last executing test programs: 9.850038907s ago: executing program 2 (id=127): openat$autofs(0xffffffffffffff9c, 0x0, 0x80000, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x12, 0xff, 0x0, @empty}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) (async) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000740)={0x21}, 0x8) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@ipv4_deladdr={0x17, 0x15, 0x1, 0x80}, 0x18}}, 0x0) (async, rerun: 32) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) (async, rerun: 32) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x20007}]}}]}, 0xa4}}, 0x0) 9.660623236s ago: executing program 2 (id=131): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01072bbd70000000001a05"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) close(r2) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r0) 9.659571562s ago: executing program 2 (id=132): ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000440)={0x4, &(0x7f0000000040)=""/147, &(0x7f00000003c0)=[{0x5, 0x5b, 0x4, &(0x7f0000000100)=""/91}, {0x7, 0x69, 0x7, &(0x7f0000000200)=""/105}, {0x1, 0xe1, 0x8, &(0x7f0000000280)=""/225}, {0x9, 0x2c, 0x7, &(0x7f0000000380)=""/44}]}) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8041}, 0x80000d4) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) (async) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f00000000c0)={0x0, 0x1, 0x8, &(0x7f0000000040)={0x1b, "1a0c149da4693f2542000000007f98bba3d23098936688731f1de08638c487719d"}}) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) (async) r9 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) (async) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000980)={0x1d4, r2, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x80, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x88001}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x23}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}]}]}, @NL80211_ATTR_REG_RULES={0xd0, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9ec5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xdd5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xae}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0xfffffffffffffe76, 0x5, 0x80000001}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x18, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x38, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fffffff}]}, {0x4}, {0x4}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x38}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000014}, 0x20040000) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0x2, 0x10002, 0x14, 0xe, 0x0, 0x3, 0x7, 0xa, 0x1, 0x7, 0x4, 0xff6b, 0x801, 0xfffffffe, 0x4, 0x2, 0x2, 0x3, 0x40000003, 0x978, 0xcaa7, 0x1ff, 0x20001e58, 0xb, 0xe6b, 0x3c, 0x8, 0x65c, 0x0, 0xfffffff8]}) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000000300)={0x2, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) getsockopt$inet6_buf(r9, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) r11 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r5, &(0x7f00000001c0)={0x10000008}) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x2c, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffbff, 0x2d}}}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x2c}}, 0x0) 9.598751047s ago: executing program 2 (id=134): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000002000128008000100677470001400028008000200", @ANYRES32=r2], 0x40}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c0015003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) setreuid(0x0, 0xee01) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x4480, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$CDROM_DEBUG(r3, 0x5330, 0x1) ioctl$CDROMVOLCTRL(r3, 0x31f, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x9}) (async) ioctl$CDROMVOLCTRL(r3, 0x31f, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x9}) socket$caif_stream(0x25, 0x1, 0x80000005) (async) socket$caif_stream(0x25, 0x1, 0x80000005) 9.539539693s ago: executing program 2 (id=136): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}, 0x1, 0x6c00}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x66}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x88b}]}, 0x30}, 0x1, 0x0, 0x0, 0x8880}, 0x24000044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x41000, 0x1}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000080)={0xa}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000180)="d4", 0x1, 0xf5, &(0x7f0000000200)={0xa, 0x4e23, 0x80000001, @loopback, 0x9}, 0x1c) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000010e53820052ae89a01100081000000ffba07000000000091c536c35783f9bc8138d31b41e3482ed23c4a113408a0b0a949da7c6fcf221e7b02ecb9b0a1738515f002a3a5915caad5ebe33e85043e7921dd0bc3131c76a9bcd2c39fdd690a2a908475fd056324283b4f2a1d2a37f88a729f59aea05db09f3f8ae6ffbf8c2f28bd93f5c895cb62d3eaca69609e12e765e03ef4"], 0x18}, 0xfc40) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000000)={0x0, 0x6, 0x4, 0x0, 0x10}) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x6, 0x2, 0x80000000}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x3c}}, 0x8001) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0xac}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94) r12 = syz_io_uring_setup(0x57c4, &(0x7f0000003000)={0x0, 0x5290, 0x10000, 0x2, 0x2db}, &(0x7f0000003080), &(0x7f00000030c0)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r12, 0x1e, &(0x7f0000003100), 0x1) getsockopt$sock_int(r10, 0x1, 0x4, 0x0, &(0x7f0000000080)) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x48004}, 0x4800) 8.70020744s ago: executing program 2 (id=154): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0x40045010, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f7465616d"], 0x110}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (async) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r1, 0x40045010, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f7465616d"], 0x110}}, 0x0) (async) 2.196856382s ago: executing program 3 (id=262): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x241}], 0x1}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (rerun: 64) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000400)=0x3) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x8, r0}, 0x18) (async) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xffff}, {0x10000, 0xffff}, {0x2, 0xc}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x6}]}}]}, 0x38}}, 0x0) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [], {0x4, 0x4}, [], {0x10, 0x2}}, 0x24, 0x1) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x0, 0xffff9f04, 0x0, 0x6aa, 0x12281, 0x1, 0x3, '\x00', r3, r5, 0x1, 0x4, 0x5, 0x0, @void, @value, @value=r6}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async, rerun: 32) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}}, 0x84) (async) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYRES16=r6, @ANYRES64=r5], 0x7c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) fcntl$getownex(r8, 0x10, &(0x7f0000000000)) 2.100595649s ago: executing program 3 (id=263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x8, &(0x7f0000000180)=[{0x9, 0x6, 0x7e, 0x800}, {0x1800, 0x4, 0x2}, {0x200, 0xff, 0x1, 0x1}, {0x0, 0x1, 0xfd, 0x3}, {0x2, 0x8, 0x0, 0x7}, {0x1, 0x7, 0x4e, 0x1}, {0x7, 0x7, 0x8, 0x6}, {0x4, 0x3, 0xda, 0x19}]}) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000200)=""/208, 0xd0}], 0x1}, 0x160) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score\x00') dup3(r0, r4, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x0, r4}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000100)={'wg1\x00', @remote}) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r6, 0x0, 0x0}, 0x10) write$sysctl(r4, &(0x7f0000000000)='1\x00', 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) (async) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x8, &(0x7f0000000180)=[{0x9, 0x6, 0x7e, 0x800}, {0x1800, 0x4, 0x2}, {0x200, 0xff, 0x1, 0x1}, {0x0, 0x1, 0xfd, 0x3}, {0x2, 0x8, 0x0, 0x7}, {0x1, 0x7, 0x4e, 0x1}, {0x7, 0x7, 0x8, 0x6}, {0x4, 0x3, 0xda, 0x19}]}) (async) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000200)=""/208, 0xd0}], 0x1}, 0x160) (async) syz_open_procfs(0x0, &(0x7f0000000080)='oom_score\x00') (async) dup3(r0, r4, 0x0) (async) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x0, r4}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000100)={'wg1\x00', @remote}) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r6, 0x0, 0x0}, 0x10) (async) write$sysctl(r4, &(0x7f0000000000)='1\x00', 0x2) (async) 2.050143825s ago: executing program 3 (id=264): add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00', 0x6, r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r4, r3, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) 1.949878218s ago: executing program 3 (id=265): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x8, &(0x7f0000000040)=[{0x6, 0x10, 0x0, 0x7fff0000}, {0x0, 0x9, 0x4, 0x3eb2af58}, {0x9, 0x9, 0x3}, {0x2, 0x0, 0x8, 0x8}, {0xd, 0x9, 0x5, 0x3}, {0x8, 0x0, 0x6, 0x4cab20ef}, {0x70, 0xfb, 0x4, 0x4}, {0xe, 0x2, 0x4, 0x7}]}) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ff00317fd6a90000100027800c000180087c8fa4a451a5d6feb0dd377bbe78675d0001002da9ad605f2800000000", @ANYRES32, @ANYBLOB="0c000400dd0c0000000000000c000200ffff000000080000"], 0x3c}}, 0x20000000) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x7df1, 0x101000) ioctl$SG_BLKSECTGET(r5, 0x1267, &(0x7f0000000180)) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000380)="3b9f5042fce0ca92e698e80670b7b4706c19157e07729185462eca23c2de2c14884be7004f19d413b462c2434d844f7b34854fa927b6e46703647207a5aea9e7122dc1b16dac397cea372a3b4b3867458d58e325e92340f28fd0fd82", 0x5c}], 0x1) r9 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) sendmmsg$alg(r9, &(0x7f00000000c0), 0x492492492492627, 0x0) r10 = accept$ax25(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @rose}, [@bcast, @bcast, @remote, @rose, @null, @netrom, @bcast, @null]}, &(0x7f00000000c0)=0x48) close_range(r10, r10, 0x0) recvmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) poll(&(0x7f00000002c0)=[{r0, 0x34e5}], 0x1, 0x40) 1.867556342s ago: executing program 3 (id=266): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = io_uring_setup(0x497a, &(0x7f00000001c0)) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4880}], 0x1, 0x80001) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="0000005f0a9600010400002f"]) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) (async) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000540)={'batadv_slave_0\x00', 0x4000}) (async) r7 = signalfd4(r5, &(0x7f0000000400)={[0xe20]}, 0x8, 0xc00) r8 = openat(r7, &(0x7f0000000080)='./file0\x00', 0x1a1842, 0x1) (async) mkdir(0x0, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TDLS_MGMT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000002a16e3dab10dcd3e7d4f37f0ee0e7a7c4eb069d32fd4239e13c0e18d395a71bdda597bd8a9fcdad2928bdf2d82426be55206fcff46f8666b90cf20aea487292370200722b7b5b02695f3cee5a0576e1ef794aa25ae447cad72cf829ebe93374bc1893b68eab144a45852259cc8e45fbb8effa8c402a6f5925d193d9e5c433fcb1211aaaf199a3071430f0c1c78731a6b93567b1ccd4591459cc54e64084acb13438213f5388904c84ffeae1e10d86e8e3d866156", @ANYRES16=r10, @ANYBLOB="010029bd7000fbdbdf255200000004002a000600480053000000050089003c0000000500880003000000"], 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x24000880) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="200029bd7000fedbdf25440000000c0099001ccb4f0f660000000400cc000a00180003030303030300000400cc000c0500fd3d010501000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x8c1}, 0x4004044) (async) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000000)="8981f23689eb65be16f4264404ead3486d8a823382092e64c0800d8de6d01309d6a7e6c1c52167af", 0x28) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) 1.866015815s ago: executing program 3 (id=267): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b00010000000009040000010158bf00090509"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x4) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r6, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x7}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x2}, {}, {}, @connect={{0x6, 0x1}, {0x6, 0xf}}}, {0x13, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x80}, @raw8={"f81c703db135dc80a185eb39"}}, {0x0, 0x0, 0x0, 0x0, @time={0x6}, {}, {0x0, 0xfd}, @time}], 0x70) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000240)) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r7 = accept4$unix(r5, 0x0, 0x0, 0x800) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000081dd22104c052e000005010203010902120001000000000904000000f704", @ANYRES32], 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="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"/721], 0x270}, 0x1, 0x0, 0x0, 0x804}, 0x0) recvfrom$unix(r7, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) r11 = syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4601) ioctl$DRM_IOCTL_MODESET_CTL(r11, 0x40086408, &(0x7f0000000000)={0x2, 0xb1}) 1.010778742s ago: executing program 1 (id=276): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f00003b7000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x24}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newqdisc={0x148, 0x24, 0xd0f, 0xffffffff, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "1d01000080b9639cda1554de667145238cfe634ebf62812d9ee1a5246cdcd657af6d8526e028059d2dd72fc3aef8fb5e51a294ea4d7090fba24662c7698fce7b84dbacba6bdcf51e642fce176ef4962b254f798c53f18d96841c2940e5a0049fb2e6c126d8b49da8378b0c5c6b321632339f59f4773aa2f2457985b0842691990da8447b7b4a63e37dbb547300c4c55aa5b0e91123fda1a374537f7901297ff26d16d7beefc6bef8e448eb58b3d478fdfbf0dc18581e29a8e7287015fa699edaaed818f95817335467b7fb3716b9e44d9ef8d54343a04cbe3f22ae18d72d994e0c4e493a1c9f2812fd8d5e68f97da8757553c2dbd72400"}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x3, 0x8, 0x7, 0x0, 0x15, 0x6}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4940}, 0x400081c) 920.651601ms ago: executing program 1 (id=277): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) cachestat(r0, &(0x7f0000000040), &(0x7f000009de80), 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a000000205800034824ca945f6400940f6a0325010ebc000000000000008000f0", 0x3a}], 0x1) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendfile(r2, r0, &(0x7f0000000080)=0x3, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x1, 0x0, &(0x7f0000000000)="06", 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 920.237453ms ago: executing program 1 (id=278): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mlock2(&(0x7f0000412000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000008c0)='uid_map\x00') preadv(r0, &(0x7f0000002d80)=[{&(0x7f0000000940)=""/178, 0xb2}], 0x1, 0x200, 0x3) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1080400, &(0x7f0000000140)={[{@verity_on}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_off}, {@redirect_dir_off}, {@xino_off}, {@metacopy_on}, {@uuid_on}, {@volatile}]}) 689.461441ms ago: executing program 1 (id=279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000008000000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0ff50000000bf8600000000000004080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0xf00, 0x0, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 688.983192ms ago: executing program 1 (id=280): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="020025bd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="83d8bb73ae850e8f3e92a4604cdca9eb95e1e5833a5a3809994118632f25fa5373f35a8583e3bac71fe76d148b2c3a00eb12f57de12bbacf91cb292fc10e982f18c40fe60f00000000000000c94b910e5df8cfb9ca56ba61805d61b44cd0fa19daf4c05c81999fd5f66c456b88246afae7dcda1e4d4529b13dc78f50988d62ee1e1335d0f36ef2fd88931109cac49b39de899b34b12833ddf3e9abc3a10f01a39e2e7a67e1c26067f89d53713f42564a47957515b7f6ef3dd15915e0d1fa5b7170d351c9882c43660df4e2ec671b7853d21756ec93e4fec2111297"], 0x3c}, 0x1, 0x0, 0x0, 0x400c094}, 0x20000080) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x14fc40, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x1f) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)={0x284, r1, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_LLC_SDP={0x16c, 0x13, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [{0x10, 0x1, '/dev/nullb0\x00'}, {0x7, 0x1, '+(.'}]}, {0xc, 0x0, 0x0, 0x1, [{0x6, 0x1, '}k'}]}, {0x90, 0x0, 0x0, 0x1, [{0x4}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0xa, 0x1, 'wpan3\x00'}, {0xd, 0x1, 'nl802154\x00'}, {0xd, 0x1, 'nl802154\x00'}, {0xd, 0x1, 'nl802154\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x8, 0x1, 'nfc\x00'}, {0x6, 0x1, '(]'}]}, {0x58, 0x0, 0x0, 0x1, [{0x5, 0x1, ']'}, {0x9, 0x1, 'phy1\x00'}, {0x6, 0x1, '-.'}, {0x4}, {0x6, 0x1, '\\)'}, {0x7, 0x1, '\xb0,\\'}, {0x10, 0x1, '/dev/nullb0\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}]}, {0x28, 0x0, 0x0, 0x1, [{0x12, 0x1, '\\&#][^)\xb3\\-+\'.\''}, {0x10, 0x1, '/dev/nullb0\x00'}]}, {0x30, 0x0, 0x0, 0x1, [{0x10, 0x1, '-p*\x1f%:)-s*,['}, {0x9, 0x1, ':$\\\xd5&'}, {0x5, 0x1, '('}, {0x6, 0x1, '##'}]}]}, @NFC_ATTR_LLC_SDP={0xa8, 0x13, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [{0x8, 0x1, 'nfc\x00'}]}, {0x7c, 0x0, 0x0, 0x1, [{0xd, 0x1, 'nl802154\x00'}, {0x5, 0x1, '&'}, {0x9, 0x1, 'phy1\x00'}, {0x10, 0x1, '/dev/nullb0\x00'}, {0xa, 0x1, '@^\\*])'}, {0x9, 0x1, 'phy1\x00'}, {0x9, 0x1, '//+(.'}, {0xc, 0x1, ']\'))/[-/'}, {0x8, 0x1, '+:\xbd/'}, {0xa, 0x1, 'wpan3\x00'}]}, {0x1c, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, ']^!-]@'}, {0x8, 0x1, 'nfc\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_LLC_SDP={0x44, 0x13, 0x0, 0x1, [{0x4}, {0x10, 0x0, 0x0, 0x1, [{0x9, 0x1, 'phy1\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x5, 0x1, '-'}, {0x4}, {0x9, 0x1, 'phy1\x00'}, {0x6, 0x1, '}&'}, {0x5, 0x1, ':'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x284}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r7) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000240)={0x34, r8, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4044084) sendmsg$NFC_CMD_ACTIVATE_TARGET(r7, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, r1, 0x100, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8083}, 0x2) (async) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088}, 0x20000000) 489.68077ms ago: executing program 1 (id=282): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000280), 0x4, 0x489900) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f00000002c0)=0x2e7f83da) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) setuid(0xee01) r2 = semget$private(0x0, 0x4, 0x29b) semop(r2, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x108}, 0x476d, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) semctl$GETZCNT(r2, 0x0, 0xf, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004084}, 0x4008000) recvmsg(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x53}], 0x1}, 0x40fd) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000100)={0x7, 0x2, @name="a1b81f777e060ed680f23271b1ed085fa143f25fdf099e70eea8ad37b52219c0"}) write$sndseq(r6, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x1, {}, {}, @result={0x1f00}}], 0x1c) 489.483965ms ago: executing program 0 (id=283): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x20132, 0xffffffffffffffff, 0x391e1000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r5, &(0x7f0000000000), &(0x7f0000000500)=""/216}, 0x20) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYRESDEC]) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@setlink={0x20, 0x10, 0x401, 0x2000000, 0xfffffffc}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20040011) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (async) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x20132, 0xffffffffffffffff, 0x391e1000) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) (async) close(r2) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000300), &(0x7f0000000400)=r2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r5, &(0x7f0000000000), &(0x7f0000000500)=""/216}, 0x20) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYRESDEC]) (async) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@setlink={0x20, 0x10, 0x401, 0x2000000, 0xfffffffc}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20040011) (async) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) (async) 286.186691ms ago: executing program 0 (id=284): r0 = socket$alg(0x26, 0x5, 0x0) poll(&(0x7f0000000080)=[{r0, 0x600}, {r0}], 0x2, 0x40) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad56b6cc0400aeb995298992ea5400c29599f2ec2494f749bb500bea8f7c55181f13268d68be57bcf0bfb7d4ce74af258e7deb2a236ae361ee2241da199119f2f2d6d317a85ff91e2ecfaeb87f8bbf3466e3db2b72605b861a14a66ff71b46d2883896cf57", 0x65) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610438000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) (rerun: 32) 284.844691ms ago: executing program 0 (id=285): io_setup(0x8, &(0x7f0000004200)) io_setup(0x3, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') io_setup(0x3083, &(0x7f0000000000)) io_setup(0xa, &(0x7f0000000040)) io_setup(0x8, &(0x7f00000001c0)) 130.596321ms ago: executing program 0 (id=286): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x400, &(0x7f0000000080)=ANY=[@ANYBLOB="6d656d6f72795f72656375727369766570726f742c001519585a345a865e59cdbee2ccc65702ac8e2f00"/54]) 130.245872ms ago: executing program 0 (id=287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000200), 0x4) chdir(&(0x7f0000000100)='./file0\x00') r2 = epoll_create1(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1220000, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(blake2b-512-generic)\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000027c0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="ca", 0x1}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0xe803) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r9) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r9, 0x1, 0x24, &(0x7f0000000040)=0x2, 0x4) listen(r9, 0x9) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x9}, {0xffff}, {0x7, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2001c061}, 0x8000) 0s ago: executing program 0 (id=288): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000100)=0x2, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000180), &(0x7f00000000c0)=@udp, 0x2}, 0x20) lsm_get_self_attr(0x68, 0x0, &(0x7f0000001200), 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800) splice(r1, &(0x7f00000000c0)=0x3ef, 0xffffffffffffffff, &(0x7f0000000140)=0x7, 0x40, 0x1) 0s ago: executing program 2 (id=289): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) (async) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x3b, 0x0, &(0x7f0000000380)=0x10) read$hidraw(r1, &(0x7f0000000080)=""/201, 0xc9) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="448000af1a97bdd86ef419b2ee1f7e0010001fff", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000240012800b0001006272696467650000140002800800050001000000080001001c004aa0"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): [ 44.155080][ T40] audit: type=1400 audit(1759437547.736:61): avc: denied { siginh } for pid=5866 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:7665' (ED25519) to the list of known hosts. [ 45.259610][ T40] audit: type=1400 audit(1759437548.876:62): avc: denied { name_bind } for pid=5910 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.284540][ T40] audit: type=1400 audit(1759437548.896:63): avc: denied { write } for pid=5911 comm="sh" path="pipe:[3422]" dev="pipefs" ino=3422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.307135][ T40] audit: type=1400 audit(1759437548.916:64): avc: denied { execute } for pid=5911 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.313863][ T40] audit: type=1400 audit(1759437548.926:65): avc: denied { execute_no_trans } for pid=5911 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.425828][ T40] audit: type=1400 audit(1759437551.036:66): avc: denied { mounton } for pid=5911 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.439339][ T5911] cgroup: Unknown subsys name 'net' [ 47.620447][ T5911] cgroup: Unknown subsys name 'cpuset' [ 47.625081][ T5911] cgroup: Unknown subsys name 'rlimit' [ 47.824926][ T5929] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.603980][ T5911] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.100083][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 52.100095][ T40] audit: type=1400 audit(1759437555.716:80): avc: denied { execmem } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.407526][ T40] audit: type=1400 audit(1759437556.026:81): avc: denied { create } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.415684][ T40] audit: type=1400 audit(1759437556.026:82): avc: denied { read write } for pid=5939 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.424040][ T40] audit: type=1400 audit(1759437556.026:83): avc: denied { open } for pid=5939 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.432115][ T40] audit: type=1400 audit(1759437556.026:84): avc: denied { ioctl } for pid=5939 comm="syz-executor" path="socket:[6611]" dev="sockfs" ino=6611 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.455696][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.456397][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.459405][ T5950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.461321][ T5951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.462616][ T5947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.463075][ T5947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.463547][ T5947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.464218][ T5947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.464704][ T5950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.465153][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.465756][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.466018][ T5950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.468382][ T5953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.480058][ T40] audit: type=1400 audit(1759437556.086:85): avc: denied { read } for pid=5952 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.484280][ T5956] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.485026][ T40] audit: type=1400 audit(1759437556.086:86): avc: denied { open } for pid=5952 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.489033][ T5956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.496842][ T40] audit: type=1400 audit(1759437556.086:87): avc: denied { mounton } for pid=5952 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.498088][ T5953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.499099][ T5956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.499429][ T5956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.522831][ T5953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.525835][ T5953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.756229][ T40] audit: type=1400 audit(1759437556.366:88): avc: denied { module_request } for pid=5952 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.826097][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 52.905338][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 52.922995][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 53.025137][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.027505][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.030045][ T5952] bridge_slave_0: entered allmulticast mode [ 53.033540][ T5952] bridge_slave_0: entered promiscuous mode [ 53.070508][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 53.093127][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.096459][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.100583][ T5952] bridge_slave_1: entered allmulticast mode [ 53.104807][ T5952] bridge_slave_1: entered promiscuous mode [ 53.255843][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.287985][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.290359][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.293519][ T5941] bridge_slave_0: entered allmulticast mode [ 53.296736][ T5941] bridge_slave_0: entered promiscuous mode [ 53.320024][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.323313][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.325794][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.329065][ T5939] bridge_slave_0: entered allmulticast mode [ 53.331704][ T5939] bridge_slave_0: entered promiscuous mode [ 53.334520][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.336987][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.340136][ T5941] bridge_slave_1: entered allmulticast mode [ 53.343738][ T5941] bridge_slave_1: entered promiscuous mode [ 53.395842][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.398679][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.401078][ T5939] bridge_slave_1: entered allmulticast mode [ 53.403645][ T5939] bridge_slave_1: entered promiscuous mode [ 53.442452][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.480645][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.505778][ T5952] team0: Port device team_slave_0 added [ 53.509909][ T5952] team0: Port device team_slave_1 added [ 53.513289][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.577365][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.598195][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.601298][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.603601][ T5940] bridge_slave_0: entered allmulticast mode [ 53.606252][ T5940] bridge_slave_0: entered promiscuous mode [ 53.630859][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.633981][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.645305][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.679751][ T5941] team0: Port device team_slave_0 added [ 53.681823][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.684423][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.688858][ T5940] bridge_slave_1: entered allmulticast mode [ 53.692061][ T5940] bridge_slave_1: entered promiscuous mode [ 53.709142][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.711624][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.721103][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.730816][ T5939] team0: Port device team_slave_0 added [ 53.734954][ T5941] team0: Port device team_slave_1 added [ 53.782377][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.787500][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.791817][ T5939] team0: Port device team_slave_1 added [ 53.871568][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.874527][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.887081][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.945413][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.948466][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.957625][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.979885][ T5940] team0: Port device team_slave_0 added [ 53.982475][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.984764][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.994382][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.008460][ T5952] hsr_slave_0: entered promiscuous mode [ 54.011963][ T5952] hsr_slave_1: entered promiscuous mode [ 54.016424][ T5940] team0: Port device team_slave_1 added [ 54.019115][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.021459][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.030799][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.108991][ T5941] hsr_slave_0: entered promiscuous mode [ 54.111856][ T5941] hsr_slave_1: entered promiscuous mode [ 54.114626][ T5941] debugfs: 'hsr0' already exists in 'hsr' [ 54.117235][ T5941] Cannot create hsr debugfs directory [ 54.122848][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.125317][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.133546][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.138095][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.140413][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.149038][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.337823][ T5940] hsr_slave_0: entered promiscuous mode [ 54.342010][ T5940] hsr_slave_1: entered promiscuous mode [ 54.344968][ T5940] debugfs: 'hsr0' already exists in 'hsr' [ 54.347633][ T5940] Cannot create hsr debugfs directory [ 54.355048][ T5939] hsr_slave_0: entered promiscuous mode [ 54.359362][ T5939] hsr_slave_1: entered promiscuous mode [ 54.362741][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 54.365283][ T5939] Cannot create hsr debugfs directory [ 54.478370][ T5953] Bluetooth: hci1: command tx timeout [ 54.478677][ T5945] Bluetooth: hci3: command tx timeout [ 54.567387][ T5945] Bluetooth: hci2: command tx timeout [ 54.567418][ T5953] Bluetooth: hci0: command tx timeout [ 54.731129][ T5941] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.742473][ T5941] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.750305][ T5941] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.756970][ T5941] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.799406][ T5952] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.804972][ T5952] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.811837][ T5952] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.818025][ T5952] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.887946][ T5939] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.892473][ T5939] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.898242][ T5939] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.903443][ T5939] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.976191][ T5940] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.983086][ T5940] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.993886][ T5940] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.004596][ T5940] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.038420][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.056048][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.088121][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.095134][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.111166][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.113683][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.120716][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.124490][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.138289][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.141387][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.158049][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.160912][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.190660][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.228971][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.248064][ T642] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.250627][ T642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.266322][ T642] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.269481][ T642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.278653][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.289844][ T40] audit: type=1400 audit(1759437558.896:89): avc: denied { sys_module } for pid=5941 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.294704][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.310822][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.313134][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.321280][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.324366][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.371803][ T5940] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.375670][ T5940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.409100][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.413484][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.447583][ T5952] veth0_vlan: entered promiscuous mode [ 55.454374][ T5952] veth1_vlan: entered promiscuous mode [ 55.475947][ T5941] veth0_vlan: entered promiscuous mode [ 55.491802][ T5941] veth1_vlan: entered promiscuous mode [ 55.506570][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.510331][ T5952] veth0_macvtap: entered promiscuous mode [ 55.519773][ T5952] veth1_macvtap: entered promiscuous mode [ 55.525732][ T5941] veth0_macvtap: entered promiscuous mode [ 55.538666][ T5941] veth1_macvtap: entered promiscuous mode [ 55.549284][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.553807][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.565450][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.586639][ T1243] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.598748][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.602137][ T1243] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.605805][ T1243] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.618655][ T1243] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.633089][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.640981][ T5939] veth0_vlan: entered promiscuous mode [ 55.658193][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.661110][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.678709][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.682406][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.689027][ T5939] veth1_vlan: entered promiscuous mode [ 55.692121][ T5940] veth0_vlan: entered promiscuous mode [ 55.735373][ T1243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.739108][ T1243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.746315][ T5940] veth1_vlan: entered promiscuous mode [ 55.781481][ T1243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.783661][ T1243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.801683][ T5939] veth0_macvtap: entered promiscuous mode [ 55.806355][ T5939] veth1_macvtap: entered promiscuous mode [ 55.809893][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.813457][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.841191][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.843814][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.845062][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.856589][ T5940] veth0_macvtap: entered promiscuous mode [ 55.863553][ T5940] veth1_macvtap: entered promiscuous mode [ 55.864933][ T5952] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.868464][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.884808][ T642] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.898420][ T642] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.905934][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.917000][ T642] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.921582][ T642] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.933815][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.972777][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.986580][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.992219][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.001522][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.017107][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.020290][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.054069][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.056880][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.091064][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.094313][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.128823][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.132681][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.200263][ T6040] netlink: 'syz.2.8': attribute type 13 has an invalid length. [ 56.202101][ T6047] process 'syz.1.2' launched './file1' with NULL argv: empty string added [ 56.365393][ T6057] Zero length message leads to an empty skb [ 56.395900][ T6072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15'. [ 56.536164][ T6089] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.559223][ T5953] Bluetooth: hci3: command tx timeout [ 56.568617][ T5953] Bluetooth: hci1: command tx timeout [ 56.596484][ T6102] Bluetooth: MGMT ver 1.23 [ 56.638081][ T5953] Bluetooth: hci2: command tx timeout [ 56.639286][ T5945] Bluetooth: hci0: command tx timeout [ 56.681222][ T6108] team_slave_0: entered promiscuous mode [ 56.685235][ T6108] team_slave_0: left promiscuous mode [ 56.688073][ T6111] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.707873][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'. [ 56.718778][ T6111] XFS (nbd1): SB validate failed with error -5. [ 57.021262][ T6146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.38'. [ 57.029217][ T6146] vlan2: entered promiscuous mode [ 57.031228][ T6146] gretap0: entered promiscuous mode [ 57.111662][ T40] kauditd_printk_skb: 111 callbacks suppressed [ 57.111677][ T40] audit: type=1400 audit(1759437560.726:201): avc: denied { append } for pid=6156 comm="syz.2.42" name="nmem0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.125423][ T40] audit: type=1400 audit(1759437560.746:202): avc: denied { read } for pid=6159 comm="syz.0.43" name="msr" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 57.134539][ T40] audit: type=1400 audit(1759437560.746:203): avc: denied { open } for pid=6159 comm="syz.0.43" path="/dev/cpu/2/msr" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 57.161716][ T40] audit: type=1400 audit(1759437560.776:204): avc: denied { create } for pid=6166 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.170540][ T40] audit: type=1400 audit(1759437560.786:205): avc: denied { ioctl } for pid=6167 comm="syz.0.46" path="/dev/dri/card0" dev="devtmpfs" ino=634 ioctlcmd=0x641f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 57.187560][ T40] audit: type=1400 audit(1759437560.786:206): avc: denied { getopt } for pid=6166 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.232944][ T40] audit: type=1400 audit(1759437560.846:207): avc: denied { name_bind } for pid=6177 comm="syz.0.48" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 57.245176][ T40] audit: type=1400 audit(1759437560.846:208): avc: denied { node_bind } for pid=6177 comm="syz.0.48" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 57.282348][ T40] audit: type=1400 audit(1759437560.896:209): avc: denied { connect } for pid=6164 comm="syz.2.45" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.301691][ T6183] netlink: 44 bytes leftover after parsing attributes in process `syz.3.49'. [ 57.309722][ T40] audit: type=1400 audit(1759437560.926:210): avc: denied { create } for pid=6182 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 57.344910][ T6190] 9pnet_fd: p9_fd_create_tcp (6190): problem connecting socket to 127.0.0.1 [ 57.449276][ T6192] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 57.460627][ T6192] block device autoloading is deprecated and will be removed. [ 57.726202][ T6240] warning: `syz.3.66' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 57.772090][ T5945] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 57.789395][ T6252] netlink: 'syz.1.64': attribute type 8 has an invalid length. [ 58.057599][ T6285] ieee802154 phy0 wpan0: encryption failed: -22 [ 58.358452][ T6315] netlink: 'syz.1.87': attribute type 1 has an invalid length. [ 58.414207][ T6315] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 58.416771][ T6315] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 58.420456][ T6315] vhci_hcd vhci_hcd.0: Device attached [ 58.426370][ T6316] vhci_hcd: connection closed [ 58.427330][ T81] vhci_hcd: stop threads [ 58.427606][ T6008] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 58.429366][ T81] vhci_hcd: release socket [ 58.434616][ T81] vhci_hcd: disconnect device [ 58.577265][ T6008] usb 8-1: device descriptor read/64, error -71 [ 58.647231][ T5945] Bluetooth: hci1: command tx timeout [ 58.647244][ T5953] Bluetooth: hci3: command tx timeout [ 58.717194][ T5953] Bluetooth: hci2: command tx timeout [ 58.778594][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 58.781933][ T6319] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 58.784702][ T6319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 58.837313][ T6008] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 58.977180][ T6008] usb 8-1: device descriptor read/64, error -71 [ 59.097412][ T6008] usb usb8-port1: attempt power cycle [ 59.217187][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.367188][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 59.370811][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 59.373553][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 59.376939][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 59.380898][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 59.385092][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.391984][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 59.395761][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.457190][ T6008] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 59.485127][ T6008] usb 8-1: device descriptor read/8, error -71 [ 59.603750][ T9] usb 6-1: usb_control_msg returned -32 [ 59.604677][ T6371] kvm: pic: single mode not supported [ 59.605814][ T6371] kvm: pic: level sensitive irq not supported [ 59.605845][ T9] usbtmc 6-1:16.0: can't read capabilities [ 59.722417][ T6329] usb 6-1: USB disconnect, device number 2 [ 59.727228][ T6008] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 59.743743][ T6391] trusted_key: syz.1.101 sent an empty control message without MSG_MORE. [ 59.758522][ T6008] usb 8-1: device descriptor read/8, error -71 [ 59.805179][ T6398] team0: Device gtp0 is of different type [ 59.827136][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'. [ 59.837208][ T5953] Bluetooth: hci0: command tx timeout [ 59.867650][ T6008] usb usb8-port1: unable to enumerate USB device [ 59.901554][ T6417] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.106'. [ 59.933444][ T6417] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 59.952150][ T6425] netlink: 124 bytes leftover after parsing attributes in process `syz.0.107'. [ 59.987684][ T6428] overlayfs: conflicting lowerdir path [ 60.058827][ T6434] overlayfs: conflicting lowerdir path [ 60.562726][ T6515] ======================================================= [ 60.562726][ T6515] WARNING: The mand mount option has been deprecated and [ 60.562726][ T6515] and is ignored by this kernel. Remove the mand [ 60.562726][ T6515] option from the mount to silence this warning. [ 60.562726][ T6515] ======================================================= [ 60.695069][ T6536] netlink: 'syz.0.126': attribute type 12 has an invalid length. [ 60.701877][ T6538] tipc: Started in network mode [ 60.704260][ T6538] tipc: Node identity b6ccce96abdd, cluster identity 4711 [ 60.709315][ T6538] tipc: Enabled bearer , priority 0 [ 60.717158][ T5953] Bluetooth: hci3: command tx timeout [ 60.727763][ T5953] Bluetooth: hci1: command tx timeout [ 60.740184][ T6538] tipc: Disabling bearer [ 60.789904][ T6555] syz.2.127 uses obsolete (PF_INET,SOCK_PACKET) [ 60.797301][ T5953] Bluetooth: hci2: command tx timeout [ 60.800538][ T6558] syzkaller1: entered promiscuous mode [ 60.803057][ T6558] syzkaller1: entered allmulticast mode [ 60.847914][ T6565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.129'. [ 60.855436][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'. [ 60.859135][ T6565] netlink: 'syz.0.129': attribute type 12 has an invalid length. [ 61.052050][ T6586] capability: warning: `syz.0.133' uses deprecated v2 capabilities in a way that may be insecure [ 61.061971][ T6588] netlink: 'syz.2.134': attribute type 21 has an invalid length. [ 61.453297][ T6641] SELinux: syz.1.142 (6641) set checkreqprot to 1. This is no longer supported. [ 61.642987][ T6664] __nla_validate_parse: 6 callbacks suppressed [ 61.643003][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'. [ 61.699146][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.148'. [ 61.702140][ T6673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 61.798612][ T6679] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 61.913681][ T6685] could not allocate digest TFM handle sm3-ce [ 61.967931][ T6701] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 61.982200][ T6701] bridge_slave_0: left allmulticast mode [ 61.984672][ T6701] bridge_slave_0: left promiscuous mode [ 61.986974][ T6701] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.994936][ T6701] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.003430][ T6701] bond0: (slave bond_slave_0): Releasing backup interface [ 62.009355][ T6701] bond0: (slave bond_slave_1): Releasing backup interface [ 62.016311][ T6701] team0: Port device team_slave_0 removed [ 62.027393][ T6701] team0: Port device team_slave_1 removed [ 62.029739][ T6701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.032099][ T6701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.035271][ T6701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.038783][ T6701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.166271][ T6715] overlayfs: upper fs does not support file handles, falling back to index=off. [ 62.177721][ T6329] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 62.255757][ T40] kauditd_printk_skb: 109 callbacks suppressed [ 62.255774][ T40] audit: type=1400 audit(1759437565.866:320): avc: denied { write } for pid=6720 comm="syz.3.158" name="renderD128" dev="devtmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 62.350273][ T6329] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 62.353857][ T6329] usb 6-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 62.359329][ T6329] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 62.364029][ T6329] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 62.377169][ T6329] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 62.383719][ T6329] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 62.386708][ T6329] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 62.389293][ T6329] usb 6-1: Product: syz [ 62.390624][ T6329] usb 6-1: Manufacturer: syz [ 62.396056][ T6688] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 62.400762][ T6329] cdc_wdm 6-1:1.0: skipping garbage [ 62.402710][ T6329] cdc_wdm 6-1:1.0: skipping garbage [ 62.406137][ T6329] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 62.408872][ T6329] cdc_wdm 6-1:1.0: Unknown control protocol [ 62.495735][ T40] audit: type=1400 audit(1759437566.106:321): avc: denied { cmd } for pid=6725 comm="syz.3.160" path="socket:[12285]" dev="sockfs" ino=12285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 62.559183][ T6741] kvm: pic: non byte write [ 62.600824][ T40] audit: type=1400 audit(1759437566.216:322): avc: denied { read write } for pid=6686 comm="syz.1.152" name="cdc-wdm0" dev="devtmpfs" ino=2850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 62.602724][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 62.608734][ T40] audit: type=1400 audit(1759437566.216:323): avc: denied { open } for pid=6686 comm="syz.1.152" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 62.611995][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 62.623564][ C3] vkms_vblank_simulate: vblank timer overrun [ 62.627044][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 62.630055][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 62.633329][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 62.640027][ T9] usb 6-1: USB disconnect, device number 3 [ 63.353242][ T837] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 63.357737][ T837] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 63.361876][ T837] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 63.365374][ T837] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 63.370439][ T837] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 63.373800][ T837] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 63.383373][ T40] audit: type=1400 audit(1759437566.996:324): avc: denied { write } for pid=6787 comm="syz.3.167" path="socket:[12710]" dev="sockfs" ino=12710 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 63.383966][ T837] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 63.396079][ T837] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 63.397635][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 63.401301][ T837] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 63.406280][ T837] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 63.441966][ T837] hid-generic 0005:00B6:0009.0002: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 63.451480][ T40] audit: type=1400 audit(1759437567.066:325): avc: denied { read } for pid=6793 comm="syz.3.169" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.454968][ T6795] binder: 6793:6795 ioctl 4018620d 0 returned -22 [ 63.460097][ T40] audit: type=1400 audit(1759437567.066:326): avc: denied { open } for pid=6793 comm="syz.3.169" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.471624][ T40] audit: type=1400 audit(1759437567.066:327): avc: denied { ioctl } for pid=6793 comm="syz.3.169" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.633092][ T40] audit: type=1400 audit(1759437567.246:328): avc: denied { write } for pid=6814 comm="syz.1.171" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.665736][ T40] audit: type=1400 audit(1759437567.276:329): avc: denied { append } for pid=6819 comm="syz.3.173" name="loop2" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.671817][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.173'. [ 63.681714][ T6824] netlink: 'syz.1.174': attribute type 13 has an invalid length. [ 63.691567][ T6824] netlink: 'syz.1.174': attribute type 13 has an invalid length. [ 63.702149][ T1243] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.715107][ T1243] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.718240][ T1243] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.725454][ T1243] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.797808][ T6848] Bluetooth: MGMT ver 1.23 [ 63.872242][ T6857] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.875600][ T6857] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.955454][ T6857] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.961368][ T6857] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.033997][ T6857] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.039115][ T6857] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.092591][ T6857] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.096475][ T6857] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.173749][ T46] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.176755][ T46] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.190229][ T1243] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.192962][ T1243] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.204469][ T1243] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.207515][ T1243] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.218368][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.221417][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.288661][ T6921] netlink: 'syz.0.185': attribute type 5 has an invalid length. [ 64.291197][ T6921] netlink: 'syz.0.185': attribute type 7 has an invalid length. [ 64.302225][ T6921] : entered promiscuous mode [ 64.386971][ T6935] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 64.441391][ T6943] /dev/sg0: Can't lookup blockdev [ 64.523040][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'. [ 64.527334][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'. [ 64.597740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.620146][ T6956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6956 comm=syz.1.194 [ 64.653073][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'. [ 64.697006][ T6949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12833 sclass=netlink_route_socket pid=6949 comm=syz.0.192 [ 64.717246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.764874][ T6971] netlink: 28 bytes leftover after parsing attributes in process `syz.1.197'. [ 64.774622][ T6971] btrfs: Unknown parameter 'aclӧ^i1 ܔ' [ 65.050410][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.202'. [ 65.054035][ T7001] netlink: 'syz.1.202': attribute type 30 has an invalid length. [ 65.079444][ T7005] overlayfs: failed to resolve './file0': -2 [ 65.443035][ T7034] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 65.498645][ T7043] 9pnet_fd: Insufficient options for proto=fd [ 65.544668][ T7046] netlink: 'syz.1.211': attribute type 3 has an invalid length. [ 65.905304][ T7080] input: syz0 as /devices/virtual/input/input5 [ 66.075038][ T7119] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 66.077537][ T7119] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 66.082344][ T7119] vhci_hcd vhci_hcd.0: Device attached [ 66.085118][ T7123] vhci_hcd: connection closed [ 66.085807][ T1243] vhci_hcd: stop threads [ 66.088780][ T1243] vhci_hcd: release socket [ 66.090277][ T1243] vhci_hcd: disconnect device [ 66.646985][ T7233] openvswitch: netlink: Multiple metadata blocks provided [ 66.680028][ T7237] binder_alloc: 7234: binder_alloc_buf, no vma [ 66.681682][ T7238] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 66.749917][ T7250] loop6: detected capacity change from 0 to 7 [ 66.751658][ T7252] SELinux: policydb string length 79616 does not match expected length 8 [ 66.761114][ T7252] SELinux: failed to load policy [ 66.774816][ T7250] Dev loop6: unable to read RDB block 7 [ 66.778103][ T7250] loop6: unable to read partition table [ 66.780437][ T7250] loop6: partition table beyond EOD, truncated [ 66.787400][ T7250] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 66.882894][ T7268] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=7268 comm=syz.1.242 [ 66.893617][ T7268] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=7268 comm=syz.1.242 [ 67.010658][ T7281] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.397322][ T7104] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.426486][ T40] kauditd_printk_skb: 54 callbacks suppressed [ 67.426497][ T40] audit: type=1400 audit(1759437571.036:384): avc: denied { connect } for pid=7311 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 67.429157][ T7312] netlink: 'syz.3.251': attribute type 3 has an invalid length. [ 67.439873][ T7312] netlink: 'syz.3.251': attribute type 1 has an invalid length. [ 67.443013][ T7312] __nla_validate_parse: 6 callbacks suppressed [ 67.443028][ T7312] netlink: 216 bytes leftover after parsing attributes in process `syz.3.251'. [ 67.451469][ T7312] NCSI netlink: No device for ifindex 33022 [ 67.492830][ T40] audit: type=1400 audit(1759437571.106:385): avc: denied { mount } for pid=7314 comm="syz.3.252" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.514364][ T40] audit: type=1400 audit(1759437571.126:386): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.542658][ T40] audit: type=1400 audit(1759437571.156:387): avc: denied { setopt } for pid=7320 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 67.557151][ T7104] usb 5-1: Using ep0 maxpacket: 16 [ 67.561810][ T7104] usb 5-1: config 1 has an invalid interface number: 3 but max is 2 [ 67.564447][ T7104] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 67.570328][ T7104] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 67.573978][ T7104] usb 5-1: config 1 has no interface number 1 [ 67.576361][ T7104] usb 5-1: config 1 interface 3 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 67.582158][ T7104] usb 5-1: config 1 interface 3 has no altsetting 0 [ 67.587309][ T7104] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 67.590865][ T7104] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.593883][ T7104] usb 5-1: Product: 拷鵱쉑傲슣泾䱔䮲텶沠쬽흃礵ˣ덼淍ᖑ墍鶷譞 [ 67.598769][ T7104] usb 5-1: Manufacturer: Щ [ 67.600993][ T7104] usb 5-1: SerialNumber: 墈ᤉ₯嚫﾿퇋쫭న﹏ꂓ胺贐Ք붾榿乒ᔄ䀺觝ᾥ뿯覰㭖泖不滿滧胴욐ﳛ酫抳⧵燎✵㸔隐樜䜓ሕ狀ꡧ獵긬昻뫍䱛崅鄔תּꤸ䛰䚧客㻄ᅘ腃摸魙ㆯ藤숂饾栱⮘ꞝ뉅퇬究䉁颡즱⠩棄䘻Н쎮ﵕﰯ [ 68.079316][ T40] audit: type=1400 audit(1759437571.696:388): avc: denied { bind } for pid=7328 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.081144][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 68.097800][ T7330] qnx6: unable to read the first superblock [ 68.099944][ T7330] qnx6: unable to read the first superblock [ 68.102151][ T7330] qnx6: unable to read the first superblock [ 68.165120][ T40] audit: type=1400 audit(1759437571.776:389): avc: denied { getopt } for pid=7339 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.317095][ T7354] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.260'. [ 68.359988][ T7354] cdrom: dropping to single frame dma [ 68.450673][ T7358] netlink: 52 bytes leftover after parsing attributes in process `syz.3.261'. [ 68.717669][ T40] audit: type=1400 audit(1759437572.336:390): avc: denied { read } for pid=7380 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 68.779793][ T7392] program syz.3.266 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.782297][ T7394] netlink: 24 bytes leftover after parsing attributes in process `syz.3.266'. [ 68.794830][ T7392] netlink: 24 bytes leftover after parsing attributes in process `syz.3.266'. [ 69.067124][ T5988] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 69.218707][ T5988] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 256, setting to 64 [ 69.224314][ T5988] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 69.229112][ T5988] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.231690][ T5988] usb 8-1: Product: syz [ 69.233064][ T5988] usb 8-1: Manufacturer: syz [ 69.234561][ T5988] usb 8-1: SerialNumber: syz [ 69.239254][ T5988] usb 8-1: config 0 descriptor?? [ 69.796651][ T40] audit: type=1400 audit(1759437573.406:391): avc: denied { append } for pid=7397 comm="syz.3.267" name="dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.797256][ T7458] dlm: no locking on control device [ 69.824293][ T7458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.829508][ T7458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.999926][ T40] audit: type=1400 audit(1759437573.616:392): avc: denied { append } for pid=7465 comm="syz.1.280" name="nullb0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 70.130442][ T7104] usb 5-1: 0:2 : does not exist [ 70.161313][ T7104] usb 5-1: USB disconnect, device number 2 [ 70.219273][ T7512] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 70.219273][ T7512] The task syz.1.282 (7512) triggered the difference, watch for misbehavior. [ 70.260940][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.372918][ T24] usb 8-1: USB disconnect, device number 6 [ 70.550081][ T40] audit: type=1400 audit(1759437574.166:393): avc: denied { add_name } for pid=7553 comm="syz.0.287" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.732206][ T7567] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN NOPTI [ 70.737352][ T7567] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 70.743512][ T7567] CPU: 1 UID: 0 PID: 7567 Comm: syz.2.289 Not tainted syzkaller #0 PREEMPT(full) [ 70.747548][ T7567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.753913][ T7567] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 70.756203][ T7567] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 1a eb 84 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 70.764173][ T7567] RSP: 0018:ffffc9000cc9fbf0 EFLAGS: 00010293 [ 70.766885][ T7567] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff88362d9a [ 70.770328][ T7567] RDX: ffff88803c4b4900 RSI: ffffffff88362de6 RDI: 0000000000000005 [ 70.773768][ T7567] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 70.777771][ T7567] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc9000cc9fd88 [ 70.781678][ T7567] R13: ffffc9000cc9fd88 R14: 0000000000000001 R15: ffff8880571fe400 [ 70.785164][ T7567] FS: 00007f065fd666c0(0000) GS:ffff8880d6f60000(0000) knlGS:0000000000000000 [ 70.788874][ T7567] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.791623][ T7567] CR2: 00007f065fd45d58 CR3: 0000000058521000 CR4: 0000000000352ef0 [ 70.795040][ T7567] Call Trace: [ 70.796553][ T7567] [ 70.797956][ T7567] ? __pfx_bcsp_recv+0x10/0x10 [ 70.800242][ T7567] hci_uart_tty_receive+0x254/0x7e0 [ 70.802692][ T7567] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 70.805263][ T7567] tty_ioctl+0x583/0x1680 [ 70.807149][ T7567] ? __pfx_tty_ioctl+0x10/0x10 [ 70.809210][ T7567] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 70.812130][ T7567] ? hook_file_ioctl_common+0x145/0x410 [ 70.814523][ T7567] ? selinux_file_ioctl+0x180/0x270 [ 70.816784][ T7567] ? selinux_file_ioctl+0xb4/0x270 [ 70.818972][ T7567] ? __pfx_tty_ioctl+0x10/0x10 [ 70.821079][ T7567] __x64_sys_ioctl+0x18b/0x210 [ 70.823206][ T7567] do_syscall_64+0xcd/0x4e0 [ 70.825413][ T7567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.828324][ T7567] RIP: 0033:0x7f065ef8eec9 [ 70.830439][ T7567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.838566][ T7567] RSP: 002b:00007f065fd66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.842736][ T7567] RAX: ffffffffffffffda RBX: 00007f065f1e6090 RCX: 00007f065ef8eec9 [ 70.846961][ T7567] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000004 [ 70.850516][ T7567] RBP: 00007f065f011f91 R08: 0000000000000000 R09: 0000000000000000 [ 70.853858][ T7567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.857246][ T7567] R13: 00007f065f1e6128 R14: 00007f065f1e6090 R15: 00007ffea66ae978 [ 70.860657][ T7567] [ 70.861670][ T7567] Modules linked in: [ 70.863438][ T7567] ---[ end trace 0000000000000000 ]--- [ 70.865513][ T7567] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 70.867463][ T7567] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 1a eb 84 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 70.873839][ T7567] RSP: 0018:ffffc9000cc9fbf0 EFLAGS: 00010293 [ 70.875867][ T7567] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff88362d9a [ 70.879605][ T7567] RDX: ffff88803c4b4900 RSI: ffffffff88362de6 RDI: 0000000000000005 [ 70.882630][ T7567] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 70.885495][ T7567] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc9000cc9fd88 [ 70.888437][ T7567] R13: ffffc9000cc9fd88 R14: 0000000000000001 R15: ffff8880571fe400 [ 70.891015][ T7567] FS: 00007f065fd666c0(0000) GS:ffff8880d6e60000(0000) knlGS:0000000000000000 [ 70.893937][ T7567] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.896116][ T7567] CR2: 00007f44d0796eb0 CR3: 0000000058521000 CR4: 0000000000352ef0 [ 70.898836][ T7567] Kernel panic - not syncing: Fatal exception [ 70.902148][ T7567] Kernel Offset: disabled [ 70.904217][ T7567] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:39:34 Registers: info registers vcpu 0 CPU#0 RAX=000000000005702c RBX=0000000000000000 RCX=ffffffff8b509fe9 RDX=ffffed100d4c6656 RSI=ffffffff8bd00840 RDI=ffffffff8190b35d RBP=fffffbfff1bd2f00 RSP=ffffffff8de07e08 R8 =0000000000000000 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97800 R14=ffffffff90606c90 R15=0000000000000000 RIP=ffffffff8b508b2f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6e60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f44d0796eb0 CR3=000000005a4fd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555dd117e0 000055555dd117e0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb903c630 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb903c7b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb903c7b6 00007ffdb903c7bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44d0812fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44d0812fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44d0812fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44d0812fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44d081305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44d081313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85200855 RDI=ffffffff9ab64ae0 RBP=ffffffff9ab64aa0 RSP=ffffc9000cc9f5f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000072 R14=ffffffff9ab64aa0 R15=ffffffff852007f0 RIP=ffffffff8520087f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f065fd666c0 ffffffff 00c00000 GS =0000 ffff8880d6f60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f065fd45d58 CR3=0000000058521000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea66aee86 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea66aee86 00007ffea66aee8c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f065f012fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f065f012fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f065f012fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f065f012fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f065f01305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f065f01313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f065f1b74a8 00007f065f1b74a0 00007f065f1b7498 00007f065f1b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f065fd1d100 00007f065f1b7460 00007f065f1b7478 00007f065f1b74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f065f1b74b8 00007f065f1b74b0 00007f065f1b74a8 00007f065f1b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000001 RBX=0000000000000003 RCX=ffffffff8207ed47 RDX=ffff888026c60000 RSI=ffffffff8207e748 RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc9000cd8f600 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000003 R11=0000000000000001 R12=000000110c232000 R13=ffffc9000cd8f790 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff81bb193b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d7060000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c25e0ed CR3=000000005a4fd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb903c7b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb903c7b6 00007ffdb903c7bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44d0812fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44d0812fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44d0812fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44d0812fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44d081305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44d081313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9500000000000000 b700000007000000 8500000000000008 5600000000000098 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000086bf 00000050fff0aadb 0000000300000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000800000055 fffffff000000407 000000000000a4bf fffffff800000804 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000221800000008 00000055fffffff0 0000040700000000 0000a4bffffffff8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000080400000000 000086bf00000050 fff0aadb00000003 0000096600000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fe009a7b00000000 000002b700000700 0000009500000000 0001093500000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000009bf00000005 0000008500000000 000003b700000014 000002b700000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000003c244 RBX=0000000000000003 RCX=ffffffff8b509fe9 RDX=ffffed100d526656 RSI=ffffffff8bd00840 RDI=ffffffff8190b35d RBP=ffffed1003adf000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d526655 R10=ffff88806a9332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801d6f8000 R14=ffffffff90606c90 R15=0000000000000000 RIP=ffffffff8b508b2f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d7160000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f44d16b6f98 CR3=0000000058521000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff1f0010007e1fee b219f46ed8bd971a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea66aee86 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea66aee86 00007ffea66aee8c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f065f012fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f065f012fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f065f012fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f065f012fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f065f01305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f065f01313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a04a001c00010008 0000000100050008 8002001400006567 646972620001000b ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f065fd1d100 00007f065f1b7460 00007f065f1b7478 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f065f1b74b8 00007f065f1b74b0 00007f065f1b74a8 00007f065f1b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000