last executing test programs: 3.810956419s ago: executing program 3 (id=191): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/236, 0xec}], 0x1, 0x8, 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x236, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0xb0, 0x80, [{{0x9, 0x4, 0x0, 0x34, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x4, 0xf0, 0x1, {0x22, 0xd53}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x4}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0xb, 0x6, 0x6, 0x40, 0x6}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0xa, [{0xcc, &(0x7f0000000780)=@string={0xcc, 0x3, "fbf025a7c19022335eda809ebe326cb8788960619f8945469a9b90cd366957da1aa02efe77a52f80d4bf20abd7b6c7ff9ba8ef49fd61229ddeb2a3fa66c4472c8a1a5782a0b15207d343fe25add235ef3407728ea2734327a326d821720dc636064f1e612cf75b5f1cd94c40d122df0abfb2352b2aecd589aa92bdf2a6b889d1981e4ebd92f1a4f99f79cc996c404a3a23ae8da1099c83f1a63e773b2d35835ea554fead5081929109b8cae19f5b712e8984b5bff451242818efcbb0c088fe185d34127fc543cb513492"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x405}}, {0xc5, &(0x7f0000000880)=@string={0xc5, 0x3, "d328a48bcbc6b7d97a35ba0c9d81efaea8bf5965cf69503e010b692ba71b205d6d9d83fe6d7556fb9ff150c2fcd93f24d747e82b0a32d66346163a3007d44c0764b2dbfd42278e38aff49c7fde76866a9295676b69b8d16b4bf2dd64907023e8a772ac7332972aa513da1257be4fa081372d263607ab9a77c233770a48cf0225f874094ba6b80dda035d756ed0685f9a7c546cc2251d4e875de1368138a19345f52fb67a11211f157cc34f2cab7720903110530bfb6e70bf04dc8d685ab3b424ca608f"}}, {0xbd, &(0x7f0000000540)=@string={0xbd, 0x3, "05b61038b367d7f5974943dfae27eaa6f599dbbe967a4a5ecbc863fd1398a73797d654626fdcbeda06bb94f8516ed9e89eae8e19a250a2581c1f2d45f9827fbbf98897a82e29708499cd214b8738509448c27d38fce72e3fa3ac8d939124643dd9ba8a3461583160d63a52e61b274db949269a47d8c7ac98bcb23aa49b9a3e15b5b9cd790e590cf48b54c4cdaba7e2bd608ccac660605314a6d500ab4c117ebafccd1e7135af35ae5ec71d4fd5ce90c4898b22caac1ffed92c768d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x401}}, {0xb, &(0x7f00000004c0)=@string={0xb, 0x3, "b748b0d06668abce5b"}}, {0x38, &(0x7f00000002c0)=@string={0x38, 0x3, "8be849a1098e94e434c6ab1d25de21271d79ea280aeb874759eb8699c2b9ca074a19896affc96f43acd2428e159002d2c073b698e6a2"}}, {0x31, &(0x7f0000000640)=@string={0x31, 0x3, "5fcb1fcff003b472aed284a13b0c17dec55b33426800b7d0f2abd11cfdbf62c17891e39d77e1b1bfbca11e04f9345b"}}, {0x39, &(0x7f0000000680)=@string={0x39, 0x3, "44680ac1b0740d1f316aea6b80955b5b5f97438cc476e52ad6d4c66418bd09693d0ddb3d4adf254fba88b6b2e58f708fae76aee4c50faf"}}]}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0xa, 0x14}, [@RTA_EXPIRES={0x8, 0x17, 0x7fff}]}, 0x24}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x810, r2, 0x97227000) mlockall(0x1) 3.090892037s ago: executing program 1 (id=206): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x10) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000002c0)={[&(0x7f0000000200)=',-\\\x00', &(0x7f0000000240)='^(!}\x00']}) 3.089725316s ago: executing program 1 (id=208): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000900000065d40400000100dbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x2400c040}, 0x20) syz_usb_connect(0x0, 0x35, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xca, 0x9b, 0xd4, 0x10, 0x1199, 0xb000, 0xa898, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x30, 0x2, 0x0, 0x17, 0xb5, 0x1b}}]}}]}}, 0x0) syz_usb_connect$uac1(0x2, 0x7a, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x3, 0x1, 0x9, 0x20, 0xa5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x5, 0xd}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0x2, 0xf1, {0x7, 0x25, 0x1, 0x2, 0x56, 0x708}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3cf, 0xc5, 0x3, 0x6, {0x7, 0x25, 0x1, 0x1, 0x7}}}}}}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x3f9}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x2, "b450de", 0x31, 0x2, "84c4cfda1254475ff88c75bd2cd4b9189965ab219d73814f702096c02e38b8b3850187536f3e0fdcb77714e4f13ff14e607778b1966c4b9a18907dcdbbc643178a0ffad2b7c33ddb9b9221228b15c7486f0540f8419e79ec944eb1ff1ae4c2a9afc689d9d1a4fa3235b79c656d675a55973e5eb92c3e56196e425e5ca089941099da4094af1db0e3b7ddade2fb17e9feef736ac156082ad78bba504507543bd2be224537d74cb0e705ff2dcf87692716df3e71905137ef4dae5200170e952b3012df92b441c05c337078ed9c818d491feea2f0548f2ee40f0fc9224062d2b75375ba09efc75276ad93cadbe994c1fe53"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xe5, 0x8, "c994a6", 0x2, 0x1, "b1807d613f215b1c7d75d2cf8250c609510ce5e02c66286e785160181422568daf724e3867a04e2888a270f64a070d88e988e8e9e17e039bdd391964ef8b6bbb213ddbf24de6f816c87bab84cca94f2611a288504347999bcdc72950ed30d5ec4c70f54dc869959830ac89dbe2f22ab81124287930614e18707b276ef649d518fbba1448b56eb297a95398b1073e333a0164d286592ccf05a9b6c29511fe425184e702044e922e80d78e28c25b9453cec435d7ba37da159d9ea6b8d6e889ba919a9a2d5623bf78f8f09ad12042a2806f0cdd366931cf9b392511a98888893fe0b3d7b9505a80068653a82b8167157a2f"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x80, 0x6, "2530ec", 0x9, 0x3, "a6e360e2b651be0b602a1b606f8dd8c829647f2bf70d00c50289453eb9fda4048fb6098e3c3808db6caeb05915f0249811f065489790da557458f90896894aca1ba4636a7d5ec9550d51cb9b08d9dda4e1c80114c62c3ebf55c5411b2c047c46a26c60c0e67e553cb2882b3406dbae57c301176c612ec302834ef567f33623402c00b93e4e1ec30d824de306a0a9a3e9f74cad63afb8df3d9943ac4c5abe2da89705b9f1f45759467095786ec4bb4e8a6fb4966bb5a883991dca8d81ce001a725dda92e788c447aff58c77077285d6f9ae87b559c649dbee988ecb1158be43f5d9d3682c89c55fed69119b1bb5d5bc98"}, {@any, 0x0, 0x1, 'N05', 0x4, 0xd5, "d3da71be49777850113d35a58b48a178dc0e3df1abf1662d118aa22a06a688cfe54e7a809d34871beffa791db1e46ca978c0a12986fa180d3b9595b415860c5c1a4c6c6b6cbb8a44aa82747a3913593af5b8031e8fc4387b7726f51469a3ce747391a979e9a96e663e1d318bc7113ff512464e6cd38d9e09b6506a460c306ee1a70dd54fe04ff0a71451c9e67ed368d2f4d728219ab020ad2c0503d8447d0648098a8a2f7202187fd276d2e490df40e2bd80b989ae6770bdcc4f8c7c242a2298cb799b0ecce9ed97ce09215c7cb029476c0aadca06ddae4ce03c2bbc4ce8e7e706516e2637f1be9c1a25432739ba5c8d"}]}}}, 0x3fc) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) sysfs$2(0x2, 0x800, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @broadcast}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) 1.811336557s ago: executing program 1 (id=216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) (async, rerun: 64) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x2, 0x40000105, 0x0, 0x0}) (rerun: 64) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000361000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000400)="ded98fc878c0bd000000004af30fbc424db8010000000f01d964832190b805000000b9000000000f01c1f30f09660feeec66ba210066ed0f01d1", 0x3a}], 0x1, 0xd, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) move_pages(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 1.750472504s ago: executing program 1 (id=218): r0 = io_uring_setup(0x31ae, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x101}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c6155"], 0x3}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000100)={0x9, 0x0, 0x5ad4}, 0x0) (async) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000100)={0x9, 0x0, 0x5ad4}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) (async) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) 1.241313866s ago: executing program 2 (id=229): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4090}, 0x4c885) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008850) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0303000000f0ffff00000600140008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 1.240264706s ago: executing program 2 (id=230): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002600)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20000000}, 0x2000810) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x880) 1.110964105s ago: executing program 2 (id=231): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@loopback, @remote, 0x0}, &(0x7f0000000100)=0xc) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@xdp={0x2c, 0xe, r4, 0x36}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x30}, 0x0) 1.060757574s ago: executing program 2 (id=232): unshare(0x22020400) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000000), 0x2000000, &(0x7f00000000c0)={[{@workdir}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c270040f000009e0ff008001fffffe1ffff8100632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='./file0/file0\x00'}) io_uring_enter(r0, 0x3516, 0x4, 0x0, 0x0, 0x0) 860.6866ms ago: executing program 2 (id=233): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r0 = timerfd_create(0x0, 0x80000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000056000106"], 0x1c}], 0x1, 0x0, 0x0, 0x4044}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000900)={{0x2000, 0x4, 0x8, 0x9, 0xfb, 0xe4, 0x44, 0x7, 0x0, 0x2e, 0x19}, {0xeeee0000, 0x5000, 0xa, 0x0, 0x40, 0x5, 0x5d, 0x7f, 0x5, 0x3, 0x3, 0xfc}, {0xdddd1000, 0xdddd0000, 0xe, 0x5, 0x3, 0x9, 0x0, 0x9, 0x1, 0x27, 0x5, 0x81}, {0x2, 0xeeee0000, 0xc, 0x6, 0x4, 0x42, 0x5, 0xff, 0x8, 0x7, 0xe, 0x8}, {0x2000, 0xdddd1000, 0xe, 0x3, 0x6, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0000, 0xb, 0xa0, 0xb1, 0x8, 0x5, 0xa0, 0x84, 0x7, 0x1, 0xfd}, {0xffff1000, 0x2, 0x10, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0x7, 0x6}, {0xffff1000, 0x30}, {0x10000, 0x7}, 0x80000031, 0x0, 0x6000, 0x12025, 0x7, 0x18800, 0x8000c00, [0x6800000000000000, 0x4, 0x5e, 0x3]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r6, 0x0) cachestat(r6, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000000c0), 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) vmsplice(r5, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0xa) fcntl$setpipe(r5, 0x407, 0x6) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}}, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x2e, 0x0, &(0x7f0000000300)=0x4f) 860.303659ms ago: executing program 1 (id=234): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x0, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000140)=""/253, &(0x7f0000000080)=0xfd) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4, 0x7300}, 0x28) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x6, 0x3c) 778.879707ms ago: executing program 1 (id=236): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r0, &(0x7f00000002c0)=""/4089, 0xff9) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000002c0)=""/4089, 0xff9) (async) 777.781629ms ago: executing program 3 (id=237): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x4fa1, &(0x7f0000000000)={0x0, 0x7084, 0x2, 0x2, 0x2cb}, &(0x7f0000000080), &(0x7f00000000c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xfffffffd}) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f00000031c0)=[{0x5, 0x1, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/235, 0xeb}, {&(0x7f0000000240)=""/68, 0x44}, {&(0x7f00000002c0)=""/162, 0xa2}, {&(0x7f0000000380)=""/208, 0xd0}, {&(0x7f0000000480)=""/166, 0xa6}], &(0x7f00000005c0)=[0x80000001, 0x101, 0x45]}, {0x3, 0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/41, 0x29}, {&(0x7f0000000640)=""/134, 0x86}, {&(0x7f0000000700)=""/53, 0x35}], &(0x7f0000000780)=[0x0, 0x6, 0x7, 0x8]}, {0x0, 0x1, 0x0, &(0x7f00000007c0), &(0x7f0000000800)=[0x8000000000000001, 0x9, 0x80000000, 0x3, 0xcb6, 0x0, 0xffffffffffffffff]}, {0x8, 0x1, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)}, {&(0x7f0000001880)=""/234, 0xea}, {&(0x7f0000001980)=""/104, 0x68}, {&(0x7f0000001a00)=""/211, 0xd3}, {&(0x7f0000001b00)=""/200, 0xc8}, {&(0x7f0000001c00)=""/32, 0x20}, {&(0x7f0000001c40)=""/95, 0x5f}], &(0x7f0000001d40)=[0x10001, 0xffffffffffffffff, 0x2]}, {0x3, 0x1, 0x0, &(0x7f0000002000)=[{&(0x7f0000001d80)=""/145, 0x91}, {&(0x7f0000001e40)=""/223, 0xdf}, {&(0x7f0000001f40)=""/185, 0xb9}], &(0x7f0000002040)=[0x8, 0x7fffffff, 0x5, 0xeaf, 0x8000]}, {0x3, 0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002080)=""/43, 0x2b}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/87, 0x57}], &(0x7f0000003180)=[0x8, 0x1, 0x10001, 0x0, 0x200, 0x0, 0x45, 0xffffffffffffffff]}], 0x6) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 670.002827ms ago: executing program 2 (id=240): r0 = socket(0x28, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[], 0xf4}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000001) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)) chdir(&(0x7f00000001c0)='./bus\x00') r2 = inotify_init1(0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001c00070c002000000000000002000000", @ANYRES32=r4, @ANYBLOB="0800c000140001000000000000000000000000000000000140000200aaaaaaaaaa190000"], 0x3c}}, 0x20024090) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) dup3(r2, r5, 0x0) r6 = epoll_create1(0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0xc0080, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0xe000001d}) read$char_usb(r7, &(0x7f0000000100)=""/169, 0xa9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="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", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r8}, 0x10) r9 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) 440.690685ms ago: executing program 3 (id=244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xc640, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 32) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) write$tun(r0, &(0x7f0000000b40)={@void, @void, @ipv6=@generic={0x3, 0x6, "fa99bd", 0x2f1, 0x87, 0xff, @mcast1, @mcast2, {[@fragment={0x5c, 0x0, 0xc, 0x1, 0x0, 0xb, 0x65}, @routing={0x2e, 0xe, 0x1, 0x7, 0x0, [@mcast1, @local, @loopback, @remote, @dev={0xfe, 0x80, '\x00', 0x26}, @dev={0xfe, 0x80, '\x00', 0x44}, @loopback]}, @srh={0x33, 0x6, 0x4, 0x3, 0x0, 0x40, 0x1, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @private0]}, @routing={0x1, 0x2, 0x2, 0x0, 0x0, [@empty]}, @srh={0x1, 0x12, 0x4, 0x9, 0x6, 0x10, 0x9, [@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x1c}, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @mcast1]}, @dstopts={0x2f, 0x5, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x62, 0x9, [0x3, 0x3, 0x1400]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @srh={0x67, 0x12, 0x4, 0x9, 0x40, 0x8, 0x1, [@private0, @private2, @local, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private0, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, @rand_addr=' \x01\x00']}, @fragment={0x0, 0x0, 0x8, 0x0, 0x0, 0xa, 0x64}, @dstopts={0x11, 0x9, '\x00', [@padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0xbfb}, @jumbo={0xc2, 0x4, 0x31}, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @mcast1}, @enc_lim]}], "a8d7dfd07cfefabfd7542a26aaf3b6e53df312821295f8dd42cc9e93110229d0ec60435509248764b01ec57030de84aba6753270806f31b862fa691154942b45e44b74521f6ea1094c24f0708efb3bd0f68f5286c2d25c823a"}}}, 0x319) (rerun: 32) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c) (async) r4 = syz_io_uring_setup(0x7074, &(0x7f0000000440)={0x0, 0x5f36, 0x80, 0x2, 0x35e}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x200, 0x0, 0x1}) (async) io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000000)={&(0x7f0000002000)={[{0x0}]}, 0x1}, 0x1) (async) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) (async) r7 = dup(r2) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) (async, rerun: 32) readv(r4, &(0x7f0000001e80)=[{&(0x7f0000000500)=""/136, 0x88}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000000300)=""/66, 0x42}, {&(0x7f0000000180)}, {&(0x7f00000005c0)=""/208, 0xd0}, {&(0x7f0000000280)=""/13, 0xd}, {&(0x7f00000006c0)=""/198, 0xc6}, {&(0x7f0000000840)=""/193, 0xc1}, {&(0x7f0000000940)=""/206, 0xce}], 0x9) (async, rerun: 32) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @remote, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) close_range(r1, 0xffffffffffffffff, 0x0) (async) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd9b774626d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f00000003c0)="c67f0d7df908892f16337aa9a03c42e07a9421fb4bf033ffa1935068ddc1995ad886cb3863da4158d4d3e3fff6899b82e43e2e0e418a2ca55f9e678c214b4caf9165d396f4a03e53ab953ea1bb8bbbf902f5e72dc6b3591fcbeae883182f9463ef52168e82fc494cde13186c11b41400aa85ade01852a4dcec3127ae451c0faec8b9b400cbf59ee03148906b9dd1e2f523e3385c8ad8262d371c84dab3fc7a50b7eeffbc8ad9bf73a8612b038713e43a0104646b59cb521979c0a9d155829be620200b131d0ef5d4f0", 0xfffffe9e}], 0x2) 440.361812ms ago: executing program 0 (id=245): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe81a10a0015400100142603600e1208000b0000000401a800080008000a400600000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x3a}, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4,.:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000040)={0x3}) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001a00)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000880)=""/4089, 0xff9}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x5231dbcbae2cdaef, 0x0) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000680)={0xe, "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"}) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f00000000c0)={0x0, 0x0, @pic={0x8, 0x1, 0x2, 0x10, 0x9, 0x40, 0xa1, 0x7f, 0x4, 0x1, 0x5, 0x1, 0x2, 0x8, 0x7, 0xb}}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000480)={0x0, "b500e2279c2996817bb959eb2b238deda525e1dbdeffafbf2500"}) 288.325966ms ago: executing program 0 (id=246): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$KDDISABIO(r0, 0x4b37) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000140)={0x7, 0x4f7, 0x75, 0x2}) symlink(&(0x7f0000000200)='.\x00', &(0x7f0000000040)='./file0\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000140)="be", 0x1}], 0x1}, 0x8001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000840)={{0x1, 0x0, 0xe21, 0x7, 'syz0\x00', 0x7}, 0x0, [0x2f, 0x80000000, 0x1, 0x0, 0x401, 0x7, 0x0, 0x5, 0x7, 0x4, 0x1, 0x6, 0xd, 0x8, 0x8, 0x10000, 0x5, 0x6, 0x5de, 0x2, 0x8, 0x7fffffff, 0x4, 0x5, 0xd56, 0x7, 0x7, 0xfff, 0x1, 0xffffffff, 0x8000000000000000, 0x5ba94536, 0x2, 0xe, 0x3, 0x5, 0x3, 0x9, 0x80000000, 0xfffffffffffffffc, 0x7f, 0x0, 0x3, 0xc, 0x7, 0x9, 0xfffffffffffff59b, 0xff, 0x1, 0x5dee, 0x5, 0x5, 0x7fff, 0x401, 0x1fe, 0x8, 0x7, 0x680, 0x2, 0xd, 0x8, 0x7, 0x9, 0x8, 0xfffffffffffffff8, 0x2, 0x3, 0x5, 0x1, 0x2, 0x1000, 0x200, 0x8, 0x1000, 0x6, 0x4, 0x7c6, 0x61bbc40e, 0x0, 0x40, 0x8, 0xb3, 0x7, 0xa, 0x7, 0xed0, 0x9, 0x7773, 0x6, 0x0, 0x0, 0x1, 0x10000, 0x9, 0x3, 0x6, 0x0, 0xfffffffffffffffd, 0x80, 0x2, 0x9, 0x1, 0x5, 0x5, 0x1, 0x9, 0x4, 0x5, 0x7fffffff, 0x0, 0x1, 0x100000000, 0x3, 0xf, 0xff, 0x3, 0x1, 0x9, 0x3, 0x9, 0x7, 0x7, 0x4, 0x0, 0x9, 0x7, 0x4, 0x4fe7]}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r1, &(0x7f0000000440)="12d5a9220b8448bd908c37f142b43d0b92c7f2d5a4898d0001813ef33891bbe0d2b90122491c65a9e4317f1ff1e4fe45314ee1b59dcd304d99f4271b8bc51ab4679ba32e9ec792fd2f2cd6854a95cda61aa9edeb4167ae69e27cc0d0898527a8c46df92356573b32dd9da7bc80d71555167cbdf9daca0ec07070b4405d2384bfb1bac17ebcf187272023c60195059a96e7a8cca0d384d96ee0ae17fa6f6750cd06ff019a7c4ce72b21b09bfb040b6b564249c3594aea55ac079b0876ca9f47bd151c824b82936ff580e403d31f31ce"}, 0x20) prctl$PR_SET_SECUREBITS(0x1c, 0x13) mount(0x0, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000000)='cifs\x00', 0x10000, &(0x7f0000000400)='\x00\x00\x00\x00\x00\x00\x00') 233.204273ms ago: executing program 3 (id=247): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c250000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010600000000ffff000019"], 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010003704000000000000000000000000c21a807ee9bb5d2607fd3d07113df2791794694921bd505957a2456de8faa4fab3346a1bdecc6f3b12e619d4d6e9a0792649b163fcc9bdb1bf9b1116a674627ab9c05a4292e98a6cb30745396e1f4ad52cb6ffcefbf8680fd4dd9dd1", @ANYRESOCT=r3, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000500ffffffff"], 0x3c}}, 0x0) 232.924683ms ago: executing program 0 (id=248): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdir(&(0x7f00000003c0)='./file0\x00', 0xff0c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x182, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_to_team\x00', 0x8000}) 146.603495ms ago: executing program 0 (id=249): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x94}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) 145.050855ms ago: executing program 3 (id=250): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = dup(r0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x14, "0dfa4009e96ee2db02204cd6c635f2568e932236"}, &(0x7f0000000340)=0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRES32=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643dda5da55fd92c02996f60794716dc97b7bfd84396f905d8519b085b519bd761100af807528592c32acedb6de6eef971de82926d1fd0bb08fab07d38f3d47aa05f22fc77dd21680ab33fe5c88b2167a2763873b3b960a9e084a1c0415cc62e3fedf989e619309729735b3e54bec5dd", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003666e71f00", 0x2000, &(0x7f0000000140)={&(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x29, 0x2, 0x300902e3, 0x40, 0x5e16, 0x7, 0x55, 0x0, 0x0, 0x4, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x2007, {0x11, 0xcbff, 0x0, {0x5, 0x3, 0x72, 0x1af3, 0x401, 0x7, 0x5, 0x6, 0xfff, 0x4000, 0xd, 0xee00, 0xee01, 0x4, 0x80001c00}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0xffffffffffff7fff, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r4, &(0x7f0000000980)=[{&(0x7f0000000580)=""/238, 0xee}], 0x1) fchmodat(r3, &(0x7f0000000300)='./file1\x00', 0xe2) 60.386631ms ago: executing program 0 (id=251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x40880) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 355.269µs ago: executing program 3 (id=252): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) setreuid(0x0, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = socket$inet(0x2, 0xa, 0x5) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in=@private, @in6=@private2}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) 0s ago: executing program 0 (id=253): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_vmscan_write_folio\x00', r3, 0x0, 0x100000001}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e01, 0x7, @empty}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41800, 0x66840}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): [ 81.443199][ T53] cfg80211: failed to load regulatory.db [ 196.042245][ T40] audit: type=1400 audit(1760483583.180:62): avc: denied { write } for pid=5946 comm="sftp-server" path="pipe:[7269]" dev="pipefs" ino=7269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 Warning: Permanently added '[localhost]:27006' (ED25519) to the list of known hosts. [ 197.922226][ T40] audit: type=1400 audit(1760483585.060:63): avc: denied { name_bind } for pid=5949 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 197.969507][ T40] audit: type=1400 audit(1760483585.100:64): avc: denied { execute } for pid=5950 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 197.979204][ T40] audit: type=1400 audit(1760483585.100:65): avc: denied { execute_no_trans } for pid=5950 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 200.093220][ T40] audit: type=1400 audit(1760483587.230:66): avc: denied { mounton } for pid=5950 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 200.102914][ T40] audit: type=1400 audit(1760483587.240:67): avc: denied { mount } for pid=5950 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 200.104776][ T5950] cgroup: Unknown subsys name 'net' [ 200.115112][ T40] audit: type=1400 audit(1760483587.250:68): avc: denied { unmount } for pid=5950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 200.285034][ T5950] cgroup: Unknown subsys name 'cpuset' [ 200.289972][ T5950] cgroup: Unknown subsys name 'rlimit' [ 200.424657][ T40] audit: type=1400 audit(1760483587.560:69): avc: denied { setattr } for pid=5950 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.433159][ T40] audit: type=1400 audit(1760483587.560:70): avc: denied { create } for pid=5950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 200.441052][ T40] audit: type=1400 audit(1760483587.560:71): avc: denied { write } for pid=5950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 200.489828][ T5952] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 201.199092][ T5950] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 205.216043][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 205.216059][ T40] audit: type=1400 audit(1760483592.350:80): avc: denied { execmem } for pid=5955 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 205.443733][ T40] audit: type=1400 audit(1760483592.580:81): avc: denied { create } for pid=5959 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 205.451590][ T40] audit: type=1400 audit(1760483592.580:82): avc: denied { read write } for pid=5959 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 205.481842][ T40] audit: type=1400 audit(1760483592.580:83): avc: denied { open } for pid=5959 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 205.491045][ T40] audit: type=1400 audit(1760483592.590:84): avc: denied { ioctl } for pid=5959 comm="syz-executor" path="socket:[6437]" dev="sockfs" ino=6437 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 205.494816][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 205.505461][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.508305][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 205.511768][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.514120][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 205.522029][ T40] audit: type=1400 audit(1760483592.660:85): avc: denied { read } for pid=5959 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 205.526534][ T5966] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.530693][ T40] audit: type=1400 audit(1760483592.660:86): avc: denied { open } for pid=5959 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 205.534686][ T5966] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.543553][ T5291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 205.546802][ T5966] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.549931][ T5291] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 205.552927][ T5966] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.555731][ T5291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 205.558100][ T5966] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 205.560719][ T40] audit: type=1400 audit(1760483592.660:87): avc: denied { mounton } for pid=5959 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 205.572824][ T5962] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 205.574325][ T5291] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 205.576998][ T5962] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 205.578689][ T5291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.581353][ T5962] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 205.591155][ T5971] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 205.594680][ T5971] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 205.702030][ T40] audit: type=1400 audit(1760483592.840:88): avc: denied { module_request } for pid=5959 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 205.745971][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 205.916390][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.919109][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.921535][ T5959] bridge_slave_0: entered allmulticast mode [ 205.924971][ T5959] bridge_slave_0: entered promiscuous mode [ 205.929565][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.932567][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.935411][ T5959] bridge_slave_1: entered allmulticast mode [ 205.938932][ T5959] bridge_slave_1: entered promiscuous mode [ 205.942846][ T5963] chnl_net:caif_netlink_parms(): no params data found [ 206.008257][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.020343][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.094688][ T5959] team0: Port device team_slave_0 added [ 206.125655][ T5959] team0: Port device team_slave_1 added [ 206.193545][ T5969] chnl_net:caif_netlink_parms(): no params data found [ 206.198324][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.200638][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.208792][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.213343][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.215600][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.217904][ T5963] bridge_slave_0: entered allmulticast mode [ 206.220478][ T5963] bridge_slave_0: entered promiscuous mode [ 206.228087][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.230340][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.232920][ T5963] bridge_slave_1: entered allmulticast mode [ 206.235498][ T5963] bridge_slave_1: entered promiscuous mode [ 206.246426][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.248729][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.259422][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.271267][ T5967] chnl_net:caif_netlink_parms(): no params data found [ 206.338431][ T5963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.348566][ T5963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.500671][ T5959] hsr_slave_0: entered promiscuous mode [ 206.503810][ T5959] hsr_slave_1: entered promiscuous mode [ 206.513266][ T5963] team0: Port device team_slave_0 added [ 206.515282][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.518100][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.520317][ T5969] bridge_slave_0: entered allmulticast mode [ 206.523533][ T5969] bridge_slave_0: entered promiscuous mode [ 206.526994][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.529199][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.531511][ T5969] bridge_slave_1: entered allmulticast mode [ 206.535999][ T5969] bridge_slave_1: entered promiscuous mode [ 206.575180][ T5963] team0: Port device team_slave_1 added [ 206.617864][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.620121][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.623334][ T5967] bridge_slave_0: entered allmulticast mode [ 206.627027][ T5967] bridge_slave_0: entered promiscuous mode [ 206.680974][ T5969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.684109][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.686542][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.689130][ T5967] bridge_slave_1: entered allmulticast mode [ 206.691861][ T5967] bridge_slave_1: entered promiscuous mode [ 206.707890][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.710792][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.720375][ T5963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.725243][ T5969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.754651][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.756901][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.765752][ T5963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.824775][ T5967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.830394][ T5967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.839040][ T5969] team0: Port device team_slave_0 added [ 206.873065][ T5967] team0: Port device team_slave_0 added [ 206.876688][ T5969] team0: Port device team_slave_1 added [ 206.931549][ T5967] team0: Port device team_slave_1 added [ 206.968481][ T5963] hsr_slave_0: entered promiscuous mode [ 206.970648][ T5963] hsr_slave_1: entered promiscuous mode [ 206.972659][ T5963] debugfs: 'hsr0' already exists in 'hsr' [ 206.974369][ T5963] Cannot create hsr debugfs directory [ 207.007811][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.010002][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.018002][ T5969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.046386][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.048856][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.056864][ T5969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.067524][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.070334][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.080340][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.108227][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.111041][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.119510][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.173119][ T5969] hsr_slave_0: entered promiscuous mode [ 207.175501][ T5969] hsr_slave_1: entered promiscuous mode [ 207.177613][ T5969] debugfs: 'hsr0' already exists in 'hsr' [ 207.179390][ T5969] Cannot create hsr debugfs directory [ 207.304422][ T5967] hsr_slave_0: entered promiscuous mode [ 207.307601][ T5967] hsr_slave_1: entered promiscuous mode [ 207.310521][ T5967] debugfs: 'hsr0' already exists in 'hsr' [ 207.313822][ T5967] Cannot create hsr debugfs directory [ 207.444876][ T5959] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 207.456083][ T5959] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 207.467804][ T5959] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 207.506326][ T5959] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 207.522643][ T5971] Bluetooth: hci0: command tx timeout [ 207.595783][ T5963] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.599877][ T5963] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.601897][ T5971] Bluetooth: hci1: command tx timeout [ 207.602476][ T5966] Bluetooth: hci2: command tx timeout [ 207.610451][ T5963] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 207.618549][ T5963] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 207.682713][ T5966] Bluetooth: hci3: command tx timeout [ 207.694596][ T5969] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 207.699259][ T5969] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 207.704063][ T5969] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 207.708167][ T5969] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 207.759427][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.793091][ T5967] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 207.798544][ T5967] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 207.804471][ T5967] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 207.810583][ T5967] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 207.823381][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.830533][ T5963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.852038][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.855180][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.874993][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.878263][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.897516][ T5963] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.917280][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.919670][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.951144][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.953581][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.963466][ T5969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.005835][ T5969] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.023870][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.027024][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.039306][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.042167][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.045980][ T40] audit: type=1400 audit(1760483595.180:89): avc: denied { sys_module } for pid=5959 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 208.069146][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.083714][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.100537][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.103716][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.112713][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.115641][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.139641][ T5969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.176047][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.205788][ T5963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.233366][ T5959] veth0_vlan: entered promiscuous mode [ 208.247605][ T5959] veth1_vlan: entered promiscuous mode [ 208.274114][ T5963] veth0_vlan: entered promiscuous mode [ 208.285191][ T5959] veth0_macvtap: entered promiscuous mode [ 208.290315][ T5969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.296428][ T5963] veth1_vlan: entered promiscuous mode [ 208.303430][ T5959] veth1_macvtap: entered promiscuous mode [ 208.328305][ T5963] veth0_macvtap: entered promiscuous mode [ 208.331886][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.335560][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.343090][ T5963] veth1_macvtap: entered promiscuous mode [ 208.351288][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.361240][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.374263][ T1146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.377428][ T1146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.383953][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.387394][ T1146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.390125][ T1146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.405817][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.410508][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.416014][ T5969] veth0_vlan: entered promiscuous mode [ 208.429964][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.432810][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.463753][ T5969] veth1_vlan: entered promiscuous mode [ 208.472828][ T5967] veth0_vlan: entered promiscuous mode [ 208.473746][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.478384][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.506165][ T5967] veth1_vlan: entered promiscuous mode [ 208.513951][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.517071][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.532038][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.535283][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.556809][ T5969] veth0_macvtap: entered promiscuous mode [ 208.558261][ T5959] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 208.563428][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.567489][ T5969] veth1_macvtap: entered promiscuous mode [ 208.567537][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.582011][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.590650][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.595941][ T5967] veth0_macvtap: entered promiscuous mode [ 208.599669][ T5967] veth1_macvtap: entered promiscuous mode [ 208.609178][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.616274][ T1209] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.618957][ T1209] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.623923][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.637582][ T1209] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.653851][ T1209] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.656765][ T1209] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.675903][ T1209] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.678826][ T1209] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.682177][ T1209] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.707433][ T1209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.710288][ T1209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.726476][ T1209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.728918][ T1209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.765174][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.765356][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.769169][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.777288][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.908829][ T6070] binder_alloc: 6069: binder_alloc_buf, no vma [ 208.913540][ T6070] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 208.917492][ T6070] ======================================================= [ 208.917492][ T6070] WARNING: The mand mount option has been deprecated and [ 208.917492][ T6070] and is ignored by this kernel. Remove the mand [ 208.917492][ T6070] option from the mount to silence this warning. [ 208.917492][ T6070] ======================================================= [ 209.035405][ T6067] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:21 [ 209.098793][ T6068] kvm: kvm [6066]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 209.103832][ T6068] kvm: kvm [6066]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 209.202408][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 209.215795][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 209.448754][ T6087] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 209.602309][ T5966] Bluetooth: hci0: command tx timeout [ 209.615124][ T6101] lo speed is unknown, defaulting to 1000 [ 209.615277][ T6102] rdma_rxe: rxe_newlink: failed to add lo [ 209.618937][ T6101] lo speed is unknown, defaulting to 1000 [ 209.622182][ T6101] lo speed is unknown, defaulting to 1000 [ 209.681843][ T5966] Bluetooth: hci1: command tx timeout [ 209.682807][ T5971] Bluetooth: hci2: command tx timeout [ 209.730138][ T6101] infiniband syz0: set active [ 209.732878][ T6054] lo speed is unknown, defaulting to 1000 [ 209.733123][ T6101] infiniband syz0: added lo [ 209.768041][ T6101] RDS/IB: syz0: added [ 209.769698][ T6101] smc: adding ib device syz0 with port count 1 [ 209.772082][ T6101] smc: ib device syz0 port 1 has no pnetid [ 209.772212][ T5971] Bluetooth: hci3: command tx timeout [ 209.775577][ T6054] lo speed is unknown, defaulting to 1000 [ 209.779032][ T6101] lo speed is unknown, defaulting to 1000 [ 209.914523][ T6101] lo speed is unknown, defaulting to 1000 [ 210.064921][ T6101] lo speed is unknown, defaulting to 1000 [ 210.163328][ T6101] lo speed is unknown, defaulting to 1000 [ 210.509735][ T40] kauditd_printk_skb: 88 callbacks suppressed [ 210.509746][ T40] audit: type=1400 audit(1760483597.640:178): avc: denied { ioctl } for pid=6107 comm="syz.1.18" path="/dev/video0" dev="devtmpfs" ino=955 ioctlcmd=0x565f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 210.519176][ T40] audit: type=1400 audit(1760483597.650:179): avc: denied { create } for pid=6107 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 210.525426][ T40] audit: type=1400 audit(1760483597.650:180): avc: denied { ioctl } for pid=6107 comm="syz.1.18" path="socket:[9000]" dev="sockfs" ino=9000 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 210.562055][ T40] audit: type=1400 audit(1760483597.690:181): avc: denied { read } for pid=6109 comm="syz.1.19" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 210.569009][ T40] audit: type=1400 audit(1760483597.690:182): avc: denied { open } for pid=6109 comm="syz.1.19" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 210.577531][ T40] audit: type=1400 audit(1760483597.710:183): avc: denied { setopt } for pid=6113 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 210.664203][ T40] audit: type=1400 audit(1760483597.800:184): avc: denied { search } for pid=6117 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.675071][ T40] audit: type=1400 audit(1760483597.800:185): avc: denied { search } for pid=6117 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1897 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.683738][ T40] audit: type=1400 audit(1760483597.800:186): avc: denied { search } for pid=6117 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.692825][ T40] audit: type=1400 audit(1760483597.800:187): avc: denied { search } for pid=6117 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.931905][ T6010] IPVS: starting estimator thread 0... [ 211.043949][ T6137] IPVS: using max 44 ests per chain, 105600 per kthread [ 211.682143][ T5971] Bluetooth: hci0: command tx timeout [ 211.761938][ T5971] Bluetooth: hci1: command tx timeout [ 211.772068][ T5971] Bluetooth: hci2: command tx timeout [ 211.842120][ T5971] Bluetooth: hci3: command tx timeout [ 211.952113][ T6162] netlink: 20 bytes leftover after parsing attributes in process `syz.2.32'. [ 212.141555][ T6181] warning: `syz.2.37' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 212.195301][ T6186] xt_hashlimit: size too large, truncated to 1048576 [ 212.255339][ T6194] autofs4:pid:6194:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 212.276265][ T6196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.42'. [ 212.292731][ T6198] Zero length message leads to an empty skb [ 212.339139][ T6203] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 212.359955][ T6201] overlayfs: missing 'lowerdir' [ 212.404338][ T6215] syz.1.50 uses obsolete (PF_INET,SOCK_PACKET) [ 212.426963][ T5971] Bluetooth: hci1: unexpected event 0x0f length: 52 > 4 [ 212.641871][ T53] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 212.741820][ T840] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 212.807253][ T53] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 212.811211][ T53] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 212.814682][ T53] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 212.818024][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.823683][ T6215] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 212.830782][ T53] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 212.902203][ T840] usb 8-1: Using ep0 maxpacket: 8 [ 212.906242][ T840] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 212.909580][ T840] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 212.913613][ T840] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 212.917546][ T840] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 212.921515][ T840] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.926922][ T840] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 212.930527][ T840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.088817][ T6214] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 213.093060][ T60] usb 6-1: USB disconnect, device number 2 [ 213.143391][ T840] usb 8-1: usb_control_msg returned -32 [ 213.145254][ T840] usbtmc 8-1:16.0: can't read capabilities [ 213.482412][ T6232] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 213.487560][ T6232] trusted_key: syz.2.53 sent an empty control message without MSG_MORE. [ 213.491482][ T6232] tmpfs: Unknown parameter 'usrquota' [ 213.496015][ T6232] netlink: 64 bytes leftover after parsing attributes in process `syz.2.53'. [ 213.548361][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'. [ 213.660619][ T6239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.761900][ T5971] Bluetooth: hci0: command tx timeout [ 213.842276][ T5971] Bluetooth: hci2: command tx timeout [ 213.848835][ T6243] usbtmc 8-1:16.0: CHECK_CLEAR_STATUS returned b3 [ 213.868063][ T840] usb 8-1: USB disconnect, device number 2 [ 213.924298][ T5971] Bluetooth: hci3: command tx timeout [ 214.060684][ T6249] Bluetooth: MGMT ver 1.23 [ 214.086311][ T6249] 9pnet_virtio: no channels available for device syz [ 214.252247][ T6257] binder: BC_ACQUIRE_RESULT not supported [ 214.254294][ T6257] binder: 6256:6257 ioctl c0306201 2000000001c0 returned -22 [ 214.466325][ T6267] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 214.551859][ T842] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 214.701782][ T842] usb 7-1: Using ep0 maxpacket: 8 [ 214.704709][ T842] usb 7-1: config 0 interface 0 has no altsetting 0 [ 214.706930][ T842] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 214.710342][ T842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.715686][ T842] usb 7-1: config 0 descriptor?? [ 214.923207][ T842] usbhid 7-1:0.0: can't add hid device: -32 [ 214.925937][ T842] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 215.282877][ T842] usb 7-1: USB disconnect, device number 2 [ 215.287492][ T6279] netlink: 'syz.1.68': attribute type 4 has an invalid length. [ 215.475805][ T6300] input: syz1 as /devices/virtual/input/input5 [ 215.515694][ T40] kauditd_printk_skb: 116 callbacks suppressed [ 215.515708][ T40] audit: type=1400 audit(1760483602.650:304): avc: denied { append } for pid=6302 comm="syz.1.76" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 215.543551][ T40] audit: type=1400 audit(1760483602.680:305): avc: denied { bind } for pid=6302 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 215.701778][ T6306] nbd3: detected capacity change from 0 to 63 [ 215.706026][ T6308] block nbd3: NBD_DISCONNECT [ 215.708173][ T6308] block nbd3: Disconnected due to user request. [ 215.711077][ T6308] block nbd3: shutting down sockets [ 215.714591][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.714906][ C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.715517][ C2] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.715632][ C2] Buffer I/O error on dev nbd3, logical block 2, async page read [ 215.715786][ C2] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.715810][ C2] Buffer I/O error on dev nbd3, logical block 3, async page read [ 215.718340][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 215.738410][ C1] Buffer I/O error on dev nbd3, logical block 1, async page read [ 215.742777][ T5972] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.746502][ T5972] Buffer I/O error on dev nbd3, logical block 0, async page read [ 215.749517][ T5972] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.751741][ T842] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 215.754347][ T5972] Buffer I/O error on dev nbd3, logical block 1, async page read [ 215.758869][ T5972] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.762600][ T5972] Buffer I/O error on dev nbd3, logical block 2, async page read [ 215.765938][ T5972] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.769801][ T5972] Buffer I/O error on dev nbd3, logical block 3, async page read [ 215.774662][ T5972] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.778228][ T5972] Buffer I/O error on dev nbd3, logical block 0, async page read [ 215.781139][ T5972] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.785502][ T5972] Buffer I/O error on dev nbd3, logical block 1, async page read [ 215.790643][ T5972] ldm_validate_partition_table(): Disk read failed. [ 215.795011][ T5972] Dev nbd3: unable to read RDB block 0 [ 215.798969][ T5972] nbd3: unable to read partition table [ 215.806661][ T5972] ldm_validate_partition_table(): Disk read failed. [ 215.810623][ T5972] Dev nbd3: unable to read RDB block 0 [ 215.815022][ T5972] nbd3: unable to read partition table [ 215.902146][ T842] usb 7-1: Using ep0 maxpacket: 32 [ 215.907684][ T842] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 215.914316][ T842] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 215.918027][ T842] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 215.921334][ T842] usb 7-1: Product: syz [ 215.923796][ T842] usb 7-1: Manufacturer: syz [ 215.925779][ T842] usb 7-1: SerialNumber: syz [ 215.931412][ T842] usb 7-1: config 0 descriptor?? [ 215.934709][ T6298] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 215.939829][ T842] hub 7-1:0.0: bad descriptor, ignoring hub [ 215.942614][ T842] hub 7-1:0.0: probe with driver hub failed with error -5 [ 215.963025][ T6323] lo speed is unknown, defaulting to 1000 [ 216.004605][ T6324] SQUASHFS error: Failed to read block 0x0: -5 [ 216.007401][ T6324] unable to read squashfs_super_block [ 216.144818][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'. [ 216.144849][ T40] audit: type=1400 audit(1760483603.280:306): avc: denied { mounton } for pid=6326 comm="syz.3.84" path="/22/file0" dev="tmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 216.144864][ T6327] tmpfs: Bad value for 'mpol' [ 216.147773][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'. [ 216.430351][ T6341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6341 comm=syz.3.89 [ 216.431192][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 216.485722][ T5971] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 216.489699][ T5971] Bluetooth: hci1: Injecting HCI hardware error event [ 216.493278][ T5966] Bluetooth: hci1: hardware error 0x00 [ 216.585908][ T40] audit: type=1400 audit(1760483603.720:307): avc: denied { setopt } for pid=6336 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 216.593480][ T40] audit: type=1400 audit(1760483603.720:308): avc: denied { write } for pid=6336 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 216.600849][ T40] audit: type=1400 audit(1760483603.720:309): avc: denied { read } for pid=6336 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 216.755791][ T40] audit: type=1400 audit(1760483603.890:310): avc: denied { name_bind } for pid=6358 comm="syz.1.94" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 216.797584][ T40] audit: type=1400 audit(1760483603.930:311): avc: denied { bind } for pid=6361 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 216.802237][ T6362] netlink: 72 bytes leftover after parsing attributes in process `syz.1.95'. [ 216.804722][ T40] audit: type=1400 audit(1760483603.930:312): avc: denied { getopt } for pid=6361 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 216.809391][ T6362] overlayfs: regular lower layers cannot follow data lower layers [ 216.818563][ T40] audit: type=1400 audit(1760483603.950:313): avc: denied { write } for pid=6361 comm="syz.1.95" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 216.821853][ T53] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 216.971779][ T53] usb 8-1: Using ep0 maxpacket: 32 [ 216.975105][ T53] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 216.978382][ T53] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 216.982274][ T53] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 216.985714][ T53] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 216.991460][ T53] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 216.994468][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.997021][ T53] usb 8-1: Product: syz [ 216.998317][ T53] usb 8-1: Manufacturer: syz [ 216.999807][ T53] usb 8-1: SerialNumber: syz [ 217.008466][ C3] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 217.013168][ T53] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input6 [ 217.221798][ T53] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 217.224156][ T53] (id 0x00) [ 217.281722][ T53] rc_core: IR keymap rc-imon-pad not found [ 217.283981][ T53] Registered IR keymap rc-empty [ 217.286008][ T53] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 217.289232][ T53] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 217.322509][ T53] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 217.327563][ T53] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input7 [ 217.334943][ T53] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:3> initialized [ 217.561196][ T53] usb 8-1: USB disconnect, device number 3 [ 217.610940][ T6380] ntfs3(nbd3): try to read out of volume at offset 0x0 [ 218.031847][ T53] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 218.183622][ T53] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 218.186785][ T53] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.191415][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 218.195783][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 218.200099][ T53] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.205242][ T53] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.208836][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.214061][ T53] usb 8-1: config 0 descriptor?? [ 218.221765][ T6023] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 218.222114][ T6389] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 218.381752][ T6023] usb 6-1: Using ep0 maxpacket: 16 [ 218.385758][ T6023] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 218.389801][ T6023] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 218.393924][ T6023] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.399207][ T6023] usb 6-1: config 1 interface 0 has no altsetting 0 [ 218.405963][ T6023] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 218.409798][ T6023] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.413217][ T6023] usb 6-1: Product: syz [ 218.414947][ T6023] usb 6-1: Manufacturer: syz [ 218.416871][ T6023] usb 6-1: SerialNumber: syz [ 218.426141][ T6397] 9pnet_virtio: no channels available for device syz [ 218.430222][ T6397] 9pnet_virtio: no channels available for device syz [ 218.433173][ T6397] 9pnet_virtio: no channels available for device syz [ 218.435984][ T6397] 9pnet_virtio: no channels available for device syz [ 218.438988][ T6397] 9pnet_virtio: no channels available for device syz [ 218.441894][ T6397] 9pnet_virtio: no channels available for device syz [ 218.444727][ T6397] 9pnet_virtio: no channels available for device syz [ 218.448050][ T6397] 9pnet_virtio: no channels available for device syz [ 218.451358][ T6397] 9pnet_virtio: no channels available for device syz [ 218.454617][ T6397] 9pnet_virtio: no channels available for device syz [ 218.457943][ T6397] 9pnet_virtio: no channels available for device syz [ 218.461323][ T6397] 9pnet_virtio: no channels available for device syz [ 218.464045][ T6397] 9pnet_virtio: no channels available for device syz [ 218.466695][ T6397] 9pnet_virtio: no channels available for device syz [ 218.469484][ T6397] 9pnet_virtio: no channels available for device syz [ 218.472344][ T6397] 9pnet_virtio: no channels available for device syz [ 218.475850][ T6397] 9pnet_virtio: no channels available for device syz [ 218.479790][ T6397] 9pnet_virtio: no channels available for device syz [ 218.483568][ T6397] 9pnet_virtio: no channels available for device syz [ 218.486745][ T6397] 9pnet_virtio: no channels available for device syz [ 218.489402][ T6397] 9pnet_virtio: no channels available for device syz [ 218.492071][ T6397] 9pnet_virtio: no channels available for device syz [ 218.495597][ T6397] 9pnet_virtio: no channels available for device syz [ 218.499899][ T6397] 9pnet_virtio: no channels available for device syz [ 218.501983][ T6024] usb 7-1: USB disconnect, device number 3 [ 218.503928][ T6397] 9pnet_virtio: no channels available for device syz [ 218.507421][ T6397] 9pnet_virtio: no channels available for device syz [ 218.510540][ T6397] 9pnet_virtio: no channels available for device syz [ 218.515312][ T6397] 9pnet_virtio: no channels available for device syz [ 218.519081][ T6397] 9pnet_virtio: no channels available for device syz [ 218.522733][ T6397] 9pnet_virtio: no channels available for device syz [ 218.526435][ T6397] 9pnet_virtio: no channels available for device syz [ 218.530686][ T6397] 9pnet_virtio: no channels available for device syz [ 218.561947][ T5966] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 218.629115][ T6023] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 218.636451][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 218.640219][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 218.643402][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 218.645770][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 218.652107][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 218.654636][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 218.668586][ T53] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 218.684105][ T6415] libceph: resolve '40' (ret=-3): failed [ 218.838174][ T6389] capability: warning: `syz.3.102' uses deprecated v2 capabilities in a way that may be insecure [ 218.848071][ T6023] usb 8-1: USB disconnect, device number 4 [ 219.101507][ T6426] binder: 6425:6426 ioctl c0306201 200000000540 returned -22 [ 219.113297][ T6426] hpfs: Bad magic ... probably not HPFS [ 219.291402][ T6436] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 219.297062][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'. [ 220.053975][ T6503] capability: warning: `syz.3.130' uses 32-bit capabilities (legacy support in use) [ 220.057481][ T6503] netlink: 'syz.3.130': attribute type 29 has an invalid length. [ 220.086070][ T6509] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20000 [ 220.090113][ T6510] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20000 [ 220.094418][ T6510] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20004 [ 220.146389][ T6515] mmap: syz.2.134 (6515) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 220.254089][ T6525] syz.2.139 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 220.361834][ T6024] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 220.371551][ T6534] Bluetooth: MGMT ver 1.23 [ 220.381243][ T6536] ptrace attach of "/syz-executor exec"[5963] was attempted by "/syz-executor exec"[6536] [ 220.436936][ T6541] bond1: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 220.443425][ T6541] bond1 (unregistering): Released all slaves [ 220.482498][ T6545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.145'. [ 220.485642][ T6545] netem: change failed [ 220.527663][ T6024] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 220.531379][ T6024] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 220.537164][ T6024] usb 8-1: Product: syz [ 220.541560][ T6024] usb 8-1: Manufacturer: syz [ 220.543335][ T6024] usb 8-1: SerialNumber: syz [ 220.544170][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 220.544179][ T40] audit: type=1400 audit(1760483607.680:352): avc: denied { remount } for pid=6549 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 220.544198][ T6550] tmpfs: Unknown parameter 'appraise' [ 220.546081][ T6024] usb 8-1: config 0 descriptor?? [ 220.562733][ T6024] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 220.571391][ T6024] dvb-usb: bulk message failed: -22 (2/0) [ 220.575728][ T6024] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 220.579068][ T6024] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 220.581578][ T6024] usb 8-1: media controller created [ 220.590823][ T6024] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 220.702677][ T6559] lo speed is unknown, defaulting to 1000 [ 220.763243][ T6513] cxusb: i2c wr: len=80 is too big! [ 220.763243][ T6513] [ 220.789614][ T6024] cxusb: set interface failed [ 220.791610][ T6024] dvb-usb: bulk message failed: -22 (1/0) [ 220.810576][ T6024] DVB: Unable to find symbol mt352_attach() [ 220.813196][ T6024] dvb-usb: bulk message failed: -22 (5/0) [ 220.815295][ T6024] zl10353_read_register: readreg error (reg=127, ret==-121) [ 220.817593][ T6024] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 220.828158][ T40] audit: type=1400 audit(1760483607.960:353): avc: denied { read } for pid=6565 comm="syz.0.150" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 220.835453][ T40] audit: type=1400 audit(1760483607.960:354): avc: denied { open } for pid=6565 comm="syz.0.150" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 220.861728][ T6024] rc_core: IR keymap rc-dvico-mce not found [ 220.863547][ T6024] Registered IR keymap rc-empty [ 220.865808][ T6024] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 220.869590][ T6024] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input8 [ 220.876477][ T6024] dvb-usb: schedule remote query interval to 100 msecs. [ 220.878654][ T6024] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 220.883415][ T6024] usb 8-1: USB disconnect, device number 5 [ 220.913883][ T40] audit: type=1326 audit(1760483608.050:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6574 comm="syz.0.152" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f894ff8eec9 code=0x0 [ 220.919081][ T6024] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 221.016246][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'. [ 221.140571][ T6577] team0: Port device team_slave_0 removed [ 221.192859][ T6592] binder: 6591:6592 ioctl c0306201 200000000540 returned -22 [ 221.222819][ T40] audit: type=1400 audit(1760483608.360:356): avc: denied { name_bind } for pid=6596 comm="syz.2.158" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 221.265181][ T40] audit: type=1400 audit(1760483608.400:357): avc: denied { append } for pid=6599 comm="syz.2.159" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 221.267905][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.159'. [ 221.375762][ T6603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.434005][ T40] audit: type=1400 audit(1760483608.570:358): avc: denied { write } for pid=6613 comm="syz.3.164" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 221.441188][ T40] audit: type=1400 audit(1760483608.570:359): avc: denied { ioctl } for pid=6613 comm="syz.3.164" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 221.671773][ T6024] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 221.781730][ T40] audit: type=1400 audit(1760483608.910:360): avc: denied { name_connect } for pid=6624 comm="syz.0.168" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 221.824020][ T40] audit: type=1400 audit(1760483608.960:361): avc: denied { unlink } for pid=6626 comm="syz.0.169" name="#1" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 221.833457][ T6024] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 221.836200][ T6024] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 221.839393][ T6024] usb 8-1: config 0 interface 0 has no altsetting 0 [ 221.843509][ T6024] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 221.846372][ T6024] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 221.848868][ T6024] usb 8-1: Product: syz [ 221.850165][ T6024] usb 8-1: Manufacturer: syz [ 221.851613][ T6024] usb 8-1: SerialNumber: syz [ 221.855606][ T6024] usb 8-1: config 0 descriptor?? [ 221.860792][ T6024] hub 8-1:0.0: bad descriptor, ignoring hub [ 221.863212][ T6024] hub 8-1:0.0: probe with driver hub failed with error -5 [ 221.866912][ T6024] usb 8-1: selecting invalid altsetting 0 [ 221.922150][ T842] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 222.292690][ T6614] usb 8-1: reset high-speed USB device number 6 using dummy_hcd [ 222.386977][ T6632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.647256][ T6614] usb 8-1: failed to restore interface 0 altsetting 251 (error=-71) [ 222.651643][ T6023] usb 8-1: USB disconnect, device number 6 [ 222.728072][ T6636] netlink: 'syz.0.172': attribute type 1 has an invalid length. [ 222.742616][ T6636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.776026][ T6636] veth3: entered promiscuous mode [ 222.781500][ T6636] bond1: (slave veth3): Enslaving as an active interface with a down link [ 222.795382][ T6636] vlan2: entered allmulticast mode [ 222.797684][ T6636] bond1: entered allmulticast mode [ 222.801177][ T6636] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 223.019051][ T6644] netlink: 'syz.2.175': attribute type 2 has an invalid length. [ 223.351823][ T6365] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 223.400611][ T6657] netlink: 'syz.3.179': attribute type 10 has an invalid length. [ 223.412572][ T6657] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 223.418321][ T6656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.481809][ T6365] usb 5-1: device descriptor read/64, error -71 [ 223.721804][ T6365] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 223.861845][ T6365] usb 5-1: device descriptor read/64, error -71 [ 223.923805][ T6391] usblp0:failed reading printer status (-110) [ 223.943095][ T842] usb 6-1: USB disconnect, device number 3 [ 223.950181][ T842] usblp0: removed [ 223.973185][ T6365] usb usb5-port1: attempt power cycle [ 224.018507][ T6671] GUP no longer grows the stack in syz.1.185 (6671): 200000ffe000-200001000000 (200000ffa000) [ 224.023929][ T6671] CPU: 1 UID: 0 PID: 6671 Comm: syz.1.185 Not tainted syzkaller #0 PREEMPT(full) [ 224.023954][ T6671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 224.023966][ T6671] Call Trace: [ 224.023974][ T6671] [ 224.023981][ T6671] dump_stack_lvl+0x16c/0x1f0 [ 224.024027][ T6671] gup_vma_lookup+0x1d2/0x220 [ 224.024056][ T6671] __get_user_pages+0x241/0x3530 [ 224.024092][ T6671] ? find_held_lock+0x2b/0x80 [ 224.024111][ T6671] ? __pfx___get_user_pages+0x10/0x10 [ 224.024183][ T6671] get_user_pages_remote+0x243/0xab0 [ 224.024213][ T6671] ? mast_spanning_rebalance.isra.0+0x2060/0x2060 [ 224.024240][ T6671] ? __pfx_get_user_pages_remote+0x10/0x10 [ 224.024280][ T6671] __access_remote_vm+0x250/0xaa0 [ 224.024317][ T6671] ? do_raw_spin_lock+0x12c/0x2b0 [ 224.024345][ T6671] ? __pfx___access_remote_vm+0x10/0x10 [ 224.024371][ T6671] ? environ_read+0x214/0x450 [ 224.024400][ T6671] environ_read+0x31e/0x450 [ 224.024427][ T6671] ? __pfx_environ_read+0x10/0x10 [ 224.024452][ T6671] vfs_read+0x1e4/0xcf0 [ 224.024478][ T6671] ? __pfx___mutex_lock+0x10/0x10 [ 224.024502][ T6671] ? __pfx_vfs_read+0x10/0x10 [ 224.024531][ T6671] ? __fget_files+0x20e/0x3c0 [ 224.024563][ T6671] ksys_read+0x12a/0x250 [ 224.024609][ T6671] ? __pfx_ksys_read+0x10/0x10 [ 224.024632][ T6671] ? fput+0x9b/0xd0 [ 224.024653][ T6671] do_syscall_64+0xcd/0xfa0 [ 224.024680][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.024699][ T6671] RIP: 0033:0x7f786918eec9 [ 224.024715][ T6671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.024732][ T6671] RSP: 002b:00007f7869fa4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 224.024750][ T6671] RAX: ffffffffffffffda RBX: 00007f78693e5fa0 RCX: 00007f786918eec9 [ 224.024761][ T6671] RDX: 0000000000002020 RSI: 00002000000037c0 RDI: 0000000000000005 [ 224.024772][ T6671] RBP: 00007f7869211f91 R08: 0000000000000000 R09: 0000000000000000 [ 224.024782][ T6671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.024792][ T6671] R13: 00007f78693e6038 R14: 00007f78693e5fa0 R15: 00007ffcfcc34568 [ 224.024819][ T6671] [ 224.322032][ T6365] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 224.343187][ T6365] usb 5-1: device descriptor read/8, error -71 [ 224.371379][ T6686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.188'. [ 224.372593][ T6688] process 'syz.3.189' launched '/dev/fd/4' with NULL argv: empty string added [ 224.431052][ T6694] Mount JFS Failure: -22 [ 224.463895][ T6686] team0: Port device team_slave_0 removed [ 224.470892][ T6690] veth1_macvtap: left promiscuous mode [ 224.473516][ T6690] macsec0: entered promiscuous mode [ 224.475696][ T6690] macsec0: entered allmulticast mode [ 224.575509][ T6702] netlink: 'syz.2.194': attribute type 10 has an invalid length. [ 224.578466][ T6702] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.581796][ T6702] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.582046][ T6365] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 224.592343][ T6702] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.594616][ T6702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.597395][ T6702] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.599650][ T6702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.606682][ T6702] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 224.610846][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.194'. [ 224.612531][ T6365] usb 5-1: device descriptor read/8, error -71 [ 224.613754][ T6702] bridge_slave_1: left allmulticast mode [ 224.617985][ T6702] bridge_slave_1: left promiscuous mode [ 224.619835][ T6702] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.624216][ T6702] bridge_slave_0: left allmulticast mode [ 224.626206][ T6702] bridge_slave_0: left promiscuous mode [ 224.628085][ T6702] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.639263][ T6702] bond0: (slave bridge0): Releasing backup interface [ 224.691851][ T6023] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 224.722102][ T6365] usb usb5-port1: unable to enumerate USB device [ 224.832245][ T6023] usb 8-1: device descriptor read/64, error -71 [ 224.939693][ T6723] netlink: zone id is out of range [ 224.994805][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.201'. [ 225.082696][ T6023] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 225.121185][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'. [ 225.221774][ T6023] usb 8-1: device descriptor read/64, error -71 [ 225.242703][ T6750] program syz.2.207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.332263][ T6023] usb usb8-port1: attempt power cycle [ 225.441829][ T840] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 225.599916][ T6761] netlink: 'syz.2.212': attribute type 10 has an invalid length. [ 225.605347][ T6761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.615088][ T6761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.621500][ T6761] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 225.621775][ T840] usb 6-1: Using ep0 maxpacket: 16 [ 225.630325][ T840] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 225.633702][ T840] usb 6-1: config 0 has no interface number 0 [ 225.636159][ T840] usb 6-1: config 0 interface 48 has no altsetting 0 [ 225.640697][ T840] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 225.644371][ T840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.647617][ T840] usb 6-1: Product: syz [ 225.649637][ T840] usb 6-1: Manufacturer: syz [ 225.651521][ T840] usb 6-1: SerialNumber: syz [ 225.656902][ T840] usb 6-1: config 0 descriptor?? [ 225.681852][ T6023] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 225.702468][ T6023] usb 8-1: device descriptor read/8, error -71 [ 225.864130][ T6749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.868271][ T6749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.872427][ T5966] Bluetooth: hci3: Unknown advertising packet type: 0x35 [ 225.872471][ T5966] Bluetooth: hci3: Malformed LE Event: 0x0d [ 225.874380][ T60] usb 6-1: USB disconnect, device number 4 [ 225.875525][ T5966] Bluetooth: hci3: unexpected event 0x2f length: 1017 > 260 [ 225.951799][ T6023] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 225.972484][ T6023] usb 8-1: device descriptor read/8, error -71 [ 226.083197][ T6023] usb usb8-port1: unable to enumerate USB device [ 226.152705][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 226.152716][ T40] audit: type=1400 audit(1760483613.290:381): avc: denied { setopt } for pid=6768 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 226.152811][ T6769] x_tables: duplicate underflow at hook 2 [ 226.205843][ T40] audit: type=1400 audit(1760483613.340:382): avc: denied { create } for pid=6770 comm="syz.0.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 226.207044][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'. [ 226.215904][ T6771] bridge_slave_1: left allmulticast mode [ 226.217887][ T6771] bridge_slave_1: left promiscuous mode [ 226.219919][ T6771] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.225091][ T6771] bridge_slave_0: left allmulticast mode [ 226.226892][ T6771] bridge_slave_0: left promiscuous mode [ 226.228639][ T6771] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.575193][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'. [ 226.849100][ T40] audit: type=1400 audit(1760483613.980:383): avc: denied { write } for pid=6802 comm="syz.0.225" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 226.858389][ T40] audit: type=1400 audit(1760483613.980:384): avc: denied { open } for pid=6802 comm="syz.0.225" path="/35/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 226.867049][ T40] audit: type=1400 audit(1760483613.980:385): avc: denied { ioctl } for pid=6802 comm="syz.0.225" path="/35/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 226.899723][ T40] audit: type=1400 audit(1760483614.030:386): avc: denied { lock } for pid=6807 comm="syz.0.226" path="socket:[13787]" dev="sockfs" ino=13787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 226.907767][ T40] audit: type=1400 audit(1760483614.040:387): avc: denied { getopt } for pid=6807 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 226.934203][ T40] audit: type=1400 audit(1760483614.070:388): avc: denied { wake_alarm } for pid=6809 comm="syz.2.227" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 226.945155][ T40] audit: type=1400 audit(1760483614.080:389): avc: denied { bind } for pid=6812 comm="syz.0.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 226.969037][ T6813] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.058325][ T6813] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.138147][ T6813] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.188929][ T6824] overlay: Bad value for 'workdir' [ 227.224402][ T6813] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.327219][ T1146] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.339552][ T1146] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.351268][ T1146] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.362747][ T1146] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.515385][ T40] audit: type=1400 audit(1760483614.650:390): avc: denied { read } for pid=6836 comm="syz.3.237" name="usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 227.618599][ T6849] overlayfs: missing 'lowerdir' [ 227.621963][ T6849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'. [ 227.727775][ T6857] binder: 6856:6857 ioctl 80044940 200000000200 returned -22 [ 227.730875][ T6858] netlink: 96 bytes leftover after parsing attributes in process `syz.2.240'. [ 227.734174][ T6857] tmpfs: Unknown parameter 'Qpol' [ 227.872017][ T6867] binder: 6866:6867 ioctl c0306201 200000000640 returned -22 [ 227.875582][ T6867] libceph: resolve '4' (ret=-3): failed [ 227.899764][ T6867] binder: 6866:6867 ioctl c018620c 200000000040 returned -1 [ 227.904944][ T6867] binder: 6866:6867 ioctl 4b48 200000000680 returned -22 [ 227.955142][ T6871] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 227.965663][ T6871] CIFS mount error: No usable UNC path provided in device string! [ 227.965663][ T6871] [ 227.971159][ T6871] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 228.083481][ T6875] netlink: 28 bytes leftover after parsing attributes in process `syz.3.247'. [ 228.089227][ T6875] netlink: 28 bytes leftover after parsing attributes in process `syz.3.247'. [ 228.164856][ T6879] fuse: Bad value for 'fd' [ 228.295342][ T6883] ================================================================== [ 228.298835][ T6883] BUG: KASAN: slab-out-of-bounds in __cpa_addr+0x1d3/0x220 [ 228.301880][ T6883] Read of size 8 at addr ffff888029cbc188 by task syz.3.252/6883 [ 228.307059][ T6883] [ 228.308088][ T6883] CPU: 2 UID: 60928 PID: 6883 Comm: syz.3.252 Not tainted syzkaller #0 PREEMPT(full) [ 228.308113][ T6883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 228.308125][ T6883] Call Trace: [ 228.308132][ T6883] [ 228.308139][ T6883] dump_stack_lvl+0x116/0x1f0 [ 228.308176][ T6883] print_report+0xcd/0x630 [ 228.308204][ T6883] ? __virt_addr_valid+0x81/0x610 [ 228.308225][ T6883] ? __phys_addr+0xe8/0x180 [ 228.308248][ T6883] ? __cpa_addr+0x1d3/0x220 [ 228.308269][ T6883] kasan_report+0xe0/0x110 [ 228.308294][ T6883] ? __cpa_addr+0x1d3/0x220 [ 228.308319][ T6883] __cpa_addr+0x1d3/0x220 [ 228.308340][ T6883] cpa_flush+0x28b/0x8a0 [ 228.308364][ T6883] ? __pfx_cpa_flush+0x10/0x10 [ 228.308387][ T6883] ? pgprot2cachemode+0x9a/0x130 [ 228.308405][ T6883] ? __pfx_pgprot2cachemode+0x10/0x10 [ 228.308421][ T6883] ? drm_gem_get_pages+0x6a0/0xa10 [ 228.308460][ T6883] change_page_attr_set_clr+0x34e/0x4a0 [ 228.308489][ T6883] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 228.308521][ T6883] _set_pages_array+0x1ab/0x2c0 [ 228.308547][ T6883] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 228.308568][ T6883] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 228.308590][ T6883] ? __pfx___might_resched+0x10/0x10 [ 228.308609][ T6883] drm_gem_shmem_mmap+0xc9/0x550 [ 228.308628][ T6883] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 228.308651][ T6883] drm_gem_mmap_obj+0x1b5/0x560 [ 228.308676][ T6883] drm_gem_mmap+0x40b/0x620 [ 228.308700][ T6883] ? __pfx_drm_gem_mmap+0x10/0x10 [ 228.308721][ T6883] ? vm_area_alloc+0x1f/0x160 [ 228.308738][ T6883] ? lockdep_init_map_type+0x5c/0x280 [ 228.308762][ T6883] __mmap_region+0x1309/0x27a0 [ 228.308784][ T6883] ? __pfx___mmap_region+0x10/0x10 [ 228.308805][ T6883] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 228.308834][ T6883] ? audit_log_end+0x1f/0x30 [ 228.308857][ T6883] ? audit_log_end+0x1f/0x30 [ 228.308879][ T6883] ? common_lsm_audit+0x260/0x300 [ 228.308930][ T6883] ? __lock_acquire+0xb8a/0x1c90 [ 228.308955][ T6883] mmap_region+0x32b/0x3f0 [ 228.308977][ T6883] do_mmap+0xa3e/0x1210 [ 228.309003][ T6883] ? __pfx_do_mmap+0x10/0x10 [ 228.309028][ T6883] ? __pfx_down_write_killable+0x10/0x10 [ 228.309057][ T6883] vm_mmap_pgoff+0x29e/0x470 [ 228.309084][ T6883] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 228.309112][ T6883] ? __fget_files+0x20e/0x3c0 [ 228.309138][ T6883] ksys_mmap_pgoff+0x32c/0x5c0 [ 228.309163][ T6883] __x64_sys_mmap+0x125/0x190 [ 228.309185][ T6883] do_syscall_64+0xcd/0xfa0 [ 228.309209][ T6883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.309234][ T6883] RIP: 0033:0x7f0ce6f8eec9 [ 228.309251][ T6883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.309270][ T6883] RSP: 002b:00007f0ce7e05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 228.309289][ T6883] RAX: ffffffffffffffda RBX: 00007f0ce71e5fa0 RCX: 00007f0ce6f8eec9 [ 228.309302][ T6883] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 228.309314][ T6883] RBP: 00007f0ce7011f91 R08: 0000000000000003 R09: 0000000100000000 [ 228.309326][ T6883] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 228.309338][ T6883] R13: 00007f0ce71e6038 R14: 00007f0ce71e5fa0 R15: 00007ffd9fcb1d08 [ 228.309357][ T6883] [ 228.309364][ T6883] [ 228.440507][ T6883] Allocated by task 6883: [ 228.442333][ T6883] kasan_save_stack+0x33/0x60 [ 228.444334][ T6883] kasan_save_track+0x14/0x30 [ 228.446357][ T6883] __kasan_kmalloc+0xaa/0xb0 [ 228.448125][ T6883] __kvmalloc_node_noprof+0x3a3/0x9c0 [ 228.450373][ T6883] drm_gem_get_pages+0x144/0xa10 [ 228.452418][ T6883] drm_gem_shmem_get_pages_locked+0x1e6/0x490 [ 228.454922][ T6883] drm_gem_shmem_mmap+0xc9/0x550 [ 228.456929][ T6883] drm_gem_mmap_obj+0x1b5/0x560 [ 228.458848][ T6883] drm_gem_mmap+0x40b/0x620 [ 228.460664][ T6883] __mmap_region+0x1309/0x27a0 [ 228.462601][ T6883] mmap_region+0x32b/0x3f0 [ 228.464461][ T6883] do_mmap+0xa3e/0x1210 [ 228.466255][ T6883] vm_mmap_pgoff+0x29e/0x470 [ 228.468151][ T6883] ksys_mmap_pgoff+0x32c/0x5c0 [ 228.470074][ T6883] __x64_sys_mmap+0x125/0x190 [ 228.471912][ T6883] do_syscall_64+0xcd/0xfa0 [ 228.473801][ T6883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.476169][ T6883] [ 228.477151][ T6883] The buggy address belongs to the object at ffff888029cbc100 [ 228.477151][ T6883] which belongs to the cache kmalloc-192 of size 192 [ 228.482566][ T6883] The buggy address is located 0 bytes to the right of [ 228.482566][ T6883] allocated 136-byte region [ffff888029cbc100, ffff888029cbc188) [ 228.488477][ T6883] [ 228.489506][ T6883] The buggy address belongs to the physical page: [ 228.492209][ T6883] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29cbc [ 228.495785][ T6883] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 228.498745][ T6883] page_type: f5(slab) [ 228.500373][ T6883] raw: 00fff00000000000 ffff88801b4423c0 ffffea0001583ac0 dead000000000002 [ 228.503691][ T6883] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 228.506979][ T6883] page dumped because: kasan: bad access detected [ 228.509434][ T6883] page_owner tracks the page as allocated [ 228.511735][ T6883] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 13311811731, free_ts 12004484421 [ 228.518899][ T6883] post_alloc_hook+0x1c0/0x230 [ 228.520829][ T6883] get_page_from_freelist+0x10a3/0x3a30 [ 228.523118][ T6883] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 228.525616][ T6883] alloc_pages_mpol+0x1fb/0x550 [ 228.527673][ T6883] new_slab+0x24a/0x360 [ 228.529422][ T6883] ___slab_alloc+0xdc4/0x1ae0 [ 228.531381][ T6883] __slab_alloc.constprop.0+0x63/0x110 [ 228.533602][ T6883] __kmalloc_cache_noprof+0x477/0x780 [ 228.535849][ T6883] call_usermodehelper_setup+0xaf/0x360 [ 228.538160][ T6883] kobject_uevent_env+0x1690/0x1870 [ 228.540241][ T6883] driver_bound+0x164/0x230 [ 228.542115][ T6883] really_probe+0x62b/0xa90 [ 228.544029][ T6883] __driver_probe_device+0x1de/0x440 [ 228.546368][ T6883] driver_probe_device+0x4c/0x1b0 [ 228.548478][ T6883] __device_attach_driver+0x1df/0x310 [ 228.550781][ T6883] bus_for_each_drv+0x159/0x1e0 [ 228.552822][ T6883] page last free pid 55 tgid 55 stack trace: [ 228.555380][ T6883] __free_frozen_pages+0x7df/0x1160 [ 228.557493][ T6883] vfree+0x1fd/0xb50 [ 228.559134][ T6883] delayed_vfree_work+0x56/0x70 [ 228.561162][ T6883] process_one_work+0x9cf/0x1b70 [ 228.563366][ T6883] worker_thread+0x6c8/0xf10 [ 228.565322][ T6883] kthread+0x3c5/0x780 [ 228.567013][ T6883] ret_from_fork+0x675/0x7d0 [ 228.568959][ T6883] ret_from_fork_asm+0x1a/0x30 [ 228.570948][ T6883] [ 228.571935][ T6883] Memory state around the buggy address: [ 228.574366][ T6883] ffff888029cbc080: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 228.577754][ T6883] ffff888029cbc100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 228.581000][ T6883] >ffff888029cbc180: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 228.584321][ T6883] ^ [ 228.586190][ T6883] ffff888029cbc200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 228.589497][ T6883] ffff888029cbc280: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 228.592663][ T6883] ================================================================== [ 228.595968][ C2] vkms_vblank_simulate: vblank timer overrun [ 228.604338][ T6883] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 228.607221][ T6883] CPU: 0 UID: 60928 PID: 6883 Comm: syz.3.252 Not tainted syzkaller #0 PREEMPT(full) [ 228.610296][ T6883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 228.613709][ T6883] Call Trace: [ 228.614816][ T6883] [ 228.615921][ T6883] dump_stack_lvl+0x3d/0x1f0 [ 228.617817][ T6883] vpanic+0x640/0x6f0 [ 228.619132][ T6883] panic+0xca/0xd0 [ 228.620347][ T6883] ? __pfx_panic+0x10/0x10 [ 228.621794][ T6883] ? __cpa_addr+0x1d3/0x220 [ 228.623216][ T6883] ? preempt_schedule_common+0x44/0xc0 [ 228.624949][ T6883] ? preempt_schedule_thunk+0x16/0x30 [ 228.626606][ T6883] check_panic_on_warn+0xab/0xb0 [ 228.628065][ T6883] end_report+0x107/0x170 [ 228.629428][ T6883] kasan_report+0xee/0x110 [ 228.630862][ T6883] ? __cpa_addr+0x1d3/0x220 [ 228.632345][ T6883] __cpa_addr+0x1d3/0x220 [ 228.633724][ T6883] cpa_flush+0x28b/0x8a0 [ 228.635054][ T6883] ? __pfx_cpa_flush+0x10/0x10 [ 228.636590][ T6883] ? pgprot2cachemode+0x9a/0x130 [ 228.638130][ T6883] ? __pfx_pgprot2cachemode+0x10/0x10 [ 228.640014][ T6883] ? drm_gem_get_pages+0x6a0/0xa10 [ 228.642186][ T6883] change_page_attr_set_clr+0x34e/0x4a0 [ 228.644552][ T6883] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 228.647209][ T6883] _set_pages_array+0x1ab/0x2c0 [ 228.649293][ T6883] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 228.651840][ T6883] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 228.654579][ T6883] ? __pfx___might_resched+0x10/0x10 [ 228.656794][ T6883] drm_gem_shmem_mmap+0xc9/0x550 [ 228.658867][ T6883] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 228.661558][ T6883] drm_gem_mmap_obj+0x1b5/0x560 [ 228.663600][ T6883] drm_gem_mmap+0x40b/0x620 [ 228.665553][ T6883] ? __pfx_drm_gem_mmap+0x10/0x10 [ 228.667684][ T6883] ? vm_area_alloc+0x1f/0x160 [ 228.669689][ T6883] ? lockdep_init_map_type+0x5c/0x280 [ 228.671964][ T6883] __mmap_region+0x1309/0x27a0 [ 228.673745][ T6883] ? __pfx___mmap_region+0x10/0x10 [ 228.675473][ T6883] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 228.677374][ T6883] ? audit_log_end+0x1f/0x30 [ 228.678853][ T6883] ? audit_log_end+0x1f/0x30 [ 228.680328][ T6883] ? common_lsm_audit+0x260/0x300 [ 228.681979][ T6883] ? __lock_acquire+0xb8a/0x1c90 [ 228.683551][ T6883] mmap_region+0x32b/0x3f0 [ 228.685002][ T6883] do_mmap+0xa3e/0x1210 [ 228.686381][ T6883] ? __pfx_do_mmap+0x10/0x10 [ 228.687849][ T6883] ? __pfx_down_write_killable+0x10/0x10 [ 228.689631][ T6883] vm_mmap_pgoff+0x29e/0x470 [ 228.691101][ T6883] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 228.692776][ T6883] ? __fget_files+0x20e/0x3c0 [ 228.694280][ T6883] ksys_mmap_pgoff+0x32c/0x5c0 [ 228.695831][ T6883] __x64_sys_mmap+0x125/0x190 [ 228.697325][ T6883] do_syscall_64+0xcd/0xfa0 [ 228.698769][ T6883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.700579][ T6883] RIP: 0033:0x7f0ce6f8eec9 [ 228.702034][ T6883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.707997][ T6883] RSP: 002b:00007f0ce7e05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 228.711329][ T6883] RAX: ffffffffffffffda RBX: 00007f0ce71e5fa0 RCX: 00007f0ce6f8eec9 [ 228.714614][ T6883] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 228.717876][ T6883] RBP: 00007f0ce7011f91 R08: 0000000000000003 R09: 0000000100000000 [ 228.721118][ T6883] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 228.724387][ T6883] R13: 00007f0ce71e6038 R14: 00007f0ce71e5fa0 R15: 00007ffd9fcb1d08 [ 228.727697][ T6883] [ 228.729882][ T6883] Kernel Offset: disabled [ 228.731687][ T6883] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:13:35 Registers: info registers vcpu 0 CPU#0 RAX=0000000000002f23 RBX=ffffffff9ada9a20 RCX=ffffffff9ada9a20 RDX=1ffff92000024f6e RSI=ffffffff8b8ee6a0 RDI=ffffffff8b68c7d2 RBP=0000000000000206 RSP=ffffc90000127b28 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff90832dd7 R11=0000000000002bd1 R12=dffffc0000000000 R13=00000000000d41d8 R14=ffff888039e68e80 R15=1ffff92000024f6e RIP=ffffffff8b6612b0 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69d9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c421566 CR3=0000000031cc0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006800000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 00000f8000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f895001305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f895001313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89501b74a8 00007f89501b74a0 00007f89501b7498 00007f89501b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8950d1d100 00007f89501b7460 00007f89501b7478 00007f89501b74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89501b74b8 00007f89501b74b0 00007f89501b74a8 00007f89501b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffffffff8e5653a0 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff8216b7a2 RDI=ffffffff8ddafee8 RBP=0000000000000000 RSP=ffffc9000dfef358 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff819919d4 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555579b6500 ffffffff 00c00000 GS =0000 ffff8880d6ad9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555658be808 CR3=0000000057d3c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000000000ff Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7869212fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7869212fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7869212fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7869212fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f786921305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f786921313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78693b74a8 00007f78693b74a0 00007f78693b7498 00007f78693b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7869f1d100 00007f78693b7460 00007f78693b7478 0000000500060006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78693b74b8 00007f78693b74b0 00007f78693b74a8 00007f78693b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85308595 RDI=ffffffff9ae077e0 RBP=ffffffff9ae077a0 RSP=ffffc90007fbedf8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000038 R14=ffffffff9ae077a0 R15=ffffffff85308530 RIP=ffffffff853085bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f0ce7e056c0 ffffffff 00c00000 GS =0000 ffff8880d6bd9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f89501b12f8 CR3=0000000034510000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fec0ff00 Opmask01=000000000000007f Opmask02=00000000fffeff7f Opmask03=0000000020400004 Opmask04=00000000ffff7fff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d64cb86a80 000055d64cb86a80 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 00007ffea3fe8570 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efea8a667f0 00007efea8a667e0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efea83f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff0000000000ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a54d482006131 2a2a7ffc66914c6b ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a15d5 2a2a2a2a2a415943 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 0000000000000000 00007ffea3fe8570 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 400000000000ffff 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73616c632f737973 2f002f7375622f73 39732f002f6d9a8b 7379736275732f73 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f7f7f737f777f77 6f7f7f777f776f7f 7f7f7f7b7f7fffff 7f7f7f7f7d7f6f73 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d64cb495e0 000055d64cb5c4b0 000055d64cb47df0 000055d64cb5bf70 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=ffff88806a73a380 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8b8cb6e0 RDI=ffffffff8bf1e2c0 RBP=ffff88803a5ba040 RSP=ffffc9000deeebb8 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000002 R11=0000000000000001 R12=ffffffff90835e54 R13=1ffff92001bddd79 R14=0000607e25a6bc60 R15=ffff88803a5ba108 RIP=ffffffff818a37a9 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cd9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3f709b CR3=0000000050497000 CR4=00352ef0 DR0=0000000000b8007a DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1e49b850 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcd3812fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcd3812fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcd3812fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcd3812fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcd381305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcd381313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000