last executing test programs: 5.956335374s ago: executing program 0 (id=145): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x2}, 0xe) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000005e00), 0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='net/ptype\x00') r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x138, &(0x7f0000000540)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@in6=@empty, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x24}, [@algo_auth={0x48, 0x1, {{'digest_null\x00'}}}]}, 0x138}}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendto$inet(r5, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) fcntl$lock(r2, 0x7, &(0x7f0000000080)={0x0, 0x3, 0xa83, 0xe9, r4}) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x1, 0xf30, 0x80000001) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x40045436, 0x35) 5.090598979s ago: executing program 0 (id=162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x14415, 0x8001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x28, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xe}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000100039042cbd7000eaffffff000003e4", @ANYRES32=r11, @ANYBLOB="03000000cb1507003800128008000100736974002c00028008000100", @ANYRES32, @ANYBLOB="08000300ac14141005000a00006bbe0006000e001f00000006000800000000000fbe34c7da4ba33afc10c4ae03f1266d7f3cdc"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r13 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000001300f5d10300"/20, @ANYRES32=r14, @ANYBLOB="000000015d00000008002900070001"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r15 = socket(0x200000100000011, 0x803, 0x0) (async) r16 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) sendto$packet(r15, &(0x7f0000000100)='m', 0x102, 0xf5ff, &(0x7f0000000200)={0x3a, 0x0, r17, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x15c, 0x0, 0x405, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000340)={0x0, 0xa6ff, &(0x7f00000002c0)={&(0x7f00000009c0)={0x2c, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0) 5.010494898s ago: executing program 0 (id=165): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_pts(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x409c884, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000000340)="f3cb073213ac2b6cd0f16abd369c118f708564037ed0a8332e4fd29a098b9ec754af1f55c3bc411f3bda00c85b2a8e2d459fdda54f831facef31c9ca68d4b921e4a3934eaf", 0x45, 0x4000, 0x0, 0x0) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r5, &(0x7f0000000080)={'#! ', '.', [{0x20, '^/(}*@)){]:'}, {0x20, '\xaa\xaa\xaa\xaa\xaa'}]}, 0x17) ioctl$KVM_SET_MSRS(r4, 0x4008ae8a, &(0x7f0000000040)) r6 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x1c2, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x18c, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x19, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5"}]}}}}}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x884) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x30}}, 0x40) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r11, 0x0, 0x38ffd, 0x0) 4.889889081s ago: executing program 0 (id=170): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e36599023622}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000000)={{0x80}, 'port1\x00'}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r2, &(0x7f0000000080)='./file0/file0\x00', r2, &(0x7f0000000300)='./file0/../file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$CDROMEJECT_SW(r5, 0x80041284, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.740956162s ago: executing program 0 (id=172): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000040)="f34998f3e20fc75e460f1a6086f2360f211e0f20c035020000000f22c0400f21ee65470f1bc2b9800000c00f3235004000000f30430f92c6", 0x38}], 0x1, 0x0, 0x0, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8040}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x10000}) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x12}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 3.899840334s ago: executing program 0 (id=196): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup(r1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x3a) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40603d10, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="680200006974431937497996f9a4e3fed6e5a510511f6fac110d9945c88526766686792b694f5765c875da862dc323eb1382ce6865f24237192609930ea501211557990c685b800cf3eefb2ede", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000400008803c00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e227f00000100000000000000001400020077673200"/98], 0x68}}, 0x0) 3.890892781s ago: executing program 32 (id=196): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup(r1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x3a) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40603d10, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="680200006974431937497996f9a4e3fed6e5a510511f6fac110d9945c88526766686792b694f5765c875da862dc323eb1382ce6865f24237192609930ea501211557990c685b800cf3eefb2ede", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000400008803c00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e227f00000100000000000000001400020077673200"/98], 0x68}}, 0x0) 1.010514898s ago: executing program 3 (id=212): creat(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="a800000000000080e8dec85a44e0f01cf138ee1fe6e1a2ac1fd2be1c2d88"], 0xa8) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1.009873368s ago: executing program 3 (id=213): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f0000a4c000/0xf000)=nil, 0xf000, 0x4000, 0x3, &(0x7f00008dd000/0x4000)=nil) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mremap(&(0x7f0000a14000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000b45000/0x1000)=nil, 0x1000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 930.787404ms ago: executing program 3 (id=214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r1}, 0x10) sync() sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 800.076912ms ago: executing program 3 (id=216): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x76581527, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) (async) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1b41052, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x401, 0x2, 0x4, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '|^b!'}, 0x0, 0x1, {0x0}}) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30e60000030101010000000000000000000000000c0019800800010000020000080003400000000008001a40ffffffcf"], 0x30}}, 0x0) 775.561513ms ago: executing program 3 (id=218): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card3/oss_mixer\x00', 0x4000, 0x0) (async) writev(r0, &(0x7f00000028c0)=[{&(0x7f0000002600)='u', 0x4000}, {0x0, 0x2}], 0x2) (async) close_range(r0, 0xffffffffffffffff, 0x0) 690.291916ms ago: executing program 3 (id=219): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@empty, r3}, 0x14) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_io_uring_setup(0x24fa, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 498.744917ms ago: executing program 2 (id=227): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x73, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000100), &(0x7f0000000180), 0x8, 0xe5, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe5c, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x81, @void, @value}, 0x90) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 32) mlock2(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (rerun: 32) 410.451528ms ago: executing program 4 (id=231): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_elf32(r0, 0x0, 0xfe) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f00000001c0)="26262e0f01ca360f23e90f20e06635000040000f22e064660f388153020f2114660fae740e0f011a0f01546866b9800000c00f320f30670f01c3", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$binfmt_elf32(r0, 0x0, 0xfe) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f00000001c0)="26262e0f01ca360f23e90f20e06635000040000f22e064660f388153020f2114660fae740e0f011a0f01546866b9800000c00f320f30670f01c3", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0) (async) 407.163622ms ago: executing program 1 (id=232): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8) (async) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000), 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x7c}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$PTP_SYS_OFFSET(r6, 0x40043d14, &(0x7f00000000c0)={0x19}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r7, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}]]}, 0x34}}, 0x40800) (async) sendmsg$NL80211_CMD_RADAR_DETECT(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r7, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) sendmsg$NFT_BATCH(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x68}, 0x1, 0x0, 0x0, 0x40044}, 0x0) 406.913946ms ago: executing program 2 (id=233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x68, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x68}}, 0x0) (fail_nth: 6) 332.104744ms ago: executing program 1 (id=234): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x1000000000000f, &(0x7f0000000100)=0x57bb, 0x4) write$binfmt_elf64(r3, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f0000000040)=r2, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x44, &(0x7f00000000c0), 0x4) r4 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf2, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xb3, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r5, 0x25, 0x2, @val=@perf_event={0x2e}}, 0x18) io_uring_setup(0x4d66, &(0x7f0000000080)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 323.224243ms ago: executing program 2 (id=235): r0 = socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='+c!:x$,}%)\x00', 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xf) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 314.877072ms ago: executing program 1 (id=236): socket(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (rerun: 64) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) (async) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) (async, rerun: 64) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r5, 0x0) (async) write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file0'}, 0x2f) (async) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="4400000010001fff000000000000000000000000a5cb17722b36a72eea75f1b1079e268d0beed68d000000001ce1770c50d5beb1c74cf76f94a07f000000000000006735af6d0d617013547454655e97468dac3476921b554be9d9dbe7ffca7f4ec9eaf8885f16fc2945ee83357f71780a13799c22dbe10fbc62ec981238af8cde87cfd19ecf81821d481d6ffdf62bbb46c6a4ea1984afe94830dc63918c8be8a04676355631add0ac63fbcfd5a3473b31d1ea4ec0e6c58dbaa0f0096e88cce88b", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r6, @ANYBLOB="08000400fa050000"], 0x44}}, 0x0) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x30, &(0x7f0000000040)={0xa, 0x4e23, 0xfff, @remote, 0x7}, 0x1c) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='user_id', &(0x7f0000001100)='rootmode', 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xfffffff7}, 0x8) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async, rerun: 32) sendto$inet6(r11, &(0x7f0000000400)="a6e2976b", 0x4, 0x0, 0x0, 0x0) (async, rerun: 32) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 240.680569ms ago: executing program 2 (id=237): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0xe, 0x1, 0x0, "74b8a82a86acc12fdd069e7e0a8dca3ddddc0000000000000000000000000009", 0x34363248}) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) eventfd(0x39e) listen(r1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000005580)='/sys/kernel/vmcoreinfo', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1335f0a6) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000340), &(0x7f0000000c80)=0x4) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000300)) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000000c0)={0x5000, 0xd000, 0x0, 0xffffffffffffffff, 0x4}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r8, 0x4002f516, &(0x7f0000000540)={0x71, 0xf}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000210400000000fedbdf252e4100000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000000000008000500", @ANYRES32=r11, @ANYBLOB], 0x50}}, 0x2) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000005c0)=0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x1b, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000010000000000000900000018490000faffffff000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000850000009b000000bc4802000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500007635dd9d8d22bbd5a092dd180086000000184a003005000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001489f8ffffffffff184800000800000000000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x18, '\x00', r11, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x9, 0x8000, 0x10}, 0x10, 0x0, r5, 0x1, &(0x7f0000000380)=[r5, r5], &(0x7f00000003c0)=[{0x5, 0x2, 0xd, 0x1}], 0x10, 0x7b, @void, @value}, 0x94) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000580)=0x1f, 0x4) 240.130498ms ago: executing program 4 (id=238): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x200}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 233.086472ms ago: executing program 1 (id=239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000f14010000000000000000000d0045"], 0x20}, 0x1, 0x0, 0x0, 0x8095}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x140c, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x60004084}, 0x40) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)={0x127c, 0x29, 0x1, 0x70bd2a, 0x0, {0x1f}, [@typed={0x8, 0x12b, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0xa3, 0x0, 0x0, @pid}, @typed={0x8, 0x123, 0x0, 0x0, @uid}, @typed={0x4, 0x97, 0x0, 0x0, @binary}, @generic="6d77e0acd2ddcfa160fc4cbe292c057d", @typed={0x8, 0xa, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x116a, 0x103, 0x0, 0x1, [@typed={0x8, 0x12c, 0x0, 0x0, @fd=r1}, @generic="38dade9ef0b7ca4a4fde052a9d4cdf3f9b876ad7a516ca5de70d2a82a7fb0146d2a144b1dc6a4ecf23ca53eab04804e64aa6d8f72eeb51b235c1dc92", @typed={0x3b, 0x8e, 0x0, 0x0, @binary="ad722161a61943c10db81b9d8088b1f06121fdc1adae01c975a274ca22a0c9ee13b1e8e0f07bf1f215a8561e6d699cba6def808c51755a"}, @generic="9db4c17e258095afa064df75468a29d8892265c3ce035665d231c14de0a17d82bca4491a2e8ff3b35349e8a6a9e32a2d83d45fc62dcb57c51b7fc192fab1f4f793a9b64546ed1ec9a2cacedbffe247699c0f597c2433d27523c2b90f4e3256d60cc206150b03097ca482b1be32bc4a101758720bd41910bbfdb8ebac84af7c05cef95295a78ad4416787267129d225275c9c6aac013efa29af154dec5e96555e523452ba2cf0490c72bec272945619fe449b7a2783538db4e7d328e9d44289ae2c4bad5e946e7f71ebab8ed00ee24d5f673343a42ec0f5186138a2fdfcd8", @generic="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", @typed={0x8, 0xd2, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @generic="4942dfb8e78c78d77ba78187cc53bea741838edaa28cb71bcdb2d902253841f0fa86a8781addf9a9331e3181e48e144894a4509529e48d69a138a2984d2a7b400f6e907dd3bbfe9cd225c40188ba882f8005bd67e6ee4ffd7b27a83d60b6ded8d0ebb76a6e8f5d25c90a253360f563279bf23ed942dd1be8e3a757f92b3557594f83a3f5185cf21f153c7033427a68a3e2c883732f52ff2ba52a4d4e0ec98ef73c3b883cd326f253bda73551e289", @generic="79a8956696481caf5912944de9d5c91e9981a01ea7e007bce9c5"]}, 0x127c}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) socket(0x10, 0x80002, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000104000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r8, 0xc0505510, &(0x7f0000000000)={0x7, 0x400000000000305, 0x0, 0x0, &(0x7f0000000480)}) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff5d) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) 140.753652ms ago: executing program 4 (id=240): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x0}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {}, {0x85, 0x0, 0x0, 0x8d}}]}, &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) 140.381434ms ago: executing program 4 (id=241): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x418b, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000250000000e0001af4a7ae100d365c5417a6b006e657464657673696d00800f0f0002006e65746465", @ANYRES32=r0, @ANYBLOB], 0x3c}}, 0x0) 90.605524ms ago: executing program 1 (id=242): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) (async) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="ad56b6c5820fae9d6d538d288054c7be040c0000000000006dc4baa073a1f19b9380f6d6ab0b364df0516f3667df0587f8cfe35c152623399f641f213bb2715fcb2059d5b90a29dadcd2fb41c1cc54994ef5ac24b59536d5cb4e66d1188aec54b2c57e0d1ebbd4c558346be0f69fd192102e315cf561909a0423abd41a5f1fca1bf8860d68b3917d0d7d14246a6233022412f0f3de0bad41884bcf46a3f4bbb9a1353e7aab16ef54dca966964211acc26d014b1fc2d47015813e9cb946229c22826c1e775b0cfb0114d6b38f4a70e3d5bf1c70274cf58d7bb0bedc000000000000000000000000e22af18cf9b81a", 0xee) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000080)={0xe, 0x1, 0x0, "74b8a82a86acc12fdd069e7e0a8dca3ddddc0000000000000000000000000009", 0x34363248}) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r4 = dup(r1) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) (async) r5 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000056c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0x20}}], 0x2, 0x0) (async) sendmsg$alg(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)="eea3502a65bad67df786d6d746e45dff67398bf4edac7bb419ca256f2cf26e4799e60ef2dd2a78b687cdd5101c8cb50b17ca866fa0af8a60d52d920caf0200058b8d5d6aa04d0fbdfc62", 0x4a}, {0x0}, {0x0}, {&(0x7f0000000e00)="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", 0xa46}], 0x4, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x800) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}]}, 0x44}}, 0x0) (async) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x387042, 0x0) (async) r10 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8\t\x00\x00\x00\x00\x00\x00\x00\xc5n\xeb\xab\xf70\x99\xef\x8b\x9e\x01BT\"\x8f\x94aN\x1b\xff\t\x97T\xc8FD\x17@') r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$CDROMREADAUDIO(r0, 0x31e, &(0x7f0000002140)={@msf={0xef, 0x3}, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=247): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x7b, 0xa, 0xff00}, [@call={0x1d, 0xa}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x10, 0x0, 0x0, 0x25000000}, @generic]}, &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x47, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, r0, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001540)=[{&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000200)=""/131, 0x83}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/74, 0x4a}, {&(0x7f0000001340)=""/239, 0xef}, {&(0x7f0000001440)=""/92, 0x5c}, {&(0x7f00000014c0)=""/97, 0x61}], 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) kernel console output (not intermixed with test programs): [ 31.580773][ T39] audit: type=1400 audit(1731687417.498:80): avc: denied { write } for pid=5855 comm="sh" path="pipe:[3695]" dev="pipefs" ino=3695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 31.586688][ T39] audit: type=1400 audit(1731687417.498:81): avc: denied { rlimitinh } for pid=5855 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.591692][ T39] audit: type=1400 audit(1731687417.498:82): avc: denied { siginh } for pid=5855 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 32.151384][ T39] audit: type=1400 audit(1731687418.078:83): avc: denied { read } for pid=5344 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 32.156944][ T39] audit: type=1400 audit(1731687418.078:84): avc: denied { append } for pid=5344 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.162947][ T39] audit: type=1400 audit(1731687418.078:85): avc: denied { open } for pid=5344 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.168445][ T39] audit: type=1400 audit(1731687418.078:86): avc: denied { getattr } for pid=5344 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:53521' (ED25519) to the list of known hosts. [ 33.024031][ T39] audit: type=1400 audit(1731687418.948:87): avc: denied { name_bind } for pid=5883 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 34.542747][ T5885] cgroup: Unknown subsys name 'net' [ 34.672848][ T5885] cgroup: Unknown subsys name 'cpuset' [ 34.676688][ T5885] cgroup: Unknown subsys name 'rlimit' [ 34.887689][ T5933] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 35.442405][ T5885] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.826365][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 36.826374][ T39] audit: type=1400 audit(1731687422.748:105): avc: denied { execmem } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 36.948051][ T39] audit: type=1400 audit(1731687422.868:106): avc: denied { create } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.953441][ T39] audit: type=1400 audit(1731687422.868:107): avc: denied { read write } for pid=5943 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 36.959797][ T39] audit: type=1400 audit(1731687422.868:108): avc: denied { open } for pid=5943 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 36.965766][ T39] audit: type=1400 audit(1731687422.878:109): avc: denied { ioctl } for pid=5943 comm="syz-executor" path="socket:[7453]" dev="sockfs" ino=7453 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.985204][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.987365][ T5949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.991196][ T5949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.993206][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.995137][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.997606][ T5953] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.997763][ T5949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.999774][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.002138][ T5949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.004576][ T5955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.005796][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.008619][ T5955] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.011473][ T5949] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 37.012551][ T5957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.012678][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.015209][ T5949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.018656][ T39] audit: type=1400 audit(1731687422.938:110): avc: denied { read } for pid=5943 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.021781][ T5312] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.025329][ T5958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.025896][ T5958] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 37.026008][ T5958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.027283][ T39] audit: type=1400 audit(1731687422.948:111): avc: denied { open } for pid=5943 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.038923][ T5312] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.040586][ T39] audit: type=1400 audit(1731687422.948:112): avc: denied { mounton } for pid=5943 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.048672][ T5312] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.050908][ T5312] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 37.052895][ T5312] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.125717][ T39] audit: type=1400 audit(1731687423.048:113): avc: denied { module_request } for pid=5943 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.138522][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 37.221119][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 37.240944][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.243160][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.245123][ T5943] bridge_slave_0: entered allmulticast mode [ 37.247087][ T5943] bridge_slave_0: entered promiscuous mode [ 37.263578][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.265454][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.267368][ T5943] bridge_slave_1: entered allmulticast mode [ 37.269547][ T5943] bridge_slave_1: entered promiscuous mode [ 37.290661][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 37.305871][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.312715][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.334242][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.336160][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.338343][ T5944] bridge_slave_0: entered allmulticast mode [ 37.340993][ T5944] bridge_slave_0: entered promiscuous mode [ 37.367740][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.369718][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.371594][ T5944] bridge_slave_1: entered allmulticast mode [ 37.373548][ T5944] bridge_slave_1: entered promiscuous mode [ 37.377005][ T5943] team0: Port device team_slave_0 added [ 37.380068][ T5943] team0: Port device team_slave_1 added [ 37.417178][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.419816][ T5954] chnl_net:caif_netlink_parms(): no params data found [ 37.431287][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.433117][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.440981][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.452738][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.458974][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.460786][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.467263][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.470305][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.472310][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.474202][ T5951] bridge_slave_0: entered allmulticast mode [ 37.476230][ T5951] bridge_slave_0: entered promiscuous mode [ 37.496425][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.498281][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.500353][ T5951] bridge_slave_1: entered allmulticast mode [ 37.502350][ T5951] bridge_slave_1: entered promiscuous mode [ 37.512876][ T5944] team0: Port device team_slave_0 added [ 37.563358][ T5944] team0: Port device team_slave_1 added [ 37.588431][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.592046][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.610106][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.611977][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.613833][ T5954] bridge_slave_0: entered allmulticast mode [ 37.615802][ T5954] bridge_slave_0: entered promiscuous mode [ 37.618154][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.620109][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.621961][ T5954] bridge_slave_1: entered allmulticast mode [ 37.623905][ T5954] bridge_slave_1: entered promiscuous mode [ 37.627338][ T5943] hsr_slave_0: entered promiscuous mode [ 37.629361][ T5943] hsr_slave_1: entered promiscuous mode [ 37.646158][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.647977][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.654763][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.673057][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.676677][ T5951] team0: Port device team_slave_0 added [ 37.678655][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.680453][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.686902][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.692385][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.695309][ T5951] team0: Port device team_slave_1 added [ 37.754172][ T5954] team0: Port device team_slave_0 added [ 37.763001][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.764797][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.772127][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.776781][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.778613][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.785175][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.789563][ T5944] hsr_slave_0: entered promiscuous mode [ 37.791624][ T5944] hsr_slave_1: entered promiscuous mode [ 37.793412][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.795519][ T5944] Cannot create hsr debugfs directory [ 37.797674][ T5954] team0: Port device team_slave_1 added [ 37.819189][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.820991][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.827390][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.832194][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.834009][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.840532][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.883853][ T5951] hsr_slave_0: entered promiscuous mode [ 37.885738][ T5951] hsr_slave_1: entered promiscuous mode [ 37.887589][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.889671][ T5951] Cannot create hsr debugfs directory [ 37.932015][ T5954] hsr_slave_0: entered promiscuous mode [ 37.933893][ T5954] hsr_slave_1: entered promiscuous mode [ 37.935650][ T5954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.937593][ T5954] Cannot create hsr debugfs directory [ 38.033326][ T5943] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.036946][ T5943] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.047404][ T5943] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.050510][ T5943] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.069920][ T5944] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.073086][ T5944] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.076134][ T5944] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.080586][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.082498][ T5943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.084662][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.086512][ T5943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.089410][ T5944] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.111001][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.112897][ T5944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.114841][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.116688][ T5944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.120052][ T5951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.123264][ T5951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.128862][ T5951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.132781][ T5951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.158048][ T5954] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.161979][ T5954] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.164876][ T5954] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.168005][ T5954] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.180004][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.184311][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.186391][ T5951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.188958][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.191001][ T5951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.202483][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.205162][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.210041][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.212364][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.216593][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.219455][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.237611][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.248442][ T1221] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.250285][ T1221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.258211][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.261885][ T1221] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.263987][ T1221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.280823][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.289875][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.291764][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.302435][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.304299][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.311603][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.317664][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.325656][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.337039][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.340787][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.340933][ T39] audit: type=1400 audit(1731687424.268:114): avc: denied { sys_module } for pid=5943 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 38.342649][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.355346][ T800] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.357205][ T800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.368097][ T800] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.369990][ T800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.379862][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.382145][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.397057][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.416966][ T5954] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.421729][ T5954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.431153][ T5943] veth0_vlan: entered promiscuous mode [ 38.437769][ T5943] veth1_vlan: entered promiscuous mode [ 38.441729][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.455161][ T5943] veth0_macvtap: entered promiscuous mode [ 38.460017][ T5943] veth1_macvtap: entered promiscuous mode [ 38.471342][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.473387][ T5944] veth0_vlan: entered promiscuous mode [ 38.476365][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.481640][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.485960][ T5943] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.488302][ T5943] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.490994][ T5943] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.493250][ T5943] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.500321][ T5944] veth1_vlan: entered promiscuous mode [ 38.514190][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.520505][ T5944] veth0_macvtap: entered promiscuous mode [ 38.523753][ T5944] veth1_macvtap: entered promiscuous mode [ 38.539324][ T5951] veth0_vlan: entered promiscuous mode [ 38.547727][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.551401][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.554455][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.560697][ T5951] veth1_vlan: entered promiscuous mode [ 38.565886][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.569910][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.573072][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.576285][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.578465][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.587180][ T5944] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.589980][ T5944] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.592426][ T5944] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.594620][ T5944] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.601393][ T5954] veth0_vlan: entered promiscuous mode [ 38.612676][ T800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.615035][ T800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.621122][ T5954] veth1_vlan: entered promiscuous mode [ 38.624459][ T5951] veth0_macvtap: entered promiscuous mode [ 38.627694][ T5951] veth1_macvtap: entered promiscuous mode [ 38.641074][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.641430][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.642991][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.644077][ T5943] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.646024][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.654919][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.657636][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.660985][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.664020][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.666688][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.669650][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.672341][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.675553][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.684841][ T5951] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.687127][ T5951] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.689900][ T5951] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.692173][ T5951] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.704089][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.706140][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.706978][ T5954] veth0_macvtap: entered promiscuous mode [ 38.718022][ T5954] veth1_macvtap: entered promiscuous mode [ 38.736808][ T800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.738992][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.739003][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.739009][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.739015][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.739020][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.739026][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.739825][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.748519][ T800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.768675][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.769379][ T6009] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2'. [ 38.769739][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.769750][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.769755][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.769762][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.769767][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.769773][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.770378][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.771561][ T5954] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.773101][ T6009] netlink: 'syz.1.2': attribute type 2 has an invalid length. [ 38.774256][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.775794][ T5954] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.778323][ T6009] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2'. [ 38.782172][ T5954] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.804092][ T5954] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.804494][ T6009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 38.809177][ T6009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 38.817210][ T6009] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 38.840225][ T800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.842926][ T800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.855126][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.857197][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.891728][ T6017] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5'. [ 38.899767][ T6017] snd_dummy snd_dummy.0: control 0:131068:0:syz1:0 is already present [ 38.928896][ T6025] virtio-fs: tag < : pkcs1pad(rsa-generic,sha256) [ 38.928896][ T6025] module : kernel [ 38.928896][ T6025] priority : 100 [ 38.928896][ T6025] refcnt : 1 [ 38.928896][ T6025] selftest : passed [ 38.928896][ T6025] internal : no [ 38.928896][ T6025] type : akcipher [ 38.928896][ T6025] [ 38.928896][ T6025] name : cbc(aes) [ 38.928896][ T6025] driver : cbc(ecb(aes-aesni)) [ 38.928896][ T6025] module : kernel [ 38.928896][ T6025] priority : 300 [ 38.928896][ T6025] refcnt : 1 [ 38.928896][ T6025] selftest : passed [ 38.928896][ T6025] internal : no [ 38.928896][ T6025] type : lskcipher [ 38.928896][ T6025] blocksize : 16 [ 38.928896][ T6025] min keysize : 16 [ 38.928896][ T6025] max keysize : 32 [ 38.928896][ T6025] ivsize : 16 [ 38.928896][ T6025] chunksize : 16 [ 38.928896][ T6025] statesize : 0 [ 38.928896][ T6025] [ 38.928896][ T6025] name : ecb(aes) [ 38.928896][ T6025] driver : ecb(aes-aesni) [ 38.928896][ T6025] module : kernel [ 38.928896][ T6025] priority : 300 [ 38.928896][ T6025] refcnt : 1 [ 38.928896][ T6025] selftest : passed [ 38.928896][ T6025] internal : no [ 38.928896][ T6025] type : lskcipher [ 38.928896][ T6025] blocksize : 16 [ 38.928896][ T6025] min keysize : 16 [ 38.928896][ T6025] max keysize : 32 [ 38.928896][ T6025] ivsize : 0 [ 38.928896][ T6025] chunksize : 16 [ 38.928896][ T6025] statesize : 0 [ 38.928896][ T6025] [ 38.928896][ T6025] name : rfc4106(gcm(aes)) [ 38.928896][ T6025] driver : rfc4106-gcm-vaes-avx10_512 [ 38.928896][ T6025] module : kernel [ 38.928896][ T6025] priority : 1 [ 38.928896][ T6025] refcnt : 1 [ 38.928896][ T6025] selftest : passed [ 38.928896][ T6025] internal : no [ 38.928896][ T6025] type : aead [ 38.928896][ T6025] async : yes [ 38.929549][ T6025] fuse: Unknown parameter '0xffffffffffffffff' [ 38.958013][ T6028] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 38.977963][ T6025] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 39.005413][ T6020] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 39.011484][ T6020] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 39.040062][ T6014] xt_ipcomp: unknown flags 12 [ 39.079165][ T5312] Bluetooth: hci3: command tx timeout [ 39.079378][ T5958] Bluetooth: hci1: command tx timeout [ 39.080824][ T5312] Bluetooth: hci2: command tx timeout [ 39.226597][ T6059] xt_hashlimit: size too large, truncated to 1048576 [ 39.256188][ T6062] bridge_slave_0: left allmulticast mode [ 39.257704][ T6062] bridge_slave_0: left promiscuous mode [ 39.260977][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.265287][ T6062] bridge_slave_1: left allmulticast mode [ 39.266784][ T6062] bridge_slave_1: left promiscuous mode [ 39.268290][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.276391][ T6062] bond0: (slave bond_slave_0): Releasing backup interface [ 39.283297][ T6071] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.286441][ T6062] bond0: (slave bond_slave_1): Releasing backup interface [ 39.297973][ T6062] team0: Port device team_slave_0 removed [ 39.306236][ T6062] team0: Port device team_slave_1 removed [ 39.308063][ T6062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.310291][ T6062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.313401][ T6062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.315388][ T6062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.491397][ T6088] netlink: 76 bytes leftover after parsing attributes in process `syz.2.20'. [ 39.497177][ T6088] Êü: entered promiscuous mode [ 39.966482][ T6094] xt_ipcomp: unknown flags 12 [ 40.181425][ T6082] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 40.183164][ T6082] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 40.187665][ T6082] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 40.190189][ T6082] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 40.191648][ T6082] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 40.193910][ T6082] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 40.195849][ T6082] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 40.197361][ T6082] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 40.199377][ T6082] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 40.204203][ T6082] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 40.205823][ T6082] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 40.208084][ T6082] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 40.238535][ T6097] uprobe: syz.0.22:6097 failed to unregister, leaking uprobe [ 40.262732][ T6101] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.25'. [ 40.265012][ T6101] netlink: 183228 bytes leftover after parsing attributes in process `syz.2.25'. [ 40.272873][ T6104] xt_ipcomp: unknown flags 12 [ 40.272963][ T6105] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.280733][ C2] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 40.305498][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.340281][ T6113] netlink: 40 bytes leftover after parsing attributes in process `syz.3.29'. [ 40.354571][ T6113] block device autoloading is deprecated and will be removed. [ 40.420089][ T6122] loop7: detected capacity change from 0 to 1036 [ 40.519419][ T6129] Cannot find add_set index 0 as target [ 40.615019][ T6136] Bluetooth: MGMT ver 1.23 [ 40.669450][ T6145] openvswitch: netlink: Duplicate or invalid key (type 0). [ 40.671523][ T6145] openvswitch: netlink: Actions may not be safe on all matching packets [ 41.014694][ T6171] xt_HMARK: spi-set and port-set can't be combined [ 41.479123][ T5953] Bluetooth: hci0: command 0x041b tx timeout [ 41.671382][ T6206] kvm: pic: non byte write [ 41.672535][ T6212] Zero length message leads to an empty skb [ 41.673933][ T6204] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 41.675995][ T6212] Bluetooth: MGMT ver 1.23 [ 41.710137][ T6219] xt_connbytes: Forcing CT accounting to be enabled [ 41.712002][ T6219] No such timeout policy "syz0" [ 41.758618][ T6223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=6223 comm=syz.3.62 [ 41.868686][ T39] kauditd_printk_skb: 185 callbacks suppressed [ 41.868697][ T39] audit: type=1400 audit(1731687427.788:300): avc: denied { execute } for pid=6240 comm="syz.3.69" dev="tmpfs" ino=3072 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.875913][ T39] audit: type=1400 audit(1731687427.798:301): avc: denied { write } for pid=6242 comm="syz.1.70" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 41.897591][ T39] audit: type=1400 audit(1731687427.818:302): avc: denied { write } for pid=6244 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.903402][ T39] audit: type=1400 audit(1731687427.818:303): avc: denied { nlmsg_write } for pid=6244 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.921438][ T39] audit: type=1400 audit(1731687427.848:304): avc: denied { create } for pid=6240 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 41.922053][ T6241] hsr0: entered allmulticast mode [ 41.927688][ T6241] hsr_slave_0: entered allmulticast mode [ 41.929340][ T6241] hsr_slave_1: entered allmulticast mode [ 41.932022][ T6241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6241 comm=syz.3.69 [ 41.951122][ T39] audit: type=1400 audit(1731687427.878:305): avc: denied { read write } for pid=6251 comm="syz.1.73" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 41.957725][ T39] audit: type=1400 audit(1731687427.878:306): avc: denied { ioctl open } for pid=6251 comm="syz.1.73" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 42.029719][ T39] audit: type=1400 audit(1731687427.958:307): avc: denied { connect } for pid=6238 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 42.035124][ T39] audit: type=1400 audit(1731687427.958:308): avc: denied { name_connect } for pid=6238 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 42.063149][ T6265] No buffer was provided with the request [ 42.066043][ T6273] netlink: 'syz.1.75': attribute type 3 has an invalid length. [ 42.069120][ T6273] netlink: 'syz.1.75': attribute type 3 has an invalid length. [ 42.071959][ T6267] netlink: 'syz.1.75': attribute type 3 has an invalid length. [ 42.074584][ T6267] netlink: 'syz.1.75': attribute type 3 has an invalid length. [ 42.076818][ T6265] netlink: 'syz.1.75': attribute type 4 has an invalid length. [ 42.081591][ T6265] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 42.085931][ T6273] netlink: 'syz.1.75': attribute type 4 has an invalid length. [ 42.087912][ T6273] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 42.128631][ T6272] netlink: 'syz.3.77': attribute type 18 has an invalid length. [ 42.179106][ T39] audit: type=1400 audit(1731687428.108:309): avc: denied { bind } for pid=6278 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.198750][ T5953] Bluetooth: hci2: command 0x040f tx timeout [ 42.199614][ T5312] Bluetooth: hci1: command 0x040f tx timeout [ 42.233979][ T6286] warning: `syz.1.81' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 42.258753][ T6292] netlink: 'syz.3.80': attribute type 12 has an invalid length. [ 42.278595][ T5312] Bluetooth: hci3: command 0x041b tx timeout [ 42.632430][ T829] IPVS: starting estimator thread 0... [ 42.715132][ T6329] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 42.724070][ T6332] dlm: plock device version mismatch: kernel (1.2.0), user (54042951.1736130103.1893651883) [ 42.738642][ T6320] IPVS: using max 36 ests per chain, 86400 per kthread [ 42.922547][ T6338] Cannot find map_set index 0 as target [ 42.963579][ T6340] IPVS: persistence engine module ip_vs_pe_t not found [ 42.969598][ T6340] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 43.106584][ T6355] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 43.111083][ T6357] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 43.392043][ T6371] kvm: emulating exchange as write [ 43.559493][ T5312] Bluetooth: hci0: command 0x041b tx timeout [ 43.684829][ T6400] fuse: Unknown parameter '000000000000000000000010x000000000000000b' [ 43.994230][ T6418] xt_cgroup: path and classid specified [ 43.997532][ T6418] __nla_validate_parse: 15 callbacks suppressed [ 43.997540][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 44.138551][ T829] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 44.278712][ T5953] Bluetooth: hci1: command 0x040f tx timeout [ 44.279349][ T5946] Bluetooth: hci2: command 0x040f tx timeout [ 44.291586][ T829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.294358][ T829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.296895][ T829] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 44.300438][ T829] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 44.302779][ T829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.306310][ T829] usb 6-1: config 0 descriptor?? [ 44.359241][ T5946] Bluetooth: hci3: command 0x041b tx timeout [ 44.523098][ T6420] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.525569][ T6420] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.527863][ T6420] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.530228][ T6420] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.537387][ T6420] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 44.539411][ T6420] overlayfs: failed to set xattr on upper [ 44.540900][ T6420] overlayfs: ...falling back to redirect_dir=nofollow. [ 44.542678][ T6420] overlayfs: ...falling back to index=off. [ 44.544191][ T6420] overlayfs: ...falling back to uuid=null. [ 44.715896][ T829] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.718198][ T829] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.720439][ T829] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.722367][ T829] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.724236][ T829] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.726076][ T829] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.728014][ T829] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.730053][ T829] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.731972][ T829] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.733884][ T829] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.735801][ T829] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.737690][ T829] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.739935][ T829] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.741849][ T829] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.743719][ T829] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.746106][ T829] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 44.753358][ T829] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 44.799070][ T6433] xt_hashlimit: size too large, truncated to 1048576 [ 44.799538][ T6435] netlink: 'syz.2.125': attribute type 11 has an invalid length. [ 44.953929][ T6435] capability: warning: `syz.2.125' uses 32-bit capabilities (legacy support in use) [ 44.965113][ T6439] netlink: 16 bytes leftover after parsing attributes in process `syz.3.126'. [ 45.035825][ T6446] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 45.318588][ T35] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 45.478536][ T35] usb 7-1: Using ep0 maxpacket: 16 [ 45.482340][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.485888][ T35] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 45.489375][ T35] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 45.491732][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.495606][ T35] usb 7-1: config 0 descriptor?? [ 45.638580][ T5312] Bluetooth: hci0: command 0x041b tx timeout [ 46.021586][ T6453] usb 6-1: string descriptor 0 read error: -108 [ 46.148770][ T56] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 46.259491][ T35] usbhid 7-1:0.0: can't add hid device: -71 [ 46.261380][ T35] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 46.265355][ T35] usb 7-1: USB disconnect, device number 2 [ 46.280945][ T56] usb 6-1: device descriptor read/64, error -32 [ 46.308825][ T6468] netlink: 'syz.3.133': attribute type 4 has an invalid length. [ 46.314893][ T6469] netlink: 'syz.3.133': attribute type 4 has an invalid length. [ 46.317077][ T6468] netlink: 'syz.3.133': attribute type 4 has an invalid length. [ 46.320403][ T6469] netlink: 'syz.3.133': attribute type 4 has an invalid length. [ 46.323414][ T6468] program syz.3.133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.358578][ T5312] Bluetooth: hci2: command 0x040f tx timeout [ 46.358627][ T5946] Bluetooth: hci1: command 0x040f tx timeout [ 46.438624][ T5946] Bluetooth: hci3: command 0x041b tx timeout [ 46.518608][ T56] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 46.612658][ T6471] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 46.619027][ T6471] program syz.0.134 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.668611][ T56] usb 6-1: device descriptor read/64, error -32 [ 46.721845][ T6473] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 46.732977][ T6473] kvm: pic: single mode not supported [ 46.733040][ T6473] kvm: pic: level sensitive irq not supported [ 46.735097][ T6473] kvm: pic: non byte read [ 46.740184][ T6473] kvm: pic: non byte read [ 46.742342][ T6473] kvm: pic: single mode not supported [ 46.742349][ T6473] kvm: pic: level sensitive irq not supported [ 46.744206][ T6473] kvm: pic: non byte read [ 46.749290][ T6473] kvm: pic: non byte read [ 46.751535][ T6473] kvm: pic: single mode not supported [ 46.751544][ T6473] kvm: pic: level sensitive irq not supported [ 46.753411][ T6473] kvm: pic: non byte read [ 46.757541][ T6473] kvm: pic: non byte read [ 46.760033][ T6473] kvm: pic: single mode not supported [ 46.760041][ T6473] kvm: pic: level sensitive irq not supported [ 46.761993][ T6473] kvm: pic: non byte read [ 46.765904][ T6473] kvm: pic: single mode not supported [ 46.766168][ T6473] kvm: pic: non byte read [ 46.771753][ T6473] kvm: pic: non byte read [ 46.774221][ T6473] kvm: pic: non byte read [ 46.778305][ T6473] kvm: pic: single mode not supported [ 46.778314][ T6473] kvm: pic: level sensitive irq not supported [ 46.783136][ T6473] kvm: pic: single mode not supported [ 46.784912][ T6477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.136'. [ 46.807232][ T6480] 9pnet: Unknown protocol version 9p2000.ue67 [ 46.828580][ T6483] netlink: 16 bytes leftover after parsing attributes in process `syz.2.138'. [ 46.832075][ T6483] netlink: 272 bytes leftover after parsing attributes in process `syz.2.138'. [ 46.885751][ T39] kauditd_printk_skb: 58 callbacks suppressed [ 46.885763][ T39] audit: type=1400 audit(1731687432.808:368): avc: denied { shutdown } for pid=6488 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 46.908662][ T56] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 46.934247][ T56] usb 6-1: device descriptor read/8, error -32 [ 47.065856][ T39] audit: type=1400 audit(1731687432.988:369): avc: denied { open } for pid=6506 comm="syz.0.145" path="/dev/ptyq5" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 47.076825][ T39] audit: type=1400 audit(1731687432.998:370): avc: denied { ioctl } for pid=6506 comm="syz.0.145" path="/dev/ptyq5" dev="devtmpfs" ino=132 ioctlcmd=0x5436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 47.086718][ T6468] syz.3.133 (6468) used greatest stack depth: 21232 bytes left [ 47.114621][ T39] audit: type=1400 audit(1731687433.038:371): avc: denied { sys_module } for pid=6512 comm="syz.1.147" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.165110][ T39] audit: type=1400 audit(1731687433.088:372): avc: denied { mount } for pid=6520 comm="syz.3.149" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 47.170871][ T39] audit: type=1400 audit(1731687433.088:373): avc: denied { remount } for pid=6520 comm="syz.3.149" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 47.176279][ T39] audit: type=1400 audit(1731687433.088:374): avc: denied { connect } for pid=6523 comm="syz.1.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 47.181439][ T39] audit: type=1400 audit(1731687433.088:375): avc: denied { read write } for pid=6523 comm="syz.1.151" name="qrtr-tun" dev="devtmpfs" ino=1333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.187302][ T39] audit: type=1400 audit(1731687433.088:376): avc: denied { open } for pid=6523 comm="syz.1.151" path="/dev/qrtr-tun" dev="devtmpfs" ino=1333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.193812][ T39] audit: type=1400 audit(1731687433.098:377): avc: denied { write } for pid=6523 comm="syz.1.151" path="socket:[10885]" dev="sockfs" ino=10885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 47.233950][ T6534] netlink: 'syz.1.153': attribute type 29 has an invalid length. [ 47.236281][ T6536] netlink: 'syz.1.153': attribute type 29 has an invalid length. [ 47.490504][ T6572] netlink: 16 bytes leftover after parsing attributes in process `syz.1.156'. [ 47.589947][ T6576] tipc: Can't bind to reserved service type 1 [ 47.699959][ T6576] /dev/sr0: Can't open blockdev [ 47.718591][ T5312] Bluetooth: hci0: command 0x041b tx timeout [ 47.790348][ T6577] /dev/sr0: Can't open blockdev [ 47.823087][ T6587] o2cb: This node has not been configured. [ 47.823956][ T5985] usb 6-1: USB disconnect, device number 2 [ 47.825354][ T6587] o2cb: Cluster check failed. Fix errors before retrying. [ 47.829676][ T6587] (syz.1.161,6587,0):user_dlm_register:674 ERROR: status = -22 [ 47.832366][ T6587] (syz.1.161,6587,0):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "file0" [ 47.947301][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.165'. [ 48.007678][ T5312] Bluetooth: hci0: ISO packet too small [ 48.035410][ T6604] usb usb8: usbfs: process 6604 (syz.2.167) did not claim interface 0 before use [ 48.079531][ T6612] ======================================================= [ 48.079531][ T6612] WARNING: The mand mount option has been deprecated and [ 48.079531][ T6612] and is ignored by this kernel. Remove the mand [ 48.079531][ T6612] option from the mount to silence this warning. [ 48.079531][ T6612] ======================================================= [ 48.438675][ T5312] Bluetooth: hci1: command 0x040f tx timeout [ 48.520150][ T5312] Bluetooth: hci3: command 0x041b tx timeout [ 48.549833][ T6653] netlink: 24 bytes leftover after parsing attributes in process `syz.2.181'. [ 48.570778][ T6655] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 48.622491][ T6663] MTD: Couldn't look up 'mountinfo': -2 [ 48.686304][ T6675] syz.3.186 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 48.919626][ T829] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 49.015124][ T6703] netlink: 184 bytes leftover after parsing attributes in process `syz.2.195'. [ 49.066777][ T6538] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.077229][ T6705] netlink: 703 bytes leftover after parsing attributes in process `syz.2.197'. [ 49.081798][ T829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 49.085636][ T829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 49.086438][ T6705] capability: warning: `syz.2.197' uses deprecated v2 capabilities in a way that may be insecure [ 49.090128][ T829] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 49.096224][ T829] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 49.098968][ T829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.113620][ T829] usb 6-1: config 0 descriptor?? [ 49.115812][ T6672] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 49.140930][ T6538] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.180713][ T5953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 49.182265][ T6711] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 49.184319][ T5953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 49.187634][ T5953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 49.200396][ T5953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 49.203094][ T5953] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 49.203373][ T6538] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.205222][ T5953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 49.263352][ T6718] misc userio: Begin command sent, but we're already running [ 49.293005][ T6713] chnl_net:caif_netlink_parms(): no params data found [ 49.306163][ T6724] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 49.323414][ T6538] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.360758][ T6713] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.362752][ T6713] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.364614][ T6713] bridge_slave_0: entered allmulticast mode [ 49.366587][ T6713] bridge_slave_0: entered promiscuous mode [ 49.371539][ T6713] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.373305][ T6713] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.375229][ T6713] bridge_slave_1: entered allmulticast mode [ 49.377161][ T6713] bridge_slave_1: entered promiscuous mode [ 49.396803][ T6713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.400553][ T6713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.443828][ T6729] MINIX-fs: blocksize too small for device [ 49.451241][ T6713] team0: Port device team_slave_0 added [ 49.531303][ T6734] netlink: 'syz.2.205': attribute type 28 has an invalid length. [ 49.533479][ T6734] netlink: 'syz.2.205': attribute type 3 has an invalid length. [ 49.535444][ T6734] netlink: 132 bytes leftover after parsing attributes in process `syz.2.205'. [ 49.540064][ T6734] xt_hashlimit: size too large, truncated to 1048576 [ 49.777751][ T6538] bond0 (unregistering): Released all slaves [ 49.782690][ T6713] team0: Port device team_slave_1 added [ 49.798637][ T5312] Bluetooth: hci0: command 0x041b tx timeout [ 49.808671][ T5946] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 49.818609][ T6713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.822135][ T6713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.828154][ T6713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.836080][ T6713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.840234][ T6713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.858835][ T6713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.896660][ T6713] hsr_slave_0: entered promiscuous mode [ 49.901622][ T6713] hsr_slave_1: entered promiscuous mode [ 49.903945][ T6713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.906774][ T6713] Cannot create hsr debugfs directory [ 50.073948][ T6738] syz.2.205 (6738): drop_caches: 2 [ 50.121980][ T6713] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 50.125323][ T6713] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 50.128273][ T6713] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 50.135565][ T6713] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 50.172037][ T6713] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.173969][ T6713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.175887][ T6713] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.177750][ T6713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.209944][ T6713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.223968][ T6538] hsr_slave_0: left promiscuous mode [ 50.225741][ T6538] hsr_slave_1: left promiscuous mode [ 50.242420][ T6538] veth1_macvtap: left promiscuous mode [ 50.243933][ T6538] veth0_macvtap: left promiscuous mode [ 50.245266][ T6538] veth1_vlan: left promiscuous mode [ 50.246587][ T6538] veth0_vlan: left promiscuous mode [ 50.530752][ T5946] Bluetooth: hci1: command 0x040f tx timeout [ 50.599544][ T5946] Bluetooth: hci3: command 0x041b tx timeout [ 51.191228][ T6543] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.194308][ T6543] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.206899][ T6758] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.217068][ T6713] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.221994][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.223909][ T6556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.228907][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.231669][ T6548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.249597][ T5946] Bluetooth: hci2: command tx timeout [ 51.328105][ T6713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.411020][ T6713] veth0_vlan: entered promiscuous mode [ 51.414839][ T6713] veth1_vlan: entered promiscuous mode [ 51.424706][ T6713] veth0_macvtap: entered promiscuous mode [ 51.427540][ T6713] veth1_macvtap: entered promiscuous mode [ 51.433661][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.436383][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.439000][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.441654][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.444185][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.446832][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.450852][ T6713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.455284][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.458013][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.461038][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.463755][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.466286][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.468987][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.471943][ T6713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.477037][ T6713] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.479845][ T6713] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.482122][ T6713] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.485141][ T6713] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.812456][ T829] usbhid 6-1:0.0: can't add hid device: -71 [ 51.813965][ T829] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 51.823419][ T829] usb 6-1: USB disconnect, device number 3 [ 51.824287][ T6793] netlink: 'syz.1.210': attribute type 1 has an invalid length. [ 51.827015][ T6793] netlink: 'syz.1.210': attribute type 2 has an invalid length. [ 51.833092][ T6793] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 51.888624][ T5946] Bluetooth: hci0: command 0x041b tx timeout [ 51.924984][ T39] kauditd_printk_skb: 66 callbacks suppressed [ 51.924995][ T39] audit: type=1400 audit(1731687437.848:444): avc: denied { create } for pid=6795 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 51.951541][ T6797] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 52.108163][ T6556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.110460][ T6556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.131414][ T6540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.134565][ T6540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.168350][ T39] audit: type=1400 audit(1731687438.088:445): avc: denied { mounton } for pid=6713 comm="syz-executor" path="/syzkaller.6dIvR5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 52.181241][ T39] audit: type=1400 audit(1731687438.088:446): avc: denied { override_creds } for pid=6812 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 52.232988][ T6822] bpf: Bad value for 'gid' [ 52.318249][ T6844] FAULT_INJECTION: forcing a failure. [ 52.318249][ T6844] name failslab, interval 1, probability 0, space 0, times 1 [ 52.324829][ T6844] CPU: 2 UID: 0 PID: 6844 Comm: syz.2.222 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 52.327543][ T6844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.330184][ T6844] Call Trace: [ 52.331534][ T6844] [ 52.332345][ T6844] dump_stack_lvl+0x16c/0x1f0 [ 52.333525][ T6844] should_fail_ex+0x497/0x5b0 [ 52.334739][ T6844] should_failslab+0xc2/0x120 [ 52.335881][ T6844] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 52.337278][ T6844] ? skb_clone+0x190/0x3f0 [ 52.338447][ T6844] skb_clone+0x190/0x3f0 [ 52.339589][ T6844] netlink_deliver_tap+0xab3/0xd90 [ 52.340980][ T6844] netlink_unicast+0x5e1/0x7f0 [ 52.342236][ T6844] ? __pfx_netlink_unicast+0x10/0x10 [ 52.343622][ T6844] netlink_sendmsg+0x8b8/0xd70 [ 52.344866][ T6844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.346241][ T6844] ____sys_sendmsg+0xaaf/0xc90 [ 52.347517][ T6844] ? copy_msghdr_from_user+0x10b/0x160 [ 52.348945][ T6844] ? __pfx_____sys_sendmsg+0x10/0x10 [ 52.349005][ T6826] support for cryptoloop has been removed. Use dm-crypt instead. [ 52.350324][ T6844] ? __pfx___lock_acquire+0x10/0x10 [ 52.353709][ T6844] ___sys_sendmsg+0x135/0x1e0 [ 52.354950][ T6844] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.356316][ T6844] ? lock_acquire+0x2f/0xb0 [ 52.357504][ T6844] ? __fget_files+0x40/0x3f0 [ 52.358732][ T6844] ? fdget+0x176/0x210 [ 52.359854][ T6844] __sys_sendmsg+0x117/0x1f0 [ 52.361127][ T6844] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.362432][ T6844] ? __fget_files+0x244/0x3f0 [ 52.363660][ T6844] do_syscall_64+0xcd/0x250 [ 52.364973][ T6844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.366560][ T6844] RIP: 0033:0x7fc8d277e719 [ 52.367670][ T6844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.372560][ T6844] RSP: 002b:00007fc8d3639038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.374704][ T6844] RAX: ffffffffffffffda RBX: 00007fc8d2935f80 RCX: 00007fc8d277e719 [ 52.376688][ T6844] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 52.378805][ T6844] RBP: 00007fc8d3639090 R08: 0000000000000000 R09: 0000000000000000 [ 52.380793][ T6844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.382813][ T6844] R13: 0000000000000000 R14: 00007fc8d2935f80 R15: 00007ffe6a914b38 [ 52.384851][ T6844] [ 52.507640][ T39] audit: type=1400 audit(1731687438.428:447): avc: denied { ioctl } for pid=6877 comm="syz.1.230" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.517850][ T39] audit: type=1400 audit(1731687438.438:448): avc: denied { bind } for pid=6881 comm="syz.4.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 52.545682][ T39] audit: type=1400 audit(1731687438.468:449): avc: granted { setsecparam } for pid=6885 comm="syz.4.231" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 52.575703][ T6898] FAULT_INJECTION: forcing a failure. [ 52.575703][ T6898] name failslab, interval 1, probability 0, space 0, times 0 [ 52.579239][ T6898] CPU: 1 UID: 0 PID: 6898 Comm: syz.2.233 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 52.582141][ T6898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.584949][ T6898] Call Trace: [ 52.585827][ T6898] [ 52.586574][ T6898] dump_stack_lvl+0x16c/0x1f0 [ 52.587767][ T6898] should_fail_ex+0x497/0x5b0 [ 52.588946][ T6898] ? fs_reclaim_acquire+0xae/0x150 [ 52.590203][ T6898] should_failslab+0xc2/0x120 [ 52.591380][ T6898] __kmalloc_noprof+0xcb/0x400 [ 52.592561][ T6898] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 52.594252][ T6898] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 52.595618][ T6898] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 52.597151][ T6898] ? bpf_lsm_capable+0x9/0x10 [ 52.598322][ T6898] ? security_capable+0x7e/0x260 [ 52.599529][ T6898] ? ns_capable+0xd7/0x110 [ 52.600616][ T6898] genl_rcv_msg+0x565/0x800 [ 52.601711][ T6898] ? __pfx_genl_rcv_msg+0x10/0x10 [ 52.602960][ T6898] ? __pfx_wg_set_device+0x10/0x10 [ 52.604260][ T6898] netlink_rcv_skb+0x16b/0x440 [ 52.605423][ T6898] ? __pfx_genl_rcv_msg+0x10/0x10 [ 52.606641][ T6898] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 52.607922][ T6898] ? down_read+0xc9/0x330 [ 52.608986][ T6898] ? __pfx_down_read+0x10/0x10 [ 52.610127][ T6898] ? netlink_deliver_tap+0x1ae/0xd90 [ 52.611405][ T6898] genl_rcv+0x28/0x40 [ 52.612384][ T6898] netlink_unicast+0x53c/0x7f0 [ 52.613576][ T6898] ? __pfx_netlink_unicast+0x10/0x10 [ 52.614865][ T6898] netlink_sendmsg+0x8b8/0xd70 [ 52.616049][ T6898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.617343][ T6898] ____sys_sendmsg+0xaaf/0xc90 [ 52.618538][ T6898] ? copy_msghdr_from_user+0x10b/0x160 [ 52.619980][ T6898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 52.621383][ T6898] ? __pfx___lock_acquire+0x10/0x10 [ 52.622784][ T6898] ___sys_sendmsg+0x135/0x1e0 [ 52.624043][ T6898] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.625446][ T6898] ? lock_acquire+0x2f/0xb0 [ 52.626873][ T6898] ? __fget_files+0x40/0x3f0 [ 52.628164][ T6898] ? fdget+0x176/0x210 [ 52.629279][ T6898] __sys_sendmsg+0x117/0x1f0 [ 52.630545][ T6898] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.631916][ T6898] ? __fget_files+0x244/0x3f0 [ 52.633232][ T6898] do_syscall_64+0xcd/0x250 [ 52.634449][ T6898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.636043][ T6898] RIP: 0033:0x7fc8d277e719 [ 52.637254][ T6898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.642580][ T6898] RSP: 002b:00007fc8d3639038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.644666][ T6898] RAX: ffffffffffffffda RBX: 00007fc8d2935f80 RCX: 00007fc8d277e719 [ 52.646625][ T6898] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 52.648586][ T6898] RBP: 00007fc8d3639090 R08: 0000000000000000 R09: 0000000000000000 [ 52.650714][ T6898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.652706][ T6898] R13: 0000000000000000 R14: 00007fc8d2935f80 R15: 00007ffe6a914b38 [ 52.654825][ T6898] [ 52.678614][ T5946] Bluetooth: hci3: command 0x041b tx timeout [ 52.693597][ T6913] overlay: filesystem on ./bus not supported as upperdir [ 52.695802][ T6913] overlay: filesystem on ./bus not supported as upperdir [ 52.699498][ T6913] overlay: filesystem on ./bus not supported as upperdir [ 52.702280][ T6913] overlay: filesystem on ./bus not supported as upperdir [ 52.705276][ T6913] overlay: filesystem on ./bus not supported as upperdir [ 52.709336][ T6913] overlay: filesystem on ./bus not supported as upperdir [ 52.711839][ T6913] overlay: filesystem on ./bus not supported as upperdir [ 52.714031][ T6913] overlay: filesystem on ./bus not supported as upperdir [ 52.716189][ T6913] overlay: filesystem on ./bus not supported as upperdir [ 52.718353][ T6913] overlay: filesystem on ./bus not supported as upperdir [ 52.719185][ T39] audit: type=1400 audit(1731687438.648:450): avc: denied { getopt } for pid=6917 comm="syz.2.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.726433][ T6913] overlay: filesystem on ./bus not supported as upperdir [ 52.728443][ T6913] overlay: filesystem on ./bus not supported as upperdir [ 52.730811][ T6913] overlay: filesystem on ./bus not supported as upperdir [ 52.733116][ T6913] overlay: filesystem on ./bus not supported as upperdir [ 52.742097][ T6918] netlink: 48 bytes leftover after parsing attributes in process `syz.2.237'. [ 52.767748][ T6923] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.770011][ T6923] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.772481][ T6923] bridge0: entered allmulticast mode [ 52.782642][ T39] audit: type=1400 audit(1731687438.698:451): avc: denied { map } for pid=6922 comm="syz.4.238" path="socket:[15599]" dev="sockfs" ino=15599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.783899][ T6926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5132 sclass=netlink_route_socket pid=6926 comm=syz.1.239 [ 52.843746][ T6938] netlink: 24 bytes leftover after parsing attributes in process `syz.4.241'. [ 52.878099][ T6949] FAULT_INJECTION: forcing a failure. [ 52.878099][ T6949] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.882296][ T6949] CPU: 3 UID: 0 PID: 6949 Comm: syz.2.243 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 52.885918][ T6949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.889517][ T6949] Call Trace: [ 52.890638][ T6949] [ 52.891620][ T6949] dump_stack_lvl+0x16c/0x1f0 [ 52.893078][ T6949] should_fail_ex+0x497/0x5b0 [ 52.894557][ T6949] _copy_to_user+0x32/0xd0 [ 52.895912][ T6949] simple_read_from_buffer+0xd0/0x160 [ 52.897639][ T6949] proc_fail_nth_read+0x198/0x270 [ 52.899438][ T6949] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.901321][ T6949] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.903254][ T6949] vfs_read+0x1df/0xbe0 [ 52.904641][ T6949] ? __fget_files+0x23a/0x3f0 [ 52.906220][ T6949] ? fdget_pos+0x24c/0x360 [ 52.907707][ T6949] ? __pfx_lock_release+0x10/0x10 [ 52.909110][ T6949] ? trace_lock_acquire+0x14a/0x1d0 [ 52.910483][ T6949] ? __pfx_vfs_read+0x10/0x10 [ 52.911754][ T6949] ? __pfx___mutex_lock+0x10/0x10 [ 52.913080][ T6949] ? __fget_files+0x244/0x3f0 [ 52.914319][ T6949] ksys_read+0x12f/0x260 [ 52.915458][ T6949] ? __pfx_ksys_read+0x10/0x10 [ 52.916715][ T6949] do_syscall_64+0xcd/0x250 [ 52.917904][ T6949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.919473][ T6949] RIP: 0033:0x7fc8d277d15c [ 52.920640][ T6949] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 52.925574][ T6949] RSP: 002b:00007fc8d3639030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.927732][ T6949] RAX: ffffffffffffffda RBX: 00007fc8d2935f80 RCX: 00007fc8d277d15c [ 52.929964][ T6949] RDX: 000000000000000f RSI: 00007fc8d36390a0 RDI: 0000000000000004 [ 52.932076][ T6949] RBP: 00007fc8d3639090 R08: 0000000000000000 R09: 0000000000000000 [ 52.934155][ T6949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.936228][ T6949] R13: 0000000000000000 R14: 00007fc8d2935f80 R15: 00007ffe6a914b38 [ 52.938285][ T6949] [ 52.980886][ T6970] hpfs: bad mount options. [ 52.996774][ T6974] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 52.999084][ T6974] #PF: supervisor instruction fetch in kernel mode [ 53.001675][ T6974] #PF: error_code(0x0010) - not-present page [ 53.004542][ T6974] PGD 2b524067 P4D 2b524067 PUD 247d0067 PMD 0 [ 53.006343][ T6974] Oops: Oops: 0010 [#1] PREEMPT SMP KASAN NOPTI [ 53.008183][ T6974] CPU: 1 UID: 0 PID: 6974 Comm: syz.1.247 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 53.011224][ T6974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.014436][ T6974] RIP: 0010:0x0 [ 53.015481][ T6974] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 53.017597][ T6974] RSP: 0018:ffffc900056ef9c8 EFLAGS: 00010287 [ 53.019333][ T6974] RAX: 0000000000000a74 RBX: 0000000000000000 RCX: ffffc90006c01000 [ 53.021612][ T6974] RDX: 0000000000040000 RSI: ffffea000149ee40 RDI: ffff88802975aa80 [ 53.024109][ T6974] RBP: ffffea000149ee40 R08: 0000000000000007 R09: 0000000000000000 [ 53.026508][ T6974] R10: 0000000000000000 R11: ffffffff961d45d0 R12: 1ffff92000addf3a [ 53.028934][ T6974] R13: ffff88802975aa80 R14: 0000000000000000 R15: dffffc0000000000 [ 53.031384][ T6974] FS: 00007f24a3eff6c0(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 53.034137][ T6974] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.036236][ T6974] CR2: ffffffffffffffd6 CR3: 000000004c58e000 CR4: 0000000000352ef0 [ 53.038737][ T6974] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.041142][ T6974] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.043599][ T6974] Call Trace: [ 53.044586][ T6974] [ 53.045608][ T6974] ? __die+0x1e/0x60 [ 53.046763][ T6974] ? page_fault_oops+0x3b6/0xb80 [ 53.048326][ T6974] ? __pfx_page_fault_oops+0x10/0x10 [ 53.049993][ T6974] ? __pfx___lock_acquire+0x10/0x10 [ 53.051512][ T6974] ? __pfx_lock_release+0x10/0x10 [ 53.053048][ T6974] ? do_user_addr_fault+0xa90/0x13f0 [ 53.054651][ T6974] ? rcu_is_watching+0x12/0xc0 [ 53.056100][ T6974] ? exc_page_fault+0x5c/0xc0 [ 53.057471][ T6974] ? asm_exc_page_fault+0x26/0x30 [ 53.059028][ T6974] filemap_read_folio+0xc6/0x2a0 [ 53.060634][ T6974] ? __pfx_filemap_read_folio+0x10/0x10 [ 53.062182][ T6974] ? __filemap_get_folio+0x2a5/0xaf0 [ 53.063664][ T6974] do_read_cache_folio+0x263/0x5c0 [ 53.065032][ T6974] freader_get_folio+0x337/0x8e0 [ 53.066441][ T6974] freader_fetch+0xc2/0x5f0 [ 53.067842][ T6974] ? mt_find+0x4c8/0xa20 [ 53.069120][ T6974] __build_id_parse.isra.0+0xed/0x7a0 [ 53.070769][ T6974] ? __pfx___build_id_parse.isra.0+0x10/0x10 [ 53.072587][ T6974] ? __pfx_find_vma+0x10/0x10 [ 53.073962][ T6974] do_procmap_query+0xd62/0x1030 [ 53.075425][ T6974] ? __pfx_do_procmap_query+0x10/0x10 [ 53.076984][ T6974] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 53.078802][ T6974] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 53.080746][ T6974] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 53.082663][ T6974] ? selinux_file_ioctl+0x180/0x270 [ 53.084196][ T6974] ? selinux_file_ioctl+0xb4/0x270 [ 53.085651][ T6974] procfs_procmap_ioctl+0x7d/0xb0 [ 53.087222][ T6974] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 53.088892][ T6974] __x64_sys_ioctl+0x18f/0x220 [ 53.090157][ T6974] do_syscall_64+0xcd/0x250 [ 53.091341][ T6974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.092851][ T6974] RIP: 0033:0x7f24a317e719 [ 53.093960][ T6974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.098875][ T6974] RSP: 002b:00007f24a3eff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.101006][ T6974] RAX: ffffffffffffffda RBX: 00007f24a3335f80 RCX: 00007f24a317e719 [ 53.103064][ T6974] RDX: 0000000020000180 RSI: 00000000c0686611 RDI: 0000000000000004 [ 53.105166][ T6974] RBP: 00007f24a31f175e R08: 0000000000000000 R09: 0000000000000000 [ 53.107164][ T6974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.109313][ T6974] R13: 0000000000000000 R14: 00007f24a3335f80 R15: 00007ffdd4a955a8 [ 53.111762][ T6974] [ 53.112698][ T6974] Modules linked in: [ 53.113835][ T6974] CR2: 0000000000000000 [ 53.115109][ T6974] ---[ end trace 0000000000000000 ]--- [ 53.116728][ T6974] RIP: 0010:0x0 [ 53.117801][ T6974] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 53.120000][ T6974] RSP: 0018:ffffc900056ef9c8 EFLAGS: 00010287 [ 53.121800][ T6974] RAX: 0000000000000a74 RBX: 0000000000000000 RCX: ffffc90006c01000 [ 53.124201][ T6974] RDX: 0000000000040000 RSI: ffffea000149ee40 RDI: ffff88802975aa80 [ 53.126487][ T6974] RBP: ffffea000149ee40 R08: 0000000000000007 R09: 0000000000000000 [ 53.128750][ T6974] R10: 0000000000000000 R11: ffffffff961d45d0 R12: 1ffff92000addf3a [ 53.130976][ T6974] R13: ffff88802975aa80 R14: 0000000000000000 R15: dffffc0000000000 [ 53.133421][ T6974] FS: 00007f24a3eff6c0(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 53.135961][ T6974] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.137840][ T6974] CR2: ffffffffffffffd6 CR3: 000000004c58e000 CR4: 0000000000352ef0 [ 53.140316][ T6974] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.142646][ T6974] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.144856][ T6974] Kernel panic - not syncing: Fatal exception [ 53.147137][ T6974] Kernel Offset: disabled [ 53.148255][ T6974] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:17:19 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=1ffff920006eef5b RCX=ffffffff8ae7dea9 RDX=ffff88802a0f4880 RSI=ffffffff8ae7dec7 RDI=ffffffff8e1b8340 RBP=0000000000000252 RSP=ffffc90003777ac8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000052 R12=ffffffff8e1b8340 R13=000000000003dc0c R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff816a9ca2 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c241a2d CR3=0000000031472000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feee01f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feee01f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feee01f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feee01f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feee01f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feee01f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feee030c488 00007feee030c480 00007feee030c478 00007feee030c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feee0e6d100 00007feee030c440 00007feee0300004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feee030c498 00007feee030c490 00007feee030c488 00007feee030c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850bb975 RDI=ffffffff9aaebc80 RBP=ffffffff9aaebc40 RSP=ffffc900056ef278 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000035 R14=ffffffff850bb910 R15=0000000000000000 RIP=ffffffff850bb99f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f24a3eff6c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000004c58e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000280001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a3efef90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a31f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a31f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a31f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a31f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a31f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a31f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666c65732f636f72 702f0073252f666c 65732d6461657268 742f636f72702f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434940560a464a57 550a0056000a4349 405608414440574d 510a464a57550a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=1ffff1100431fe0c RBX=0000000000000004 RCX=0000000000000004 RDX=ffff88801dad8000 RSI=ffffffff817aa9cd RDI=ffff8880218ff060 RBP=ffff8880218ff048 RSP=ffffc90000858e98 R8 =0000000000000005 R9 =000000000000001f R10=0000000000000004 R11=ffffffff8b6f86c0 R12=0000000000000000 R13=ffff88806a82c9c0 R14=dffffc0000000000 R15=7fffffffffffffff RIP=ffffffff817aa9dd RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055a4141077d8 CR3=000000004bad2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feee01f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feee01f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feee01f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feee01f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feee01f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feee01f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feee030c488 00007feee030c480 00007feee030c478 00007feee030c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feee0e6d100 00007feee030c440 00007feee0300004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feee030c498 00007feee030c490 00007feee030c488 00007feee030c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=fffff52000034fa1 RBX=ffffed1003b5b488 RCX=1ffffffff20bf1fb RDX=1ffff11003b5b48b RSI=1ffff92000034fa1 RDI=00000000ffffffff RBP=ffffc900001a7df0 RSP=ffffc900001a7c58 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff905f5ccf R11=0000000000000000 R12=0000000000000003 R13=ffff88801dada440 R14=ffffffff905f5cc8 R15=000000000003eec0 RIP=ffffffff8b2474aa RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020035000 CR3=000000004bad2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a31f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a31f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a31f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a31f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a31f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a31f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a330c488 00007f24a330c480 00007f24a330c478 00007f24a330c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a3e6d100 00007f24a330c440 00007f24a3300004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a330c498 00007f24a330c490 00007f24a330c488 00007f24a330c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000