last executing test programs: 32.736988931s ago: executing program 0 (id=1): r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@mpls_getroute={0x60, 0x1a, 0x801, 0x70bd26, 0x25dfdbfe, {0x1c, 0x14, 0x20, 0xfb, 0xfc, 0x1, 0xfd, 0x8, 0x600}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x2}, @RTA_OIF={0x8, 0x4, r1}, @RTA_VIA={0x14, 0x12, {0x21, "69f65bc784d9432aaa1a23806ebd"}}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x31, 0x9, r2}}, @RTA_VIA={0x14, 0x12, {0x3, "54799fd4ba4a67c65912958c78cd"}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040080}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x75507}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20008010) 32.640914554s ago: executing program 0 (id=7): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000002c0)={0x0, 0x50, "230eb8a28876c69c56e2b443f26f9b0ebd0af1d4dd9ff3004b8d67904b0345fc353918467c7395b0b28528c822708a28bea212fd9c7153f6e75d956eabc999e9ca3bc0267d23fdfe0c2b14f842eeae4d"}, &(0x7f0000000240)=0x58) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000540)={r1, 0xdd63, 0x86, 0xe, 0x1, 0xc}, 0x14) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000800000000000000200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a6683f5aeb4edbb57a5025ccca9e00360db398262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3c93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4000050) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0xffffffffffffffff, 0x37}, @fda={0x66646185, 0x5, 0x1, 0x39}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'lo\x00', 0x1}) 32.579820243s ago: executing program 0 (id=11): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (rerun: 32) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000005, 0x12, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x80010, r0, 0x10000000) (async) r4 = syz_io_uring_setup(0x95, &(0x7f0000000140)={0x0, 0x201, 0x0, 0x0, 0x3}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x20102, 0x0, 0x28}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x0, {0x0, r7}}) (async) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index=0xa, 0xfffffffffffffffb, &(0x7f00000002c0)="c84bcd5fad1db5f74680771e136c41091f66673f1f51ba1e497aa77d988c72672eb86f14491cf41b3ad088f3eb77c1b5597ed6f42598eb50653ad72249accd6bb353b345bbeaf69fd76664c7d3c2b93de00320c1f2c0e67ee4eb2beb7192fbdf6924e5c78738b46b36858fdd475f18f56d50c4d3c542fc8e0378db3fb15cc6437ea7cc3d6a368dc19c7e346cf0a67993180a0b07584a00fa8b4ec2c57fb5e8bab83a9a41f169ab7a94dd5498a937b3ef2afcac41b3bd61c67c7c30e9a33aa17fcb070f4e1c197841", 0xc8, 0x2, 0x1, {0x0, r7}}) (async) close(r1) (async) execveat(r0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x8c800) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async) r10 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000001ac0)={r9, 0x10000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x17, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200", [0x6, 0x80000001]}}) (async, rerun: 32) preadv2(r10, &(0x7f0000000140)=[{&(0x7f0000000000)=""/64, 0x40}], 0x1, 0x504, 0x1, 0x19) (async, rerun: 32) ioctl$SG_GET_ACCESS_COUNT(r8, 0x2289, &(0x7f0000000040)) 29.138725581s ago: executing program 2 (id=36): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}}, 0x40880) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000400001e086000000000000000ec6ed41e3cdf0f3eb61275102b7149e54fd0784b23c223247b6319861649ffa8983db2ae69cd95d1d75e9432991dd28cada4907f687dbbeb06338b85c107f923e8119700c1051c8ec99c0b899f283b7db4c7423a95c50253aabfa15d397b24ff16410842a8e39f04419b777c159dbda7a4b3b7ccfdd60478eaa892c00ec7500e4e238cf1c418d58ef854a7e76f3f7fc098083ee6c405f021ffec0d2725273d40c40f2e7def2e5ae68e3442511a74f49ed2ba55d6a294c5f0f278ad80f7e9", @ANYRES32=r4, @ANYBLOB], 0x20}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32=r4, @ANYBLOB="9201000000000000e948f7a5b0c3ad01ba928eea98bbc05685b3ce17e87578574f643f9c79d7893d3f35bc502374b0a4336544dce832"], 0x20}}, 0x0) 29.076654983s ago: executing program 2 (id=38): unshare(0x400) pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffffd, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x53}) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0) unshare(0x20050c00) write(r0, &(0x7f0000000300)="e21bb75e165794c63d1b8ec8dd78752d2469ef19ad538364a4d9f8ba51483be8eea1eb38ea2199e668c1075ccda9fe8a5223", 0xfffffcf7) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='qi_submit\x00', r2, 0x0, 0x100000000}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r3, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20001810}, 0x8800) sendmsg$nl_xfrm(r1, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f0000004540)=@polexpire={0xc0, 0x1b, 0x2, 0x70bd2c, 0x25dfdbff, {{{@in=@remote, @in6=@empty, 0x4e22, 0x7, 0x4e24, 0x5, 0x2, 0x180, 0x0, 0x3a}, {0x7, 0x100000001, 0x4, 0x0, 0x1, 0xffffffffffffff8b, 0x7, 0x5}, {0x9, 0x2, 0x1, 0x8}, 0x2, 0x6e6bbd, 0x2, 0x1, 0x2}, 0xa}}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x800}) 29.07507504s ago: executing program 2 (id=39): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xec1b374ac338c01d}, 0x94) r0 = gettid() process_vm_writev(r0, &(0x7f0000000300)=[{&(0x7f0000000940)=""/248, 0xf8}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/227, 0xe3}], 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 29.002655473s ago: executing program 2 (id=41): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e20, @local}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r2 = syz_io_uring_setup(0x117, &(0x7f0000000240)={0x0, 0x4a2d, 0x0, 0xff7fffff, 0xdd}, &(0x7f0000000500)=0x0, &(0x7f0000000200)=0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000440)={{0xfffe, 0x5, 0x2, 0x5}, 'syz0\x00', 0x1c}) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78136a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4530900000000000000f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd8003fc12a084d4b11d841979e161b998ddda92f194c4ec7947b7b303be11e0962d429a2c542a28c4932e14c123dfe2b8ec47a11cce134fd6e42a9f4e00ab6de6b45"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='io_uring_req_failed\x00', r6, 0x0, 0xffffffffffff3bac}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x4, 0x0, 0x1, 0xc}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB="01a19643af002cbd9d040000e2040000000600010005"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 28.923223991s ago: executing program 2 (id=42): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_setup(0x197f, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r3, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56, 0x0, 0x0, 0xf4240}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 28.919060373s ago: executing program 2 (id=44): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x40, r1, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004804}, 0x4004044) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x208563b1da94c8b2, 0x1, 0x3}}, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x1d, 0x2, 0x6) recvfrom$unix(r4, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbf7}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x40000) r6 = socket(0x10, 0x2, 0x0) sendto$inet6(r6, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d270005000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 17.291589252s ago: executing program 32 (id=11): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (rerun: 32) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000005, 0x12, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x80010, r0, 0x10000000) (async) r4 = syz_io_uring_setup(0x95, &(0x7f0000000140)={0x0, 0x201, 0x0, 0x0, 0x3}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x20102, 0x0, 0x28}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x0, {0x0, r7}}) (async) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index=0xa, 0xfffffffffffffffb, &(0x7f00000002c0)="c84bcd5fad1db5f74680771e136c41091f66673f1f51ba1e497aa77d988c72672eb86f14491cf41b3ad088f3eb77c1b5597ed6f42598eb50653ad72249accd6bb353b345bbeaf69fd76664c7d3c2b93de00320c1f2c0e67ee4eb2beb7192fbdf6924e5c78738b46b36858fdd475f18f56d50c4d3c542fc8e0378db3fb15cc6437ea7cc3d6a368dc19c7e346cf0a67993180a0b07584a00fa8b4ec2c57fb5e8bab83a9a41f169ab7a94dd5498a937b3ef2afcac41b3bd61c67c7c30e9a33aa17fcb070f4e1c197841", 0xc8, 0x2, 0x1, {0x0, r7}}) (async) close(r1) (async) execveat(r0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x8c800) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async) r10 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000001ac0)={r9, 0x10000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x17, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200", [0x6, 0x80000001]}}) (async, rerun: 32) preadv2(r10, &(0x7f0000000140)=[{&(0x7f0000000000)=""/64, 0x40}], 0x1, 0x504, 0x1, 0x19) (async, rerun: 32) ioctl$SG_GET_ACCESS_COUNT(r8, 0x2289, &(0x7f0000000040)) 13.577094587s ago: executing program 33 (id=44): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x40, r1, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004804}, 0x4004044) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x208563b1da94c8b2, 0x1, 0x3}}, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x1d, 0x2, 0x6) recvfrom$unix(r4, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbf7}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x40000) r6 = socket(0x10, 0x2, 0x0) sendto$inet6(r6, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d270005000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.869288261s ago: executing program 5 (id=339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) socket$inet6(0xa, 0x2, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xd) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x10, 0x803, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x9, 0x48000) ioctl$DRM_IOCTL_MODE_CURSOR2(r6, 0xc02464bb, &(0x7f0000000080)={0x2, 0x0, 0x5, 0x2, 0xbc15, 0x6, 0xca, 0x44e1, 0x3}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xb, 0xf}, {0x7, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xff}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 2.699198269s ago: executing program 5 (id=343): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x78477000) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x8, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_emit_ethernet(0x2e, &(0x7f0000000200)={@link_local, @dev, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00009ba000/0x1000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.540190721s ago: executing program 5 (id=345): socket$packet(0x11, 0x2, 0x300) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "4332e6b7a575c5b2", "538b9103b79912a9542d83ccf2af5d69", "6285bfd1", "a528ca913e7743c9"}, 0x28) socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$xdp(r1, &(0x7f00000005c0)={0x2d, 0x0, r3, 0xc}, 0x10) sendto$packet(r1, &(0x7f0000000600)="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", 0x10d, 0x8000, &(0x7f0000000480)={0x11, 0x1c, r3, 0x1, 0x7}, 0x14) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x3}, 0x10}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001900010000000000000000001c140000fe000001000000001400120002"], 0x30}}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x40078, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387ffe9abc89b6f5bec", 0x0, 0x1000020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r2], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCGDEVINFO(r7, 0x801c4803, &(0x7f0000000280)=""/137) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) socket$packet(0x11, 0x3, 0x300) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x4, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r10, 0x80049370, &(0x7f0000002e40)) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x24024054) setsockopt$IP_VS_SO_SET_DEL(r10, 0x0, 0x484, &(0x7f0000000900)={0x3a, @rand_addr=0x64010101, 0x4e24, 0x1, 'ovf\x00', 0x5, 0x2, 0x77}, 0x2c) 1.178259683s ago: executing program 5 (id=357): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x400000000000000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xfffffeb8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f000003e180), r3) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f000003e480)={0x0, 0x0, &(0x7f000003e440)={&(0x7f000003e380)={0x24, r4, 0x621, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000015}, 0x4800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0xfffffe64, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x201, 0x2}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r5}) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC]) 1.109695845s ago: executing program 5 (id=359): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) close_range(r0, r0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000200)={{@my=0x0, 0x4}, @local, 0x8, 0x7, 0xd, 0x3, 0x5, 0x3, 0x173}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000bc0)={0x0, 0x0, 0x9}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@broadcast, @dev, 0x0}, &(0x7f0000000340)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x29, 0x79, 0x3, 0xfffff001, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x80, 0x9, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x3, 0x9, 0x41, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x8000, 0x7, 0x5}}) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x214, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_WOL_MODES={0x148, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_BITS={0x13c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5d00}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%&\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vmci\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '#a!!\\]&\xd56-$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vmci\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '^\x00.@!$!{-%/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'\x17\x00'}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, 'rfc4309(ccm(aes))\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}.\x86\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!$,\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe0000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}]}]}, @ETHTOOL_A_WOL_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x24000044}, 0x40000) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x150, 0x10, 0x413, 0x0, 0x0, {{@in6=@private2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0xfffc, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x2b, 0x0, 0xee00}, {@in=@loopback, 0x0, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, {0x0, 0x4, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x80, "b30b925b3a7e026ebbc7cf67cd471ed4c48e4d"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x44849}, 0x0) 1.050139211s ago: executing program 1 (id=361): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002900010326bd7000fbdbdf2501000000a7e20b9752d27a13c764fa9bfb659f352976108f"], 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x0) r0 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x2, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000002b000b00000000000000000008000000040003000c000180060000008848000008000200", @ANYRES32, @ANYBLOB="e974b17a7a6e936f1d2eeaa6f890f11aa2ebc9573f45981b7a5219a712745c0fe4ebd6568169b2e60c01b1831d566578e685d97dac9307d7d3d438882ec2cb71641e2d54634fdc1b4767b0b18ea540e14f625238e88fe24adf3527a8814f1a16ff22ceb8500009a0fccee7cd91e30a867254dcbf38fec02fb35a9e9e7dbac63f13eb2b06a942060671cd66a484ccb4c48367d12495f8ffffffffffffff6bd71ef486c46b0c4b4dc3bd7fee81ff65767e7ea613afc2ced23e11b0cbd5f475f2781230ccdd96b694e03246e5c977bab480f2a3e952a486e6da489c7132a6b3a840228d49c23c62725fc0fa7798c6c81eea6a9bcb057f22f56d98cc64278ec521edb4d8ae4393e7764c1add46178cec0cb160ed59f6104bc16f26af059153c25fd43eba9d055fcf11b60b218596c297f441e2cb380602e65d0000000000000000"], 0x2c}}, 0x0) ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c440000000000007a0ab0fe000000007b13000000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e655400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2a0c4b81f7b71cbfcef"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 1.049171506s ago: executing program 1 (id=363): sendmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[{0xb0, 0x10e, 0x7, "93b08077609f5f75054c227b78b0321a4b86f1a9b67bafd24a2242efdb6b5f9dd6d41dfe3554be0719a09ea98c25d7a7ca8a97e82fa1fc0723ae9e44f94aae9898fbc86ec42956527678440fe34aea2d000ed0b7f8cc0f75737e875acfe44f01de2394d6411ae59c748467b905b571728f24190e953bb8a97b9e960cafcf898f16c5957c514e9fd1d989d39a29f8ba403f39bb4f67d5ad8d2a"}, {0xe8, 0x117, 0x10000, "705ced7355b7699c00ddb6c3586cb3190206220e475dab8902edd2c3e301fb884c449f21da65c6ae80acdf27c9d81ce118883d12b2de6da8ff33c7e27f25adf9c75212b34671398a96b5adaef87fd750510f1469572383a98a78776de465c2e1c661bdbe8441a5eecb5c6b6449554dde9940a55dd9038f1cfdbcf9a32bf7d3aa3d71ac7dc2800fa429a8aede0790ba6fb8d4ed8b260ffd23d9f0e143cb3deaa07cfbfb33c9bc89720b10a79400b585f920aa295dc6926f464b0f8046df76b7de05ea59b373fdf63ecec8b33c2f4e686136"}, {0x30, 0x118, 0xe, "ca8239b2c3946a23f12c0b2b21f0d589965fd8f497e04b7f55"}, {0x28, 0x111, 0xfffff77a, "65a5d0cd1412935c84f0552a2f0e42da51"}, {0x100, 0x10c, 0x19b51190, "7ed62c3b8b26af395c34154d8638158ad75297f5c65375d799a4e23b3635b4bd30786ab36afd35018182575a397f1c89c31568039f25009e6bccbaadc5b951dd359ec174053bd92890c259902809e1df7ea8a9ec8af02808cbbf493127090cd4531394f9873d22b16c27743ad5db0e8ab7540144492a7cbe8f25b96b6f95409a9ac7793c00d2ab6f1c994cd70172d1dc43a84c8319fdc7bf539002b8a7ba7149f68a471af5732386bb55cfec12ee5c222ee19047cd57eaf38a7cbb74be159d2456b5c54ba877eceabc9a69711a0e6bdb038aa4308fed64f0c0f2d3c8b3df2367e76fef956bc9138dda"}, {0xa0, 0x88, 0x3, "e0715ee8fa8166815190b9acf90a2ce73540f1f4f4f731bd10e78af3fc5dc786db24db9ff11404cbe1a5120a7e51519342baac92222812e7e107b347b3f85aed35715c3fa22ad121c1f1068cf8c4816dc842fa095973b79b656ff5b11a00f169de3ba8b146f3925d1652ecbdb70a88f16c43f97a1cbf1ac44d1f8f3cebd1aaebffc58be5f078e2dbd8"}, {0x40, 0x1, 0x5, "41172eb646376881d5f76bea4a64adf61866ee0c7799eb439e21018e4b103fa5e7dbe7493edeb321be"}], 0x3d0}}], 0x1, 0x4044044) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040), 0x0, 0x0, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async, rerun: 64) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000600)="c74424001c310000c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x58}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) (rerun: 64) 931.438708ms ago: executing program 5 (id=364): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x6666, 0x8804, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x30, 0x7, [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x1, 0x3, 0x5, {0x9, 0x21, 0x3, 0x1, 0x1, {0x22, 0xf5e}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0xfc, 0xa}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x8, 0x0, 0x2}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x3, 0x6, 0x6, 0xff, 0x4}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x200a}}, {0x39, &(0x7f0000000180)=@string={0x39, 0x3, "7c39223e8d8d4789f325c2f68f6523836cb7f84edc561f4ce6a13f1f7a9394f58fa37a8697224e5df5e0b10306c9b62e0aad3dc170b93f"}}, {0xea, &(0x7f0000000280)=ANY=[@ANYBLOB="ea03e2f2bbe263635a343085d8ddc283d9af868129a854dc1ac1007f02d3f1c5a1ddd1ae630befb6ec2c343359a53986d671f3b53500b5074ac989185a248c58b7dbeeec187328897a1b0430f3d78b8f7a161fa71ec2839bc675b0bb4ffa4accf4f1a29dee097b400e6beda41b67732b48ea32eaac8c2cf7325d47986363ceaf7e5857bfe34feed66850f154baf08a7600d8af45bb99787ce648cd3e1935c7f58bd725f293c769929fc91604da2b053f969c17f2bdbf896f74fbeaa4b69287ca79ea51b64a54fba82878aa2f1fa7e9edf142dc8473c3795585526afddb160b2610b7392d0f7ea8f8a326"]}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44c}}]}) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000400)={0xb0, 0xfffffffffffffff5, 0x3, [{{0x5, 0x1, 0x5, 0x5, 0x2, 0xdf7, {0x3, 0x6, 0x28, 0x0, 0x2b26f94500000000, 0xca, 0x8, 0xff, 0x7, 0x1000, 0x3, 0x0, r1, 0xe5, 0x6}}, {0x0, 0xd70b, 0x1, 0x1, '-'}}]}, 0xb0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000240)={0x1, 0x4, 0x6, &(0x7f0000000200)={0x18, "88b4d641db8097f46656e9b6383591eaa2d0d4dfa61a5ed06f2208317253cde231"}}) socket$unix(0x1, 0x5, 0x0) 928.828097ms ago: executing program 1 (id=365): r0 = syz_open_dev$radio(&(0x7f0000002040), 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r1 = syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x1}, 0x0, 0x0) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000002080)={0x0, "432e8e0e0ff1fcc4834efc7ee1c3927c3d59655f7878a7f2de909f3ffdfbf739", 0x0, 0x100, 0x0, 0x1}) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='vcan0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='vcan0\x00', 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$cgroup_type(r4, &(0x7f00000000c0), 0x2, 0x0) (async) openat$cgroup_type(r4, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r3) syz_io_uring_setup(0x6408, &(0x7f0000000100)={0x0, 0xa490, 0x100, 0x3, 0x2a4, 0x0, r1}, &(0x7f0000000180), &(0x7f0000000280)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x28, r5, 0x1, 0x70bd29, 0x80000001, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x4008000) (async) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x28, r5, 0x1, 0x70bd29, 0x80000001, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x4008000) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x60, 0x0}}], 0x40000cf, 0x0) fsopen(&(0x7f0000000000)='exfat\x00', 0x1) 868.75534ms ago: executing program 1 (id=366): pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000100)={0x10, 0xfffffffffffffff5}, 0x10) splice(r0, 0x0, r2, 0x0, 0x4, 0x7) open(&(0x7f0000000000)='./bus\x00', 0x64142, 0x1c4) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x2818405, &(0x7f0000001980)='dax\x00\x00lwayc') 867.844671ms ago: executing program 1 (id=368): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x0, 0x8, 0xfffffe3f, 0x0, 0xfd, "4d3611000000000008000000497549e7ffffff", 0x9, 0xfff}) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/79, 0x4f}], 0x1) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r4 = socket(0x10, 0x803, 0x0) socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r1, &(0x7f00000003c0)="11eb534bfc0baf745837da88", 0xc, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r5, 0x1, 0x4, 0x6, @local}, 0x14) 767.567251ms ago: executing program 1 (id=369): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea0900bce100000000009ba56a", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0x7000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="c744240268000000c7442406000000000f011424450f2286c0f9c9f3446e66baf80cb8f44d7d86650f0104c744240035000000c74424023eb3ddb8ff1cec3131c402bf1947c9c907b9b10a0000b80d000000ba010000000f300c0c776c048def66bafc0cec460f01d6c9950000001c56400f06", 0x73}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r4, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) waitid(0x2, 0x0, 0xfffffffffffffffe, 0x8, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = openat$ptp1(0xffffffffffffff9c, &(0x7f00000009c0), 0x101000, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r6, 0xc0403d08, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) 766.992973ms ago: executing program 3 (id=370): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000080)={0x48}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r6, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='7', 0x1}], 0x1}}], 0x1, 0x1) r7 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r7, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)={'batadv_slave_1\x00', @multicast}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r1, 0x0) 609.425605ms ago: executing program 3 (id=371): socket$kcm(0x11, 0xa, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e06bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23870140cde10e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b27663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3800000000000000009c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fba6f421145c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488a0200000000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e4a59414329a7c7f2fad6bc871f5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561fe589e0d12969bc982ff3f0000006c0c6c747d9a1cc500bb89283a16ff10feea20bdac0000000000000000ca06f256a55591019465f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ee40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a3dc4e97f7fda840bcdd3afaa0d7c3c229de4f0f4ac4d04f1a4e52e38325ca2e5f1f9caaa7234053eca09ec3c8c16940bc3edfb2e016f355391c0e7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) sendto$rxrpc(r1, &(0x7f00000002c0)="f8a555d12788c47b6c8683b40c91c2a2b4c478716948b94358fd937b552f40d4", 0x20, 0x10, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x24) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r4, &(0x7f0000000000), 0x12) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r3}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0) (async) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) (async) r8 = openat$cgroup_freezer_state(r5, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f00000000c0)='THAWED\x00', 0x7) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1eaa41, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) close(r10) (async) ioctl$KVM_CHECK_EXTENSION(r9, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r10, 0x4020aed2, &(0x7f00000000c0)={0x0, 0x30a000, 0x8}) (async) syz_kvm_setup_syzos_vm$x86(r10, &(0x7f000063d000/0x400000)=nil) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 489.404084ms ago: executing program 4 (id=373): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4621, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001840)=ANY=[@ANYBLOB="34000000000401"], 0x40}}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='htcp\x00', 0x51) r2 = signalfd(r0, &(0x7f0000000140)={[0x2]}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0x1000, 0xea, &(0x7f00000007c0)="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", &(0x7f0000000200)=""/234, 0x0, 0x0, 0x2b, 0x80, &(0x7f0000000100)="1aca07e5ebb5655cd4bb0c7d9d6696501e85059b2a73a0d9941bceca80a50809aeac4e7a86cf7f907108d8", &(0x7f0000000380)="6d1eefb260546908d72bcace5f4d1444d61e4879652f3595a444bb8b63b859102562ce0d66a73362b3befcfbceafc35e3c0c5dd7d99ad4eb564fb41d2a451fe1c11429a7e4baa63557d32e98bc9eb26dd679da1f23c7e43817dff3046d6c52501d81093d54be116d3945e1c0e87153996123ee34ac91222ac9534e8150d3cc57", 0xc, 0x0, 0x1}, 0x50) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000a000085000000ad0000009500000000000000b3cd91115eb8e652f2de1652464abeffe45ea5d02a47dd0af49d3cbdb819ac0afe07341685ca0461afbead16a3e9cb460665223ffb26b9fd6339402d71f59771e951e6ffa0e9c6c9a7352c6b"], &(0x7f0000000340)='GPL\x00', 0x3}, 0x94) 488.812881ms ago: executing program 4 (id=374): socket$packet(0x11, 0xc2340cf684d20d18, 0x300) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$setlease(r0, 0x400, 0x3) syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x0, @loopback, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_cancel(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f00000003c0)=0x5, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x34e6}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e21, @multicast2}], 0x4c) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='romfs\x00', 0x200000, 0x0) 350.181065ms ago: executing program 3 (id=375): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000011000500020000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0040020000000000f8538f7ced12a5bdc794c9afa1b5e10b5b083110f125720f35f9f0d4c655cd0ea5d1574e1a6228fce6e9bbe2b2e3738d7a29e1945f1a87b268f13cebaf996cb92f606ee6fe816fcb0d573cecc8fd1170c6ffce949416a6fff5039ae9893aa1f7a7559d3916be90c34bbfbd32f5896a6570cc7574cb5684775fb9da5a0e58ee7296634ce92f2b9237e8540218733f8343e01033ad99db0a4d8cd5d7643e3ea20d710600000000042d2aef"], 0x20}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x2201) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000000c0)={"6f7224a5", 0x0, 0x80, 0x0, 0x1, 0xa, "c712a81b17faec1298cdc04aa0c992", "1e1dd368", "0216a1d6", "4ed4746d", ["1084789a224c3f324921df67", "e235e5751839aa612fda74aa", "ba6e73f074aea2729110ead9", "8f8e4945033955b240736561"]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x6, 0x4, 0x1c000000, 0x2, "0062ba7d820740ff00"}) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0x13) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x446080, 0x0) read$alg(r4, &(0x7f0000000140)=""/57, 0x39) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000040)={0x10000, 0x1000}) 347.524297ms ago: executing program 3 (id=376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES32=r1], 0x1c}}, 0x804) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) futex_waitv(&(0x7f0000000d80)=[{0x1, 0x0, 0x4}], 0x1, 0x0, 0x0, 0x1) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$igmp6(0xa, 0x3, 0x2) r9 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9b090d, 0x2, '\x00', @p_u32=0x0}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = inotify_init1(0x0) fcntl$setown(r10, 0x8, 0xffffffffffffffff) fcntl$getownex(r10, 0x10, &(0x7f0000000040)={0x0, 0x0}) move_pages(r11, 0x1, &(0x7f0000000740)=[&(0x7f00007c7000/0x3000)=nil], 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 249.24391ms ago: executing program 4 (id=377): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x2000) ioctl$CDROMREADRAW(r1, 0x5314, &(0x7f0000000200)={0x7a, 0x1, 0xfe, 0x0, 0x4, 0x4}) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000001c0)=0x1) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000100)={0x6, @capture={0x1000, 0x1, {0xce8}, 0x7fffffff, 0x8}}) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000080)) 248.8436ms ago: executing program 3 (id=378): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x8001, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)) read$dsp(r3, &(0x7f0000000440)=""/171, 0xab) ptrace(0x10, r2) ptrace$cont(0x18, r2, 0x8001, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0xcdf) syz_emit_ethernet(0x1a9, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "7b08ed", 0x173, 0x21, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @multicast1}, {[@srh={0x3b, 0xc, 0x4, 0x6, 0x5, 0x0, 0x9, [@empty, @dev={0xfe, 0x80, '\x00', 0x33}, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0x0, 0x8, 0x1, 0x5, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x10}]}], {{0x4e20, 0x4e25, 0x4, 0x1, 0x4, 0x0, 0x0, 0x7, 0x6, "35b107", 0x9, "9d57d1"}, "973cf93e746aa5f58ee6a6acd60dbd6ced9ac6e1d82db4e43e7ca3aeb32085daf2737ae1122bcf9fd33e46477dfff27e7935a7ead9b0a6023d3bf321eae76cefa6259f8fb343aeb0afb7c809f6286ba9cacc993a24b381a5c836f6a43b523be15a67455e4afc3477c2923e4ab7d0caf566ce0c2384acb6670760b75fee31dbbda7cda963840146b39279f68f73aebe3d4ec18ebb632ec2f296664f484bb1605752350f40b60c632c7be79ada34c3d602f8fedb"}}}}}}, 0x0) syz_extract_tcp_res(&(0x7f0000000140)={0x41424344}, 0x4, 0x2) syz_emit_ethernet(0x1bb, &(0x7f0000000180)={@local, @empty, @void, {@mpls_uc={0x8847, {[{0xe, 0x0, 0x1}, {0xd, 0x0, 0x1}, {0x62, 0x0, 0x1}, {0x1}, {0x7}], @ipv6=@tcp={0xa, 0x6, "74f56d", 0x171, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00', {[@routing={0x2f, 0xe, 0x2, 0x8, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x3f}, @private2]}, @hopopts={0x9, 0x7, '\x00', [@generic={0x9, 0x3b, "93fe1327a2fa38f8aefee450b0e2bd7c4900ba9f6f8685fcec160aa2d4651471c1ae84b10aa5d643af7c584f5e2eb96b68c228def3b9eff73c9d32"}]}, @dstopts={0xc, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x1}]}], {{0x4e20, 0x4e24, r4, 0x41424344, 0x1, 0x0, 0x9, 0x2, 0x0, 0x0, 0x1, {[@exp_smc={0xfe, 0x6}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @eol]}}, {"7eef96b9fa562d509acc2d84f9e3410a0dfd4a170e5207c444efa9b163511e5231e0906efc00f1f3038762fbb6ddad5470a6f51767c2fef30ace63a3942a6d7ab6a62a3ce8515282944dbc007fe4417252d5d1521078a4a2661a55072f349de12637c3f5a79675002c584756e98c868b6d7e24db8f"}}}}}}}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x8001, 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)) (async) read$dsp(r3, &(0x7f0000000440)=""/171, 0xab) (async) ptrace(0x10, r2) (async) ptrace$cont(0x18, r2, 0x8001, 0x0) (async) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r1, 0xcdf) (async) syz_emit_ethernet(0x1a9, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "7b08ed", 0x173, 0x21, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @multicast1}, {[@srh={0x3b, 0xc, 0x4, 0x6, 0x5, 0x0, 0x9, [@empty, @dev={0xfe, 0x80, '\x00', 0x33}, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0x0, 0x8, 0x1, 0x5, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x10}]}], {{0x4e20, 0x4e25, 0x4, 0x1, 0x4, 0x0, 0x0, 0x7, 0x6, "35b107", 0x9, "9d57d1"}, "973cf93e746aa5f58ee6a6acd60dbd6ced9ac6e1d82db4e43e7ca3aeb32085daf2737ae1122bcf9fd33e46477dfff27e7935a7ead9b0a6023d3bf321eae76cefa6259f8fb343aeb0afb7c809f6286ba9cacc993a24b381a5c836f6a43b523be15a67455e4afc3477c2923e4ab7d0caf566ce0c2384acb6670760b75fee31dbbda7cda963840146b39279f68f73aebe3d4ec18ebb632ec2f296664f484bb1605752350f40b60c632c7be79ada34c3d602f8fedb"}}}}}}, 0x0) (async) syz_extract_tcp_res(&(0x7f0000000140), 0x4, 0x2) (async) syz_emit_ethernet(0x1bb, &(0x7f0000000180)={@local, @empty, @void, {@mpls_uc={0x8847, {[{0xe, 0x0, 0x1}, {0xd, 0x0, 0x1}, {0x62, 0x0, 0x1}, {0x1}, {0x7}], @ipv6=@tcp={0xa, 0x6, "74f56d", 0x171, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00', {[@routing={0x2f, 0xe, 0x2, 0x8, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x3f}, @private2]}, @hopopts={0x9, 0x7, '\x00', [@generic={0x9, 0x3b, "93fe1327a2fa38f8aefee450b0e2bd7c4900ba9f6f8685fcec160aa2d4651471c1ae84b10aa5d643af7c584f5e2eb96b68c228def3b9eff73c9d32"}]}, @dstopts={0xc, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x1}]}], {{0x4e20, 0x4e24, r4, 0x41424344, 0x1, 0x0, 0x9, 0x2, 0x0, 0x0, 0x1, {[@exp_smc={0xfe, 0x6}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @eol]}}, {"7eef96b9fa562d509acc2d84f9e3410a0dfd4a170e5207c444efa9b163511e5231e0906efc00f1f3038762fbb6ddad5470a6f51767c2fef30ace63a3942a6d7ab6a62a3ce8515282944dbc007fe4417252d5d1521078a4a2661a55072f349de12637c3f5a79675002c584756e98c868b6d7e24db8f"}}}}}}}}, 0x0) (async) 149.037832ms ago: executing program 4 (id=379): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c300000", @ANYRES16=r3, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c300000", @ANYRES16=r3, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) 148.547983ms ago: executing program 3 (id=380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xc02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r4, 0x4068aea3, &(0x7f0000000000)) (async) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x42, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0xfe, 0xd, 0x55, 0x0, 0x1, 0x1, 0x9, 0x5, 0x1, 0x10, 0x5b, 0x9, 0x0, 0x7, 0x9, 0x2, 0x5, 0x4, 0x0, '\x00', 0x1, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 148.340419ms ago: executing program 4 (id=381): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000), &(0x7f0000000000)) r1 = syz_open_dev$radio(&(0x7f00000005c0), 0x2, 0x2) r2 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2) finit_module(r2, 0x0, 0x3) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000140)={0x0, 0x1, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa10902, 0x0, '\x00', @p_u8=0x0}}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) r5 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r4, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r5}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 0s ago: executing program 4 (id=382): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000340)="010001000000000000001000015b097ead8584780aed42abbad05dd5", 0x1c, r1) r2 = dup(r0) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40081271, &(0x7f0000000980)=0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x2c93a000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) kernel console output (not intermixed with test programs): [ 43.647804][ T40] audit: type=1400 audit(1757461673.008:60): avc: denied { rlimitinh } for pid=5925 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.654502][ T40] audit: type=1400 audit(1757461673.008:61): avc: denied { siginh } for pid=5925 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:28678' (ED25519) to the list of known hosts. [ 44.673440][ T40] audit: type=1400 audit(1757461674.048:62): avc: denied { name_bind } for pid=5949 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 44.700278][ T40] audit: type=1400 audit(1757461674.078:63): avc: denied { write } for pid=5950 comm="sh" path="pipe:[6056]" dev="pipefs" ino=6056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 44.720538][ T40] audit: type=1400 audit(1757461674.098:64): avc: denied { execute } for pid=5950 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 44.729583][ T40] audit: type=1400 audit(1757461674.098:65): avc: denied { execute_no_trans } for pid=5950 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.614313][ T40] audit: type=1400 audit(1757461675.998:66): avc: denied { mounton } for pid=5950 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 46.616634][ T5950] cgroup: Unknown subsys name 'net' [ 46.738523][ T5950] cgroup: Unknown subsys name 'cpuset' [ 46.742746][ T5950] cgroup: Unknown subsys name 'rlimit' [ 46.934919][ T5958] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 47.647669][ T5950] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 50.606434][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 50.606449][ T40] audit: type=1400 audit(1757461679.988:80): avc: denied { execmem } for pid=5963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 50.789245][ T40] audit: type=1400 audit(1757461680.168:81): avc: denied { create } for pid=5967 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.797079][ T40] audit: type=1400 audit(1757461680.168:82): avc: denied { read write } for pid=5967 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.824128][ T40] audit: type=1400 audit(1757461680.168:83): avc: denied { open } for pid=5967 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.826231][ T5970] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 50.831338][ T40] audit: type=1400 audit(1757461680.178:84): avc: denied { ioctl } for pid=5967 comm="syz-executor" path="socket:[6063]" dev="sockfs" ino=6063 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.837317][ T5973] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 50.844641][ T5973] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 50.847272][ T5973] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 50.849727][ T5973] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 50.856521][ T40] audit: type=1400 audit(1757461680.238:85): avc: denied { read } for pid=5967 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 50.859607][ T5977] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 50.863487][ T40] audit: type=1400 audit(1757461680.238:86): avc: denied { open } for pid=5967 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 50.866498][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 50.866860][ T5975] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 50.867479][ T5975] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 50.867665][ T5975] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 50.868156][ T5975] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 50.868405][ T5975] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 50.874180][ T40] audit: type=1400 audit(1757461680.238:87): avc: denied { mounton } for pid=5967 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 50.877376][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 50.886328][ T5982] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 50.888076][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 50.893966][ T5982] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 50.896883][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 50.898266][ T5982] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 50.900205][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 50.902242][ T5982] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.044117][ T40] audit: type=1400 audit(1757461680.418:88): avc: denied { module_request } for pid=5978 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 51.090095][ T5978] chnl_net:caif_netlink_parms(): no params data found [ 51.119669][ T5967] chnl_net:caif_netlink_parms(): no params data found [ 51.277925][ T5972] chnl_net:caif_netlink_parms(): no params data found [ 51.306142][ T5978] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.309060][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.311422][ T5978] bridge_slave_0: entered allmulticast mode [ 51.315062][ T5978] bridge_slave_0: entered promiscuous mode [ 51.343037][ T5978] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.345501][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.347873][ T5978] bridge_slave_1: entered allmulticast mode [ 51.351159][ T5978] bridge_slave_1: entered promiscuous mode [ 51.427335][ T5976] chnl_net:caif_netlink_parms(): no params data found [ 51.445867][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.448874][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.451750][ T5967] bridge_slave_0: entered allmulticast mode [ 51.455104][ T5967] bridge_slave_0: entered promiscuous mode [ 51.479391][ T5978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.488181][ T5978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.496319][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.499227][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.501918][ T5967] bridge_slave_1: entered allmulticast mode [ 51.505725][ T5967] bridge_slave_1: entered promiscuous mode [ 51.641009][ T5967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.669154][ T5978] team0: Port device team_slave_0 added [ 51.672884][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.676106][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.679137][ T5972] bridge_slave_0: entered allmulticast mode [ 51.682894][ T5972] bridge_slave_0: entered promiscuous mode [ 51.687746][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.690734][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.693690][ T5972] bridge_slave_1: entered allmulticast mode [ 51.697647][ T5972] bridge_slave_1: entered promiscuous mode [ 51.702491][ T5967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.724641][ T5978] team0: Port device team_slave_1 added [ 51.802310][ T5967] team0: Port device team_slave_0 added [ 51.856371][ T5978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.859263][ T5978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.871619][ T5978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.878842][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.883421][ T5967] team0: Port device team_slave_1 added [ 51.902506][ T5978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.905005][ T5978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.913496][ T5978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.922809][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.960432][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.962701][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.965436][ T5976] bridge_slave_0: entered allmulticast mode [ 51.968167][ T5976] bridge_slave_0: entered promiscuous mode [ 51.971906][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.975076][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.977363][ T5976] bridge_slave_1: entered allmulticast mode [ 51.980046][ T5976] bridge_slave_1: entered promiscuous mode [ 52.055060][ T5972] team0: Port device team_slave_0 added [ 52.076508][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.079248][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.090879][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.095539][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.098259][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.108853][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.113836][ T5976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.117544][ T5972] team0: Port device team_slave_1 added [ 52.159909][ T5976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.179453][ T5978] hsr_slave_0: entered promiscuous mode [ 52.182347][ T5978] hsr_slave_1: entered promiscuous mode [ 52.215897][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.218070][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.226167][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.230802][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.232974][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.240967][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.265187][ T5976] team0: Port device team_slave_0 added [ 52.302601][ T5976] team0: Port device team_slave_1 added [ 52.339004][ T5967] hsr_slave_0: entered promiscuous mode [ 52.341249][ T5967] hsr_slave_1: entered promiscuous mode [ 52.343428][ T5967] debugfs: 'hsr0' already exists in 'hsr' [ 52.345364][ T5967] Cannot create hsr debugfs directory [ 52.386658][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.389093][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.397141][ T5976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.401440][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.403658][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.411587][ T5976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.477987][ T5972] hsr_slave_0: entered promiscuous mode [ 52.480217][ T5972] hsr_slave_1: entered promiscuous mode [ 52.482273][ T5972] debugfs: 'hsr0' already exists in 'hsr' [ 52.485114][ T5972] Cannot create hsr debugfs directory [ 52.517890][ T5976] hsr_slave_0: entered promiscuous mode [ 52.520393][ T5976] hsr_slave_1: entered promiscuous mode [ 52.522534][ T5976] debugfs: 'hsr0' already exists in 'hsr' [ 52.524553][ T5976] Cannot create hsr debugfs directory [ 52.847432][ T5978] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.856973][ T5978] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.865049][ T5978] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.881054][ T5978] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.911155][ T5967] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.914616][ T5982] Bluetooth: hci3: command tx timeout [ 52.914619][ T5331] Bluetooth: hci0: command tx timeout [ 52.928937][ T5967] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.936134][ T5967] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.941525][ T5967] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.981387][ T5976] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.984268][ T5331] Bluetooth: hci1: command tx timeout [ 52.988580][ T5976] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.994015][ T5331] Bluetooth: hci2: command tx timeout [ 52.997110][ T5976] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.001950][ T5976] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.049361][ T5972] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.054306][ T5972] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.064109][ T5972] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.069078][ T5972] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.123474][ T5978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.168234][ T5976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.172534][ T5978] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.181018][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.187533][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.190653][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.212624][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.215663][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.222063][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.230855][ T5976] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.236216][ T99] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.238437][ T99] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.247971][ T99] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.250179][ T99] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.261738][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.264037][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.267441][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.269660][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.333432][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.356564][ T40] audit: type=1400 audit(1757461682.738:89): avc: denied { sys_module } for pid=5978 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.369277][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.379361][ T99] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.381636][ T99] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.390810][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.393638][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.432871][ T5978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.461289][ T5976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.477004][ T5978] veth0_vlan: entered promiscuous mode [ 53.488811][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.493483][ T5978] veth1_vlan: entered promiscuous mode [ 53.526437][ T5976] veth0_vlan: entered promiscuous mode [ 53.533362][ T5978] veth0_macvtap: entered promiscuous mode [ 53.545671][ T5976] veth1_vlan: entered promiscuous mode [ 53.549325][ T5978] veth1_macvtap: entered promiscuous mode [ 53.561456][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.569440][ T5967] veth0_vlan: entered promiscuous mode [ 53.581350][ T5967] veth1_vlan: entered promiscuous mode [ 53.589381][ T5978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.610544][ T5978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.622446][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.629695][ T5976] veth0_macvtap: entered promiscuous mode [ 53.633104][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.636401][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.639861][ T5972] veth0_vlan: entered promiscuous mode [ 53.644917][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.655495][ T5976] veth1_macvtap: entered promiscuous mode [ 53.659426][ T5972] veth1_vlan: entered promiscuous mode [ 53.666988][ T5967] veth0_macvtap: entered promiscuous mode [ 53.682551][ T5967] veth1_macvtap: entered promiscuous mode [ 53.693439][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.701468][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.709872][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.720788][ T5972] veth0_macvtap: entered promiscuous mode [ 53.731114][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.736252][ T5972] veth1_macvtap: entered promiscuous mode [ 53.737029][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.741432][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.746178][ T1181] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.750641][ T1181] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.766840][ T1181] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.770292][ T1181] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.782308][ T1181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.786344][ T1181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.789675][ T1181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.793084][ T1181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.801601][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.805544][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.807537][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.807916][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.825953][ T99] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.829430][ T99] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.845278][ T99] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.849337][ T99] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.872186][ T5978] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 53.896424][ T1181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.899767][ T1181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.902629][ T6053] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4'. [ 53.908600][ T6053] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4'. [ 53.911770][ T6053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 53.920920][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.924300][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.952231][ T99] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.955315][ T99] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.983080][ T1181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.990514][ T1181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.999160][ T99] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.001553][ T99] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.031662][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.037662][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.114792][ T6073] netlink: 'syz.0.7': attribute type 21 has an invalid length. [ 54.118142][ T6073] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7'. [ 54.123114][ T6073] netlink: 'syz.0.7': attribute type 6 has an invalid length. [ 54.128331][ T6073] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7'. [ 54.140971][ T6073] binder: 6072:6073 ioctl c0306201 200000000080 returned -14 [ 54.145938][ T6073] binder: 6072:6073 ioctl 400454ca 200000000180 returned -22 [ 54.148307][ T6078] binder: 6077:6078 unknown command 0 [ 54.151551][ T6078] binder: 6077:6078 ioctl c0306201 200000000080 returned -22 [ 54.159114][ T6078] binder: 6077:6078 ioctl 0 200000001680 returned -22 [ 54.179477][ T6080] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.182992][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 54.188856][ T6078] bond0: option use_carrier: invalid value (47) [ 54.192417][ T6082] syz.2.10 uses obsolete (PF_INET,SOCK_PACKET) [ 54.226277][ T6076] netlink: 'syz.1.8': attribute type 11 has an invalid length. [ 54.229496][ T6076] netlink: 'syz.1.8': attribute type 1 has an invalid length. [ 54.232552][ T6076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8'. [ 54.984697][ T5331] Bluetooth: hci3: command tx timeout [ 54.985451][ T5982] Bluetooth: hci0: command tx timeout [ 55.064733][ T5982] Bluetooth: hci2: command tx timeout [ 55.065778][ T5331] Bluetooth: hci1: command tx timeout [ 55.205442][ T6092] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 55.407833][ T6096] kvm: user requested TSC rate below hardware speed [ 55.413043][ T6096] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (65416116 ns). Using initial count to start timer. [ 55.558622][ T6099] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 55.678066][ T40] kauditd_printk_skb: 75 callbacks suppressed [ 55.678076][ T40] audit: type=1400 audit(1757985973.051:165): avc: denied { bind } for pid=6104 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 55.686529][ T40] audit: type=1400 audit(1757985973.051:166): avc: denied { name_bind } for pid=6104 comm="syz.2.17" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 55.693107][ T40] audit: type=1400 audit(1757985973.051:167): avc: denied { node_bind } for pid=6104 comm="syz.2.17" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 55.699624][ T40] audit: type=1400 audit(1757985973.061:168): avc: denied { write } for pid=6104 comm="syz.2.17" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 55.831309][ T6050] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 55.878475][ T6107] futex_wake_op: syz.2.18 tries to shift op by -1; fix this program [ 55.993077][ T6118] netlink: 'syz.2.21': attribute type 16 has an invalid length. [ 55.995830][ T6118] netlink: 'syz.2.21': attribute type 17 has an invalid length. [ 56.000077][ T6050] usb 6-1: config 0 has no interfaces? [ 56.009386][ T6050] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 56.012230][ T6050] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.015749][ T6050] usb 6-1: Product: syz [ 56.018160][ T6050] usb 6-1: Manufacturer: syz [ 56.026071][ T6050] usb 6-1: SerialNumber: syz [ 56.030917][ T6050] usb 6-1: config 0 descriptor?? [ 56.043762][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.046817][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.110492][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.117720][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.188001][ T99] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.191609][ T99] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.194400][ T99] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.197106][ T99] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.245519][ T40] audit: type=1400 audit(1757985973.603:169): avc: denied { mounton } for pid=6098 comm="syz.1.16" path="/proc/21/task" dev="proc" ino=10653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 56.253253][ T5331] Bluetooth: Frame is too long (len 17, expected len 16) [ 56.253803][ T6099] netlink: 'syz.1.16': attribute type 6 has an invalid length. [ 56.258611][ T6099] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16'. [ 56.263621][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.266734][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.337087][ T9] usb 6-1: USB disconnect, device number 2 [ 56.411148][ T40] audit: type=1400 audit(1757985973.768:170): avc: denied { create } for pid=6123 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.417060][ T40] audit: type=1400 audit(1757985973.768:171): avc: denied { getopt } for pid=6123 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.474691][ T40] audit: type=1400 audit(1757985973.826:172): avc: denied { read write } for pid=6129 comm="syz.2.25" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 56.483063][ T40] audit: type=1400 audit(1757985973.826:173): avc: denied { open } for pid=6129 comm="syz.2.25" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 56.492503][ T40] audit: type=1400 audit(1757985973.826:174): avc: denied { ioctl } for pid=6129 comm="syz.2.25" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 56.971932][ T6142] syz.1.29: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 56.978281][ T6142] CPU: 1 UID: 0 PID: 6142 Comm: syz.1.29 Not tainted syzkaller #0 PREEMPT(full) [ 56.978306][ T6142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.978317][ T6142] Call Trace: [ 56.978346][ T6142] [ 56.978355][ T6142] dump_stack_lvl+0x16c/0x1f0 [ 56.978383][ T6142] warn_alloc+0x248/0x3a0 [ 56.978405][ T6142] ? __pfx_warn_alloc+0x10/0x10 [ 56.978421][ T6142] ? lockdep_hardirqs_on+0x7c/0x110 [ 56.978452][ T6142] ? kasan_save_stack+0x42/0x60 [ 56.978469][ T6142] ? kasan_save_stack+0x33/0x60 [ 56.978484][ T6142] ? kasan_save_track+0x14/0x30 [ 56.978501][ T6142] ? xskq_create+0x52/0x1d0 [ 56.978518][ T6142] ? xsk_setsockopt+0x792/0x9a0 [ 56.978533][ T6142] ? do_sock_setsockopt+0xf3/0x1d0 [ 56.978561][ T6142] ? xskq_create+0xfb/0x1d0 [ 56.978580][ T6142] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 56.978615][ T6142] ? xskq_create+0xfb/0x1d0 [ 56.978639][ T6142] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 56.978674][ T6142] ? xskq_create+0xfb/0x1d0 [ 56.978692][ T6142] vmalloc_user_noprof+0x9e/0xe0 [ 56.978718][ T6142] ? xskq_create+0xfb/0x1d0 [ 56.978737][ T6142] xskq_create+0xfb/0x1d0 [ 56.978765][ T6142] xsk_setsockopt+0x792/0x9a0 [ 56.978782][ T6142] ? __pfx_xsk_setsockopt+0x10/0x10 [ 56.978800][ T6142] ? find_held_lock+0x2b/0x80 [ 56.978827][ T6142] ? selinux_socket_setsockopt+0x6a/0x80 [ 56.978851][ T6142] ? __pfx_xsk_setsockopt+0x10/0x10 [ 56.978886][ T6142] do_sock_setsockopt+0xf3/0x1d0 [ 56.978916][ T6142] __sys_setsockopt+0x1a0/0x230 [ 56.978941][ T6142] __x64_sys_setsockopt+0xbd/0x160 [ 56.978960][ T6142] ? do_syscall_64+0x91/0x4c0 [ 56.978981][ T6142] ? lockdep_hardirqs_on+0x7c/0x110 [ 56.979001][ T6142] do_syscall_64+0xcd/0x4c0 [ 56.979027][ T6142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.979045][ T6142] RIP: 0033:0x7f60ca38eba9 [ 56.979059][ T6142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.979076][ T6142] RSP: 002b:00007f60cb179038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 56.979094][ T6142] RAX: ffffffffffffffda RBX: 00007f60ca5d5fa0 RCX: 00007f60ca38eba9 [ 56.979105][ T6142] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 56.979115][ T6142] RBP: 00007f60ca411e19 R08: 0000000000000004 R09: 0000000000000000 [ 56.979125][ T6142] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 56.979135][ T6142] R13: 00007f60ca5d6038 R14: 00007f60ca5d5fa0 R15: 00007ffc3bf79918 [ 56.979160][ T6142] [ 56.979182][ T6142] Mem-Info: [ 57.072242][ T6142] active_anon:15410 inactive_anon:0 isolated_anon:0 [ 57.072242][ T6142] active_file:10911 inactive_file:40611 isolated_file:0 [ 57.072242][ T6142] unevictable:1768 dirty:1716 writeback:0 [ 57.072242][ T6142] slab_reclaimable:11801 slab_unreclaimable:69035 [ 57.072242][ T6142] mapped:24350 shmem:10345 pagetables:1066 [ 57.072242][ T6142] sec_pagetables:298 bounce:0 [ 57.072242][ T6142] kernel_misc_reclaimable:0 [ 57.072242][ T6142] free:450571 free_pcp:23989 free_cma:0 [ 57.088789][ T6142] Node 0 active_anon:54820kB inactive_anon:0kB active_file:43644kB inactive_file:162240kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:97400kB dirty:6824kB writeback:0kB shmem:31024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12400kB pagetables:4080kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB [ 57.102922][ T6142] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:40kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 57.110034][ T5331] Bluetooth: hci3: command tx timeout [ 57.115104][ T6142] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 57.127714][ T6142] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 57.130210][ T6142] Node 0 DMA32 free:204744kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40808kB inactive_anon:0kB active_file:43644kB inactive_file:162240kB unevictable:3536kB writepending:6824kB present:2080628kB managed:1263444kB mlocked:0kB bounce:0kB free_pcp:80256kB local_pcp:5752kB free_cma:0kB [ 57.142398][ T6142] lowmem_reserve[]: 0 0 0 0 0 [ 57.143916][ T6142] Node 1 Normal free:1606360kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB writepending:40kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:12632kB local_pcp:4424kB free_cma:0kB [ 57.153674][ T6142] lowmem_reserve[]: 0 0 0 0 0 [ 57.155251][ T6142] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 57.159327][ T6142] Node 0 DMA32: 266*4kB (M) 186*8kB (UME) 164*16kB (UME) 204*32kB (UME) 154*64kB (UM) 142*128kB (ME) 6*256kB (ME) 7*512kB (UME) 2*1024kB (M) 5*2048kB (UME) 38*4096kB (M) = 212792kB [ 57.166795][ T6142] Node 1 Normal: 50*4kB (UME) 28*8kB (UME) 14*16kB (UME) 19*32kB (UME) 16*64kB (UME) 10*128kB (UME) 3*256kB (UE) 5*512kB (UME) 2*1024kB (UE) 2*2048kB (UM) 389*4096kB (M) = 1606376kB [ 57.173983][ T6142] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 57.177748][ T6142] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 57.181017][ T6142] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 57.184895][ T6142] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 57.188558][ T6142] 53968 total pagecache pages [ 57.190476][ T6142] 0 pages in swap cache [ 57.191927][ T5331] Bluetooth: hci2: command tx timeout [ 57.192366][ T6142] Free swap = 124996kB [ 57.193906][ T5982] Bluetooth: hci1: command tx timeout [ 57.199771][ T6142] Total swap = 124996kB [ 57.201204][ T6142] 1048443 pages RAM [ 57.203755][ T6142] 0 pages HighMem/MovableOnly [ 57.205818][ T6142] 283269 pages reserved [ 57.207653][ T6142] 0 pages cma reserved [ 57.363192][ T6152] tipc: Trying to set illegal importance in message [ 57.480247][ T10] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 57.621421][ T6163] gfs2: path_lookup on ™6(ï+‰d‹QÌnB´!eU‚çVè!š`:Ñ 8×DSEíÄðÃÄèÎ Áy|YT¢®{-€íê°”,mb/ returned error -2 [ 57.622009][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'. [ 57.634586][ T6165] batadv_slave_0: entered promiscuous mode [ 57.646505][ T10] usb 8-1: config 1 interface 0 altsetting 253 has an invalid descriptor for endpoint zero, skipping [ 57.650820][ T10] usb 8-1: config 1 interface 0 has no altsetting 0 [ 57.654950][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 57.658559][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.661039][ T10] usb 8-1: Product: syz [ 57.662375][ T10] usb 8-1: Manufacturer: syz [ 57.663814][ T10] usb 8-1: SerialNumber: syz [ 57.675443][ T6169] netlink: 'syz.1.37': attribute type 29 has an invalid length. [ 57.681096][ T6169] netlink: 76 bytes leftover after parsing attributes in process `syz.1.37'. [ 57.766239][ T6179] input: syz0 as /devices/virtual/input/input5 [ 57.882923][ T6187] netlink: 'syz.1.45': attribute type 7 has an invalid length. [ 58.014385][ T10] usb 8-1: USB disconnect, device number 2 [ 58.143103][ T6194] kvm: pic: non byte write [ 58.509756][ T5331] Bluetooth: hci0: command tx timeout [ 59.248475][ T5331] Bluetooth: hci3: command tx timeout [ 59.330509][ T5331] Bluetooth: hci2: command tx timeout [ 59.483569][ T6222] __nla_validate_parse: 1 callbacks suppressed [ 59.483580][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'. [ 59.489251][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.53'. [ 59.492171][ T6222] netlink: 'syz.1.53': attribute type 11 has an invalid length. [ 59.515672][ T6227] sctp: [Deprecated]: syz.3.54 (pid 6227) Use of struct sctp_assoc_value in delayed_ack socket option. [ 59.515672][ T6227] Use struct sctp_sack_info instead [ 59.631975][ T6230] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 59.738887][ T6240] could not allocate digest TFM handle cryptd(blake2b-160) [ 59.945316][ T6267] netlink: 'syz.1.63': attribute type 4 has an invalid length. [ 60.039639][ T6273] 9pnet_fd: p9_fd_create_unix (6273): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 60.080330][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.137286][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.254376][ T6281] hfsplus: unable to find HFS+ superblock [ 60.403687][ T6285] could not allocate digest TFM handle cryptd(blake2b-160) [ 60.407540][ T6285] netlink: 504 bytes leftover after parsing attributes in process `syz.3.69'. [ 60.519923][ T6290] macvlan2: entered promiscuous mode [ 60.522375][ T6290] macvlan2: entered allmulticast mode [ 60.525042][ T6290] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 60.644645][ T5331] Bluetooth: hci1: command tx timeout [ 60.671156][ T6292] process 'syz.3.71' launched '/dev/fd/3' with NULL argv: empty string added [ 60.901904][ T40] kauditd_printk_skb: 550 callbacks suppressed [ 60.901915][ T40] audit: type=1400 audit(1757985978.137:725): avc: denied { unmount } for pid=5978 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.948788][ T40] audit: type=1400 audit(1757985978.177:726): avc: denied { create } for pid=6301 comm="syz.3.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 60.955950][ T40] audit: type=1400 audit(1757985978.177:727): avc: denied { listen } for pid=6301 comm="syz.3.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 60.963294][ T40] audit: type=1400 audit(1757985978.186:728): avc: denied { ioctl } for pid=6301 comm="syz.3.74" path="socket:[10991]" dev="sockfs" ino=10991 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 61.225433][ T40] audit: type=1400 audit(1757985978.440:729): avc: denied { create } for pid=6311 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 61.436313][ T40] audit: type=1400 audit(1757985978.655:730): avc: denied { read } for pid=6311 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 61.651452][ T40] audit: type=1400 audit(1757985978.861:731): avc: denied { write } for pid=6311 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 61.831434][ T6312] geneve2: entered promiscuous mode [ 61.833166][ T6312] geneve2: entered allmulticast mode [ 61.988291][ T40] audit: type=1400 audit(1757985979.193:732): avc: denied { search } for pid=5683 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.001947][ T40] audit: type=1400 audit(1757985979.193:733): avc: denied { search } for pid=5683 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.009128][ T40] audit: type=1400 audit(1757985979.193:734): avc: denied { search } for pid=5683 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.335135][ T6331] netlink: 60 bytes leftover after parsing attributes in process `syz.3.78'. [ 63.080272][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 63.113962][ T6343] ======================================================= [ 63.113962][ T6343] WARNING: The mand mount option has been deprecated and [ 63.113962][ T6343] and is ignored by this kernel. Remove the mand [ 63.113962][ T6343] option from the mount to silence this warning. [ 63.113962][ T6343] ======================================================= [ 63.126325][ T6343] new mount options do not match the existing superblock, will be ignored [ 63.373170][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'. [ 63.406748][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 63.594935][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86'. [ 63.643876][ T6366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6366 comm=syz.3.87 [ 63.649386][ T6366] netlink: 'syz.3.87': attribute type 7 has an invalid length. [ 63.651859][ T6366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.87'. [ 64.377505][ T6392] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 64.379393][ T6392] PKCS7: Only support pkcs7_signedData type [ 64.433730][ T6390] /dev/sr0: Can't open blockdev [ 64.438106][ T6391] hfsplus: unable to find HFS+ superblock [ 64.469633][ T6396] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.477457][ T6396] netlink: 'syz.3.96': attribute type 25 has an invalid length. [ 64.481290][ T6396] netlink: 'syz.3.96': attribute type 8 has an invalid length. [ 64.528082][ T6400] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.98'. [ 64.568878][ T6401] netlink: 'syz.1.97': attribute type 12 has an invalid length. [ 64.727304][ T6408] Zero length message leads to an empty skb [ 64.805260][ T6412] warning: `syz.3.102' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 64.811918][ T6412] rtc_cmos 00:05: Alarms can be up to one day in the future [ 65.009140][ T6425] __nla_validate_parse: 1 callbacks suppressed [ 65.009143][ T6424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 65.009150][ T6425] netlink: 16 bytes leftover after parsing attributes in process `syz.3.105'. [ 65.226236][ T6431] binder: Unknown parameter 'func' [ 65.236074][ T6431] geneve2: entered promiscuous mode [ 65.426190][ T6438] wg1: entered promiscuous mode [ 65.427827][ T6438] wg1: entered allmulticast mode [ 65.468864][ T6442] comedi comedi3: pcl812: I/O port conflict (0x8,16) [ 65.659951][ T6455] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 65.786303][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 65.955168][ T10] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 65.958591][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 65.966361][ T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 65.970353][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.979888][ T10] usb 8-1: config 0 descriptor?? [ 65.984621][ T10] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 65.995538][ T6462] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 65.999368][ T6462] netlink: 9284 bytes leftover after parsing attributes in process `syz.1.117'. [ 66.092673][ T6465] netlink: 'syz.1.118': attribute type 12 has an invalid length. [ 66.095791][ T6465] netlink: 156 bytes leftover after parsing attributes in process `syz.1.118'. [ 66.187653][ T6445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.192418][ T6445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.215291][ T5969] usb 8-1: USB disconnect, device number 3 [ 66.503380][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 66.503391][ T40] audit: type=1400 audit(1757985983.628:779): avc: denied { read } for pid=6481 comm="syz.3.123" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 66.513866][ T40] audit: type=1400 audit(1757985983.628:780): avc: denied { open } for pid=6481 comm="syz.3.123" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 66.523105][ T40] audit: type=1400 audit(1757985983.628:781): avc: denied { remount } for pid=6481 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.597451][ T40] audit: type=1400 audit(1757985983.717:782): avc: denied { unmount } for pid=5978 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.624431][ T6486] netlink: 'syz.3.125': attribute type 10 has an invalid length. [ 66.626886][ T6486] netlink: 40 bytes leftover after parsing attributes in process `syz.3.125'. [ 66.630392][ T6486] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 66.632708][ T6486] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 66.635940][ T6486] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 66.769531][ T6487] syzkaller0: entered promiscuous mode [ 66.771527][ T6487] syzkaller0: entered allmulticast mode [ 66.775473][ T6487] netlink: 'syz.3.125': attribute type 10 has an invalid length. [ 66.777932][ T6487] netlink: 40 bytes leftover after parsing attributes in process `syz.3.125'. [ 66.780872][ T6487] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 66.869682][ T40] audit: type=1400 audit(1757985983.982:783): avc: denied { connect } for pid=6491 comm="syz.3.126" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.876658][ T40] audit: type=1400 audit(1757985983.992:784): avc: denied { execute } for pid=6491 comm="syz.3.126" path="/57/cpuacct.usage_percpu" dev="tmpfs" ino=315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.887420][ T40] audit: type=1400 audit(1757985983.992:785): avc: denied { getopt } for pid=6491 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.896885][ T40] audit: type=1400 audit(1757985984.012:786): avc: denied { execute_no_trans } for pid=6491 comm="syz.3.126" path="/57/file0" dev="tmpfs" ino=314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.046407][ T6503] netlink: zone id is out of range [ 67.050415][ T6503] netlink: zone id is out of range [ 67.052049][ T6503] netlink: zone id is out of range [ 67.053730][ T6503] netlink: zone id is out of range [ 67.055566][ T6503] netlink: del zone limit has 4 unknown bytes [ 67.098975][ T5331] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 67.101691][ T5331] Bluetooth: hci3: Injecting HCI hardware error event [ 67.104554][ T5982] Bluetooth: hci3: hardware error 0x00 [ 67.159321][ T6505] netlink: 32 bytes leftover after parsing attributes in process `syz.3.130'. [ 67.162727][ T6505] netlink: 32 bytes leftover after parsing attributes in process `syz.3.130'. [ 67.180132][ T6498] infiniband syz1: set active [ 67.183462][ T6498] infiniband syz1: added veth1_virt_wifi [ 67.187946][ T6498] syz1: rxe_create_cq: returned err = -12 [ 67.192317][ T6498] infiniband syz1: Couldn't create ib_mad CQ [ 67.194983][ T6498] infiniband syz1: Couldn't open port 1 [ 67.218639][ T6498] RDS/IB: syz1: added [ 67.220848][ T6498] smc: adding ib device syz1 with port count 1 [ 67.223599][ T6498] smc: ib device syz1 port 1 has pnetid [ 67.462147][ T6515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 67.467345][ T40] audit: type=1400 audit(1757985984.573:787): avc: denied { bind } for pid=6514 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.483561][ T40] audit: type=1400 audit(1757985984.573:788): avc: denied { map } for pid=6514 comm="syz.3.133" path="socket:[11934]" dev="sockfs" ino=11934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.671041][ T6521] program syz.1.136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.142425][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'. [ 68.148181][ T6545] netlink: 308 bytes leftover after parsing attributes in process `syz.1.145'. [ 68.544770][ T6593] ALSA: mixer_oss: invalid OSS volume '' [ 69.210585][ T5982] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 69.418026][ T6613] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 69.426911][ T6613] CIFS mount error: No usable UNC path provided in device string! [ 69.426911][ T6613] [ 69.430414][ T6613] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 69.623633][ T5331] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.629840][ T5331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.633734][ T5331] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.638761][ T5331] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.641877][ T5331] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.804700][ T6580] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.893029][ T6580] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.900937][ T6630] chnl_net:caif_netlink_parms(): no params data found [ 70.012967][ T6580] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.020892][ T6630] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.024036][ T6630] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.027059][ T6630] bridge_slave_0: entered allmulticast mode [ 70.036793][ T6630] bridge_slave_0: entered promiscuous mode [ 70.044294][ T6630] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.047965][ T6630] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.052073][ T6630] bridge_slave_1: entered allmulticast mode [ 70.055006][ T6630] bridge_slave_1: entered promiscuous mode [ 70.076131][ T6649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=6649 comm=syz.3.169 [ 70.120701][ T6580] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.129551][ T6630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.136402][ T6630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.166913][ T6630] team0: Port device team_slave_0 added [ 70.170005][ T6630] team0: Port device team_slave_1 added [ 70.200413][ T6630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.203148][ T6630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.210974][ T6630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.215805][ T6630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.217956][ T6630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.226104][ T6630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.282075][ T6630] hsr_slave_0: entered promiscuous mode [ 70.286305][ T6630] hsr_slave_1: entered promiscuous mode [ 70.288341][ T6630] debugfs: 'hsr0' already exists in 'hsr' [ 70.290122][ T6630] Cannot create hsr debugfs directory [ 70.298582][ T6580] bridge_slave_1: left allmulticast mode [ 70.301150][ T6580] bridge_slave_1: left promiscuous mode [ 70.305186][ T6580] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.310483][ T6580] bridge_slave_0: left allmulticast mode [ 70.312873][ T6580] bridge_slave_0: left promiscuous mode [ 70.315537][ T6580] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.394060][ T5980] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 70.561073][ T5980] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 70.564845][ T5980] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 70.571937][ T5980] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 70.582543][ T5980] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 70.589838][ T5980] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 70.594421][ T5980] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 70.597829][ T5980] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 70.600448][ T5980] usb 8-1: Product: syz [ 70.602166][ T5980] usb 8-1: Manufacturer: syz [ 70.610664][ T6580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.612392][ T5980] cdc_wdm 8-1:1.0: skipping garbage [ 70.616244][ T5980] cdc_wdm 8-1:1.0: skipping garbage [ 70.622343][ T6580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.623055][ T5980] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 70.628059][ T5980] cdc_wdm 8-1:1.0: Unknown control protocol [ 70.630249][ T6580] bond0 (unregistering): Released all slaves [ 70.812786][ T6664] __nla_validate_parse: 1 callbacks suppressed [ 70.812796][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.175'. [ 70.821533][ T6651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.824704][ T6651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.828736][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.175'. [ 70.841794][ T6664] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6664 comm=syz.1.175 [ 70.954099][ T6630] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.962336][ T6630] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.972984][ T6630] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.981110][ T6630] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.087058][ T6580] hsr_slave_0: left promiscuous mode [ 71.090056][ T6580] hsr_slave_1: left promiscuous mode [ 71.092274][ T6580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.094676][ T6580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.097692][ T6580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.100059][ T6580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.120736][ T6687] overlayfs: failed to resolve './file1': -2 [ 71.145626][ T6580] veth1_macvtap: left promiscuous mode [ 71.147571][ T6580] veth0_macvtap: left promiscuous mode [ 71.149874][ T6580] veth1_vlan: left promiscuous mode [ 71.151747][ T6580] veth0_vlan: left promiscuous mode [ 71.479981][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.621838][ T6580] team0 (unregistering): Port device team_slave_1 removed [ 71.673304][ T6580] team0 (unregistering): Port device team_slave_0 removed [ 71.713931][ T5331] Bluetooth: hci4: command tx timeout [ 72.107509][ T6630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.119511][ T6630] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.135956][ T6583] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.138863][ T6583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.142621][ T6583] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.144913][ T6583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.152800][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 72.152814][ T40] audit: type=1400 audit(1757985989.201:834): avc: denied { mount } for pid=6694 comm="syz.1.179" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 72.164337][ T6630] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.170270][ T6630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.203110][ T40] audit: type=1400 audit(1757985989.250:835): avc: denied { unmount } for pid=5972 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 72.302286][ T6630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.471249][ T6630] veth0_vlan: entered promiscuous mode [ 72.477527][ T6630] veth1_vlan: entered promiscuous mode [ 72.495437][ T6630] veth0_macvtap: entered promiscuous mode [ 72.501179][ T6630] veth1_macvtap: entered promiscuous mode [ 72.513070][ T6630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.523744][ T6630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.537856][ T6580] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.539058][ T6705] kvm: pic: non byte write [ 72.540894][ T6580] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.540926][ T6580] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.540944][ T6580] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.604498][ T6579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.607049][ T6579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.619337][ T6579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.622152][ T6579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.628942][ T40] audit: type=1400 audit(1757985989.666:836): avc: denied { mount } for pid=6630 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.635852][ T40] audit: type=1400 audit(1757985989.676:837): avc: denied { mounton } for pid=6630 comm="syz-executor" path="/syzkaller.9yzTaH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 72.708710][ T40] audit: type=1400 audit(1757985989.745:838): avc: denied { append } for pid=6741 comm="syz.4.181" name="v4l-subdev5" dev="devtmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.803278][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.183'. [ 72.804188][ T40] audit: type=1400 audit(1757985989.844:839): avc: denied { getopt } for pid=6746 comm="syz.4.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.958301][ T40] audit: type=1400 audit(1757985989.992:840): avc: denied { create } for pid=6759 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 72.962095][ T6760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.186'. [ 72.965915][ T40] audit: type=1400 audit(1757985989.992:841): avc: denied { getopt } for pid=6759 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 73.179342][ T40] audit: type=1400 audit(1757985990.210:842): avc: denied { execute } for pid=6773 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 73.187067][ T40] audit: type=1400 audit(1757985990.210:843): avc: denied { execute_no_trans } for pid=6773 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 73.221770][ T54] usb 8-1: USB disconnect, device number 4 [ 73.347237][ T5982] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.350258][ T5982] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.353007][ T5982] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.359013][ T5982] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.364221][ T5982] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.391403][ T6800] hfs: can't find a HFS filesystem on dev sr0 [ 73.498826][ T6803] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.503639][ T6807] Bluetooth: MGMT ver 1.23 [ 73.551859][ T6813] I/O error, dev loop3, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 73.555454][ T6813] qnx4: unable to read the superblock [ 73.721207][ T6797] chnl_net:caif_netlink_parms(): no params data found [ 73.810091][ T6822] team0 (unregistering): Port device team_slave_0 removed [ 73.815409][ T6822] team0 (unregistering): Port device team_slave_1 removed [ 73.823661][ T5982] Bluetooth: hci4: command tx timeout [ 73.897541][ T6797] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.900217][ T6824] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 73.900459][ T6797] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.906296][ T6797] bridge_slave_0: entered allmulticast mode [ 73.908979][ T6797] bridge_slave_0: entered promiscuous mode [ 73.915205][ T6797] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.917487][ T6797] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.919780][ T6797] bridge_slave_1: entered allmulticast mode [ 73.922381][ T6797] bridge_slave_1: entered promiscuous mode [ 73.964511][ T6797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.969775][ T6797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.974880][ T5980] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 74.009343][ T6797] team0: Port device team_slave_0 added [ 74.012894][ T6797] team0: Port device team_slave_1 added [ 74.052279][ T6797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.054613][ T6797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.067951][ T6797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.074142][ T6797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.077146][ T6797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.086811][ T6797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.116277][ T5980] usb 8-1: device descriptor read/64, error -71 [ 74.131121][ T6797] hsr_slave_0: entered promiscuous mode [ 74.134103][ T6797] hsr_slave_1: entered promiscuous mode [ 74.137661][ T6797] debugfs: 'hsr0' already exists in 'hsr' [ 74.140223][ T6797] Cannot create hsr debugfs directory [ 74.318516][ T6797] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 74.324826][ T6797] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 74.329775][ T6580] bridge_slave_1: left allmulticast mode [ 74.331767][ T6580] bridge_slave_1: left promiscuous mode [ 74.333871][ T6580] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.337240][ T6580] bridge_slave_0: left allmulticast mode [ 74.339790][ T6580] bridge_slave_0: left promiscuous mode [ 74.342202][ T6580] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.358634][ T5980] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 74.500033][ T5980] usb 8-1: device descriptor read/64, error -71 [ 74.539628][ T6842] netlink: 'syz.4.204': attribute type 1 has an invalid length. [ 74.579816][ T6580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.584895][ T6580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.589279][ T6580] bond0 (unregistering): Released all slaves [ 74.601800][ T6797] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 74.608082][ T6797] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 74.612205][ T5980] usb usb8-port1: attempt power cycle [ 74.715120][ T6797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.726883][ T6797] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.735244][ T6579] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.738336][ T6579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.746967][ T6570] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.750083][ T6570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.920645][ T6797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.924795][ T6033] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 74.947244][ T6876] deleting an unspecified loop device is not supported. [ 74.974662][ T5980] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 74.996585][ T5980] usb 8-1: device descriptor read/8, error -71 [ 75.010702][ T6580] hsr_slave_0: left promiscuous mode [ 75.013319][ T6580] hsr_slave_1: left promiscuous mode [ 75.017472][ T6580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.020473][ T6580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.076388][ T6033] usb 9-1: Using ep0 maxpacket: 8 [ 75.081896][ T6033] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 75.084495][ T6033] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 75.088235][ T6033] usb 9-1: config 0 has no interface number 0 [ 75.090703][ T6033] usb 9-1: config 0 interface 1 has no altsetting 0 [ 75.093514][ T6033] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 75.097403][ T6033] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.103816][ T6033] usb 9-1: config 0 descriptor?? [ 75.247174][ T5980] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 75.278102][ T5980] usb 8-1: device descriptor read/8, error -71 [ 75.398666][ T5980] usb usb8-port1: unable to enumerate USB device [ 75.440714][ T5982] Bluetooth: hci2: command tx timeout [ 75.489987][ T6580] team0 (unregistering): Port device team_slave_1 removed [ 75.531403][ T6033] usb 9-1: string descriptor 0 read error: -71 [ 75.536911][ T6033] usb 9-1: USB disconnect, device number 2 [ 75.544253][ T6580] team0 (unregistering): Port device team_slave_0 removed [ 75.913311][ T5982] Bluetooth: hci4: command tx timeout [ 75.977277][ T6797] veth0_vlan: entered promiscuous mode [ 75.982358][ T6797] veth1_vlan: entered promiscuous mode [ 76.011664][ T6797] veth0_macvtap: entered promiscuous mode [ 76.020319][ T6797] veth1_macvtap: entered promiscuous mode [ 76.059997][ T6797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.063904][ T6889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 76.067802][ T6797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.079485][ T6570] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.082504][ T6570] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.087922][ T6570] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.091197][ T6570] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.155893][ T6897] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 76.174993][ T6570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.178730][ T6570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.204050][ T6583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.206687][ T6583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.219014][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'. [ 76.376890][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.214'. [ 76.379792][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.5.214'. [ 76.382610][ T6916] netlink: 'syz.5.214': attribute type 7 has an invalid length. [ 76.393850][ T6916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6916 comm=syz.5.214 [ 76.410344][ T6919] mmap: syz.1.215 (6919) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.488300][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'. [ 76.536136][ T6927] netlink: 'syz.1.217': attribute type 10 has an invalid length. [ 76.553051][ T6927] team0: Port device dummy0 added [ 76.557610][ T6927] netlink: 'syz.1.217': attribute type 10 has an invalid length. [ 76.566004][ T6927] team0: Port device dummy0 removed [ 76.571596][ T6927] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 76.627203][ T6936] netlink: 56 bytes leftover after parsing attributes in process `syz.1.219'. [ 76.635095][ T6936] veth1_macvtap: left promiscuous mode [ 76.636854][ T6936] macsec0: entered promiscuous mode [ 76.638507][ T6936] macsec0: entered allmulticast mode [ 76.721825][ T6949] binder: 6947:6949 ioctl c0046209 9999999999999999 returned -22 [ 76.731499][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 76.741332][ T5982] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 76.743449][ T5982] Bluetooth: Wrong link type (-22) [ 76.773444][ T6952] netlink: 64 bytes leftover after parsing attributes in process `syz.1.224'. [ 76.777166][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'. [ 76.779960][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.224'. [ 76.784891][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'. [ 76.786700][ T6955] input: syz1 as /devices/virtual/input/input7 [ 76.845758][ T6962] netlink: 'syz.4.227': attribute type 4 has an invalid length. [ 76.905406][ T6972] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 76.952230][ T6976] netlink: 'syz.1.229': attribute type 21 has an invalid length. [ 77.098655][ T6985] overlayfs: failed to resolve './file1': -2 [ 77.199781][ T6992] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 77.227083][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 77.227098][ T40] audit: type=1400 audit(1757985994.222:873): avc: denied { view } for pid=6993 comm="syz.4.235" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 77.265242][ T6996] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20001 [ 77.273250][ T6996] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 77.279069][ T6996] overlayfs: overlapping lowerdir path [ 77.283225][ T6996] binder: 6995:6996 ioctl c0306201 200000000080 returned -14 [ 77.287285][ T6996] netlink: 'syz.4.236': attribute type 29 has an invalid length. [ 77.325881][ T6999] dvmrp17: entered allmulticast mode [ 77.327862][ T6998] dvmrp17: left allmulticast mode [ 77.486659][ T7004] 8021q: adding VLAN 0 to HW filter on device bond2 [ 77.526905][ T5982] Bluetooth: hci2: command tx timeout [ 77.826205][ T7030] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.902631][ T40] audit: type=1400 audit(1757985994.896:874): avc: denied { read } for pid=7035 comm="syz.1.250" name="file0" dev="tmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 77.909703][ T40] audit: type=1400 audit(1757985994.896:875): avc: denied { open } for pid=7035 comm="syz.1.250" path="/94/file0" dev="tmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 77.920147][ T6051] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 77.930752][ T7030] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.031714][ T7030] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.071281][ T6051] usb 10-1: device descriptor read/64, error -71 [ 78.094573][ T7030] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.159333][ T7043] »»»»»»×[SRëåW: renamed from lo [ 78.203069][ T6583] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.211547][ T6583] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.223227][ T6583] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.225999][ T7044] trusted_key: encrypted_key: insufficient parameters specified [ 78.236289][ T6570] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.310969][ T40] audit: type=1400 audit(1757985995.293:876): avc: denied { mounton } for pid=7049 comm="syz.4.254" path="/32/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 78.323091][ T6051] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 78.374988][ T40] audit: type=1400 audit(1757985995.363:877): avc: denied { unmount } for pid=6630 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 78.398276][ T40] audit: type=1400 audit(1757985995.383:878): avc: denied { setopt } for pid=7051 comm="syz.4.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 78.454095][ T6051] usb 10-1: device descriptor read/64, error -71 [ 78.499947][ T7066] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 78.501947][ T7066] [U] J"—e:ÀÆ" [ 78.545621][ T40] audit: type=1400 audit(1757985995.531:879): avc: denied { ioctl } for pid=7069 comm="syz.4.259" path="socket:[17377]" dev="sockfs" ino=17377 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 78.553742][ T40] audit: type=1400 audit(1757985995.531:880): avc: denied { write } for pid=7069 comm="syz.4.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 78.565212][ T6051] usb usb10-port1: attempt power cycle [ 78.637357][ T7073] syzkaller1: entered promiscuous mode [ 78.639216][ T7073] syzkaller1: entered allmulticast mode [ 78.917625][ T6051] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 78.938419][ T6051] usb 10-1: device descriptor read/8, error -71 [ 78.987377][ T40] audit: type=1400 audit(1757985995.968:881): avc: denied { mount } for pid=7085 comm="syz.3.262" name="/" dev="hugetlbfs" ino=14223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 78.995994][ T40] audit: type=1400 audit(1757985995.978:882): avc: denied { remount } for pid=7085 comm="syz.3.262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 79.021614][ T7090] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 79.036306][ T7093] binder: Bad value for 'max' [ 79.076671][ T7099] SELinux: security policydb version 17 (MLS) not backwards compatible [ 79.081376][ T7099] SELinux: failed to load policy [ 79.084064][ T7099] netlink: 'syz.3.266': attribute type 2 has an invalid length. [ 79.086494][ T7099] netlink: 'syz.3.266': attribute type 1 has an invalid length. [ 79.090370][ T7099] netlink: 'syz.3.266': attribute type 1 has an invalid length. [ 79.180915][ T6051] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 79.201109][ T6051] usb 10-1: device descriptor read/8, error -71 [ 79.266681][ T7118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7118 comm=syz.3.270 [ 79.310590][ T6051] usb usb10-port1: unable to enumerate USB device [ 79.412167][ T7122] evm: overlay not supported [ 79.449315][ T7123] overlayfs: failed lookup in lower (newroot/99, name='bus', err=-40): overlapping layers [ 79.486740][ T7127] sock: sock_set_timeout: `syz.3.273' (pid 7127) tries to set negative timeout [ 79.622677][ T5982] Bluetooth: hci2: command tx timeout [ 79.783849][ T5982] Bluetooth: hci4: command tx timeout [ 81.212844][ T7147] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 81.215090][ T7147] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 81.222596][ T7147] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 81.226743][ T7147] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 81.229740][ T7147] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 81.231732][ T7147] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 81.235305][ T7147] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 81.238477][ T7147] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 81.240416][ T7147] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 81.243555][ T7147] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 81.289471][ T7171] fuse: Bad value for 'fd' [ 81.292411][ T7171] netlink: 'syz.1.286': attribute type 21 has an invalid length. [ 81.296039][ T7171] __nla_validate_parse: 6 callbacks suppressed [ 81.296051][ T7171] netlink: 156 bytes leftover after parsing attributes in process `syz.1.286'. [ 81.304192][ T5982] Bluetooth: hci1: unexpected event for opcode 0x080c [ 81.332196][ T7173] overlayfs: unescaped trailing colons in lowerdir mount option. [ 81.343239][ T7173] binder: 7172:7173 ioctl c0306201 200000000640 returned -22 [ 81.657411][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.292'. [ 81.692529][ T6583] tipc: Subscription rejected, illegal request [ 81.735715][ T7200] netlink: 'syz.1.293': attribute type 13 has an invalid length. [ 81.738173][ T7200] netlink: 140 bytes leftover after parsing attributes in process `syz.1.293'. [ 81.802998][ T60] cfg80211: failed to load regulatory.db [ 81.877001][ T7211] netlink: 28 bytes leftover after parsing attributes in process `syz.3.299'. [ 82.050378][ T7227] netlink: 'syz.3.303': attribute type 1 has an invalid length. [ 82.069935][ T7219] JFS: discard option not supported on device [ 82.073224][ T7219] block nbd5: Attempted send on invalid socket [ 82.076629][ T7219] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.079840][ T7219] block nbd5: Attempted send on invalid socket [ 82.081804][ T7219] I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.085549][ T7219] Mount JFS Failure: -5 [ 82.320210][ T5982] Bluetooth: hci4: unexpected event for opcode 0x080c [ 82.445277][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 82.445292][ T40] audit: type=1400 audit(1757986000.414:907): avc: denied { write } for pid=7260 comm="syz.3.314" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 82.457349][ T40] audit: type=1400 audit(1757986000.414:908): avc: denied { open } for pid=7260 comm="syz.3.314" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 82.502721][ T40] audit: type=1400 audit(1757986000.464:909): avc: denied { bind } for pid=7260 comm="syz.3.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 82.510503][ T40] audit: type=1400 audit(1757986000.464:910): avc: denied { setopt } for pid=7260 comm="syz.3.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 82.575019][ T5982] Bluetooth: hci2: unexpected event for opcode 0x020c [ 82.633194][ T40] audit: type=1400 audit(1757986000.594:911): avc: denied { accept } for pid=7284 comm="syz.5.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.689707][ T40] audit: type=1326 audit(1757986000.654:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.5.325" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a25d8eba9 code=0x0 [ 82.784090][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 82.794649][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.325'. [ 82.797565][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.325'. [ 82.945580][ T9] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 82.949622][ T9] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 82.952812][ T9] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 82.956325][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.961471][ T7269] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 82.967133][ T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 83.249110][ T7299] netlink: 32 bytes leftover after parsing attributes in process `syz.1.326'. [ 83.258799][ T7300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.261903][ T7300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.437762][ T9] usb 9-1: USB disconnect, device number 3 [ 83.456710][ T40] audit: type=1400 audit(1757986001.424:913): avc: denied { read } for pid=7302 comm="syz.3.327" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.469801][ T40] audit: type=1400 audit(1757986001.424:914): avc: denied { open } for pid=7302 comm="syz.3.327" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.477446][ T40] audit: type=1400 audit(1757986001.424:915): avc: denied { ioctl } for pid=7302 comm="syz.3.327" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x7440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.486133][ T40] audit: type=1400 audit(1757986001.454:916): avc: denied { lock } for pid=7305 comm="syz.3.328" path="socket:[18726]" dev="sockfs" ino=18726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.677890][ T7332] vxcan1: tx address claim with dest, not broadcast [ 83.803552][ T7337] binder: 7336:7337 unknown command 0 [ 83.805427][ T7337] binder: 7336:7337 ioctl c0306201 200000000080 returned -22 [ 84.364077][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 84.464116][ T6051] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 84.514239][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 84.518709][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 84.522431][ T9] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 84.527526][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.533191][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 84.537405][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.633410][ T6051] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.638956][ T6051] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.642045][ T6051] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.646843][ T6051] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.650143][ T6051] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.653970][ T6051] usb 10-1: config 0 descriptor?? [ 84.750718][ T9] usb 6-1: string descriptor 0 read error: -71 [ 84.753066][ T9] usbtmc 6-1:16.0: bulk endpoints not found [ 84.757516][ T9] usb 6-1: USB disconnect, device number 3 syzkaller syzkaller login: [ 84.922410][ T5982] Bluetooth: hci4: unexpected event for opcode 0x2031 [ 84.924847][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 85.054329][ T7396] netlink: 56 bytes leftover after parsing attributes in process `syz.4.349'. [ 85.067229][ T6051] usbhid 10-1:0.0: can't add hid device: -71 [ 85.069875][ T6051] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 85.075758][ T6051] usb 10-1: USB disconnect, device number 6 [ 85.579826][ T5982] Bluetooth: hci1: unexpected event for opcode 0x080c [ 85.595803][ T7418] binder: 7417:7418 unknown command 0 [ 85.597619][ T7418] binder: 7417:7418 ioctl c0306201 200000000080 returned -22 [ 85.602168][ T7418] binder: 7417:7418 ioctl c00c642d 200000000080 returned -22 [ 85.608389][ T7418] tmpfs: Unknown parameter '18446744073709551615' [ 85.635693][ T7423] fuse: Unknown parameter '000000000000000000040x0000000000000004' [ 85.636751][ T7421] fuse: Unknown parameter '000000000000000000040x0000000000000004' [ 85.715336][ T7436] netlink: 'syz.1.361': attribute type 1 has an invalid length. [ 85.717630][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.361'. [ 85.748629][ T7442] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 85.757730][ T7442] infiniband sLò2: RDMA CMA: cma_listen_on_dev, error -98 [ 85.877647][ T7460] No source specified [ 85.940525][ T7462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.942974][ T7462] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 85.947251][ T7462] bond0: (slave sit0): Error -95 calling set_mac_address [ 86.007782][ T7472] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 86.011566][ T7472] ref_ctr increment failed for inode: 0x2ca offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88801d7c8000 [ 86.054460][ T6881] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 86.204648][ T6881] usb 10-1: Using ep0 maxpacket: 32 [ 86.208696][ T6881] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 86.212564][ T6881] usb 10-1: config 0 has no interface number 0 [ 86.219963][ T6881] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 86.223727][ T6881] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.228018][ T6881] usb 10-1: Product: syz [ 86.229958][ T6881] usb 10-1: Manufacturer: syz [ 86.232066][ T6881] usb 10-1: SerialNumber: syz [ 86.238525][ T6881] usb 10-1: config 0 descriptor?? [ 86.244679][ T6881] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 86.251857][ T7492] netlink: 32 bytes leftover after parsing attributes in process `syz.4.373'. [ 86.251874][ T6881] usb 10-1: selecting invalid altsetting 1 [ 86.264786][ T6881] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 86.280955][ T6881] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 86.285660][ T6881] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 86.289263][ T6881] usb 10-1: media controller created [ 86.305716][ T6881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 86.313687][ T7496] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 86.324142][ T7496] /dev/nullb0: Can't open blockdev [ 86.447202][ T7454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.452212][ T7454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.489218][ T7454] sp0: Synchronizing with TNC [ 86.826208][ T7528] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x49017 [ 86.829189][ T7528] memcg:ffff8881000a9a00 [ 86.830564][ T7528] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 86.832976][ T7528] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 86.836147][ T7528] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff8881000a9a00 [ 86.838824][ T7528] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 86.842113][ T7528] page_owner tracks the page as allocated [ 86.844153][ T7528] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 7528, tgid 7526 (syz.4.382), ts 86826182003, free_ts 86821529526 [ 86.850453][ T7528] post_alloc_hook+0x1c0/0x230 [ 86.852358][ T7528] get_page_from_freelist+0x132b/0x38e0 [ 86.854583][ T7528] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 86.856432][ T7528] alloc_pages_mpol+0x1fb/0x550 [ 86.857958][ T7528] folio_alloc_noprof+0x20/0x2d0 [ 86.859538][ T7528] filemap_alloc_folio_noprof+0x3a1/0x470 [ 86.861322][ T7528] page_cache_ra_order+0x4e1/0xd70 [ 86.863066][ T7528] filemap_fault+0x152e/0x2930 [ 86.864886][ T7528] __do_fault+0x10d/0x490 [ 86.866343][ T7528] do_pte_missing+0xf50/0x3ba0 [ 86.867920][ T7528] __handle_mm_fault+0x152a/0x2a50 [ 86.869634][ T7528] handle_mm_fault+0x589/0xd10 [ 86.873771][ T7528] __get_user_pages+0x551/0x34a0 [ 86.876826][ T7528] populate_vma_page_range+0x267/0x3f0 [ 86.878624][ T7528] __mm_populate+0x1d8/0x380 [ 86.880156][ T7528] vm_mmap_pgoff+0x37f/0x470 [ 86.881713][ T7528] page last free pid 7471 tgid 7469 stack trace: [ 86.883777][ T7528] __free_frozen_pages+0x7d5/0x10f0 [ 86.886455][ T7528] kvm_destroy_vcpus+0x2a6/0x3c0 [ 86.888104][ T7528] kvm_arch_destroy_vm+0x87/0x2f0 [ 86.889759][ T7528] kvm_put_kvm+0x4f2/0xb40 [ 86.891491][ T7528] kvm_vcpu_release+0x4b/0x70 [ 86.893051][ T7528] __fput+0x3ff/0xb70 [ 86.896452][ T7528] task_work_run+0x150/0x240 [ 86.897996][ T7528] get_signal+0x1d1/0x26d0 [ 86.899489][ T7528] arch_do_signal_or_restart+0x8f/0x7d0 [ 86.901292][ T7528] exit_to_user_mode_loop+0x84/0x110 [ 86.903036][ T7528] do_syscall_64+0x3f6/0x4c0 [ 86.917256][ T7528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.919844][ T7528] ------------[ cut here ]------------ [ 86.921762][ T7528] kernel BUG at mm/filemap.c:867! [ 86.923457][ T7528] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 86.926000][ T7528] CPU: 1 UID: 0 PID: 7528 Comm: syz.4.382 Not tainted syzkaller #0 PREEMPT(full) [ 86.929765][ T7528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.933104][ T7528] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0 [ 86.935019][ T7528] Code: 77 c8 ff 48 c7 c6 20 24 b9 8b 4c 89 ef e8 9d 28 11 00 90 0f 0b e8 a5 77 c8 ff 48 c7 c6 80 24 b9 8b 4c 89 ef e8 86 28 11 00 90 <0f> 0b e8 8e 77 c8 ff 90 0f 0b 90 e9 f2 fb ff ff e8 80 77 c8 ff 48 [ 86.942295][ T7528] RSP: 0018:ffffc90005baf460 EFLAGS: 00010283 [ 86.944705][ T7528] RAX: 0000000000020568 RBX: 0000000000000000 RCX: ffffc9002f876000 [ 86.947815][ T7528] RDX: 0000000000080000 RSI: ffffffff81f3173a RDI: ffff8880249b2884 [ 86.951157][ T7528] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001 [ 86.954284][ T7528] R10: ffffffff90ab6b97 R11: 0000000000000001 R12: 0000000000000002 [ 86.957376][ T7528] R13: ffffea00012405c0 R14: 0000000000000000 R15: 000000000002c928 [ 86.960487][ T7528] FS: 00007fe54d3326c0(0000) GS:ffff8880d67b5000(0000) knlGS:0000000000000000 [ 86.963997][ T7528] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.966599][ T7528] CR2: 00007f60cb178f98 CR3: 0000000049a55000 CR4: 0000000000352ef0 [ 86.969726][ T7528] DR0: 00000000000f004b DR1: 0000000000000000 DR2: 0000000000000000 [ 86.972843][ T7528] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 86.975946][ T7528] Call Trace: [ 86.977275][ T7528] [ 86.978475][ T7528] ? rcu_is_watching+0x12/0xc0 [ 86.980002][ T7528] ? __pfx___filemap_add_folio+0x10/0x10 [ 86.981782][ T7528] filemap_add_folio+0x10e/0x220 [ 86.983826][ T7528] ? __pfx_filemap_add_folio+0x10/0x10 [ 86.985608][ T7528] ? css_rstat_updated+0x1c2/0x510 [ 86.987252][ T7528] page_cache_ra_order+0x5a7/0xd70 [ 86.988390][ T7534] loop2: detected capacity change from 0 to 7 [ 86.988884][ T7528] filemap_fault+0x152e/0x2930 [ 86.988899][ T7528] ? __pfx_filemap_fault+0x10/0x10 [ 86.988913][ T7528] ? __pfx_filemap_map_pages+0x10/0x10 [ 86.995826][ T7528] __do_fault+0x10d/0x490 [ 86.997205][ T7528] ? __pfx_filemap_map_pages+0x10/0x10 [ 86.998954][ T7528] do_pte_missing+0xf50/0x3ba0 [ 87.000480][ T7528] ? mtree_range_walk+0x718/0xc00 [ 87.002115][ T7528] ? find_held_lock+0x2b/0x80 [ 87.003629][ T7528] __handle_mm_fault+0x152a/0x2a50 [ 87.005257][ T7528] ? __pfx___handle_mm_fault+0x10/0x10 [ 87.007003][ T7528] handle_mm_fault+0x589/0xd10 [ 87.008532][ T7528] __get_user_pages+0x551/0x34a0 [ 87.010111][ T7528] ? __pfx___get_user_pages+0x10/0x10 [ 87.011814][ T7528] populate_vma_page_range+0x267/0x3f0 [ 87.013551][ T7528] ? __pfx_populate_vma_page_range+0x10/0x10 [ 87.015508][ T7528] ? __pfx_find_vma_intersection+0x10/0x10 [ 87.017382][ T7528] ? do_mmap+0x69c/0x1210 [ 87.018804][ T7528] __mm_populate+0x1d8/0x380 [ 87.020294][ T7528] ? __pfx___mm_populate+0x10/0x10 [ 87.021954][ T7528] ? up_write+0x1b2/0x520 [ 87.023352][ T7528] vm_mmap_pgoff+0x37f/0x470 [ 87.024864][ T7528] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 87.026514][ T7528] ? __fget_files+0x20e/0x3c0 [ 87.028009][ T7528] ksys_mmap_pgoff+0x32c/0x5c0 [ 87.029534][ T7528] __x64_sys_mmap+0x125/0x190 [ 87.031055][ T7528] do_syscall_64+0xcd/0x4c0 [ 87.032545][ T7528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.034462][ T7528] RIP: 0033:0x7fe54c58eba9 [ 87.035886][ T7528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.041877][ T7528] RSP: 002b:00007fe54d332038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 87.044520][ T7528] RAX: ffffffffffffffda RBX: 00007fe54c7d6090 RCX: 00007fe54c58eba9 [ 87.047000][ T7528] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 87.049510][ T7528] RBP: 00007fe54c611e19 R08: 0000000000000004 R09: 000000002c93a000 [ 87.051996][ T7528] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 87.054509][ T7528] R13: 00007fe54c7d6128 R14: 00007fe54c7d6090 R15: 00007ffdcc14c608 [ 87.056979][ T7528] [ 87.057976][ T7528] Modules linked in: [ 87.059336][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.061920][ T7528] ---[ end trace 0000000000000000 ]--- [ 87.062523][ T7534] Dev loop2: unable to read RDB block 7 [ 87.064904][ T7528] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0 [ 87.066153][ T7534] loop2: AHDI p1 p2 p3 [ 87.067676][ T7528] Code: 77 c8 ff 48 c7 c6 20 24 b9 8b 4c 89 ef e8 9d 28 11 00 90 0f 0b e8 a5 77 c8 ff 48 c7 c6 80 24 b9 8b 4c 89 ef e8 86 28 11 00 90 <0f> 0b e8 8e 77 c8 ff 90 0f 0b 90 e9 f2 fb ff ff e8 80 77 c8 ff 48 [ 87.069017][ T7534] loop2: partition table partially beyond EOD, truncated [ 87.076069][ T7528] RSP: 0018:ffffc90005baf460 EFLAGS: 00010283 [ 87.077585][ T7534] loop2: p1 start 1601398130 is beyond EOD, [ 87.079287][ T7528] RAX: 0000000000020568 RBX: 0000000000000000 RCX: ffffc9002f876000 [ 87.079322][ T7534] truncated [ 87.081186][ T7528] RDX: 0000000000080000 RSI: ffffffff81f3173a RDI: ffff8880249b2884 [ 87.083721][ T7534] loop2: p2 start 1702059890 is beyond EOD, truncated [ 87.084845][ T7528] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001 [ 87.091920][ T7528] R10: ffffffff90ab6b97 R11: 0000000000000001 R12: 0000000000000002 [ 87.096154][ T7528] R13: ffffea00012405c0 R14: 0000000000000000 R15: 000000000002c928 [ 87.098959][ T7528] FS: 00007fe54d3326c0(0000) GS:ffff8880d66b5000(0000) knlGS:0000000000000000 [ 87.102413][ T7528] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.105939][ T7528] CR2: 0000556044adb0a8 CR3: 0000000049a55000 CR4: 0000000000352ef0 [ 87.108592][ T7528] Kernel panic - not syncing: Fatal exception [ 87.111207][ T7528] Kernel Offset: disabled [ 87.112565][ T7528] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:48:36 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff914f72a8 RDX=ffffc90003297750 RSI=ffffc90003297a80 RDI=ffffc90003297748 RBP=ffffc90003297a80 RSP=ffffc900032976b0 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc90003297748 R11=00000000000121b8 R12=0000000000000008 R13=ffffc90003297748 R14=ffffc90003297750 R15=ffffc9000329777c RIP=ffffffff816ae2bc RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f60ca5d7dac CR3=000000002a5c1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 458528538dda85c6 e7779cc4745d5a54 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 514658f6dae1e237 e28c5d5acf751b54 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 babaea3e3b87f7ae bd2ff7e61f48a13d ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5148b30811546c63 64a4f1bc12cd71eb ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 be34337360395517 b43bd7a5203b3bde ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ec623560f0dfcfaa 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c7b3f81e789589c cb3cc764509fc655 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 de59829f00000000 3bd8d4f5f8433e3c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c4df9b48171e858 f00c0fbfe0fb1a52 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e310d9f38ffeafc1 dd8f424480afca99 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60ca5a74a8 00007f60ca5a74a0 00007f60ca5a7498 00007f60ca5a7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60cb10d100 00007f60ca5a7460 00007f60ca5a7478 00007f60ca5a74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60ca5a74b8 00007f60ca5a74b0 00007f60ca5a74a8 00007f60ca5a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff85646fb0 RDI=ffffffff9b1150a0 RBP=ffffffff9b115060 RSP=ffffc90005baed90 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552031203a555043 R12=0000000000000000 R13=ffffffff9b1150b0 R14=ffffffff9b115060 R15=ffffffff9b115320 RIP=ffffffff85646fd7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fe54d3326c0 ffffffff 00c00000 GS =0000 ffff8880d67b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f60cb178f98 CR3=0000000049a55000 CR4=00352ef0 DR0=00000000000f004b DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc3bf79ca0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc3bf79e26 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc3bf79e26 00007ffc3bf79e2c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60ca412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60ca412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60ca412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60ca412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60ca412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60ca412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000003 RSI=00000000000a983a RDI=ffffffff91fe7598 RBP=ffffc900058af6c0 RSP=ffffc900058af608 R8 =0000000000000000 R9 =0000000000000000 R10=ffffc900058af678 R11=0000000000000001 R12=ffffc900058af6c8 R13=ffffc900058af678 R14=ffffc900058af6ad R15=ffffffff8100012f RIP=ffffffff816ae6b4 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fca00aa14ac CR3=0000000043d4c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f732e6d61706269 6c2f343662696c2f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00302e6f732e6d61 7062696c2f343662 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000600 RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc90005b0f968 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b9402f0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007fae435a36c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d69b5000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000ffff IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000033afa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561bbacf00a4 0000561bbacf0050 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561bbacf4f70 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9215bcdb20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001c88 00007ffc6c4fcbb8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 ffffffffffffff88 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000