last executing test programs: 42.114662967s ago: executing program 3 (id=223): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) rmdir(&(0x7f0000000640)='./file0\x00') sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) 42.024715803s ago: executing program 3 (id=225): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000001340)=0xfffffffffffffffc) preadv(r1, &(0x7f0000002800)=[{&(0x7f0000001400)=""/170, 0xaa}], 0x1, 0x7, 0x8) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000090a05000000000000000000fbff20000900020073797a310000b30008000c"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3}, './file4\x00'}) timer_getoverrun(r0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000000c0)={0x8a001, 0x0, 0x20}, 0x18) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000002c0)={0x48000, 0x0, 0x22}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x90) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x86800, 0x0) connect$pppl2tp(r6, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x4, 0x1, 0x2, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x7f}}}, 0x3a) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000004000000040000000a00000090000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000063ecb9573c2f6e88c0286746f2d70408f9648184193fd76c8edeb557aa46fdbdf85129223e1a07eae4da6b406f941e92ee6d3d48288f977144de1d1e7e9f373af88497ca4fae615cbe26e7a1e238553fe14a6e738dda687f4548a576da592bb4191b67009a6713c0b382ef6ba5f8cbdeb7d0f56faf3eba18d442bb977469a9bf7fb9bb0f4e4390c901000000524d073f5783f548ec5ee45bc06c576ef69e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 41.874513252s ago: executing program 3 (id=229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb, 0x0, 0x0, 0x9800}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1ffffd}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x23d50e}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20000084) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08"], 0x122}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x39, 0x2a, 0x400, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe9, 0x7}, {0xfff3}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x240508c8}, 0x40004) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) close_range(r3, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000074d564b"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'sit0\x00', &(0x7f00000002c0)=@ethtool_channels={0x1, 0x4, 0x3, 0x7, 0x7fff800, 0xffff2010, 0x2, 0x8d01, 0x4}}) 41.754965159s ago: executing program 3 (id=230): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x4c00, 0x3) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) 41.664466071s ago: executing program 3 (id=231): syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) (async) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$hidraw(0x0, 0x0, 0x280) (async) syz_open_dev$hidraw(0x0, 0x0, 0x280) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x6c, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4801}, 0x20000810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x80) socket$inet6(0xa, 0x805, 0x0) (async) r5 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x8080) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x8080) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r6, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) madvise(&(0x7f0000122000/0x1000)=nil, 0x1000, 0x12) (async) madvise(&(0x7f0000122000/0x1000)=nil, 0x1000, 0x12) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42, 0x5c}) 41.41568391s ago: executing program 3 (id=232): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0xa2000) ioctl$CEC_ADAP_G_CAPS(r0, 0xc04c6100, &(0x7f0000000080)) 41.3463113s ago: executing program 32 (id=232): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0xa2000) ioctl$CEC_ADAP_G_CAPS(r0, 0xc04c6100, &(0x7f0000000080)) 1.354574588s ago: executing program 1 (id=479): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) sendmsg$kcm(r1, 0x0, 0x40000) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x2e0, @loopback, 0x2}, 0x1c) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="02000000010001000000000002000500", @ANYRES32=0x0, @ANYBLOB="0400040000000000100006fc9319000000"], 0x2c, 0x1) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000000480)=[{&(0x7f0000000200)=""/145, 0x91}], 0x1, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/41, 0x29}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095", @ANYBLOB="ccedc7e838d66737500842bb74b46a516e4ac7635a668e090ae8074791ce813d652e3d4f5794ad", @ANYRES64=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000d}, 0x94) 1.29482904s ago: executing program 0 (id=483): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0xffffff9c, 0x4) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x3}]}}]}, 0x40}}, 0x0) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x68) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x2, 0x1, 0x4, 0x3}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffc, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000001c80)={0x0, &(0x7f0000001bc0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000001cc0)={0x0, 0x0, r9, 0x0, 0x37, 0x7, 0x8, 0x1ff, {0x1, 0x86c, 0x7ff, 0xd918, 0x1, 0xa14, 0x4, 0x400, 0x3, 0x9, 0xb004, 0x5, 0xc0, 0x800, "4896fcb6c55ac45cea84d38f3656cfeab03839e87848a881a711450ea4fa58ff"}}) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r11 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r11, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r12}) ioctl$DRM_IOCTL_MODE_ATOMIC(r10, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r12], &(0x7f00000003c0)=[0x7], &(0x7f0000000300)=[r13], &(0x7f0000000340)}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000580)={&(0x7f0000000340)=[0x0], &(0x7f0000000380)=[{}, {}, {}, {}, {}], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x6, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000880)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[{}, {}, {}, {}], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0], 0x4, 0x5, 0x9}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000980)={&(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0xe0e0e0e0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000a40)={0x100, 0x3, &(0x7f00000002c0)=[0x0, r7, r9], &(0x7f0000000300)=[0x8, 0x6, 0x2, 0xfffff800], &(0x7f00000009c0)=[r13, r14, 0x0, 0x0, r15, r16], &(0x7f0000000a00)=[0x0, 0xd], 0x0, 0x5}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0xfffffffe, 0x25dfdc02, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x7, 0x7}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x100}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40c5}, 0x40000d0) 1.225496013s ago: executing program 2 (id=484): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x80000001}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0), 0x2000000, 0x0) 1.225264602s ago: executing program 2 (id=485): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x200, 0x2, 0x2, 0x0, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.166054984s ago: executing program 2 (id=486): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32=r1, @ANYRES64=r2, @ANYRES64=r2, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES16=r2], 0x34}}, 0x10) 1.164312516s ago: executing program 2 (id=488): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000088e100b9df00000001000000850092892c0318db72cd0000000000009500000000000043"], &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r1, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) syz_emit_ethernet(0x2b, &(0x7f0000000080)=ANY=[@ANYBLOB="f5ffffffffffffffffffffffff08004500001d0000000000019078ac1414bbac1414aa0800907800000000cfbdcc1d05ba80890a013ad9c1e5c22ddbfef490b10df17d3ee0c8c7ff1216473b3f3f1f7fca98b23e3f1aa3e496460096e276fbdc2dcb3efe1e71970c6403b63f5186afe823b2"], 0x0) 1.106045819s ago: executing program 0 (id=489): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 1.105665792s ago: executing program 2 (id=490): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a01, 0x0) ioctl$CDROM_MEDIA_CHANGED(r0, 0x5325, 0x100000001) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r4, 0x1000000, 0x0) fchmodat(r4, &(0x7f0000000240)='./file0\x00', 0x100) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fddb805d1d682600fe80000000aa8489ffbc", @ANYRES32=r4, @ANYBLOB="06000300bc0000000c001000010000000000000008000a00010000000c000f00040000000000000005002200000000000500130002000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6000000000000000290000000b0000000008000000000000c910fe8000000000000000000000000000bbc9100000000000000000000000000000000107200000000006000000bb2c0000000000000000000000000000000000000000000000001800000000000000290000000400000000000000000000000801"], 0x180}, 0x0) 1.105303402s ago: executing program 0 (id=491): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) setsockopt$inet_int(r1, 0x0, 0x31, &(0x7f0000000000)=0x6, 0x4) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) r3 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x2, {0x8000, 0x8, 0x8, 0x2}}) sendmsg$kcm(r2, &(0x7f0000000300)={&(0x7f00000000c0)=@phonet={0x23, 0x0, 0x0, 0x5}, 0x80, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x1, 0x4, 0x7, 0xfffd}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = fsopen(&(0x7f0000000040)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000180)='iocharset', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c000000180001002cbd700000008000802000400004000500240000200010000600000008000f0002000000080010000800000008001900", @ANYRES32, @ANYBLOB="08001e000700000008000300", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x80040}, 0x4008000) 1.025963004s ago: executing program 2 (id=492): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x802, 0xff, 0x12, 0x402, 0x8}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}}, 0x58}}, 0x0) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="180100001f00010000000000000096000601008014000300fc010000000000000000000000000000140001"], 0x118}], 0x1}, 0x0) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 64) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000040)="9b2d", 0x2}) (async) r5 = socket(0x2, 0x3, 0x1) bind$unix(r5, &(0x7f0000000000)=@abs, 0x6e) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1.025518566s ago: executing program 0 (id=493): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180500000200000000000000000000001800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xfffffffffffffd17, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0xa242) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab38fc179f9f9e91dc1ddaaca7bd6447a4b4e00d9683dd010000000000000000030000000000000000000002000000000000000000ecff00", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c551240460fba6e00000000000000000000000000000000001000", [0x4, 0x40000000000000]}}) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000300)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0)=r0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x700, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000006000200010000000a000400aaaaaaaaaabb0000100005800a000400b25b12b8e5000000140035006d6163766c616e30"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$FITHAW(r6, 0xc0045878) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'team_slave_1\x00', 0x1}) write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe80"], 0xffdd) r7 = socket(0x10, 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1a000, r7, &(0x7f0000000080)={0x10000000}) r9 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$USBDEVFS_GETDRIVER(r9, 0x41045508, &(0x7f00000002c0)={0xe, "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"}) 1.024567396s ago: executing program 4 (id=494): mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8) (async) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) (async) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) preadv(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/236, 0xec}], 0x1, 0x8, 0x1ff) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x007']) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x007']) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a7260180"], 0x26c0}}, 0x4010) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a7260180"], 0x26c0}}, 0x4010) pwritev2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x5, 0xa, 0x14) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x8000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) (async) r7 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@map=r8, 0x4, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@map=r8, 0x4, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x7, &(0x7f0000003040)={0x0, "f4e1a230b44f44eaa65e405b747aa95df8c02c12eb4eaf00"}}) setuid(r6) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000200)={0xa0, 0xfffffffffffffffe, 0x0, {{0x6, 0x3, 0x10000, 0x2, 0x5, 0x40, {0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x6c98, 0x2, 0x4, 0x5, 0x3, 0x2000, 0x6, r6, 0x0, 0x8, 0x6c}}, {0x0, 0x14}}}, 0xa0) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000200)={0xa0, 0xfffffffffffffffe, 0x0, {{0x6, 0x3, 0x10000, 0x2, 0x5, 0x40, {0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x6c98, 0x2, 0x4, 0x5, 0x3, 0x2000, 0x6, r6, 0x0, 0x8, 0x6c}}, {0x0, 0x14}}}, 0xa0) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)=0xc}) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x7) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000001300f5d10300"/20, @ANYRES32=r10, @ANYBLOB="0000000b6dc8b4eb08000d0006000010"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) flistxattr(r11, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) 946.09723ms ago: executing program 4 (id=495): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x101000) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x8, 0x30}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000001c0)={r3}, 0x8) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000200)={r3}, &(0x7f0000000280)=0x8) (async) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_dellink={0xa0, 0x13, 0x5, 0xfffffffe, 0x0, {0x7, 0x0, 0x0, r5, 0x20}, [@IFLA_AF_SPEC={0x80, 0x1a, 0x0, 0x1, [@AF_INET6={0x7c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xd7}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xfb}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}]}, 0xa0}}, 0x0) 945.733057ms ago: executing program 4 (id=496): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x3, &(0x7f0000000080)={0x0, "7ea08680448ae1cd0313388152f6a5dcd36f82e3050721215ed97a9793ecd18a42"}}) r1 = socket$kcm(0x29, 0x2, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3a) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x15, 0x1, 0x1, "3271bdf0f2f20d55806b26b1d72197edb1439b1c4200", 0xb5315241}) r6 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000180)={0x1}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000ffdbdf253900000008000300", @ANYRES32=r10, @ANYBLOB="14005a801000038005000700"], 0x30}}, 0x0) (async) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xfffd, 0x3}, 0x6) r11 = socket$netlink(0x10, 0x3, 0x0) (async) r12 = socket(0x7, 0x1, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) (async) getsockname$packet(r12, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xfffffffffffffe51) r14 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x42142, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r14, 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r14, 0x40a85321, &(0x7f00000002c0)={{0x0, 0xba}, 'port1\x00', 0x0, 0x1010, 0x9, 0x1, 0x722, 0x2, 0x7, 0x0, 0x1}) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r13, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="000000000002000014001280090001007663616e000000000400028008000a00", @ANYRES32=r13], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r12, 0x84, 0x12, &(0x7f0000000140)=0x691, 0x4) (async) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)="0100000000eb00000025f5947d35ade48234ad251296459b7254fdcafa386ee337a4f5cdf44e4b5470df0cb219a177ced11896b4c216c419c1e8f7e34ce86d5f465f11bde8c1d615496910f1033f4b68bbf8c76f040000006a033752f9fde67888b183916d57da2f0d2fd5d9442bbe304d27d4dd2f55c50702114d336a6fe7b0d93db9ec66db5d6cf11722ee3c", 0x8d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="0e", 0x1}], 0x1}}], 0x2, 0x0) 851.798941ms ago: executing program 4 (id=497): r0 = socket$can_raw(0x1d, 0x3, 0x1) close(r0) (async) close(r0) io_uring_setup(0x6ba2, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x81}) (async) r1 = io_uring_setup(0x6ba2, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x81}) socket$rds(0x15, 0x5, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040801}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)={0x14, 0x16, 0xf15, 0x0, 0x25dfdbfb, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f00000005c0)={&(0x7f0000000240)=@canfd={{0x2, 0x0, 0x1, 0x1}, 0xe, 0x3, 0x0, 0x0, "d159a1c1d454a46825c5970361e4bafcbbc089edbb2a9b6605a4d5140473ac5fabc1470dcad825e566f3f709cd45965fa4a0899399d343e91f3a132efaf62bed"}, 0x48}}, 0x4000010) 426.141847ms ago: executing program 1 (id=498): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010000305000000000100000000000000", @ANYRES32=0x0, @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB], 0x40}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x1, 0x80, 0x3, 0x5}, {0xb, 0x4e, 0x2f, 0x8}, {0x0, 0x0, 0x0, 0xfffffff1}, {0x3, 0x5b, 0x3, 0xb7}, {0x1, 0x8, 0x9, 0x6}, {0x8, 0x7f, 0x37, 0x9}, {0x5cc0, 0x7, 0x4}, {0x8, 0x67, 0x5, 0x2}, {0x8, 0xff, 0x10}, {0xee7, 0x4, 0x87, 0x1}]}) 76.0541ms ago: executing program 4 (id=499): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8001}, 0x8) r1 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x20000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f0000000140)) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8001}, 0x8) (async) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_pidfd_open(r1, 0x0) (async) setns(r2, 0x20000000) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) wait4(0x0, 0x0, 0x0, &(0x7f0000000140)) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) (async) 75.15194ms ago: executing program 1 (id=500): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x40880) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0xfc00, 0x4, 0xdb, 0x6}]}) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004780)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000000000004000b000a29430389085c0551e90ceefcdb3f539fcc6b1c361b8516c8772fecf432559a6b08958c2fbe22cac40b7393ac26bdb6f26e7182cdd883e5eb23a77d57ee30dfd62880f1b650ef5a2230e2c9b1435588c93d8635faf45bdaa486435a5759575ac3a2a5247e844756b66719ee0be737ada09ccc5c0800c228026bfa"], 0x24}}, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) 74.436631ms ago: executing program 1 (id=501): r0 = syz_io_uring_setup(0x463d, &(0x7f0000000480)={0x0, 0xb6c6, 0x800, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) (async) syz_pidfd_open(0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x200703, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket(0xa, 0x2, 0x0) (async, rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) (async, rerun: 64) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000140)}) (async, rerun: 32) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x1a2, 0x1}, 0x0) (async, rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) syz_emit_ethernet(0x71, &(0x7f0000000540)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x3b, 0x3a, 0xff, @dev, @local, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x3, 0x1, "07df82bb6bf7a292"}, {0x1f, 0x4, "e05591082b87569f6bdc58206e027a90058faf478036b7199d92110692e5ea9d0f888c5ce7"}, {0x18}]}}}}}}, 0x0) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) (async, rerun: 32) symlink(&(0x7f0000000080)='.\x00', 0x0) (rerun: 32) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000100)={0x0, r0, 0x34, {0x1, 0x7f}, 0x8}, 0x1) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000000c0)=0x7}) 5.556081ms ago: executing program 0 (id=502): ioperm(0x0, 0x6e, 0xe) membarrier(0x0, 0x0) 5.364466ms ago: executing program 1 (id=503): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x80800) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x6}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xfffd, 0x3}, 0x6) (async) write(r1, &(0x7f0000000000)="5a000300010003", 0x7) 2.399378ms ago: executing program 0 (id=504): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000001e00)=""/102400, &(0x7f0000000040)=0x19000) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0x6805, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0xfffffffd) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) 1.6469ms ago: executing program 4 (id=505): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 1 (id=506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004011}, 0x20008000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$usbmon(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x20010, r4, 0x7) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001400)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x27, 0x0, 0x0, @binary="d847b0d44ca7ba9b542be6ce"}]}]}, 0x38}], 0x1}, 0x4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x2100400, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}], [{@uid_lt={'uid<', r7}}]}}) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0xfffb, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000706010300000000000000000100000405000100070000000900020073045c141d1f63c727018e9e7c6c994848797a30000000000900020073797a32000000000500010007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x804) kernel console output (not intermixed with test programs): [ 43.649983][ T40] audit: type=1400 audit(1756685634.710:60): avc: denied { rlimitinh } for pid=5943 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.656740][ T40] audit: type=1400 audit(1756685634.710:61): avc: denied { siginh } for pid=5943 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:8288' (ED25519) to the list of known hosts. [ 45.058595][ T40] audit: type=1400 audit(1756685636.140:62): avc: denied { name_bind } for pid=5955 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.087319][ T40] audit: type=1400 audit(1756685636.160:63): avc: denied { write } for pid=5956 comm="sh" path="pipe:[6836]" dev="pipefs" ino=6836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.102308][ T40] audit: type=1400 audit(1756685636.180:64): avc: denied { execute } for pid=5956 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.109362][ T40] audit: type=1400 audit(1756685636.180:65): avc: denied { execute_no_trans } for pid=5956 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.158897][ T40] audit: type=1400 audit(1756685638.240:66): avc: denied { mounton } for pid=5956 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.162175][ T5956] cgroup: Unknown subsys name 'net' [ 47.252595][ T5956] cgroup: Unknown subsys name 'cpuset' [ 47.258433][ T5956] cgroup: Unknown subsys name 'rlimit' [ 47.458815][ T5961] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.178561][ T5956] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.030151][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 51.030163][ T40] audit: type=1400 audit(1756685642.100:80): avc: denied { execmem } for pid=5966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.229500][ T40] audit: type=1400 audit(1756685642.310:81): avc: denied { create } for pid=5969 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.248726][ T40] audit: type=1400 audit(1756685642.310:82): avc: denied { read write } for pid=5969 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.256209][ T40] audit: type=1400 audit(1756685642.310:83): avc: denied { open } for pid=5969 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.265071][ T40] audit: type=1400 audit(1756685642.330:84): avc: denied { ioctl } for pid=5969 comm="syz-executor" path="socket:[2006]" dev="sockfs" ino=2006 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.271291][ T5972] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.277643][ T5978] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.280353][ T5978] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.283285][ T5978] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.285767][ T5978] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.288354][ T5978] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.290949][ T5978] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.293771][ T5978] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.298203][ T5972] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.303405][ T40] audit: type=1400 audit(1756685642.380:85): avc: denied { read } for pid=5973 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.307640][ T5972] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.310895][ T40] audit: type=1400 audit(1756685642.380:86): avc: denied { open } for pid=5973 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.312804][ T5972] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.312826][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.316200][ T5979] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.316555][ T5979] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.319551][ T40] audit: type=1400 audit(1756685642.380:87): avc: denied { mounton } for pid=5973 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.323579][ T5333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.327383][ T5979] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.329130][ T5333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.339649][ T5979] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.345264][ T5333] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.355440][ T5979] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.541206][ T40] audit: type=1400 audit(1756685642.620:88): avc: denied { module_request } for pid=5973 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 51.593421][ T5973] chnl_net:caif_netlink_parms(): no params data found [ 51.598397][ T5969] chnl_net:caif_netlink_parms(): no params data found [ 51.694035][ T5974] chnl_net:caif_netlink_parms(): no params data found [ 51.756556][ T5982] chnl_net:caif_netlink_parms(): no params data found [ 51.830382][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.833354][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.836601][ T5973] bridge_slave_0: entered allmulticast mode [ 51.843860][ T5973] bridge_slave_0: entered promiscuous mode [ 51.855977][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.859144][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.861967][ T5973] bridge_slave_1: entered allmulticast mode [ 51.865491][ T5973] bridge_slave_1: entered promiscuous mode [ 51.889827][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.892093][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.894334][ T5969] bridge_slave_0: entered allmulticast mode [ 51.896945][ T5969] bridge_slave_0: entered promiscuous mode [ 51.954865][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.957066][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.959678][ T5969] bridge_slave_1: entered allmulticast mode [ 51.962287][ T5969] bridge_slave_1: entered promiscuous mode [ 51.987326][ T5973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.047907][ T5973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.054127][ T5969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.058483][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.061537][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.064576][ T5974] bridge_slave_0: entered allmulticast mode [ 52.068028][ T5974] bridge_slave_0: entered promiscuous mode [ 52.071143][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.073474][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.075689][ T5974] bridge_slave_1: entered allmulticast mode [ 52.078447][ T5974] bridge_slave_1: entered promiscuous mode [ 52.143397][ T5969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.175130][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.177489][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.180085][ T5982] bridge_slave_0: entered allmulticast mode [ 52.182676][ T5982] bridge_slave_0: entered promiscuous mode [ 52.200995][ T5973] team0: Port device team_slave_0 added [ 52.226414][ T5969] team0: Port device team_slave_0 added [ 52.249877][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.252667][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.255431][ T5982] bridge_slave_1: entered allmulticast mode [ 52.259240][ T5982] bridge_slave_1: entered promiscuous mode [ 52.275898][ T5973] team0: Port device team_slave_1 added [ 52.280251][ T5969] team0: Port device team_slave_1 added [ 52.284780][ T5974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.341302][ T5974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.350531][ T5982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.412246][ T5982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.415831][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.420847][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.430902][ T5973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.436302][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.441036][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.449833][ T5969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.481042][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.483889][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.494863][ T5973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.498915][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.501131][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.509660][ T5969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.514401][ T5974] team0: Port device team_slave_0 added [ 52.542310][ T5974] team0: Port device team_slave_1 added [ 52.555145][ T5982] team0: Port device team_slave_0 added [ 52.559240][ T5982] team0: Port device team_slave_1 added [ 52.638148][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.641057][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.653133][ T5974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.699681][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.702582][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.712996][ T5974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.722430][ T5973] hsr_slave_0: entered promiscuous mode [ 52.724776][ T5973] hsr_slave_1: entered promiscuous mode [ 52.727345][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.729854][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.738723][ T5982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.747302][ T5969] hsr_slave_0: entered promiscuous mode [ 52.749580][ T5969] hsr_slave_1: entered promiscuous mode [ 52.751618][ T5969] debugfs: 'hsr0' already exists in 'hsr' [ 52.753474][ T5969] Cannot create hsr debugfs directory [ 52.760640][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.762807][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.773257][ T5982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.919527][ T5974] hsr_slave_0: entered promiscuous mode [ 52.921785][ T5974] hsr_slave_1: entered promiscuous mode [ 52.924812][ T5974] debugfs: 'hsr0' already exists in 'hsr' [ 52.927254][ T5974] Cannot create hsr debugfs directory [ 52.988893][ T5982] hsr_slave_0: entered promiscuous mode [ 52.991092][ T5982] hsr_slave_1: entered promiscuous mode [ 52.993758][ T5982] debugfs: 'hsr0' already exists in 'hsr' [ 52.995571][ T5982] Cannot create hsr debugfs directory [ 53.314796][ T5969] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.325720][ T5969] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.328309][ T5979] Bluetooth: hci2: command tx timeout [ 53.333276][ T5969] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.338279][ T5979] Bluetooth: hci0: command tx timeout [ 53.344598][ T5969] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.386505][ T5973] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.390937][ T5973] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.400237][ T5973] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.406597][ T5973] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.407700][ T5979] Bluetooth: hci3: command tx timeout [ 53.417778][ T5979] Bluetooth: hci1: command tx timeout [ 53.472584][ T5974] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.479660][ T5974] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.484695][ T5974] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.490768][ T5974] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.541638][ T5982] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.545741][ T5982] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.550610][ T5982] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.554580][ T5982] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.581514][ T5969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.627591][ T5973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.632785][ T5969] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.659035][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.661384][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.670838][ T5973] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.680896][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.683134][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.690952][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.693224][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.705754][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.708770][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.735682][ T5974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.743467][ T5982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.776804][ T5982] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.784111][ T5974] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.799041][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.801875][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.817485][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.819638][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.823641][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.824011][ T40] audit: type=1400 audit(1756685644.900:89): avc: denied { sys_module } for pid=5969 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.825828][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.838003][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.840238][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.924546][ T5969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.950023][ T5969] veth0_vlan: entered promiscuous mode [ 53.955410][ T5969] veth1_vlan: entered promiscuous mode [ 53.973660][ T5969] veth0_macvtap: entered promiscuous mode [ 53.978896][ T5973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.983844][ T5969] veth1_macvtap: entered promiscuous mode [ 54.009476][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.015334][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.032533][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.036296][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.044757][ T5973] veth0_vlan: entered promiscuous mode [ 54.047358][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.053347][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.080513][ T5973] veth1_vlan: entered promiscuous mode [ 54.086820][ T5974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.116036][ T5982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.129461][ T5973] veth0_macvtap: entered promiscuous mode [ 54.129762][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.134517][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.142191][ T5973] veth1_macvtap: entered promiscuous mode [ 54.163638][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.166832][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.170807][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.181590][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.192134][ T5974] veth0_vlan: entered promiscuous mode [ 54.200823][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.205591][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.212746][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.212854][ T5969] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.218782][ T5974] veth1_vlan: entered promiscuous mode [ 54.228588][ T1184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.252895][ T5982] veth0_vlan: entered promiscuous mode [ 54.274283][ T5982] veth1_vlan: entered promiscuous mode [ 54.296701][ T1184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.299376][ T1184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.300985][ T5974] veth0_macvtap: entered promiscuous mode [ 54.320424][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.322988][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.326772][ T5974] veth1_macvtap: entered promiscuous mode [ 54.332704][ T6056] block device autoloading is deprecated and will be removed. [ 54.345121][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.349194][ T5982] veth0_macvtap: entered promiscuous mode [ 54.353099][ T5982] veth1_macvtap: entered promiscuous mode [ 54.359931][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.375043][ T1184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.379209][ T1184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.388658][ T1184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.392317][ T1184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.398284][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.411515][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.436046][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.439362][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.447326][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.451460][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.459104][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.463160][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.471670][ T6070] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.491376][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.494147][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.518961][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.522306][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.555142][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.559438][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.561775][ T6073] fuse: Bad value for 'fd' [ 54.594575][ T6076] binder: 6074:6076 ioctl c0306201 200000000080 returned -14 [ 54.678441][ T6086] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.746098][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 54.802996][ T6102] netdevsim netdevsim2: Direct firmware load for . [ 54.802996][ T6102] failed with error -2 [ 54.815994][ T6102] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 54.815994][ T6102] [ 54.820046][ T6119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6119 comm=syz.0.23 [ 54.945515][ T6131] Bluetooth: MGMT ver 1.23 [ 55.006885][ T6141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=6141 comm=syz.0.32 [ 55.011371][ T6141] netlink: 'syz.0.32': attribute type 1 has an invalid length. [ 55.023502][ T6136] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 55.029484][ T6142] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 55.042667][ T6141] bond1 (unregistering): Released all slaves [ 55.083594][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'. [ 55.116836][ T6153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.32'. [ 55.122427][ T6154] Zero length message leads to an empty skb [ 55.140563][ T6156] comedi comedi3: comedi_config --init_data is deprecated [ 55.321180][ T6172] 9pnet: Could not find request transport: vi [ 55.418167][ T5978] Bluetooth: hci2: command tx timeout [ 55.420127][ T5979] Bluetooth: hci0: command tx timeout [ 55.497879][ T5979] Bluetooth: hci1: command tx timeout [ 55.499649][ T5979] Bluetooth: hci3: command tx timeout [ 55.635989][ T841] IPVS: starting estimator thread 0... [ 55.641201][ T6201] netlink: 16 bytes leftover after parsing attributes in process `syz.2.53'. [ 55.644734][ T6201] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 55.733900][ T6190] process 'syz.0.50' launched '/dev/fd/6' with NULL argv: empty string added [ 55.748819][ T6202] IPVS: using max 42 ests per chain, 100800 per kthread [ 55.807566][ T6220] overlayfs: failed to resolve './file0': -2 [ 55.809651][ T6221] overlay: Unknown parameter 'pcr' [ 55.848455][ T6226] can0: slcan on ptm0. [ 55.850960][ T6226] trusted_key: encrypted_key: insufficient parameters specified [ 55.872036][ T6224] openvswitch: netlink: VXLAN extension 149 out of range max 1 [ 55.928038][ T6225] can0 (unregistered): slcan off ptm0. [ 55.999051][ T6235] bond0: entered promiscuous mode [ 56.000920][ T6235] bond_slave_0: entered promiscuous mode [ 56.002782][ T6235] bond_slave_1: entered promiscuous mode [ 56.004642][ T6235] bond0: entered allmulticast mode [ 56.006253][ T6235] bond_slave_0: entered allmulticast mode [ 56.009050][ T6235] bond_slave_1: entered allmulticast mode [ 56.014162][ T841] IPVS: starting estimator thread 0... [ 56.017663][ T54] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 56.058167][ T40] kauditd_printk_skb: 143 callbacks suppressed [ 56.058179][ T40] audit: type=1400 audit(1756685647.130:233): avc: denied { ioctl } for pid=6234 comm="syz.3.62" path="socket:[9826]" dev="sockfs" ino=9826 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.059843][ T6236] IPv4: Oversized IP packet from 172.20.20.24 [ 56.060235][ T40] audit: type=1400 audit(1756685647.130:234): avc: denied { write } for pid=6234 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.071617][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 56.082872][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 56.100282][ T6251] sctp: [Deprecated]: syz.1.65 (pid 6251) Use of int in maxseg socket option. [ 56.100282][ T6251] Use struct sctp_assoc_value instead [ 56.105545][ T40] audit: type=1400 audit(1756685647.180:235): avc: denied { mount } for pid=6246 comm="syz.2.64" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 56.116880][ T6251] vlan2: entered promiscuous mode [ 56.118610][ T6241] IPVS: using max 42 ests per chain, 100800 per kthread [ 56.121010][ T6251] vlan2: entered allmulticast mode [ 56.122652][ T6251] hsr_slave_1: entered allmulticast mode [ 56.129297][ T40] audit: type=1400 audit(1756685647.210:236): avc: denied { ioctl } for pid=6252 comm="syz.3.66" path="socket:[11623]" dev="sockfs" ino=11623 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.130219][ T6253] mac80211_hwsim hwsim5 : renamed from wlan1 (while UP) [ 56.171317][ T54] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 56.174836][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.177342][ T54] usb 5-1: Product: syz [ 56.179758][ T54] usb 5-1: Manufacturer: syz [ 56.181342][ T54] usb 5-1: SerialNumber: syz [ 56.190086][ T54] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 56.205346][ T40] audit: type=1400 audit(1756685647.280:237): avc: denied { firmware_load } for pid=6036 comm="kworker/1:3" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 56.212493][ T6036] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 56.274103][ T6264] netlink: 'syz.2.70': attribute type 1 has an invalid length. [ 56.279668][ T6262] team0: Device gtp0 is of different type [ 56.311937][ T40] audit: type=1400 audit(1756685647.390:238): avc: denied { sys_module } for pid=6263 comm="syz.2.70" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.389277][ T6278] netlink: 152 bytes leftover after parsing attributes in process `syz.2.74'. [ 56.430427][ T6280] ieee802154 phy0 wpan0: encryption failed: -22 [ 56.430771][ T40] audit: type=1400 audit(1756685647.510:239): avc: denied { create } for pid=6279 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.439897][ T40] audit: type=1400 audit(1756685647.510:240): avc: denied { write } for pid=6279 comm="syz.2.75" path="socket:[11660]" dev="sockfs" ino=11660 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.467029][ T40] audit: type=1400 audit(1756685647.540:241): avc: denied { getopt } for pid=6281 comm="syz.2.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.520927][ T40] audit: type=1400 audit(1756685647.600:242): avc: denied { write } for pid=6283 comm="syz.2.77" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 56.567769][ T54] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 56.627931][ T6071] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 56.719492][ T54] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 56.722193][ T54] usb 8-1: config 0 has no interface number 0 [ 56.724191][ T54] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 56.727715][ T54] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 56.730968][ T54] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 56.734567][ T54] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 56.738180][ T54] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 56.741537][ T54] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 56.745656][ T54] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 56.748576][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.753731][ T54] usb 8-1: config 0 descriptor?? [ 56.756086][ T6271] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 56.759682][ T6271] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 56.768602][ T54] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 56.784576][ T6071] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 56.787992][ T6071] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 56.792888][ T6071] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 56.796493][ T6071] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 56.800716][ T6071] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 56.806607][ T6071] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 56.810391][ T6071] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 56.813583][ T6071] usb 6-1: Product: syz [ 56.815287][ T6071] usb 6-1: Manufacturer: syz [ 56.825405][ T6071] cdc_wdm 6-1:1.0: skipping garbage [ 56.827173][ T6071] cdc_wdm 6-1:1.0: skipping garbage [ 56.830499][ T6071] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 56.832863][ T6071] cdc_wdm 6-1:1.0: Unknown control protocol [ 56.970271][ T6071] usb 8-1: USB disconnect, device number 2 [ 56.976186][ T6071] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 57.025656][ T72] usb 6-1: USB disconnect, device number 2 [ 57.091079][ T6299] netlink: 16 bytes leftover after parsing attributes in process `syz.2.82'. [ 57.247802][ T6036] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 57.250472][ T6036] ath9k_htc: Failed to initialize the device [ 57.270109][ T6036] usb 5-1: ath9k_htc: USB layer deinitialized [ 57.487666][ T5978] Bluetooth: hci0: command tx timeout [ 57.489424][ T5978] Bluetooth: hci2: command tx timeout [ 57.531066][ T6311] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 57.535803][ T6311] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 57.569964][ T5978] Bluetooth: hci3: command tx timeout [ 57.585179][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86'. [ 58.022200][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 58.024952][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 58.031155][ T6364] geneve2: entered promiscuous mode [ 58.032985][ T6364] geneve2: entered allmulticast mode [ 58.124803][ T6374] syzkaller1: entered promiscuous mode [ 58.126983][ T6374] syzkaller1: entered allmulticast mode [ 58.376576][ T6382] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 58.388015][ T6382] kvm: pic: level sensitive irq not supported [ 58.388512][ T6382] kvm: pic: non byte read [ 58.393288][ T6382] kvm: pic: level sensitive irq not supported [ 58.393554][ T6382] kvm: pic: non byte read [ 58.398534][ T6382] kvm: pic: level sensitive irq not supported [ 58.398812][ T6382] kvm: pic: non byte read [ 58.403117][ T6382] kvm: pic: level sensitive irq not supported [ 58.403390][ T6382] kvm: pic: non byte read [ 58.408277][ T6382] kvm: pic: level sensitive irq not supported [ 58.408568][ T6382] kvm: pic: non byte read [ 58.506793][ T6391] binder: 6389:6391 ioctl c018620c 200000000100 returned -1 [ 58.535228][ T6394] netlink: 20 bytes leftover after parsing attributes in process `syz.1.108'. [ 58.712243][ T6414] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 58.735883][ T6015] usb 5-1: USB disconnect, device number 2 [ 59.027248][ T6469] syz.2.132 uses obsolete (PF_INET,SOCK_PACKET) [ 59.338843][ T6036] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 59.490770][ T6036] usb 6-1: Invalid ep0 maxpacket: 64 [ 59.550169][ T6487] ref_ctr increment failed for inode: 0xeb offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88802d0dcb40 [ 59.568183][ T5978] Bluetooth: hci0: command tx timeout [ 59.629197][ T6036] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 59.648255][ T5978] Bluetooth: hci3: command tx timeout [ 59.701647][ T6491] binder: 6490:6491 ioctl 3b85 200000000240 returned -22 [ 59.777612][ T6036] usb 6-1: Invalid ep0 maxpacket: 64 [ 59.780948][ T6036] usb usb6-port1: attempt power cycle [ 60.057616][ T72] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 60.117649][ T6036] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 60.137982][ T6036] usb 6-1: Invalid ep0 maxpacket: 64 [ 60.209202][ T72] usb 5-1: too many configurations: 181, using maximum allowed: 8 [ 60.213861][ T72] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 60.216940][ T72] usb 5-1: can't read configurations, error -61 [ 60.220936][ T6486] uprobe: syz.2.137:6486 failed to unregister, leaking uprobe [ 60.267722][ T6036] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 60.289090][ T6036] usb 6-1: Invalid ep0 maxpacket: 64 [ 60.291231][ T6036] usb usb6-port1: unable to enumerate USB device [ 60.303210][ T6516] __nla_validate_parse: 2 callbacks suppressed [ 60.303220][ T6516] netlink: 196 bytes leftover after parsing attributes in process `syz.2.146'. [ 60.348245][ T72] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 60.508545][ T72] usb 5-1: too many configurations: 181, using maximum allowed: 8 [ 60.512058][ T72] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 60.514415][ T72] usb 5-1: can't read configurations, error -61 [ 60.516721][ T72] usb usb5-port1: attempt power cycle [ 60.544090][ T6529] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 60.587756][ T6015] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 60.739431][ T6015] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 60.742537][ T6015] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.746647][ T6015] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 60.750237][ T6015] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.857653][ T72] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 60.878641][ T72] usb 5-1: too many configurations: 181, using maximum allowed: 8 [ 60.883044][ T72] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 60.886276][ T72] usb 5-1: can't read configurations, error -61 [ 60.960269][ T6015] usb 8-1: usb_control_msg returned -32 [ 60.961188][ T6522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.962038][ T6015] usbtmc 8-1:16.0: can't read capabilities [ 60.965296][ T6522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.971032][ T6522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.973982][ T6522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.017629][ T72] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 61.039189][ T72] usb 5-1: too many configurations: 181, using maximum allowed: 8 [ 61.043303][ T72] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 61.046431][ T72] usb 5-1: can't read configurations, error -61 [ 61.049765][ T72] usb usb5-port1: unable to enumerate USB device [ 61.331784][ T6531] usbtmc 8-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 61.366008][ T6533] Bluetooth: MGMT ver 1.23 [ 61.380878][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 61.380889][ T40] audit: type=1400 audit(1756685652.460:307): avc: denied { map } for pid=6532 comm="syz.2.151" path="socket:[13409]" dev="sockfs" ino=13409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 61.545342][ T34] usb 8-1: USB disconnect, device number 3 [ 61.612504][ T6552] netlink: 20 bytes leftover after parsing attributes in process `syz.2.156'. [ 61.647811][ T5978] Bluetooth: hci0: command tx timeout [ 61.727649][ T5978] Bluetooth: hci2: command 0x0406 tx timeout [ 61.749439][ T40] audit: type=1400 audit(1756685652.830:308): avc: denied { write } for pid=6563 comm="syz.2.160" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 61.854630][ T6571] netlink: 'syz.2.162': attribute type 11 has an invalid length. [ 61.887478][ T40] audit: type=1400 audit(1756685652.960:309): avc: denied { ioctl } for pid=6572 comm="syz.2.163" path="socket:[11182]" dev="sockfs" ino=11182 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.046798][ T6588] netlink: 72 bytes leftover after parsing attributes in process `syz.1.168'. [ 62.050617][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'. [ 62.078312][ T40] audit: type=1400 audit(1756685653.160:310): avc: denied { name_bind } for pid=6590 comm="syz.3.169" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 62.164901][ T40] audit: type=1400 audit(1756685653.240:311): avc: denied { map } for pid=6596 comm="syz.3.170" path="socket:[11246]" dev="sockfs" ino=11246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 62.174795][ T40] audit: type=1400 audit(1756685653.250:312): avc: denied { mount } for pid=6603 comm="syz.2.173" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 62.190569][ T40] audit: type=1400 audit(1756685653.270:313): avc: denied { remount } for pid=6603 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 62.191979][ T6604] ======================================================= [ 62.191979][ T6604] WARNING: The mand mount option has been deprecated and [ 62.191979][ T6604] and is ignored by this kernel. Remove the mand [ 62.191979][ T6604] option from the mount to silence this warning. [ 62.191979][ T6604] ======================================================= [ 62.208449][ T6604] devtmpfs: Cannot change global quota limit on remount [ 62.220938][ T40] audit: type=1400 audit(1756685653.300:314): avc: denied { unmount } for pid=5974 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 62.230493][ T40] audit: type=1400 audit(1756685653.300:315): avc: denied { getopt } for pid=6606 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.248053][ T6608] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=6608 comm=syz.3.174 [ 62.248070][ T6608] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=39 sclass=netlink_audit_socket pid=6608 comm=syz.3.174 [ 62.248080][ T6608] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=6608 comm=syz.3.174 [ 62.248090][ T6608] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=47 sclass=netlink_audit_socket pid=6608 comm=syz.3.174 [ 62.248100][ T6608] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6608 comm=syz.3.174 [ 62.248110][ T6608] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=6608 comm=syz.3.174 [ 62.248195][ T6608] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=57 sclass=netlink_audit_socket pid=6608 comm=syz.3.174 [ 62.248207][ T6608] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=6608 comm=syz.3.174 [ 62.252111][ T40] audit: type=1400 audit(1756685653.330:316): avc: denied { connect } for pid=6606 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.299513][ T6616] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 62.316168][ T6616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 62.320152][ T6616] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.176'. [ 62.394389][ T6628] wg2: entered promiscuous mode [ 62.396827][ T6628] wg2: entered allmulticast mode [ 62.411225][ T6632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.181'. [ 62.422168][ T6632] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.181'. [ 62.453443][ T6632] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.621759][ T6648] input: syz0 as /devices/virtual/input/input6 [ 62.701681][ T6652] openvswitch: netlink: EtherType 0 is less than min 600 [ 62.704691][ T6652] binder: 6651:6652 ioctl c018620c 200000000240 returned -22 [ 62.997749][ T840] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 63.147702][ T840] usb 6-1: Using ep0 maxpacket: 32 [ 63.151872][ T840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 63.156013][ T840] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 63.160818][ T840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 63.164797][ T840] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 63.172590][ T840] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 63.178021][ T840] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 63.181100][ T840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.186294][ T840] usb 6-1: config 0 descriptor?? [ 63.282240][ T5333] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 63.395835][ T840] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 63.524971][ T6681] netlink: 248 bytes leftover after parsing attributes in process `syz.3.196'. [ 63.611632][ T6692] SELinux: policydb magic number 0x3 does not match expected magic number 0xf97cff8c [ 63.615278][ T6692] SELinux: failed to load policy [ 63.664234][ T6695] warning: `syz.3.201' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 63.692578][ T6703] capability: warning: `syz.3.203' uses 32-bit capabilities (legacy support in use) [ 63.862817][ T6731] netlink: 'syz.0.212': attribute type 4 has an invalid length. [ 64.020037][ T5978] Bluetooth: hci2: unexpected event for opcode 0x200c [ 64.038217][ T840] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 64.176209][ T6763] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28991 sclass=netlink_xfrm_socket pid=6763 comm=syz.3.221 [ 64.200266][ T840] usb 7-1: Using ep0 maxpacket: 16 [ 64.204289][ T840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.208233][ T840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.211384][ T840] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 64.213579][ T6765] netlink: 36 bytes leftover after parsing attributes in process `syz.0.222'. [ 64.215628][ T840] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 64.222858][ T840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.230091][ T840] usb 7-1: config 0 descriptor?? [ 64.270837][ T6773] netlink: 212388 bytes leftover after parsing attributes in process `syz.3.225'. [ 64.273874][ T6773] openvswitch: netlink: Message has 5 unknown bytes. [ 64.364220][ T6787] capability: warning: `syz.0.228' uses deprecated v2 capabilities in a way that may be insecure [ 64.435881][ T6790] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 64.658092][ T840] HID 045e:07da: Invalid code 65791 type 1 [ 64.668244][ T840] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:045E:07DA.0002/input/input7 [ 64.682289][ T840] microsoft 0003:045E:07DA.0002: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 64.869917][ T54] usb 7-1: USB disconnect, device number 2 [ 64.870575][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.958355][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.027488][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.108696][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.110018][ T5979] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.115294][ T5979] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.118219][ T5979] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.122160][ T5979] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.125002][ T5979] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.243587][ T6797] chnl_net:caif_netlink_parms(): no params data found [ 65.256453][ T12] bridge_slave_1: left allmulticast mode [ 65.260008][ T12] bridge_slave_1: left promiscuous mode [ 65.262559][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.266870][ T12] bridge_slave_0: left allmulticast mode [ 65.269517][ T12] bridge_slave_0: left promiscuous mode [ 65.271487][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.411005][ T6806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.235'. [ 65.495229][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.499798][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.503206][ T12] bond0 (unregistering): Released all slaves [ 65.609721][ T6797] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.611980][ T6797] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.614420][ T6797] bridge_slave_0: entered allmulticast mode [ 65.617934][ T6797] bridge_slave_0: entered promiscuous mode [ 65.649769][ T6797] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.652075][ T6797] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.654325][ T6797] bridge_slave_1: entered allmulticast mode [ 65.657222][ T6797] bridge_slave_1: entered promiscuous mode [ 65.713291][ T6820] netlink: 64 bytes leftover after parsing attributes in process `syz.2.238'. [ 65.720324][ T6797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.733519][ T6797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.738500][ T5978] Bluetooth: hci3: command 0x0405 tx timeout [ 65.780528][ T54] usb 6-1: USB disconnect, device number 7 [ 65.788112][ T54] usblp0: removed [ 65.823604][ T6797] team0: Port device team_slave_0 added [ 65.827038][ T6797] team0: Port device team_slave_1 added [ 65.891397][ T6797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.896649][ T6797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.908803][ T6797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.918482][ T12] hsr_slave_0: left promiscuous mode [ 65.920801][ T12] hsr_slave_1: left promiscuous mode [ 65.922756][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.925045][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.930063][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.932262][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.949131][ T12] veth1_macvtap: left promiscuous mode [ 65.951081][ T12] veth0_macvtap: left promiscuous mode [ 65.952850][ T12] veth1_vlan: left promiscuous mode [ 65.955046][ T12] veth0_vlan: left promiscuous mode [ 66.126503][ T6852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 66.515975][ T12] team0 (unregistering): Port device team_slave_1 removed [ 66.564390][ T12] team0 (unregistering): Port device team_slave_0 removed [ 66.587250][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 66.587260][ T40] audit: type=1326 audit(1756685657.660:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.2.239" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479fd8ebe9 code=0x7fc00000 [ 66.979504][ T6797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.981754][ T6797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.990514][ T6797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.003143][ T6860] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 67.040112][ T40] audit: type=1400 audit(1756685658.120:377): avc: denied { write } for pid=6868 comm="syz.1.251" lport=39198 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 67.060304][ T6797] hsr_slave_0: entered promiscuous mode [ 67.062594][ T6797] hsr_slave_1: entered promiscuous mode [ 67.167713][ T5333] Bluetooth: hci2: command tx timeout [ 67.234807][ T6797] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.246341][ T6797] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.259631][ T6797] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.266182][ T6797] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.308219][ T6884] netlink: 32 bytes leftover after parsing attributes in process `syz.1.254'. [ 67.344270][ T6797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.363699][ T6797] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.374366][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.377370][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.390312][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.393324][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.531008][ T40] audit: type=1400 audit(1756685658.610:378): avc: denied { name_bind } for pid=6899 comm="syz.1.255" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 67.540320][ T40] audit: type=1400 audit(1756685658.610:379): avc: denied { name_bind } for pid=6899 comm="syz.1.255" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 67.595870][ T6797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.833256][ T6797] veth0_vlan: entered promiscuous mode [ 67.848637][ T6797] veth1_vlan: entered promiscuous mode [ 67.881031][ T6797] veth0_macvtap: entered promiscuous mode [ 67.891007][ T6932] bridge5: entered allmulticast mode [ 67.894193][ T6797] veth1_macvtap: entered promiscuous mode [ 67.903456][ T6797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.909034][ T6797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.914341][ T46] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.917079][ T46] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.927447][ T46] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.931549][ T46] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.947767][ T6941] fuse: Unknown parameter '' [ 67.965856][ T6945] netlink: 830 bytes leftover after parsing attributes in process `syz.2.260'. [ 67.973246][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.979611][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.999650][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.002223][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.005215][ T6950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.262'. [ 68.009566][ T6950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.262'. [ 68.016357][ T6950] /dev/sr0: Can't open blockdev [ 68.017674][ T40] audit: type=1400 audit(1756685659.090:380): avc: denied { mount } for pid=6797 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.024932][ T40] audit: type=1400 audit(1756685659.090:381): avc: denied { mounton } for pid=6797 comm="syz-executor" path="/syzkaller.uuWV7b/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.296631][ T6983] cgroup: release_agent respecified [ 68.347664][ T54] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 68.500404][ T54] usb 9-1: config 0 has no interfaces? [ 68.502734][ T54] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 68.506437][ T54] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.512689][ T54] usb 9-1: config 0 descriptor?? [ 68.668539][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'. [ 68.780532][ T840] usb 9-1: USB disconnect, device number 2 [ 68.915895][ T40] audit: type=1400 audit(1756685659.990:382): avc: denied { write } for pid=6990 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 69.196701][ T40] audit: type=1400 audit(1756685660.270:383): avc: denied { remount } for pid=7014 comm="syz.2.280" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 69.205219][ T40] audit: type=1400 audit(1756685660.280:384): avc: denied { setattr } for pid=7014 comm="syz.2.280" name="/" dev="9p" ino=35913882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.258466][ T5333] Bluetooth: hci2: command tx timeout [ 69.376994][ T40] audit: type=1400 audit(1756685660.450:385): avc: denied { read } for pid=7021 comm="syz.4.283" name="usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 69.427925][ T7023] netlink: 36 bytes leftover after parsing attributes in process `syz.2.284'. [ 69.461000][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'. [ 69.707753][ T7043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 69.762118][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 69.792786][ T7068] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 69.802250][ T7068] CIFS: Unable to determine destination address [ 70.559559][ T7123] delete_channel: no stack [ 70.659205][ T7130] netlink: 'syz.1.305': attribute type 1 has an invalid length. [ 70.662311][ T7130] netlink: 'syz.1.305': attribute type 2 has an invalid length. [ 70.666100][ T7130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=7130 comm=syz.1.305 [ 70.820895][ T7145] syz.4.311: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 70.826316][ T7145] CPU: 3 UID: 0 PID: 7145 Comm: syz.4.311 Not tainted syzkaller #0 PREEMPT(full) [ 70.826331][ T7145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.826339][ T7145] Call Trace: [ 70.826343][ T7145] [ 70.826347][ T7145] dump_stack_lvl+0x16c/0x1f0 [ 70.826364][ T7145] warn_alloc+0x248/0x3a0 [ 70.826377][ T7145] ? __pfx_warn_alloc+0x10/0x10 [ 70.826387][ T7145] ? lockdep_hardirqs_on+0x7c/0x110 [ 70.826404][ T7145] ? kasan_save_stack+0x42/0x60 [ 70.826416][ T7145] ? kasan_save_stack+0x33/0x60 [ 70.826426][ T7145] ? kasan_save_track+0x14/0x30 [ 70.826437][ T7145] ? xskq_create+0x52/0x1d0 [ 70.826446][ T7145] ? xsk_setsockopt+0x792/0x9a0 [ 70.826461][ T7145] ? do_sock_setsockopt+0xf0/0x1d0 [ 70.826476][ T7145] ? xskq_create+0xfb/0x1d0 [ 70.826486][ T7145] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 70.826506][ T7145] ? xskq_create+0xfb/0x1d0 [ 70.826519][ T7145] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 70.826539][ T7145] ? xskq_create+0xfb/0x1d0 [ 70.826549][ T7145] vmalloc_user_noprof+0x9e/0xe0 [ 70.826564][ T7145] ? xskq_create+0xfb/0x1d0 [ 70.826574][ T7145] xskq_create+0xfb/0x1d0 [ 70.826584][ T7145] xsk_setsockopt+0x792/0x9a0 [ 70.826601][ T7145] ? __pfx_xsk_setsockopt+0x10/0x10 [ 70.826617][ T7145] ? find_held_lock+0x2b/0x80 [ 70.826632][ T7145] ? selinux_socket_setsockopt+0x6a/0x80 [ 70.826647][ T7145] ? __pfx_xsk_setsockopt+0x10/0x10 [ 70.826663][ T7145] do_sock_setsockopt+0xf0/0x1d0 [ 70.826679][ T7145] __sys_setsockopt+0x1a0/0x230 [ 70.826697][ T7145] __x64_sys_setsockopt+0xbd/0x160 [ 70.826709][ T7145] ? do_syscall_64+0x91/0x4c0 [ 70.826721][ T7145] ? lockdep_hardirqs_on+0x7c/0x110 [ 70.826733][ T7145] do_syscall_64+0xcd/0x4c0 [ 70.826746][ T7145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.826758][ T7145] RIP: 0033:0x7f6991d8ebe9 [ 70.826768][ T7145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.826779][ T7145] RSP: 002b:00007f6992b4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 70.826791][ T7145] RAX: ffffffffffffffda RBX: 00007f6991fc5fa0 RCX: 00007f6991d8ebe9 [ 70.826798][ T7145] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 70.826804][ T7145] RBP: 00007f6991e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 70.826810][ T7145] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 70.826816][ T7145] R13: 00007f6991fc6038 R14: 00007f6991fc5fa0 R15: 00007ffef84e6e48 [ 70.826830][ T7145] [ 70.826833][ T7145] Mem-Info: [ 70.859740][ T7146] cgroup: release_agent respecified [ 70.861321][ T7145] active_anon:11122 inactive_anon:0 isolated_anon:0 [ 70.861321][ T7145] active_file:14021 inactive_file:40619 isolated_file:0 [ 70.861321][ T7145] unevictable:1768 dirty:1683 writeback:0 [ 70.861321][ T7145] slab_reclaimable:12299 slab_unreclaimable:70237 [ 70.861321][ T7145] mapped:24529 shmem:2399 pagetables:1111 [ 70.861321][ T7145] sec_pagetables:299 bounce:0 [ 70.861321][ T7145] kernel_misc_reclaimable:0 [ 70.861321][ T7145] free:450586 free_pcp:22863 free_cma:0 [ 70.865115][ T7146] overlayfs: failed to resolve './file0': -2 [ 70.866591][ T7145] Node 0 active_anon:44488kB inactive_anon:0kB active_file:56040kB inactive_file:162276kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98072kB dirty:6724kB writeback:0kB shmem:6060kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12432kB pagetables:4244kB sec_pagetables:1196kB all_unreclaimable? no Balloon:0kB [ 70.866622][ T7145] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:144kB pagetables:200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 70.963125][ T7145] Node 0 DMA free:15228kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:128kB local_pcp:52kB free_cma:0kB [ 70.973283][ T7145] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 70.978584][ T7145] Node 0 DMA32 free:191228kB boost:16384kB min:43900kB low:50776kB high:57652kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44488kB inactive_anon:0kB active_file:56040kB inactive_file:162276kB unevictable:3536kB writepending:6724kB present:2080628kB managed:1263472kB mlocked:0kB bounce:0kB free_pcp:75360kB local_pcp:24464kB free_cma:0kB [ 70.989160][ T7145] lowmem_reserve[]: 0 0 0 0 0 [ 70.990721][ T7145] Node 1 Normal free:1595888kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:200kB unevictable:3536kB writepending:8kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:16264kB local_pcp:3576kB free_cma:0kB [ 71.000599][ T7145] lowmem_reserve[]: 0 0 0 0 0 [ 71.002122][ T7145] Node 0 DMA: 1*4kB (M) 1*8kB (U) 1*16kB (U) 1*32kB (M) 1*64kB (U) 2*128kB (UM) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 2*4096kB (U) = 15228kB [ 71.007018][ T7145] Node 0 DMA32: 1639*4kB (UM) 655*8kB (UME) 206*16kB (UME) 263*32kB (UME) 175*64kB (UME) 125*128kB (UME) 35*256kB (UM) 27*512kB (UME) 19*1024kB (UM) 8*2048kB (U) 20*4096kB (U) = 191252kB [ 71.012936][ T7145] Node 1 Normal: 3*4kB (UE) 13*8kB (UME) 40*16kB (UE) 28*32kB (UE) 18*64kB (UE) 14*128kB (UME) 4*256kB (UE) 4*512kB (UM) 1*1024kB (E) 1*2048kB (M) 387*4096kB (UM) = 1595892kB [ 71.018558][ T7145] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 71.021465][ T7145] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 71.025211][ T7145] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 71.028660][ T7145] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 71.031497][ T7145] 57036 total pagecache pages [ 71.033014][ T7145] 0 pages in swap cache [ 71.034312][ T7145] Free swap = 124996kB [ 71.035607][ T7145] Total swap = 124996kB [ 71.036909][ T7145] 1048443 pages RAM [ 71.038302][ T7145] 0 pages HighMem/MovableOnly [ 71.039812][ T7145] 283262 pages reserved [ 71.041102][ T7145] 0 pages cma reserved [ 71.172777][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.175520][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.204809][ T7166] netlink: 'syz.4.319': attribute type 29 has an invalid length. [ 71.212371][ T7166] netlink: 'syz.4.319': attribute type 29 has an invalid length. [ 71.216221][ T7166] __nla_validate_parse: 2 callbacks suppressed [ 71.216234][ T7166] netlink: 500 bytes leftover after parsing attributes in process `syz.4.319'. [ 71.337594][ T5333] Bluetooth: hci2: command tx timeout [ 71.654369][ T7181] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 71.708899][ T7183] (syz.2.324,7183,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 71.712143][ T7183] (syz.2.324,7183,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 73.407867][ T5333] Bluetooth: hci2: command tx timeout [ 81.410402][ T1340] cfg80211: failed to load regulatory.db [ 85.052711][ T5333] Bluetooth: hci0: Unable to find connection for big 0x00 [ 85.057632][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 85.057646][ T40] audit: type=1326 audit(1756685676.130:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="syz.2.328" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479fd8ebe9 code=0x7ffc0000 [ 85.069734][ T40] audit: type=1326 audit(1756685676.130:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="syz.2.328" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479fd8ebe9 code=0x7ffc0000 [ 85.073718][ T7198] netlink: 'syz.4.329': attribute type 12 has an invalid length. [ 85.079123][ T40] audit: type=1326 audit(1756685676.130:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="syz.2.328" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f479fd8ebe9 code=0x7ffc0000 [ 85.080831][ T7198] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.329'. [ 85.089689][ T40] audit: type=1326 audit(1756685676.130:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="syz.2.328" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479fd8ebe9 code=0x7ffc0000 [ 85.101925][ T40] audit: type=1326 audit(1756685676.130:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="syz.2.328" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479fd8ebe9 code=0x7ffc0000 [ 85.111031][ T40] audit: type=1326 audit(1756685676.130:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="syz.2.328" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f479fd8ebe9 code=0x7ffc0000 [ 85.120602][ T40] audit: type=1326 audit(1756685676.130:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="syz.2.328" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479fd8ebe9 code=0x7ffc0000 [ 85.128705][ T40] audit: type=1326 audit(1756685676.130:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="syz.2.328" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479fd8ebe9 code=0x7ffc0000 [ 85.136792][ T40] audit: type=1326 audit(1756685676.130:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="syz.2.328" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f479fd8ebe9 code=0x7ffc0000 [ 85.144446][ T40] audit: type=1326 audit(1756685676.140:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="syz.2.328" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479fd8ebe9 code=0x7ffc0000 [ 85.227890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.401657][ T7217] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 85.427698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.437655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.576176][ T7219] Invalid option length (1048180) for dns_resolver key [ 85.595309][ T7222] binder: 7221:7222 ioctl c0306201 200000000080 returned -14 [ 85.678396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.704910][ T7228] netlink: 'syz.4.339': attribute type 3 has an invalid length. [ 85.712898][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.339'. [ 85.721197][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.339'. [ 85.897959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.083453][ T7245] batman_adv: batadv0: adding TT local entry 02:04:00:bf:05:00 to non-existent VLAN 1911 [ 86.167729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.171449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.176665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.179137][ T7250] netlink: 'syz.1.346': attribute type 1 has an invalid length. [ 86.203831][ T7251] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 86.210064][ T7251] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 86.213279][ T7251] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 86.307700][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.337690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.457715][ T72] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 86.540706][ T7281] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1 sclass=netlink_tcpdiag_socket pid=7281 comm=syz.1.354 [ 86.624764][ T72] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 86.628319][ T72] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.631331][ T72] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 86.634056][ T72] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.641038][ T72] usb 5-1: config 0 descriptor?? [ 86.681322][ T7321] netlink: 300 bytes leftover after parsing attributes in process `syz.1.356'. [ 86.843581][ T7334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.360'. [ 87.054842][ T72] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 87.247400][ T1340] usb 5-1: USB disconnect, device number 7 [ 87.394985][ T7360] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 87.399446][ T7363] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.404697][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.369'. [ 87.409677][ T7360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.369'. [ 87.413201][ T7361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.369'. [ 87.649461][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.376'. [ 87.705831][ T7386] Sensor A: ================= START STATUS ================= [ 87.709518][ T7386] Sensor A: Test Pattern: 75% Colorbar [ 87.711759][ T7386] Sensor A: Show Information: All [ 87.714108][ T7386] Sensor A: Vertical Flip: false [ 87.715805][ T7386] Sensor A: Horizontal Flip: false [ 87.717625][ T7386] Sensor A: Brightness: 128 [ 87.719203][ T7386] Sensor A: Contrast: 255 [ 87.721587][ T7386] Sensor A: Hue: 0 [ 87.722997][ T7386] Sensor A: Saturation: 4 [ 87.724547][ T7386] Sensor A: ================== END STATUS ================== [ 87.731693][ T7387] ntfs3: Unknown parameter 'discardú' [ 87.731874][ T7386] ntfs3: Unknown parameter 'discardú' [ 87.833711][ T7408] netlink: 36 bytes leftover after parsing attributes in process `syz.0.385'. [ 87.840024][ T7408] 9pnet_fd: p9_fd_create_unix (7408): problem connecting socket: ./file0: -111 [ 87.926019][ T7416] macvlan0: entered promiscuous mode [ 87.928073][ T7416] macvlan0: entered allmulticast mode [ 87.929797][ T7416] veth1_vlan: entered allmulticast mode [ 87.940177][ T7417] bridge_slave_0: left allmulticast mode [ 87.942365][ T7417] bridge_slave_0: left promiscuous mode [ 87.944372][ T7417] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.950520][ T7417] bridge_slave_1: left allmulticast mode [ 87.952948][ T7417] bridge_slave_1: left promiscuous mode [ 87.955453][ T7417] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.963754][ T7417] bond0: (slave bond_slave_0): Releasing backup interface [ 87.970505][ T7413] orangefs_devreq_open: device cannot be opened in blocking mode [ 87.976540][ T7417] bond0: (slave bond_slave_1): Releasing backup interface [ 87.985808][ T7417] team0: Port device team_slave_0 removed [ 87.990677][ T7417] team0: Port device team_slave_1 removed [ 87.993054][ T7417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.995344][ T7417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.001435][ T7417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.003967][ T7417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.027798][ T7423] fuse: Bad value for 'fd' [ 101.828110][ T7437] Invalid source name [ 101.829505][ T7437] UBIFS error (pid: 7437): cannot open "/dev/sg0", error -22 [ 101.840614][ T7443] overlayfs: failed to clone upperpath [ 101.903948][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 101.903963][ T40] audit: type=1400 audit(1756685692.980:462): avc: denied { setcheckreqprot } for pid=7451 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 102.036593][ T40] audit: type=1400 audit(1756685693.110:463): avc: denied { module_request } for pid=7456 comm="syz.2.401" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 102.073337][ T7462] __nla_validate_parse: 1 callbacks suppressed [ 102.073340][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.402'. [ 102.073347][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.402'. [ 102.254136][ T40] audit: type=1400 audit(1756685693.330:464): avc: denied { read } for pid=7467 comm="syz.0.404" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 102.649734][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 102.739763][ T7506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.749425][ T7506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.997751][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 103.163056][ T9] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 103.166242][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 103.169034][ T9] usb 7-1: Product: syz [ 103.170779][ T9] usb 7-1: Manufacturer: syz [ 103.172323][ T9] usb 7-1: SerialNumber: syz [ 103.177773][ T9] usb 7-1: config 0 descriptor?? [ 103.182251][ T9] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 103.184883][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 103.185414][ T40] audit: type=1400 audit(1756685694.260:465): avc: denied { getopt } for pid=7523 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.192668][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 103.198435][ T9] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 103.200987][ T9] usb 7-1: media controller created [ 103.212062][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.298689][ T7531] blkio.reset_stats is deprecated [ 103.306718][ T7534] netlink: 'syz.0.423': attribute type 4 has an invalid length. [ 103.309455][ T7534] netlink: 17 bytes leftover after parsing attributes in process `syz.0.423'. [ 103.316186][ T40] audit: type=1400 audit(1756685694.390:466): avc: denied { write } for pid=7529 comm="syz.4.422" name="sg1" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 103.387591][ T9] cxusb: set interface failed [ 103.389166][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 103.418340][ T9] DVB: Unable to find symbol mt352_attach() [ 103.423074][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 103.425928][ T9] zl10353_read_register: readreg error (reg=127, ret==-121) [ 103.428929][ T9] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 103.491271][ T7556] geneve2: entered promiscuous mode [ 103.494167][ T9] rc_core: IR keymap rc-dvico-mce not found [ 103.496825][ T9] Registered IR keymap rc-empty [ 103.502420][ T9] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 103.506886][ T9] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input8 [ 103.514844][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 103.516994][ T9] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 103.529456][ T9] usb 7-1: USB disconnect, device number 3 [ 103.560637][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'. [ 103.565091][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'. [ 103.569226][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'. [ 103.574520][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'. [ 103.579125][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'. [ 103.586895][ T40] audit: type=1400 audit(1756685694.660:467): avc: denied { write } for pid=7569 comm="syz.4.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 103.590766][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'. [ 103.595135][ T9] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 103.597596][ T40] audit: type=1400 audit(1756685694.660:468): avc: denied { add_name } for pid=7569 comm="syz.4.434" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.608912][ T40] audit: type=1400 audit(1756685694.660:469): avc: denied { create } for pid=7569 comm="syz.4.434" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 103.616382][ T40] audit: type=1400 audit(1756685694.660:470): avc: denied { associate } for pid=7569 comm="syz.4.434" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 103.667634][ T7581] tipc: Started in network mode [ 103.669243][ T7581] tipc: Node identity 060000000000000007, cluster identity 4711 [ 103.795882][ T7602] mmap: syz.0.444 (7602): VmData 29339648 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 103.833262][ T7609] i2c i2c-1: Invalid block write size 34 [ 103.867387][ T7609] autofs: Unknown parameter '0xffffffffffffffffÿÿ18446744073709551615' [ 103.936226][ T40] audit: type=1400 audit(1756685695.010:471): avc: denied { bind } for pid=7620 comm="syz.1.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 104.700748][ T7684] usb usb8: usbfs: process 7684 (syz.4.470) did not claim interface 0 before use [ 104.922394][ T7704] netlink: 'syz.1.478': attribute type 8 has an invalid length. [ 105.012291][ T7717] overlayfs: failed to clone upperpath [ 105.251809][ T7743] netlink: 'syz.2.492': attribute type 3 has an invalid length. [ 105.255890][ T7743] netlink: 'syz.2.492': attribute type 1 has an invalid length. [ 105.262220][ T7299] Bluetooth: hci4: Frame reassembly failed (-84) [ 105.262529][ T7743] NCSI netlink: No device for ifindex 0 [ 105.277221][ T7749] program syz.4.494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.278350][ T7748] program syz.4.494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.283870][ T7749] netlink: zone id is out of range [ 105.284459][ T7748] netlink: zone id is out of range [ 105.285850][ T7749] netlink: zone id is out of range [ 105.288049][ T7748] netlink: zone id is out of range [ 105.290169][ T7749] netlink: del zone limit has 4 unknown bytes [ 105.291835][ T7748] netlink: del zone limit has 4 unknown bytes [ 105.295577][ T7746] syzkaller0: entered promiscuous mode [ 105.297459][ T7746] syzkaller0: entered allmulticast mode [ 106.326555][ T7792] ================================================================== [ 106.326570][ T7792] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 106.326618][ T7792] Write of size 8 at addr ffffc90005351000 by task syz.4.505/7792 [ 106.326633][ T7792] [ 106.326641][ T7792] CPU: 3 UID: 0 PID: 7792 Comm: syz.4.505 Not tainted syzkaller #0 PREEMPT(full) [ 106.326662][ T7792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.326674][ T7792] Call Trace: [ 106.326680][ T7792] [ 106.326686][ T7792] dump_stack_lvl+0x116/0x1f0 [ 106.326713][ T7792] print_report+0xcd/0x630 [ 106.326731][ T7792] ? __virt_addr_valid+0x81/0x610 [ 106.326756][ T7792] ? sys_imageblit+0x1a6f/0x1e60 [ 106.326776][ T7792] kasan_report+0xe0/0x110 [ 106.326793][ T7792] ? sys_imageblit+0x1a6f/0x1e60 [ 106.326815][ T7792] sys_imageblit+0x1a6f/0x1e60 [ 106.326838][ T7792] ? __pfx_sys_imageblit+0x10/0x10 [ 106.326859][ T7792] ? do_raw_spin_lock+0x12c/0x2b0 [ 106.326881][ T7792] ? queue_work_on+0x12a/0x1f0 [ 106.326899][ T7792] ? lockdep_hardirqs_on+0x7c/0x110 [ 106.326923][ T7792] ? queue_work_on+0x8b/0x1f0 [ 106.326942][ T7792] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 106.326962][ T7792] bit_putcs+0x90f/0xde0 [ 106.326986][ T7792] ? __pfx_bit_putcs+0x10/0x10 [ 106.327008][ T7792] ? fb_get_color_depth+0x120/0x250 [ 106.327024][ T7792] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.327046][ T7792] ? __pfx_bit_putcs+0x10/0x10 [ 106.327063][ T7792] fbcon_putcs+0x384/0x4a0 [ 106.327091][ T7792] do_update_region+0x2e6/0x3f0 [ 106.327117][ T7792] csi_J+0x545/0xad0 [ 106.327147][ T7792] do_con_write+0x41d7/0x8280 [ 106.327166][ T7792] ? rcu_is_watching+0x12/0xc0 [ 106.327188][ T7792] ? trace_contention_end+0xdd/0x130 [ 106.327212][ T7792] ? __pfx___mutex_lock+0x10/0x10 [ 106.327233][ T7792] ? __pfx_do_con_write+0x10/0x10 [ 106.327257][ T7792] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 106.327280][ T7792] ? con_write+0x93/0xb0 [ 106.327300][ T7792] con_write+0x23/0xb0 [ 106.327318][ T7792] n_tty_write+0x41c/0x11e0 [ 106.327347][ T7792] ? __pfx_n_tty_write+0x10/0x10 [ 106.327369][ T7792] ? rcu_is_watching+0x12/0xc0 [ 106.327391][ T7792] ? __pfx_woken_wake_function+0x10/0x10 [ 106.327420][ T7792] ? kfree+0x24f/0x4d0 [ 106.327448][ T7792] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 106.327469][ T7792] ? __pfx_n_tty_write+0x10/0x10 [ 106.327491][ T7792] file_tty_write.constprop.0+0x504/0x9b0 [ 106.327535][ T7792] vfs_write+0x7d3/0x11d0 [ 106.327554][ T7792] ? __pfx_tty_write+0x10/0x10 [ 106.327575][ T7792] ? __pfx_vfs_write+0x10/0x10 [ 106.327591][ T7792] ? find_held_lock+0x2b/0x80 [ 106.327619][ T7792] ksys_write+0x12a/0x250 [ 106.327637][ T7792] ? __pfx_ksys_write+0x10/0x10 [ 106.327657][ T7792] do_syscall_64+0xcd/0x4c0 [ 106.327679][ T7792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.327698][ T7792] RIP: 0033:0x7f6991d8ebe9 [ 106.327713][ T7792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.327730][ T7792] RSP: 002b:00007f6992b4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 106.327749][ T7792] RAX: ffffffffffffffda RBX: 00007f6991fc5fa0 RCX: 00007f6991d8ebe9 [ 106.327760][ T7792] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000004 [ 106.327772][ T7792] RBP: 00007f6991e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 106.327781][ T7792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.327791][ T7792] R13: 00007f6991fc6038 R14: 00007f6991fc5fa0 R15: 00007ffef84e6e48 [ 106.327808][ T7792] [ 106.327814][ T7792] [ 106.327819][ T7792] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90005051000 allocated at drm_gem_shmem_vmap_locked+0x561/0x7e0 [ 106.327863][ T7792] Memory state around the buggy address: [ 106.327874][ T7792] ffffc90005350f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 106.327887][ T7792] ffffc90005350f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 106.327901][ T7792] >ffffc90005351000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 106.327911][ T7792] ^ [ 106.327920][ T7792] ffffc90005351080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 106.327934][ T7792] ffffc90005351100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 106.327944][ T7792] ================================================================== [ 106.328786][ T7792] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 106.328797][ T7792] CPU: 2 UID: 0 PID: 7792 Comm: syz.4.505 Not tainted syzkaller #0 PREEMPT(full) [ 106.328811][ T7792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.328818][ T7792] Call Trace: [ 106.328822][ T7792] [ 106.328827][ T7792] dump_stack_lvl+0x3d/0x1f0 [ 106.328843][ T7792] vpanic+0x6e8/0x7a0 [ 106.328861][ T7792] ? __pfx_vpanic+0x10/0x10 [ 106.328878][ T7792] ? __pfx_vprintk_emit+0x10/0x10 [ 106.328894][ T7792] ? sys_imageblit+0x1a6f/0x1e60 [ 106.328909][ T7792] panic+0xca/0xd0 [ 106.328926][ T7792] ? __pfx_panic+0x10/0x10 [ 106.328943][ T7792] ? sys_imageblit+0x1a6f/0x1e60 [ 106.328957][ T7792] ? preempt_schedule_common+0x44/0xc0 [ 106.328969][ T7792] ? preempt_schedule_thunk+0x16/0x30 [ 106.328986][ T7792] check_panic_on_warn+0xab/0xb0 [ 106.328996][ T7792] end_report+0x107/0x170 [ 106.329009][ T7792] kasan_report+0xee/0x110 [ 106.329022][ T7792] ? sys_imageblit+0x1a6f/0x1e60 [ 106.329038][ T7792] sys_imageblit+0x1a6f/0x1e60 [ 106.329054][ T7792] ? __pfx_sys_imageblit+0x10/0x10 [ 106.329069][ T7792] ? do_raw_spin_lock+0x12c/0x2b0 [ 106.329083][ T7792] ? queue_work_on+0x12a/0x1f0 [ 106.329095][ T7792] ? lockdep_hardirqs_on+0x7c/0x110 [ 106.329107][ T7792] ? queue_work_on+0x8b/0x1f0 [ 106.329119][ T7792] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 106.329132][ T7792] bit_putcs+0x90f/0xde0 [ 106.329146][ T7792] ? __pfx_bit_putcs+0x10/0x10 [ 106.329159][ T7792] ? fb_get_color_depth+0x120/0x250 [ 106.329169][ T7792] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.329183][ T7792] ? __pfx_bit_putcs+0x10/0x10 [ 106.329194][ T7792] fbcon_putcs+0x384/0x4a0 [ 106.329211][ T7792] do_update_region+0x2e6/0x3f0 [ 106.329227][ T7792] csi_J+0x545/0xad0 [ 106.329246][ T7792] do_con_write+0x41d7/0x8280 [ 106.329259][ T7792] ? rcu_is_watching+0x12/0xc0 [ 106.329273][ T7792] ? trace_contention_end+0xdd/0x130 [ 106.329285][ T7792] ? __pfx___mutex_lock+0x10/0x10 [ 106.329298][ T7792] ? __pfx_do_con_write+0x10/0x10 [ 106.329310][ T7792] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 106.329325][ T7792] ? con_write+0x93/0xb0 [ 106.329337][ T7792] con_write+0x23/0xb0 [ 106.329348][ T7792] n_tty_write+0x41c/0x11e0 [ 106.329365][ T7792] ? __pfx_n_tty_write+0x10/0x10 [ 106.329379][ T7792] ? rcu_is_watching+0x12/0xc0 [ 106.329393][ T7792] ? __pfx_woken_wake_function+0x10/0x10 [ 106.329406][ T7792] ? kfree+0x24f/0x4d0 [ 106.329421][ T7792] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 106.329434][ T7792] ? __pfx_n_tty_write+0x10/0x10 [ 106.329448][ T7792] file_tty_write.constprop.0+0x504/0x9b0 [ 106.329462][ T7792] vfs_write+0x7d3/0x11d0 [ 106.329473][ T7792] ? __pfx_tty_write+0x10/0x10 [ 106.329484][ T7792] ? __pfx_vfs_write+0x10/0x10 [ 106.329494][ T7792] ? find_held_lock+0x2b/0x80 [ 106.329511][ T7792] ksys_write+0x12a/0x250 [ 106.329522][ T7792] ? __pfx_ksys_write+0x10/0x10 [ 106.329535][ T7792] do_syscall_64+0xcd/0x4c0 [ 106.329548][ T7792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.329559][ T7792] RIP: 0033:0x7f6991d8ebe9 [ 106.329567][ T7792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.329578][ T7792] RSP: 002b:00007f6992b4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 106.329589][ T7792] RAX: ffffffffffffffda RBX: 00007f6991fc5fa0 RCX: 00007f6991d8ebe9 [ 106.329596][ T7792] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000004 [ 106.329603][ T7792] RBP: 00007f6991e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 106.329610][ T7792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.329616][ T7792] R13: 00007f6991fc6038 R14: 00007f6991fc5fa0 R15: 00007ffef84e6e48 [ 106.329627][ T7792] [ 106.330292][ T7792] Kernel Offset: disabled VM DIAGNOSIS: 00:14:57 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff888032540000 RSI=ffffffff81608c38 RDI=ffffffff93db9fe0 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27b73fc R10=ffffffff93db9fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb6dd870880 ffffffff 00c00000 GS =0000 ffff8880d66b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055557cb45808 CR3=000000005d5b7000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000007f7f7e0 Opmask01=000000000000001f Opmask02=000000000100001f Opmask03=0000000020400004 Opmask04=00000000fbffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeac14e120 00007ffeac14e120 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeac14e070 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c94aeced60 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c94ae7dd88 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6dd1f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ff00000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a7fe360cdcfea 2a2a7fe360cdcfea ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a559cf7200a48 2a2a2a2a2a2a2a2a ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f7379732f002f73 75622f7379732f00 2f6d657473797362 75732f7379732f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a565c560a000a56 50470a565c560a00 0a484051565c5647 50560a565c560a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c94ac324b0 000055c94ae7be80 000055c94ae6ff40 000055c94ae68f60 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001c1 6c2f0073656c7572 000055c94a003400 306d656d702f6b63 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7766736c2c346d2c 383261722c463831 2c4538312c443831 2c4338312c423831 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c4138312c393831 2c3838312c373831 2c3638312c353831 2c3438312c333831 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c3238312c313831 2c3038312c463731 2c4537312c443731 2c4337312c423731 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c4137312c393731 2c3837312c373731 2c3637312c353731 2c3437312c333731 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff888036018000 RSI=ffffffff81608c38 RDI=ffffffff93db9fe0 RBP=0000000000000001 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff27b73fc R10=ffffffff93db9fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c352a71 CR3=00000000513a2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4a51d420 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4a51d5a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4a51d5a6 00007ffc4a51d5ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f479fe12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f479fe12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f479fe12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f479fe12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f479fe12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f479fe12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643cf5 RDI=ffffffff9b1120a0 RBP=ffffffff9b112060 RSP=ffffc9000376ef58 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b112060 R15=ffffffff85643c90 RIP=ffffffff85643d1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f6992b4f6c0 ffffffff 00c00000 GS =0000 ffff8880d68b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2e829c7dac CR3=000000005d561000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc66fa6116 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc66fa6116 00007ffc66fa611c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e82812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e82812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e82812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e82812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e82812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e82812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e829974a8 00007f2e829974a0 00007f2e82997498 00007f2e82997470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e834fd100 00007f2e82997460 00007f2e82997478 00007f2e829974c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e829974b8 00007f2e829974b0 00007f2e829974a8 00007f2e829974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff8880305d8000 RSI=ffffffff81608c38 RDI=ffffffff93db9fe0 RBP=0000000000000003 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff27b73fc R10=ffffffff93db9fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7660f45c80 ffffffff 00c00000 GS =0000 ffff8880d69b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000002000 CR3=0000000033cc5000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f8000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056269fd4c600 000056269fd4c600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc83586d10 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f76656462665f6d 726420205d323937 3754205b5d323439 3632332e36303120 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343130322f31302f 343020312b32316f 70627e322d332e36 312e312d6e616962 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65642d332e36312e 3120534f4942202c 2939303032202c39 484349202b203533 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5128204350206472 61646e6174532055 4d4551203a656d61 6e20657261776472 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6148205d32393737 54205b5d32363636 32332e3630312020 5b203a6c656e7265 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000