][ T6134] binder: BINDER_SET_CONTEXT_MGR already set [ 50.154854][ T6134] binder: 6133:6134 ioctl 4018620d 200000004a80 returned -16 [ 50.159296][ T6134] netlink: 72 bytes leftover after parsing attributes in process `syz.3.28'. [ 50.289705][ T6049] usb 6-1: USB disconnect, device number 2 [ 50.317751][ T6141] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 50.321139][ T1178] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.326113][ T1178] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.329975][ T1178] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.334396][ T1178] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.392088][ T40] kauditd_printk_skb: 101 callbacks suppressed [ 50.392099][ T40] audit: type=1400 audit(1756984340.344:191): avc: denied { create } for pid=6150 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.400059][ T40] audit: type=1400 audit(1756984340.344:192): avc: denied { listen } for pid=6150 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.406215][ T40] audit: type=1400 audit(1756984340.354:193): avc: denied { write } for pid=6150 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.600324][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 50.600346][ T40] audit: type=1400 audit(1756984340.554:194): avc: denied { write } for pid=6158 comm="syz.3.35" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 50.603876][ T6159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.35'. [ 50.621126][ T6159] geneve2: entered promiscuous mode [ 50.622835][ T6159] geneve2: entered allmulticast mode [ 50.650384][ T40] audit: type=1400 audit(1756984340.604:195): avc: denied { create } for pid=6158 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 50.652945][ T6159] syz_tun: entered allmulticast mode [ 50.657990][ T40] audit: type=1400 audit(1756984340.604:196): avc: denied { setopt } for pid=6158 comm="syz.3.35" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.701829][ T40] audit: type=1400 audit(1756984340.654:197): avc: denied { create } for pid=6165 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.702632][ T6166] netlink: 72 bytes leftover after parsing attributes in process `syz.2.37'. [ 50.708090][ T40] audit: type=1400 audit(1756984340.654:198): avc: denied { write } for pid=6165 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.708116][ T40] audit: type=1400 audit(1756984340.654:199): avc: denied { nlmsg_write } for pid=6165 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.752694][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.38'. [ 50.756440][ T6168] bridge_slave_1: left allmulticast mode [ 50.758803][ T6168] bridge_slave_1: left promiscuous mode [ 50.761974][ T6168] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.771045][ T6168] bridge_slave_0: left allmulticast mode [ 50.776327][ T6168] bridge_slave_0: left promiscuous mode [ 50.778837][ T6168] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.799466][ T6170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.39'. [ 50.804339][ T6170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.39'. [ 50.864979][ T6173] mac80211_hwsim hwsim9 : renamed from wlan1 (while UP) [ 50.864976][ T40] audit: type=1400 audit(1756984340.824:200): avc: denied { ioctl } for pid=6172 comm="syz.3.40" path="socket:[10283]" dev="sockfs" ino=10283 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.904043][ T6176] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.093232][ T6027] usb 6-1: Service connection timeout for: 256 [ 51.095884][ T6027] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 51.099990][ T6027] ath9k_htc: Failed to initialize the device [ 51.102737][ T6049] usb 6-1: ath9k_htc: USB layer deinitialized [ 51.326791][ T6190] openvswitch: netlink: Key type 16144 is out of range max 32 [ 51.327326][ T6049] hid-generic 0005:10CF:05DF.0002: unknown main item tag 0x0 [ 51.329789][ T6189] openvswitch: netlink: Key type 16144 is out of range max 32 [ 51.334336][ T6049] hid-generic 0005:10CF:05DF.0002: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 51.413496][ T5974] Bluetooth: hci4: command 0x1003 tx timeout [ 51.413801][ T5967] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 51.457943][ T6204] xfrm1: entered allmulticast mode [ 51.589291][ T6214] MINIX-fs: blocksize too small for device [ 51.592751][ T6207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6207 comm=syz.1.50 [ 51.659408][ T6216] dlm: plock device version mismatch: kernel (1.2.0), user (4207687471.1574799195.3139252685) [ 51.762483][ T6223] syz.0.55 uses obsolete (PF_INET,SOCK_PACKET) [ 51.813301][ T5967] Bluetooth: hci0: command tx timeout [ 51.893323][ T5967] Bluetooth: hci2: command tx timeout [ 51.894228][ T5974] Bluetooth: hci1: command tx timeout [ 51.903310][ T5974] Bluetooth: hci3: command tx timeout [ 51.905808][ T6231] Invalid source name [ 51.907530][ T6231] UBIFS error (pid: 6231): cannot open "/dev/sg0", error -22 [ 51.990487][ T6236] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 52.033577][ T6247] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 52.049277][ T6247] ieee802154 phy0 wpan0: encryption failed: -22 [ 52.400116][ T6260] NILFS (nbd1): device size too small [ 52.431196][ T6262] i2c i2c-1: Invalid block write size 34 [ 52.561924][ T6273] openvswitch: netlink: IP tunnel dst address not specified [ 52.660993][ T6283] geneve2: entered promiscuous mode [ 52.662840][ T6283] geneve2: entered allmulticast mode [ 52.696236][ T6287] tipc: Enabling of bearer rejected, failed to enable media [ 52.799690][ T6305] warning: `syz.0.80' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 53.203780][ T6348] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 53.204971][ T6347] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 53.211151][ T6347] overlayfs: failed to set xattr on upper [ 53.212996][ T6347] overlayfs: ...falling back to redirect_dir=nofollow. [ 53.216980][ T6347] overlayfs: ...falling back to index=off. [ 53.218827][ T6347] overlayfs: ...falling back to uuid=null. [ 53.227478][ T6347] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 53.229665][ T6348] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 53.229898][ T6347] overlayfs: failed to set xattr on upper [ 53.236434][ T6347] overlayfs: ...falling back to redirect_dir=nofollow. [ 53.238964][ T6347] overlayfs: ...falling back to index=off. [ 53.240780][ T6347] overlayfs: ...falling back to uuid=null. [ 53.380305][ T1178] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.384563][ T1178] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.417985][ T6368] vxfs: WRONG superblock magic 00000000 at 1 [ 53.420372][ T6368] vxfs: WRONG superblock magic 00000000 at 8 [ 53.422344][ T6368] vxfs: can't find superblock. [ 53.428148][ T6370] netlink: zone id is out of range [ 53.430986][ T6370] netlink: zone id is out of range [ 53.435018][ T6370] netlink: zone id is out of range [ 53.443302][ T6370] netlink: zone id is out of range [ 53.452834][ T6370] netlink: set zone limit has 4 unknown bytes [ 53.523665][ T1178] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.527381][ T1178] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.546447][ T5967] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.549542][ T5967] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.552265][ T5967] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.556379][ T5967] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.559166][ T5967] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.616394][ T1178] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.620756][ T1178] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.706304][ T6388] chnl_net:caif_netlink_parms(): no params data found [ 53.747070][ T1178] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.750283][ T1178] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.786698][ T6388] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.789414][ T6388] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.792071][ T6388] bridge_slave_0: entered allmulticast mode [ 53.795553][ T6388] bridge_slave_0: entered promiscuous mode [ 53.799264][ T6388] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.801536][ T6388] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.804829][ T6388] bridge_slave_1: entered allmulticast mode [ 53.807386][ T6388] bridge_slave_1: entered promiscuous mode [ 53.812449][ T6407] netlink: 'syz.2.109': attribute type 30 has an invalid length. [ 53.848606][ T6388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.854080][ T6388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.894377][ T5974] Bluetooth: hci0: command tx timeout [ 53.906414][ T6388] team0: Port device team_slave_0 added [ 53.910138][ T6388] team0: Port device team_slave_1 added [ 53.973673][ T5974] Bluetooth: hci2: command tx timeout [ 53.973684][ T5967] Bluetooth: hci1: command tx timeout [ 53.986441][ T6388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.988698][ T6388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.998399][ T6388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.008151][ T6388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.010379][ T6388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.018691][ T6388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.076178][ T1178] bridge_slave_1: left allmulticast mode [ 54.078093][ T1178] bridge_slave_1: left promiscuous mode [ 54.080553][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.085520][ T1178] bridge_slave_0: left allmulticast mode [ 54.087250][ T1178] bridge_slave_0: left promiscuous mode [ 54.089092][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.194471][ T6421] evm: overlay not supported [ 54.206745][ T1178] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 54.324859][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.329161][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.332762][ T1178] bond0 (unregistering): Released all slaves [ 54.343604][ T6388] hsr_slave_0: entered promiscuous mode [ 54.346832][ T6388] hsr_slave_1: entered promiscuous mode [ 54.349703][ T6388] debugfs: 'hsr0' already exists in 'hsr' [ 54.352105][ T6388] Cannot create hsr debugfs directory [ 54.398570][ T6430] __nla_validate_parse: 5 callbacks suppressed [ 54.398581][ T6430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.116'. [ 54.438636][ T6435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6435 comm=syz.0.117 [ 54.444969][ T6432] could not allocate digest TFM handle cryptd(blake2b-160) [ 54.542492][ T6388] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.547628][ T6388] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.553657][ T6388] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.572563][ T6388] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.630484][ T6388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.639476][ T6388] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.647318][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.649564][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.662805][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.665143][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.674717][ T1178] hsr_slave_0: left promiscuous mode [ 54.677334][ T1178] hsr_slave_1: left promiscuous mode [ 54.679427][ T1178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.681778][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.684390][ T1222] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.687706][ T1178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.689994][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.707038][ T1178] veth1_macvtap: left promiscuous mode [ 54.709153][ T1178] veth0_macvtap: left promiscuous mode [ 54.710888][ T1178] veth1_vlan: left promiscuous mode [ 54.712641][ T1178] veth0_vlan: left promiscuous mode [ 54.733350][ T6027] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 54.831419][ T6461] capability: warning: `syz.2.119' uses 32-bit capabilities (legacy support in use) [ 54.843393][ T1222] usb 8-1: Using ep0 maxpacket: 32 [ 54.846988][ T1222] usb 8-1: config 99 has an invalid interface number: 164 but max is 1 [ 54.849493][ T1222] usb 8-1: config 99 contains an unexpected descriptor of type 0x1, skipping [ 54.851921][ T1222] usb 8-1: config 99 has an invalid descriptor of length 0, skipping remainder of the config [ 54.855208][ T1222] usb 8-1: config 99 has 1 interface, different from the descriptor's value: 2 [ 54.858004][ T1222] usb 8-1: config 99 has no interface number 0 [ 54.860097][ T1222] usb 8-1: config 99 interface 164 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 54.864648][ T1222] usb 8-1: config 99 interface 164 has no altsetting 0 [ 54.869678][ T1222] usb 8-1: New USB device found, idVendor=2019, idProduct=ab2b, bcdDevice=b6.3d [ 54.872653][ T1222] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.876587][ T1222] usb 8-1: Product: ␁ [ 54.878016][ T1222] usb 8-1: Manufacturer: з [ 54.879796][ T1222] usb 8-1: SerialNumber: о [ 54.909377][ T6027] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 54.912584][ T6027] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 54.917971][ T6027] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 54.920909][ T6027] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.107082][ T1222] hub 8-1:99.164: bad descriptor, ignoring hub [ 55.109153][ T1222] hub 8-1:99.164: probe with driver hub failed with error -5 [ 55.135057][ T6027] usb 5-1: usb_control_msg returned -32 [ 55.136852][ T6027] usbtmc 5-1:16.0: can't read capabilities [ 55.142020][ T1222] usb 8-1: USB disconnect, device number 2 [ 55.177984][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 55.228443][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 55.489482][ T6463] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -32 [ 55.497580][ T40] kauditd_printk_skb: 129 callbacks suppressed [ 55.497595][ T40] audit: type=1400 audit(1756984345.454:330): avc: denied { ioctl } for pid=6441 comm="syz.0.118" path="socket:[13457]" dev="sockfs" ino=13457 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 55.573351][ T5967] Bluetooth: hci3: command tx timeout [ 55.576884][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.118'. [ 55.581417][ T140] usb 5-1: USB disconnect, device number 2 [ 55.626240][ T6469] program syz.3.120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.687775][ T6388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.695369][ T40] audit: type=1400 audit(1756984345.654:331): avc: denied { write } for pid=6476 comm="syz.2.121" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 55.703010][ T40] audit: type=1400 audit(1756984345.654:332): avc: denied { open } for pid=6476 comm="syz.2.121" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 55.710967][ T40] audit: type=1326 audit(1756984345.654:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.2.121" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad1058ebe9 code=0x0 [ 55.813862][ T6388] veth0_vlan: entered promiscuous mode [ 55.818610][ T6388] veth1_vlan: entered promiscuous mode [ 55.832145][ T6388] veth0_macvtap: entered promiscuous mode [ 55.837168][ T6388] veth1_macvtap: entered promiscuous mode [ 55.846827][ T6388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.854182][ T6388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.859467][ T73] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.862210][ T73] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.866364][ T73] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.869146][ T73] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.907132][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.909737][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.922352][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.925748][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.933263][ T40] audit: type=1400 audit(1756984345.894:334): avc: denied { mounton } for pid=6388 comm="syz-executor" path="/syzkaller.2nRJVp/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 55.977404][ T6498] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 56.085351][ T40] audit: type=1400 audit(1756984346.044:335): avc: denied { write } for pid=6500 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 56.085427][ T6501] xfrm0 speed is unknown, defaulting to 1000 [ 56.094822][ T6501] xfrm0 speed is unknown, defaulting to 1000 [ 56.097683][ T6501] xfrm0 speed is unknown, defaulting to 1000 [ 56.102373][ T6501] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 56.108721][ T6501] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 56.114994][ T6504] overlay: Unknown parameter 'appraise' [ 56.127249][ T6501] xfrm0 speed is unknown, defaulting to 1000 [ 56.131242][ T6501] xfrm0 speed is unknown, defaulting to 1000 [ 56.134995][ T6501] xfrm0 speed is unknown, defaulting to 1000 [ 56.137822][ T6501] xfrm0 speed is unknown, defaulting to 1000 [ 56.154342][ T40] audit: type=1400 audit(1756984346.114:336): avc: denied { mount } for pid=6500 comm="syz.4.122" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 56.163280][ T40] audit: type=1400 audit(1756984346.114:337): avc: denied { setattr } for pid=6500 comm="syz.4.122" name="[io_uring]" dev="anon_inodefs" ino=12837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.197882][ T40] audit: type=1400 audit(1756984346.154:338): avc: denied { getopt } for pid=6509 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.218688][ T40] audit: type=1400 audit(1756984346.174:339): avc: denied { map } for pid=6514 comm="syz.0.125" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 56.301247][ T6521] syzkaller0: entered promiscuous mode [ 56.303055][ T6521] syzkaller0: entered allmulticast mode [ 56.306932][ T1150] syzkaller0: tun_net_xmit 48 [ 56.308669][ T6521] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 56.310440][ T6521] syzkaller0: Linktype set failed because interface is up [ 56.327343][ T6521] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 56.583007][ T6530] mmap: syz.2.129 (6530) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.630013][ T6533] process 'syz.2.130' launched './file0' with NULL argv: empty string added [ 57.138726][ T6551] xfrm0 speed is unknown, defaulting to 1000 [ 57.250738][ T6563] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 57.259135][ T6563] macvtap1: entered allmulticast mode [ 57.261272][ T6563] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 57.267577][ T6563] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 57.271061][ T6563] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 57.367637][ T6581] netlink: 'syz.0.142': attribute type 11 has an invalid length. [ 57.626245][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 57.664581][ T6608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 57.670103][ T5967] Bluetooth: hci3: command tx timeout [ 57.676551][ T6608] netlink: 88 bytes leftover after parsing attributes in process `syz.0.149'. [ 57.711400][ T6612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.151'. [ 57.930706][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.158'. [ 58.149632][ T6669] netlink: 256 bytes leftover after parsing attributes in process `syz.0.167'. [ 58.753322][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 58.777292][ T6711] comedi: valid board names for 8255 driver are: [ 58.780248][ T6711] 8255 [ 58.781274][ T6711] comedi: valid board names for vmk80xx driver are: [ 58.783990][ T6711] vmk80xx [ 58.785406][ T6711] comedi: valid board names for usbduxsigma driver are: [ 58.787578][ T6711] usbduxsigma [ 58.788770][ T6711] comedi: valid board names for usbduxfast driver are: [ 58.791894][ T6711] usbduxfast [ 58.793019][ T6711] comedi: valid board names for usbdux driver are: [ 58.797234][ T6711] usbdux [ 58.798190][ T6711] comedi: valid board names for ni6501 driver are: [ 58.800226][ T6711] ni6501 [ 58.801166][ T6711] comedi: valid board names for dt9812 driver are: [ 58.803674][ T6711] dt9812 [ 58.804880][ T6711] comedi: valid board names for ni_labpc_cs driver are: [ 58.807176][ T6711] ni_labpc_cs [ 58.808400][ T6711] comedi: valid board names for ni_daq_700 driver are: [ 58.810866][ T6711] ni_daq_700 [ 58.811942][ T6711] comedi: valid board names for labpc_pci driver are: [ 58.814477][ T6711] labpc_pci [ 58.815686][ T6711] comedi: valid board names for adl_pci9118 driver are: [ 58.818321][ T6711] pci9118dg [ 58.819685][ T6711] pci9118hg [ 58.820963][ T6711] pci9118hr [ 58.822249][ T6711] comedi: valid board names for 8255_pci driver are: [ 58.826118][ T6711] 8255_pci [ 58.827236][ T6711] comedi: valid board names for s526 driver are: [ 58.829444][ T6711] s526 [ 58.830402][ T6711] comedi: valid board names for multiq3 driver are: [ 58.832463][ T6711] multiq3 [ 58.833801][ T6711] comedi: valid board names for pcmuio driver are: [ 58.836035][ T6711] pcmuio48 [ 58.837215][ T6711] pcmuio96 [ 58.838313][ T6711] comedi: valid board names for pcmmio driver are: [ 58.840826][ T6711] pcmmio [ 58.841943][ T6711] comedi: valid board names for pcmda12 driver are: [ 58.844378][ T6711] pcmda12 [ 58.845406][ T6711] comedi: valid board names for pcmad driver are: [ 58.847969][ T6711] pcmad12 [ 58.848992][ T6711] pcmad16 [ 58.849995][ T6711] comedi: valid board names for ni_labpc driver are: [ 58.852168][ T6711] lab-pc-1200 [ 58.854634][ T6711] lab-pc-1200ai [ 58.856080][ T6711] lab-pc+ [ 58.857385][ T6711] comedi: valid board names for atmio16 driver are: [ 58.861954][ T6711] atmio16 [ 58.862869][ T6711] atmio16d [ 58.863932][ T6711] comedi: valid board names for ni_at_ao driver are: [ 58.865757][ T6711] at-ao-6 [ 58.866808][ T6711] at-ao-10 [ 58.868071][ T6711] comedi: valid board names for ni_at_a2150 driver are: [ 58.870476][ T6711] ni_at_a2150 [ 58.871923][ T6711] comedi: valid board names for adq12b driver are: [ 58.878494][ T6711] adq12b [ 58.879487][ T6711] comedi: valid board names for mpc624 driver are: [ 58.881606][ T6711] mpc624 [ 58.882626][ T6711] comedi: valid board names for c6xdigio driver are: [ 58.885584][ T6711] c6xdigio [ 58.887023][ T6711] comedi: valid board names for aio_iiro_16 driver are: [ 58.889888][ T6711] aio_iiro_16 [ 58.890427][ T6729] tipc: Started in network mode [ 58.891318][ T6711] comedi: valid board names for aio_aio12_8 driver are: [ 58.893671][ T6729] tipc: Node identity 428fa1f74a11, cluster identity 4711 [ 58.896381][ T6711] aio_aio12_8 [ 58.899296][ T6729] tipc: Enabled bearer , priority 0 [ 58.899653][ T6711] aio_ai12_8 [ 58.905015][ T6711] aio_ao12_4 [ 58.905759][ T6728] tipc: Resetting bearer [ 58.906539][ T6711] comedi: valid board names for fl512 driver are: [ 58.911014][ T6711] fl512 [ 58.912237][ T6711] comedi: valid board names for dmm32at driver are: [ 58.914896][ T24] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 58.915379][ T6711] dmm32at [ 58.917381][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 58.917398][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 58.917413][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 58.917987][ T6734] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 58.918001][ T6734] overlayfs: failed to set xattr on upper [ 58.918006][ T6734] overlayfs: ...falling back to redirect_dir=nofollow. [ 58.918010][ T6734] overlayfs: ...falling back to index=off. [ 58.918014][ T6734] overlayfs: ...falling back to uuid=null. [ 58.918825][ T6711] comedi: valid board names for dt282x driver are: [ 58.923233][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.927586][ T6711] dt2821 [ 58.930170][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.933023][ T6711] dt2821-f [ 58.938054][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.939064][ T6711] dt2821-g [ 58.943763][ T24] usb 5-1: config 0 descriptor?? [ 58.949020][ T6711] dt2823 [ 58.949967][ T6690] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 58.950545][ T6711] dt2824-pgh [ 58.950554][ T6711] dt2824-pgl [ 58.972981][ T6711] dt2825 [ 58.974985][ T6711] dt2827 [ 58.976069][ T6711] dt2828 [ 58.977081][ T6711] dt2829 [ 58.978180][ T6711] dt21-ez [ 58.979203][ T6711] dt23-ez [ 58.980205][ T6711] dt24-ez [ 58.981195][ T6711] dt24-ez-pgl [ 58.982331][ T6711] comedi: valid board names for dt2817 driver are: [ 58.985000][ T6711] dt2817 [ 58.985976][ T6711] comedi: valid board names for dt2815 driver are: [ 58.988012][ T6711] dt2815 [ 58.989084][ T6711] comedi: valid board names for dt2814 driver are: [ 58.991136][ T6711] dt2814 [ 58.992103][ T6711] comedi: valid board names for dt2811 driver are: [ 58.995424][ T6711] dt2811-pgh [ 58.996765][ T6711] dt2811-pgl [ 58.998107][ T6711] comedi: valid board names for dt2801 driver are: [ 59.000811][ T6711] dt2801 [ 59.001820][ T6711] comedi: valid board names for das6402 driver are: [ 59.003950][ T6711] das6402-12 [ 59.005040][ T6711] das6402-16 [ 59.006171][ T6711] comedi: valid board names for das1800 driver are: [ 59.008273][ T6711] das-1701st [ 59.009648][ T6711] das-1701st-da [ 59.010799][ T6711] das-1702st [ 59.011880][ T6711] das-1702st-da [ 59.013035][ T6711] das-1702hr [ 59.015568][ T6711] das-1702hr-da [ 59.016782][ T6711] das-1701ao [ 59.017850][ T6711] das-1702ao [ 59.019006][ T6711] das-1801st [ 59.020088][ T6711] das-1801st-da [ 59.021261][ T6711] das-1802st [ 59.022365][ T6711] das-1802st-da [ 59.024399][ T6711] das-1802hr [ 59.025518][ T6711] das-1802hr-da [ 59.026667][ T6711] das-1801hc [ 59.027758][ T6711] das-1802hc [ 59.028935][ T6711] das-1801ao [ 59.030085][ T6711] das-1802ao [ 59.031176][ T6711] comedi: valid board names for das800 driver are: [ 59.033777][ T6711] das-800 [ 59.034787][ T6711] cio-das800 [ 59.035869][ T6711] das-801 [ 59.036884][ T6711] cio-das801 [ 59.037961][ T6711] das-802 [ 59.038978][ T6711] cio-das802 [ 59.040055][ T6711] cio-das802/16 [ 59.041284][ T6711] comedi: valid board names for isa-das08 driver are: [ 59.044292][ T6711] isa-das08 [ 59.046310][ T6711] das08-pgm [ 59.047448][ T6711] das08-pgh [ 59.048511][ T6711] das08-pgl [ 59.049594][ T6711] das08-aoh [ 59.050701][ T6711] das08-aol [ 59.051827][ T6711] das08-aom [ 59.052871][ T6711] das08/jr-ao [ 59.054106][ T6711] das08jr-16-ao [ 59.055254][ T6711] pc104-das08 [ 59.056340][ T6711] das08jr/16 [ 59.057398][ T6711] comedi: valid board names for das16m1 driver are: [ 59.059460][ T6711] das16m1 [ 59.060469][ T6711] comedi: valid board names for dac02 driver are: [ 59.062551][ T6711] dac02 [ 59.063591][ T6711] comedi: valid board names for rti802 driver are: [ 59.065658][ T6711] rti802 [ 59.066598][ T6711] comedi: valid board names for rti800 driver are: [ 59.068581][ T6711] rti800 [ 59.069463][ T6711] rti815 [ 59.070392][ T6711] comedi: valid board names for pcm3724 driver are: [ 59.072553][ T6711] pcm3724 [ 59.073776][ T6711] comedi: valid board names for pcl818 driver are: [ 59.075824][ T6711] pcl818l [ 59.076809][ T6711] pcl818h [ 59.077820][ T6711] pcl818hd [ 59.078824][ T6711] pcl818hg [ 59.079819][ T6711] pcl818 [ 59.080848][ T6711] pcl718 [ 59.081840][ T6711] pcm3718 [ 59.082837][ T6711] comedi: valid board names for pcl816 driver are: [ 59.085019][ T6711] pcl816 [ 59.085976][ T6711] pcl814b [ 59.086969][ T6711] comedi: valid board names for pcl812 driver are: [ 59.089038][ T6711] pcl812 [ 59.090001][ T6711] pcl812pg [ 59.091029][ T6711] acl8112pg [ 59.092091][ T6711] acl8112dg [ 59.093144][ T6711] acl8112hg [ 59.094520][ T6711] a821pgl [ 59.095611][ T6711] a821pglnda [ 59.096685][ T6711] a821pgh [ 59.097675][ T6711] a822pgl [ 59.098681][ T6711] a822pgh [ 59.099668][ T6711] a823pgl [ 59.100677][ T6711] a823pgh [ 59.101692][ T6711] pcl813 [ 59.102632][ T6711] pcl813b [ 59.103710][ T6711] acl8113 [ 59.104735][ T6711] iso813 [ 59.105721][ T6711] acl8216 [ 59.106705][ T6711] a826pg [ 59.107672][ T6711] comedi: valid board names for pcl730 driver are: [ 59.109693][ T6711] pcl730 [ 59.110674][ T6711] iso730 [ 59.111617][ T6711] acl7130 [ 59.112932][ T6711] pcm3730 [ 59.114081][ T6711] pcl725 [ 59.115034][ T6711] p8r8dio [ 59.116025][ T6711] acl7225b [ 59.117058][ T6711] p16r16dio [ 59.118094][ T6711] pcl733 [ 59.119034][ T6711] pcl734 [ 59.120004][ T6711] opmm-1616-xt [ 59.121142][ T6711] pearl-mm-p [ 59.122242][ T6711] ir104-pbf [ 59.123489][ T6711] comedi: valid board names for pcl726 driver are: [ 59.125513][ T6711] pcl726 [ 59.126452][ T6711] pcl727 [ 59.127421][ T6711] pcl728 [ 59.128385][ T6711] acl6126 [ 59.129363][ T6711] acl6128 [ 59.130385][ T6711] comedi: valid board names for pcl724 driver are: [ 59.132399][ T6711] pcl724 [ 59.133444][ T6711] pcl722 [ 59.134388][ T6711] pcl731 [ 59.135347][ T6711] acl7122 [ 59.136384][ T6711] acl7124 [ 59.137374][ T6711] pet48dio [ 59.138387][ T6711] pcmio48 [ 59.139396][ T6711] onyx-mm-dio [ 59.140499][ T6711] comedi: valid board names for pcl711 driver are: [ 59.142521][ T6711] pcl711 [ 59.143539][ T6711] pcl711b [ 59.144544][ T6711] acl8112hg [ 59.145582][ T6711] acl8112dg [ 59.146615][ T6711] comedi: valid board names for amplc_pc263 driver are: [ 59.148791][ T6711] pc263 [ 59.149718][ T6711] comedi: valid board names for amplc_pc236 driver are: [ 59.151923][ T6711] pc36at [ 59.152893][ T6711] comedi: valid board names for amplc_dio200 driver are: [ 59.155139][ T6711] pc212e [ 59.156096][ T6711] pc214e [ 59.157041][ T6711] pc215e [ 59.157979][ T6711] pc218e [ 59.158920][ T6711] pc272e [ 59.159882][ T6711] comedi: valid board names for comedi_parport driver are: [ 59.162125][ T6711] comedi_parport [ 59.163351][ T6711] comedi: valid board names for comedi_test driver are: [ 59.165475][ T6711] comedi_test [ 59.166592][ T6711] comedi: valid board names for comedi_bond driver are: [ 59.168749][ T6711] comedi_bond [ 59.208506][ T6744] NILFS (nbd3): device size too small [ 59.235354][ T6746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.188'. [ 59.375243][ T24] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 59.406106][ T24] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 59.733334][ T5967] Bluetooth: hci3: command tx timeout [ 59.753337][ T6728] tipc: Disabling bearer [ 59.774163][ T6690] netlink: 96 bytes leftover after parsing attributes in process `syz.0.172'. [ 59.787863][ T24] usb 5-1: USB disconnect, device number 3 [ 60.130313][ T6789] netlink: 'syz.2.197': attribute type 4 has an invalid length. [ 60.133143][ T6789] netlink: 16 bytes leftover after parsing attributes in process `syz.2.197'. [ 60.138340][ T6789] netlink: 'syz.2.197': attribute type 10 has an invalid length. [ 60.159283][ T6789] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 60.164608][ T6789] trusted_key: encrypted_key: insufficient parameters specified [ 60.239276][ T6793] netlink: 44 bytes leftover after parsing attributes in process `syz.3.199'. [ 60.336111][ T6807] overlayfs: conflicting options: userxattr,metacopy=on [ 60.358912][ T6811] usb usb8: check_ctrlrecip: process 6811 (syz.4.205) requesting ep 01 but needs 81 [ 60.362980][ T6811] usb usb8: usbfs: process 6811 (syz.4.205) did not claim interface 0 before use [ 60.367114][ T6811] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 60.370255][ T6811] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 60.446557][ T6829] program syz.2.211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.447345][ T6816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.207'. [ 60.503789][ T40] kauditd_printk_skb: 61 callbacks suppressed [ 60.503800][ T40] audit: type=1400 audit(1756984350.464:401): avc: denied { write } for pid=6844 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 60.511905][ T40] audit: type=1400 audit(1756984350.464:402): avc: denied { read } for pid=6844 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 60.550945][ T6851] netlink: 20 bytes leftover after parsing attributes in process `syz.3.218'. [ 60.557885][ T6851] netlink: 'syz.3.218': attribute type 3 has an invalid length. [ 60.560396][ T6851] netlink: 68 bytes leftover after parsing attributes in process `syz.3.218'. [ 60.641902][ T5967] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 60.641933][ T5967] Bluetooth: hci1: Dropping invalid advertising data [ 60.647195][ T5967] Bluetooth: hci1: Malformed LE Event: 0x02 [ 61.284645][ T40] audit: type=1400 audit(1756984351.244:403): avc: denied { mount } for pid=6859 comm="syz.4.220" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 61.296889][ T40] audit: type=1400 audit(1756984351.254:404): avc: denied { unmount } for pid=6388 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 61.322095][ T40] audit: type=1400 audit(1756984351.274:405): avc: denied { getopt } for pid=6864 comm="syz.4.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 61.330772][ T6866] program syz.4.221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.366738][ T40] audit: type=1400 audit(1756984351.324:406): avc: denied { getopt } for pid=6870 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.414944][ T6875] netlink: 'syz.4.223': attribute type 2 has an invalid length. [ 61.418467][ T6875] netlink: 1184 bytes leftover after parsing attributes in process `syz.4.223'. [ 61.465782][ T6880] netlink: 32 bytes leftover after parsing attributes in process `syz.4.225'. [ 61.469767][ T6880] netlink: 32 bytes leftover after parsing attributes in process `syz.4.225'. [ 61.497369][ T40] audit: type=1400 audit(1756984351.454:407): avc: denied { read } for pid=6883 comm="syz.4.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.547108][ T40] audit: type=1400 audit(1756984351.494:408): avc: denied { setopt } for pid=6893 comm="syz.2.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 61.553160][ T40] audit: type=1400 audit(1756984351.494:409): avc: denied { map } for pid=6893 comm="syz.2.231" path="socket:[15520]" dev="sockfs" ino=15520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.565681][ T6898] netlink: 20 bytes leftover after parsing attributes in process `syz.4.232'. [ 61.640436][ T6896] syz.3.230 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 61.831313][ T6921] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.904335][ T6921] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.997858][ T6931] netlink: 'syz.4.239': attribute type 1 has an invalid length. [ 62.031078][ T6931] 8021q: adding VLAN 0 to HW filter on device bond3 [ 62.035315][ T6931] bond2: (slave bond3): making interface the new active one [ 62.038869][ T6931] bond2: (slave bond3): Enslaving as an active interface with an up link [ 62.051611][ T6921] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.114709][ T6921] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.195401][ T1178] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.204589][ T1178] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.212521][ T1178] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.220589][ T1178] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.335950][ T40] audit: type=1400 audit(1756984352.294:410): avc: denied { checkpoint_restore } for pid=6950 comm="syz.3.245" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.612901][ T6977] netlink: 'syz.4.251': attribute type 1 has an invalid length. [ 62.781189][ T6986] binder: 6985:6986 ioctl 4018620d 0 returned -22 [ 63.320426][ T7008] overlay: Bad value for 'redirect_dir' [ 63.360723][ T7011] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 63.498831][ T7026] sp0: Synchronizing with TNC [ 63.505610][ T7026] sp0: Found TNC [ 63.511254][ T7026] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 63.515671][ T7026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 63.567954][ T7032] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 63.588457][ T7034] capability: warning: `syz.2.269' uses deprecated v2 capabilities in a way that may be insecure [ 63.653559][ T7024] kvm: kvm [7023]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 63.654748][ T7050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7050 comm=syz.2.273 [ 63.656922][ T7024] kvm: kvm [7023]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 63.680452][ T7024] kvm: kvm [7023]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 63.700809][ T7024] kvm: kvm [7023]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 63.704077][ T7024] kvm: kvm [7023]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 63.848782][ T7059] netlink: 'syz.2.275': attribute type 20 has an invalid length. [ 63.859453][ T73] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.859557][ T7059] netlink: 'syz.2.275': attribute type 20 has an invalid length. [ 63.862355][ T73] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.869111][ T73] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.872111][ T73] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.413280][ T7066] cgroup: Invalid name [ 64.893117][ T7088] xfrm0 speed is unknown, defaulting to 1000 [ 65.427352][ T7100] __nla_validate_parse: 12 callbacks suppressed [ 65.427369][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.290'. [ 65.521503][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 65.521514][ T40] audit: type=1400 audit(1756984355.474:426): avc: denied { bind } for pid=7110 comm="syz.3.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 65.528675][ T7111] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 65.600417][ T40] audit: type=1400 audit(1756984355.554:427): avc: denied { append } for pid=7117 comm="syz.3.295" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 65.608409][ T40] audit: type=1400 audit(1756984355.554:428): avc: denied { ioctl } for pid=7117 comm="syz.3.295" path="socket:[15877]" dev="sockfs" ino=15877 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 65.617963][ T40] audit: type=1400 audit(1756984355.554:429): avc: denied { map } for pid=7117 comm="syz.3.295" path="/66" dev="tmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.976585][ T40] audit: type=1400 audit(1756984355.934:430): avc: denied { append } for pid=7148 comm="syz.2.303" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.205987][ T7157] erofs: Unknown parameter 'a' [ 66.207045][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 66.210813][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 66.428504][ T40] audit: type=1400 audit(1756984356.384:431): avc: denied { connect } for pid=7170 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 66.435437][ T40] audit: type=1400 audit(1756984356.384:432): avc: denied { write } for pid=7170 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 66.441450][ T40] audit: type=1400 audit(1756984356.384:433): avc: denied { accept } for pid=7170 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 66.489176][ T7174] syzkaller0: entered promiscuous mode [ 66.489193][ T40] audit: type=1400 audit(1756984356.444:434): avc: denied { create } for pid=7175 comm="syz.2.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 66.490971][ T7174] syzkaller0: entered allmulticast mode [ 66.499632][ T13] syzkaller0: tun_net_xmit 48 [ 66.502411][ T7174] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 66.506073][ T7174] syzkaller0: Linktype set failed because interface is up [ 66.507163][ T40] audit: type=1400 audit(1756984356.464:435): avc: denied { sys_admin } for pid=7175 comm="syz.2.311" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 67.387097][ T7213] TCP: tcp_parse_options: Illegal window scaling value 218 > 14 received [ 67.425800][ T7210] tmpfs: Bad value for 'mpol' [ 67.500220][ T7221] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.537044][ T7227] dvmrp17: entered allmulticast mode [ 67.541190][ T7227] dvmrp17: left allmulticast mode [ 67.583328][ T24] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 67.629231][ T7232] netlink: 'syz.0.322': attribute type 1 has an invalid length. [ 67.758543][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.761628][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.765711][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 67.768375][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.975604][ T24] usb 7-1: usb_control_msg returned -32 [ 67.977492][ T24] usbtmc 7-1:16.0: can't read capabilities [ 67.979032][ T7200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.984490][ T7200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.009203][ T7254] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 68.246084][ T7271] syzkaller0: entered promiscuous mode [ 68.247985][ T7271] syzkaller0: entered allmulticast mode [ 68.420549][ T7279] overlayfs: missing 'lowerdir' [ 68.529441][ T1178] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.532251][ T1178] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.535901][ T1178] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.538593][ T1178] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.583107][ T7301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.347'. [ 68.587301][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.347'. [ 68.863391][ T6049] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 69.013288][ T6049] usb 9-1: Using ep0 maxpacket: 16 [ 69.018803][ T6049] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 69.022168][ T6049] usb 9-1: config 0 has no interface number 0 [ 69.025045][ T6049] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 69.029510][ T6049] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 69.035639][ T6049] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 69.039473][ T6049] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 69.042899][ T6049] usb 9-1: Product: syz [ 69.045074][ T6049] usb 9-1: SerialNumber: syz [ 69.052600][ T6049] usb 9-1: config 0 descriptor?? [ 69.058950][ T6049] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 69.063789][ T6049] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input8 [ 69.118075][ T7312] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.261445][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 69.265634][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 69.268255][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 69.270956][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 69.273272][ T6049] usb 9-1: USB disconnect, device number 2 [ 69.275132][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 69.275144][ C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 69.283674][ T6049] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 69.499732][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.358'. [ 69.525218][ T7334] bridge2: port 1(veth3) entered blocking state [ 69.527399][ T7334] bridge2: port 1(veth3) entered disabled state [ 69.529497][ T7334] veth3: entered allmulticast mode [ 69.531891][ T7334] veth3: entered promiscuous mode [ 69.542081][ T7334] vlan0: entered allmulticast mode [ 69.544235][ T7334] veth0_to_hsr: entered allmulticast mode [ 69.546222][ T7334] bridge2: port 2(vlan0) entered blocking state [ 69.548336][ T7334] bridge2: port 2(vlan0) entered disabled state [ 69.551230][ T7334] vlan0: entered promiscuous mode [ 69.552921][ T7334] veth0_to_hsr: entered promiscuous mode [ 69.678461][ T7342] netlink: 72 bytes leftover after parsing attributes in process `syz.0.361'. [ 69.683508][ T7342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.361'. [ 69.723958][ T7347] netlink: 'syz.0.362': attribute type 11 has an invalid length. [ 69.860900][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.363'. [ 69.863803][ T7358] bridge_slave_1: left allmulticast mode [ 69.865575][ T7358] bridge_slave_1: left promiscuous mode [ 69.867391][ T7358] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.871363][ T7358] bridge_slave_0: left allmulticast mode [ 69.874003][ T7358] bridge_slave_0: left promiscuous mode [ 69.876457][ T7358] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.941675][ T1222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 69.947773][ T1222] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 69.976710][ T7374] fido_id[7374]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 69.976926][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.368'. [ 70.010256][ T7380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.016019][ T7380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.240198][ T7384] input: syz0 as /devices/virtual/input/input9 [ 70.416783][ T1222] usb 7-1: USB disconnect, device number 2 [ 70.421802][ T7391] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.532490][ T7402] ======================================================= [ 70.532490][ T7402] WARNING: The mand mount option has been deprecated and [ 70.532490][ T7402] and is ignored by this kernel. Remove the mand [ 70.532490][ T7402] option from the mount to silence this warning. [ 70.532490][ T7402] ======================================================= [ 70.652734][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 70.652745][ T40] audit: type=1400 audit(1756984360.604:485): avc: denied { mount } for pid=7410 comm="syz.0.380" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 70.664352][ T40] audit: type=1400 audit(1756984360.604:486): avc: denied { search } for pid=7410 comm="syz.0.380" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 70.718235][ T7420] __nla_validate_parse: 1 callbacks suppressed [ 70.718251][ T7420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.383'. [ 70.745220][ T7417] could not allocate digest TFM handle poly1305-generic [ 70.781441][ T7426] vim2m vim2m.0: vidioc_s_fmt queue busy [ 70.931890][ T7435] netlink: 'syz.0.388': attribute type 1 has an invalid length. [ 70.950114][ T40] audit: type=1400 audit(1756984360.904:487): avc: denied { unmount } for pid=5965 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 70.976685][ T40] audit: type=1400 audit(1756984360.934:488): avc: denied { bind } for pid=7441 comm="syz.3.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 71.080591][ T7458] netlink: 'syz.0.394': attribute type 29 has an invalid length. [ 71.083832][ T7458] netlink: 'syz.0.394': attribute type 29 has an invalid length. [ 71.086784][ T7458] netlink: 500 bytes leftover after parsing attributes in process `syz.0.394'. [ 71.118247][ T40] audit: type=1400 audit(1756984361.074:489): avc: denied { read } for pid=7464 comm="syz.0.396" path="socket:[19612]" dev="sockfs" ino=19612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 71.120100][ T7465] IPv6: Can't replace route, no match found [ 71.125578][ T40] audit: type=1400 audit(1756984361.074:490): avc: denied { getopt } for pid=7464 comm="syz.0.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.155170][ T40] audit: type=1400 audit(1756984361.114:491): avc: denied { read } for pid=7466 comm="syz.0.397" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.163869][ T40] audit: type=1400 audit(1756984361.114:492): avc: denied { open } for pid=7466 comm="syz.0.397" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.171286][ T40] audit: type=1400 audit(1756984361.124:493): avc: denied { ioctl } for pid=7466 comm="syz.0.397" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.180259][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.182353][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.198496][ T40] audit: type=1400 audit(1756984361.154:494): avc: denied { bind } for pid=7469 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.500463][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'. [ 71.563795][ T7492] xfrm0 speed is unknown, defaulting to 1000 [ 71.902940][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 71.910005][ T7509] bridge0: entered promiscuous mode [ 71.914153][ T7509] bridge0: port 3(macvlan2) entered blocking state [ 71.917068][ T7509] bridge0: port 3(macvlan2) entered disabled state [ 71.919923][ T7509] macvlan2: entered allmulticast mode [ 71.922251][ T7509] bridge0: entered allmulticast mode [ 71.926530][ T7509] macvlan2: left allmulticast mode [ 71.928780][ T7509] bridge0: left allmulticast mode [ 71.931741][ T7509] bridge0: left promiscuous mode [ 72.017294][ T7509] Sensor A: ================= START STATUS ================= [ 72.019826][ T7509] Sensor A: Test Pattern: 75% Colorbar [ 72.022052][ T7509] Sensor A: Show Information: All [ 72.024517][ T7509] Sensor A: Vertical Flip: false [ 72.026627][ T7509] Sensor A: Horizontal Flip: false [ 72.028667][ T7509] Sensor A: Brightness: 128 [ 72.030108][ T7509] Sensor A: Contrast: 128 [ 72.031475][ T7509] Sensor A: Hue: 0 [ 72.032716][ T7509] Sensor A: Saturation: 128 [ 72.034240][ T7509] Sensor A: ================== END STATUS ================== [ 72.361860][ T7525] netlink: 'syz.4.415': attribute type 23 has an invalid length. [ 72.394575][ T7531] sctp: Trying to GSO but underlying device doesn't support it. [ 72.425888][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.419'. [ 72.516278][ T7533] team0: Port device team_slave_0 removed [ 72.659209][ T7551] gretap1: entered promiscuous mode [ 72.757183][ T7559] kvm: MWAIT instruction emulated as NOP! [ 72.884138][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.430'. [ 72.887023][ T7576] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 72.889646][ T7576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 72.916653][ T7576] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.920248][ T7576] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.940707][ T7565] xfrm0 speed is unknown, defaulting to 1000 [ 72.958750][ T7578] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 73.008236][ T7576] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.011540][ T7576] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.085339][ T7576] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.088565][ T7576] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.184422][ T7576] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.187857][ T7576] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.290404][ T7588] 9pnet_fd: p9_fd_create_unix (7588): problem connecting socket: ./file0: -111 [ 73.291954][ T1178] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.296875][ T1178] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.305951][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.308846][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.318431][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.321130][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.332840][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.335612][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.678214][ T7618] fuse: Bad value for 'group_id' [ 73.679837][ T7618] fuse: Bad value for 'group_id' [ 73.854637][ T1222] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 73.873062][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.443'. [ 73.910014][ T7625] netlink: 'syz.0.444': attribute type 15 has an invalid length. [ 74.023815][ T1222] usb 9-1: Using ep0 maxpacket: 32 [ 74.030087][ T1222] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 74.036679][ T1222] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 74.040586][ T1222] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 74.044110][ T1222] usb 9-1: Product: syz [ 74.045704][ T1222] usb 9-1: Manufacturer: syz [ 74.047329][ T1222] usb 9-1: SerialNumber: syz [ 74.052940][ T1222] usb 9-1: config 0 descriptor?? [ 74.057128][ T7611] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 74.061320][ T1222] hub 9-1:0.0: bad descriptor, ignoring hub [ 74.064261][ T1222] hub 9-1:0.0: probe with driver hub failed with error -5 [ 74.116474][ T7631] tipc: MTU too low for tipc bearer [ 74.363843][ T61] usb 9-1: USB disconnect, device number 3 [ 74.789340][ T7666] netlink: 'syz.2.456': attribute type 39 has an invalid length. [ 74.803323][ T5977] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 74.978332][ T5977] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 74.981445][ T5977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 74.984486][ T5977] usb 9-1: Product: syz [ 74.985820][ T5977] usb 9-1: Manufacturer: syz [ 74.987824][ T5977] usb 9-1: SerialNumber: syz [ 74.990722][ T5977] usb 9-1: config 0 descriptor?? [ 74.994763][ T5977] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 74.997580][ T5977] dvb-usb: bulk message failed: -22 (2/0) [ 75.003982][ T5977] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 75.007583][ T5977] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 75.010456][ T5977] usb 9-1: media controller created [ 75.020817][ T5977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 75.194364][ T7647] dvb-usb: bulk message failed: -22 (7/0) [ 75.198985][ T7647] dvb-usb: bulk message failed: -22 (5/0) [ 75.202162][ T5977] cxusb: set interface failed [ 75.203790][ T5977] dvb-usb: bulk message failed: -22 (1/0) [ 75.231176][ T5977] DVB: Unable to find symbol mt352_attach() [ 75.233844][ T5977] dvb-usb: bulk message failed: -22 (5/0) [ 75.235909][ T5977] zl10353_read_register: readreg error (reg=127, ret==-121) [ 75.238295][ T5977] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 75.303229][ T5977] rc_core: IR keymap rc-dvico-mce not found [ 75.305174][ T5977] Registered IR keymap rc-empty [ 75.307691][ T5977] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 75.311636][ T5977] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input10 [ 75.315720][ T5977] dvb-usb: schedule remote query interval to 100 msecs. [ 75.317884][ T5977] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 75.321626][ T5977] usb 9-1: USB disconnect, device number 4 [ 75.358517][ T5977] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 75.494710][ T7672] xfrm0 speed is unknown, defaulting to 1000 [ 75.684859][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 75.684875][ T40] audit: type=1400 audit(1756984365.644:526): avc: denied { setopt } for pid=7679 comm="syz.0.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.795425][ T7687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.461'. [ 75.827355][ T40] audit: type=1400 audit(1756984365.784:527): avc: denied { watch_sb } for pid=7690 comm="syz.4.463" path="/83/bus" dev="tmpfs" ino=479 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.016011][ T7699] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 76.192051][ T40] audit: type=1400 audit(1756984366.144:528): avc: denied { write } for pid=7717 comm="syz.4.467" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 76.259803][ T7724] bridge_slave_0: left allmulticast mode [ 76.261630][ T7724] bridge_slave_0: left promiscuous mode [ 76.263688][ T7724] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.274771][ T7724] bridge_slave_1: left allmulticast mode [ 76.276614][ T7724] bridge_slave_1: left promiscuous mode [ 76.278560][ T7724] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.285898][ T7724] bond0: (slave bond_slave_0): Releasing backup interface [ 76.292533][ T7724] bond0: (slave bond_slave_1): Releasing backup interface [ 76.302989][ T7724] team0: Port device team_slave_1 removed [ 76.307634][ T7724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.310077][ T7724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.316241][ T7724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.318571][ T7724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.329662][ T7724] bond2: (slave bond3): Releasing backup interface [ 76.342494][ T140] xfrm0 speed is unknown, defaulting to 1000 [ 76.348317][ T7724] netlink: 232 bytes leftover after parsing attributes in process `syz.4.469'. [ 76.351122][ T7724] netlink: 292 bytes leftover after parsing attributes in process `syz.4.469'. [ 76.354446][ T7724] netlink: 28 bytes leftover after parsing attributes in process `syz.4.469'. [ 76.466752][ T7734] netlink: 24 bytes leftover after parsing attributes in process `syz.4.471'. [ 76.470649][ T7734] netlink: 24 bytes leftover after parsing attributes in process `syz.4.471'. [ 76.562657][ T7739] input: syz0 as /devices/virtual/input/input11 [ 76.658206][ T7744] xfrm0 speed is unknown, defaulting to 1000 [ 76.690972][ T7744] Bluetooth: MGMT ver 1.23 [ 77.088081][ T40] audit: type=1400 audit(1756984367.044:529): avc: denied { ioctl } for pid=7761 comm="syz.4.479" path="socket:[18393]" dev="sockfs" ino=18393 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 78.219622][ T7774] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 78.290055][ T40] audit: type=1400 audit(1756984368.244:530): avc: denied { kexec_image_load } for pid=7781 comm="syz.3.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 78.300332][ T7784] netlink: 'syz.2.483': attribute type 1 has an invalid length. [ 78.309577][ T7782] Bluetooth: MGMT ver 1.23 [ 79.185827][ T7803] gfs2: path_lookup on 6(+dQnB!eUV!`: 8DSE y|YT{-,mb/ returned error -2 [ 79.253060][ T7810] 9p: Unknown Cache mode or invalid value fs [ 79.258622][ T5977] IPVS: starting estimator thread 0... [ 79.281505][ T7808] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 79.322581][ T7819] Option ''MO' to dns_resolver key: bad/missing value [ 79.346448][ T7811] IPVS: using max 44 ests per chain, 105600 per kthread [ 79.370296][ T40] audit: type=1400 audit(1756984369.324:531): avc: denied { mounton } for pid=7831 comm="syz.2.498" path="/proc/416/task" dev="proc" ino=20214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 79.396533][ T40] audit: type=1400 audit(1756984369.354:532): avc: denied { write } for pid=7826 comm="syz.3.497" path="socket:[19034]" dev="sockfs" ino=19034 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.416156][ T40] audit: type=1400 audit(1756984369.374:533): avc: denied { create } for pid=7835 comm="syz.0.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.416794][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'. [ 79.422558][ T40] audit: type=1400 audit(1756984369.374:534): avc: denied { write } for pid=7835 comm="syz.0.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.422581][ T40] audit: type=1400 audit(1756984369.374:535): avc: denied { nlmsg_write } for pid=7835 comm="syz.0.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.482415][ T7845] hub 8-0:1.0: USB hub found [ 79.486667][ T7845] hub 8-0:1.0: 1 port detected [ 79.497973][ T7845] ptrace attach of "/syz-executor exec"[5969] was attempted by " b\x0a\x0c ! \x07    ?j}6ٱĞ Dl\x0a9:$VQ\x09d'ZbWzr‘Q``V\x5c4fL\x0a6\x0az^k`q0ȟ [ 79.500816][ T7845] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.528159][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.503'. [ 79.528686][ C3] vkms_vblank_simulate: vblank timer overrun [ 79.531685][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.503'. [ 79.654498][ T7845] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.664585][ T7851] netlink: 'syz.0.506': attribute type 21 has an invalid length. [ 79.667113][ T7851] netlink: 128 bytes leftover after parsing attributes in process `syz.0.506'. [ 79.670030][ T7851] netlink: 'syz.0.506': attribute type 6 has an invalid length. [ 79.748794][ T7845] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.806785][ T7845] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.889121][ T7718] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.898396][ T7718] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.906986][ T1185] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.914088][ T7718] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.579248][ T7882] 8021q: VLANs not supported on ip6gre0 [ 80.816168][ T7906] __nla_validate_parse: 2 callbacks suppressed [ 80.816184][ T7906] netlink: 76 bytes leftover after parsing attributes in process `syz.3.524'. [ 80.852503][ T7904] netlink: 'syz.4.523': attribute type 21 has an invalid length. [ 80.856067][ T7903] netlink: 'syz.4.523': attribute type 21 has an invalid length. [ 80.858694][ T7903] netlink: 152 bytes leftover after parsing attributes in process `syz.4.523'. [ 80.861652][ T7904] netlink: 152 bytes leftover after parsing attributes in process `syz.4.523'. [ 80.869146][ T5977] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 80.874883][ T5977] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 80.925894][ T7903] fuse: Bad value for 'fd' [ 81.036175][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 81.036186][ T40] audit: type=1400 audit(1756984370.994:539): avc: denied { read } for pid=7923 comm="syz.0.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 81.046982][ T7925] netlink: 48 bytes leftover after parsing attributes in process `syz.0.530'. [ 81.383459][ T7953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.537'. [ 81.417347][ T53] cfg80211: failed to load regulatory.db [ 81.452660][ T40] audit: type=1400 audit(1756984371.404:540): avc: denied { setopt } for pid=7954 comm="syz.4.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 81.460133][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.538'. [ 81.708291][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.546'. [ 81.739175][ T7998] wireguard0: entered promiscuous mode [ 81.740950][ T7998] wireguard0: entered allmulticast mode [ 81.766473][ T8000] geneve2: entered promiscuous mode [ 81.768683][ T8000] geneve2: entered allmulticast mode [ 81.797677][ T8004] nbd: must specify a size in bytes for the device [ 81.829005][ T8009] fuse: Unknown parameter '' [ 81.835856][ T8010] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 81.838070][ T8010] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 81.841347][ T8010] vhci_hcd vhci_hcd.0: Device attached [ 81.905917][ T8012] vhci_hcd: connection closed [ 81.908183][ T7710] vhci_hcd: stop threads [ 81.912455][ T7710] vhci_hcd: release socket [ 81.914711][ T7710] vhci_hcd: disconnect device [ 81.928520][ T40] audit: type=1400 audit(1756984371.884:541): avc: denied { module_load } for pid=8018 comm="syz.2.552" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 81.966028][ T8024] mmap: syz.2.553 (8024): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 82.050543][ T8029] NILFS (nbd2): device size too small [ 82.344485][ T40] audit: type=1400 audit(1756984372.304:542): avc: denied { ioctl } for pid=8037 comm="syz.2.558" path="socket:[23559]" dev="sockfs" ino=23559 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 82.352239][ T40] audit: type=1400 audit(1756984372.304:543): avc: denied { accept } for pid=8037 comm="syz.2.558" lport=48978 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.459152][ T8046] i2c i2c-1: Invalid block write size 34 [ 82.502901][ T40] audit: type=1400 audit(1756984372.454:544): avc: denied { create } for pid=8047 comm="syz.2.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 82.555845][ T40] audit: type=1400 audit(1756984372.514:545): avc: denied { ioctl } for pid=8047 comm="syz.2.562" path="socket:[21430]" dev="sockfs" ino=21430 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 82.569641][ T8053] libceph: resolve '40' (ret=-3): failed [ 82.577275][ T8053] cgroup: release_agent respecified [ 82.685827][ T8056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.688155][ T7710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.691397][ T7710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.218023][ T40] audit: type=1400 audit(1756984373.174:546): avc: denied { nlmsg_read } for pid=8058 comm="syz.3.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 83.366263][ T40] audit: type=1400 audit(1756984373.324:547): avc: denied { getopt } for pid=8067 comm="syz.2.568" lport=44710 faddr=::ffff:100.1.1.128 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 83.419129][ T8072] netlink: 'syz.2.569': attribute type 64 has an invalid length. [ 83.422474][ T8072] netlink: 'syz.2.569': attribute type 4 has an invalid length. [ 83.426944][ T8072] netlink: 152 bytes leftover after parsing attributes in process `syz.2.569'. [ 83.500045][ T8076] fuse: Bad value for 'fd' [ 83.506114][ T8076] overlayfs: failed to resolve 'obj_user=lowerdirY% bڞ3uxsKdϵP-a17ǐЋ&x;/D_t'^Hs_ŸyZb1_ddkxP ^8l+qRئ`g/HwA4tϞW9DI_f> [ 83.506114][ T8076] `BB |Ե ': -2 [ 83.515364][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.571'. [ 83.522321][ T7710] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.527216][ T8076] fuse: Bad value for 'fd' [ 83.527429][ T7710] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.531891][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.571'. [ 83.535398][ T7710] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.537929][ T7710] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.758330][ T40] audit: type=1400 audit(1756984373.714:548): avc: denied { getopt } for pid=8097 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.037481][ T8116] batadv1: entered promiscuous mode [ 84.039168][ T8116] batadv1: entered allmulticast mode [ 84.312611][ T8133] netlink: 'syz.2.588': attribute type 10 has an invalid length. [ 84.329437][ T8133] team0: Port device dummy0 added [ 84.332671][ T8133] netlink: 'syz.2.588': attribute type 10 has an invalid length. [ 84.336487][ T8133] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 84.345535][ T8133] team0: Failed to send options change via netlink (err -105) [ 84.347976][ T8133] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 84.350809][ T8133] team0: Port device dummy0 removed [ 84.354663][ T8133] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 84.370774][ T8135] ================================================================== [ 84.370783][ T8135] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x15d4/0x17b0 [ 84.370818][ T8135] Write of size 8 at addr ffffc90005251000 by task syz.4.589/8135 [ 84.370827][ T8135] [ 84.370833][ T8135] CPU: 2 UID: 0 PID: 8135 Comm: syz.4.589 Not tainted syzkaller #0 PREEMPT(full) [ 84.370846][ T8135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.370853][ T8135] Call Trace: [ 84.370857][ T8135] [ 84.370862][ T8135] dump_stack_lvl+0x116/0x1f0 [ 84.370880][ T8135] print_report+0xcd/0x630 [ 84.370894][ T8135] ? __virt_addr_valid+0x81/0x610 [ 84.370911][ T8135] ? sys_fillrect+0x15d4/0x17b0 [ 84.370925][ T8135] kasan_report+0xe0/0x110 [ 84.370937][ T8135] ? sys_fillrect+0x15d4/0x17b0 [ 84.370953][ T8135] sys_fillrect+0x15d4/0x17b0 [ 84.370969][ T8135] ? irqentry_exit+0x3b/0x90 [ 84.370985][ T8135] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.370996][ T8135] ? __pfx_sys_fillrect+0x10/0x10 [ 84.371012][ T8135] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 84.371025][ T8135] bit_clear+0x17d/0x220 [ 84.371037][ T8135] ? __pfx_bit_clear+0x10/0x10 [ 84.371049][ T8135] ? __pfx___might_resched+0x10/0x10 [ 84.371063][ T8135] ? fb_get_color_depth+0x120/0x250 [ 84.371073][ T8135] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.371087][ T8135] ? __pfx_bit_clear+0x10/0x10 [ 84.371098][ T8135] __fbcon_clear+0x603/0x780 [ 84.371109][ T8135] fbcon_scroll+0x48b/0x690 [ 84.371119][ T8135] con_scroll+0x45c/0x690 [ 84.371131][ T8135] do_con_write+0x5560/0x8280 [ 84.371143][ T8135] ? rcu_sync_func+0x10/0x1a0 [ 84.371162][ T8135] ? __pfx___mutex_lock+0x10/0x10 [ 84.371175][ T8135] ? __pfx_do_con_write+0x10/0x10 [ 84.371186][ T8135] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 84.371201][ T8135] con_write+0x23/0xb0 [ 84.371212][ T8135] n_tty_write+0x41c/0x11e0 [ 84.371229][ T8135] ? __pfx_n_tty_write+0x10/0x10 [ 84.371242][ T8135] ? rcu_is_watching+0x12/0xc0 [ 84.371256][ T8135] ? __pfx_woken_wake_function+0x10/0x10 [ 84.371268][ T8135] ? kfree+0x24f/0x4d0 [ 84.371283][ T8135] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 84.371295][ T8135] ? __pfx_n_tty_write+0x10/0x10 [ 84.371309][ T8135] file_tty_write.constprop.0+0x504/0x9b0 [ 84.371322][ T8135] vfs_write+0x7d3/0x11d0 [ 84.371342][ T8135] ? __pfx_tty_write+0x10/0x10 [ 84.371354][ T8135] ? __pfx_vfs_write+0x10/0x10 [ 84.371365][ T8135] ? find_held_lock+0x2b/0x80 [ 84.371383][ T8135] ksys_write+0x12a/0x250 [ 84.371394][ T8135] ? __pfx_ksys_write+0x10/0x10 [ 84.371405][ T8135] ? fd_install+0x244/0x750 [ 84.371419][ T8135] do_syscall_64+0xcd/0x4c0 [ 84.371433][ T8135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.371445][ T8135] RIP: 0033:0x7faad118ebe9 [ 84.371454][ T8135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.371466][ T8135] RSP: 002b:00007faad1f4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.371476][ T8135] RAX: ffffffffffffffda RBX: 00007faad13c5fa0 RCX: 00007faad118ebe9 [ 84.371483][ T8135] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000008 [ 84.371490][ T8135] RBP: 00007faad1211e19 R08: 0000000000000000 R09: 0000000000000000 [ 84.371497][ T8135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.371503][ T8135] R13: 00007faad13c6038 R14: 00007faad13c5fa0 R15: 00007ffc2a166938 [ 84.371530][ T8135] [ 84.371534][ T8135] [ 84.371537][ T8135] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90004f51000 allocated at drm_gem_shmem_vmap_locked+0x561/0x7e0 [ 84.371565][ T8135] Memory state around the buggy address: [ 84.371571][ T8135] ffffc90005250f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 84.371579][ T8135] ffffc90005250f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 84.371587][ T8135] >ffffc90005251000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 84.371593][ T8135] ^ [ 84.371598][ T8135] ffffc90005251080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 84.371606][ T8135] ffffc90005251100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 84.371612][ T8135] ================================================================== [ 84.371677][ T8135] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 84.371685][ T8135] CPU: 2 UID: 0 PID: 8135 Comm: syz.4.589 Not tainted syzkaller #0 PREEMPT(full) [ 84.371699][ T8135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.371706][ T8135] Call Trace: [ 84.371710][ T8135] [ 84.371715][ T8135] dump_stack_lvl+0x3d/0x1f0 [ 84.371728][ T8135] vpanic+0x6e8/0x7a0 [ 84.371745][ T8135] ? __pfx_vpanic+0x10/0x10 [ 84.371764][ T8135] ? sys_fillrect+0x15d4/0x17b0 [ 84.371779][ T8135] panic+0xca/0xd0 [ 84.371795][ T8135] ? __pfx_panic+0x10/0x10 [ 84.371812][ T8135] ? sys_fillrect+0x15d4/0x17b0 [ 84.371827][ T8135] ? preempt_schedule_common+0x44/0xc0 [ 84.371839][ T8135] ? preempt_schedule_thunk+0x16/0x30 [ 84.371856][ T8135] check_panic_on_warn+0xab/0xb0 [ 84.371866][ T8135] end_report+0x107/0x170 [ 84.371878][ T8135] kasan_report+0xee/0x110 [ 84.371890][ T8135] ? sys_fillrect+0x15d4/0x17b0 [ 84.371905][ T8135] sys_fillrect+0x15d4/0x17b0 [ 84.371919][ T8135] ? irqentry_exit+0x3b/0x90 [ 84.371930][ T8135] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.371942][ T8135] ? __pfx_sys_fillrect+0x10/0x10 [ 84.371980][ T8135] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 84.371993][ T8135] bit_clear+0x17d/0x220 [ 84.372005][ T8135] ? __pfx_bit_clear+0x10/0x10 [ 84.372018][ T8135] ? __pfx___might_resched+0x10/0x10 [ 84.372033][ T8135] ? fb_get_color_depth+0x120/0x250 [ 84.372044][ T8135] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.372058][ T8135] ? __pfx_bit_clear+0x10/0x10 [ 84.372069][ T8135] __fbcon_clear+0x603/0x780 [ 84.372081][ T8135] fbcon_scroll+0x48b/0x690 [ 84.372091][ T8135] con_scroll+0x45c/0x690 [ 84.372102][ T8135] do_con_write+0x5560/0x8280 [ 84.372114][ T8135] ? rcu_sync_func+0x10/0x1a0 [ 84.372133][ T8135] ? __pfx___mutex_lock+0x10/0x10 [ 84.372145][ T8135] ? __pfx_do_con_write+0x10/0x10 [ 84.372156][ T8135] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 84.372171][ T8135] con_write+0x23/0xb0 [ 84.372182][ T8135] n_tty_write+0x41c/0x11e0 [ 84.372199][ T8135] ? __pfx_n_tty_write+0x10/0x10 [ 84.372212][ T8135] ? rcu_is_watching+0x12/0xc0 [ 84.372225][ T8135] ? __pfx_woken_wake_function+0x10/0x10 [ 84.372238][ T8135] ? kfree+0x24f/0x4d0 [ 84.372252][ T8135] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 84.372265][ T8135] ? __pfx_n_tty_write+0x10/0x10 [ 84.372279][ T8135] file_tty_write.constprop.0+0x504/0x9b0 [ 84.372292][ T8135] vfs_write+0x7d3/0x11d0 [ 84.372303][ T8135] ? __pfx_tty_write+0x10/0x10 [ 84.372314][ T8135] ? __pfx_vfs_write+0x10/0x10 [ 84.372325][ T8135] ? find_held_lock+0x2b/0x80 [ 84.372348][ T8135] ksys_write+0x12a/0x250 [ 84.372359][ T8135] ? __pfx_ksys_write+0x10/0x10 [ 84.372371][ T8135] ? fd_install+0x244/0x750 [ 84.372385][ T8135] do_syscall_64+0xcd/0x4c0 [ 84.372398][ T8135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.372409][ T8135] RIP: 0033:0x7faad118ebe9 [ 84.372418][ T8135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.372429][ T8135] RSP: 002b:00007faad1f4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.372439][ T8135] RAX: ffffffffffffffda RBX: 00007faad13c5fa0 RCX: 00007faad118ebe9 [ 84.372446][ T8135] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000008 [ 84.372453][ T8135] RBP: 00007faad1211e19 R08: 0000000000000000 R09: 0000000000000000 [ 84.372460][ T8135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.372466][ T8135] R13: 00007faad13c6038 R14: 00007faad13c5fa0 R15: 00007ffc2a166938 [ 84.372476][ T8135] [ 84.373148][ T8135] Kernel Offset: disabled VM DIAGNOSIS: 11:12:54 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff88802ff9c880 RSI=ffffffff81608c38 RDI=ffffffff93db9fe0 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27b73fc R10=ffffffff93db9fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb55f78d300 ffffffff 00c00000 GS =0000 ffff8880d66b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3d9f9a CR3=000000002c33e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002000000100008 0000000000000004 000c001a00100000 0014010000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000c000000080004 0020000e00000000 0000000000000000 024c000000200000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 009c0000000005f5 e100000000180000 00200000000e0014 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000008ffff ff4a000000000300 000000000008ffff ff3a000000000300 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000008ffff ff2a000003e60000 0008000400000008 0008000000140000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00280000003c0000 0050000000640000 00780000008c0000 00a0000000b80000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00cc000000e00000 00f4000001080000 0128000001480000 000f000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300000000000008 ffffffce00000000 0300000000000008 ffffffbe00000000 ZMM25=bf467b8bbf467b8b bf467b8bbf467b8b bf467b8bbf467b8b bf467b8bbf467b8b bf467b8bbf467b8b bf467b8bbf467b8b bf467b8bbf467b8b bf467b8bbf467b8b ZMM26=181d0c17181d0c17 181d0c17181d0c17 181d0c17181d0c17 181d0c17181d0c17 181d0c17181d0c17 181d0c17181d0c17 181d0c17181d0c17 181d0c17181d0c17 ZMM27=1b5f81a21b5f81a2 1b5f81a21b5f81a2 1b5f81a21b5f81a2 1b5f81a21b5f81a2 1b5f81a21b5f81a2 1b5f81a21b5f81a2 1b5f81a21b5f81a2 1b5f81a21b5f81a2 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=8903000089030000 8903000089030000 8903000089030000 8903000089030000 8903000089030000 8903000089030000 8903000089030000 8903000089030000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff888056002440 RSI=ffffffff81608c38 RDI=ffffffff93db9fe0 RBP=0000000000000001 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff27b73fc R10=ffffffff93db9fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f8dd24036c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d67b8000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000ffff IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=00000000534a0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=3000 [ST=6] FTW=c0 MXCSR=00001fa0 FPR0=96e2000000000000 400d FPR1=9600000000000000 400d FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000020000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d54083740 000055e2710f4000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000feac0000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e76aae676 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e76aae676 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000600 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1400000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000016008484 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffaaaaaaffaaaaaa ffaaaaaaffaaaaaa ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff0000000000aa 00ff0000000000aa ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff0000000000aa 00ff0000000000aa ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff0000aaff0000aa ffaaaaaaffaaaaaa ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff0000000000aa 00ff0000000000aa ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85644675 RDI=ffffffff9b1120a0 RBP=ffffffff9b112060 RSP=ffffc9000360f0f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000033313854 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b112060 R15=ffffffff85644610 RIP=ffffffff8564469f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007faad1f4d6c0 ffffffff 00c00000 GS =0000 ffff8880d68b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000002000 CR3=0000000055d3f000 CR4=00352ef0 DR0=0000000000060401 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe681ae886 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe681ae886 00007ffe681ae88c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dd1612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dd1612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dd1612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dd1612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dd1612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dd1612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dd22fd100 00007f8dd1797460 00007f8dd1797478 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dd17974b8 00007f8dd17974b0 00007f8dd17974a8 00007f8dd17974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff8880314ea440 RSI=ffffffff81608c38 RDI=ffffffff93db9fe0 RBP=0000000000000003 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff27b73fc R10=ffffffff93db9fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555b646500 ffffffff 00c00000 GS =0000 ffff8880d69b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc6fabcff8 CR3=000000004fee1000 CR4=00350ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000fcf802fe Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6fabdd60 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6fabdee6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6fabdee6 00007ffc6fabdeec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad10612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad10612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad10612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad10612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad10612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad10612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000