last executing test programs: 5.502904841s ago: executing program 2 (id=542): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044840) r3 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205647, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0xc1) pipe2(0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x3) syz_emit_ethernet(0xae, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x23, 0x4, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x7, 0x6, "c3997b3b"}, @ssrr={0x89, 0x7, 0x5, [@empty]}, @generic={0x88, 0x11, "5912917a5492ee7e41c61c24da135f"}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0x38, 0x1, 0x2, [{@multicast2, 0x9}, {@multicast2, 0xe}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x6}]}, @timestamp_prespec={0x44, 0x14, 0x4f, 0x3, 0x8, [{@private=0xa010102, 0x1}, {@private=0xa010100, 0x4}]}, @timestamp={0x44, 0x18, 0x64, 0x0, 0xd, [0xf, 0x7, 0x5, 0x8, 0x5]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000000)={0x8, 0x1}) 5.314359011s ago: executing program 2 (id=543): syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x11}, @hci_ev_le_direct_adv_info={{}, {0x4, 0x1, @any, 0x5, @any, 0xcf}}}}, 0x14) (async) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x11}, @hci_ev_le_direct_adv_info={{}, {0x4, 0x1, @any, 0x5, @any, 0xcf}}}}, 0x14) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000eeffffffffffffff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) r1 = gettid() sigaltstack(&(0x7f0000001040)={&(0x7f0000001580)=""/4110, 0x80000001, 0xfffffffffffffefd}, 0x0) (async) sigaltstack(&(0x7f0000001040)={&(0x7f0000001580)=""/4110, 0x80000001, 0xfffffffffffffefd}, 0x0) rt_sigqueueinfo(r1, 0x21, &(0x7f00000002c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x7, 0x7800, 0x7f, 0x132, {{0x22, 0x4, 0x0, 0x11, 0x88, 0x65, 0x0, 0xc, 0x2f, 0x0, @rand_addr=0x64010100, @local, {[@timestamp={0x44, 0xc, 0x77, 0x0, 0x1, [0xd, 0x2]}, @noop, @lsrr={0x83, 0x7, 0xf5, [@dev={0xac, 0x14, 0x14, 0x40}]}, @timestamp_prespec={0x44, 0x34, 0x9b, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010102, 0x8b0}, {@loopback, 0xffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}, {@multicast2, 0x5}, {@loopback, 0x4}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0x30, [@broadcast, @local, @local, @local, @broadcast]}, @end, @ssrr={0x89, 0xf, 0x89, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}]}}}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="6c000000100001042dbd70000000000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000004c001280110001006272696467655f736c617665000000003400058006001f00ff0300000800030004000000050021"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="6c000000100001042dbd70000000000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000004c001280110001006272696467655f736c617665000000003400058006001f00ff0300000800030004000000050021"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000a80)={0x0, @private}, &(0x7f0000000ac0)=0xc) sendmmsg$inet(r2, &(0x7f0000000e40)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="4ba891939b83f141021962fd17c2e50511b864e85056f6731b63", 0x1a}, {&(0x7f0000000400)="5ebc1a1e71559de86ea8b76fc92395dcb8a12129ac72c1483aff4fb46b307fadd64e1c98221337f7c190c3ca12f56ec9a3c3eee505cc816e6902efb128bbb8ec58dfaf485963e89ae33581269d9019c71562a6c85851398a4a2fa810ac5d8caccd826c2835aa9cfa6f5089a38b19d1f8def4fcd12accb7f191b2ef736b3d87cbf53d067fab7c6289a7e7b5b97818c71317e512a677ecb9cda0cd1f52fee0e058027176f30ffcdc779be4e813f549a2c5fddd3160a68e8a0491c45aec90f489bedb3c0d7f4c7bad15d705b7cb20", 0xcd}, {&(0x7f0000000580)="69029571bd51d4f1782f7cd3d92f39c9729cfc5e6961f3f4d28c6a9cfaae586634b174f723cfab8bcc3cf3f04675e58a2c4168343dbeeb4a9ce0c334707cee73f9c0e2f10a287eee14741eefb886431f6fbe06c649e49208ccfa2f6207fd5218c794e72dd7024f0c5147a126f2ac5f58596f5b5fdef003e721dfc090957ad6a2214a2436e7ef978810c5832827754e2d9d6a68592bd3a9d8fbfea39acc6573a159c926985ef6e8a030ca4aa299c2e4aecab89a478dba7d73b3eb47d46455327e950cc194188ec285e2f98e0e4baa", 0xce}, {&(0x7f00000025c0)="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", 0x1000}, {&(0x7f0000000680)="7b3af8c28e9c366baabf487e2a438de114174d0c26cf04e7bcf2e91e9b1f20d38db6ccaabb2886e1f1e64c350510f87e0aaeec1e24670a93b8dfbb192e71e1bc3406466a24774a44144bc880cdbd412306d3df65519f1bd8588f837147728a79b7af440ea5344489569c711c96aed266b4bc934088cc6baa408690add77cbbb175a239895630d14c805d6850fc212023c7339db8583bc43ae9a762e54c9eed10d457ff5aaf1cdfa45425e9bac08678fddc92826e20e8654f1b8dc675b330ee834ff65fddbf914d47b903", 0xca}, {0xffffffffffffffff}], 0x6, &(0x7f0000000340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010102, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010101, @multicast1}}}], 0x70}}, {{&(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000500)="7c6db295b5c853b9", 0x8}], 0x1, &(0x7f0000000880)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x18}}, {{&(0x7f00000008c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000900)="d1dcf27734073aabcab2983c525d781009061f06f00ca85909051476d7bfa9ce2ceea70893bb0a73c42540f653eb6f4d6a47924d3405dfa0d0f33d186a6bf020217930c399c5ca01cf3cef1e8cb3960b44de2c332a6f16be789c6bf6d3dbc729181eedf7512eab792c85c46d941e0480ed905dd2e41db47ab2f059a24b41627353a166e1cde7c4df442a25fe89823a4ab7ebd01b3f71d3f5c0392470e2733c05b0ec5fb5872ea7d70502d2291392af354febe1f75fe4aa4dc3fa83fcd0c572cc084e628738d5a59dd3ca92335a822dcdffe77f61e94896e8", 0xd8}, {&(0x7f0000000a00)="a0c384c000a6ff289cc34fb3f87bd37f37ffc4ec190dd237465d5350206f224b636608b46b8bdfc8b41549f762", 0x2d}], 0x2, &(0x7f0000000b00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @loopback, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x38}}, {{&(0x7f0000000b40)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000b80)="6623adc814b25405389d5b7cb2c0c2", 0xf}, {&(0x7f0000000bc0)="7eb8b321cd1cae59743b0102e2ded1ed1296f1256a266af7db4b387c70e47b6e9e397c24f514f5993c3c3ea82aa975eb2007d0346db984a17f46c5405129c71a93f3eb663a8bfc0e466440b6bc72faece296024974641d28cbb671288f55f66cf06881e75b52cc5dd814a3bd622ad154c91061215602f98e328c2ffee43a6e73d01308f6ccfc28b3a10c8903a9089364077951bfe8719ba454bfac4294d186bb21e9ee9b170d7468549697c38fce974139c10e629ae543a8c45bc2ebf8147e0de487102632518b1cad83ce6b347ba52a4288b1301927ac62eb9b5abc2662", 0xde}, {&(0x7f0000000cc0)="3405aa32a3c2d9924b4a4967876c1987da243168f0bc7e5862ef98c435a41bec0082fe837703bf196159d09c78efd24168bf1ace34c5cca44513d3dfd45605f44c41bcd70362bc55535b41838feb6c7b4693852a098acd58e50b6b96d2b208a72b7a945aaeb0d78cee942f88e477fc207394bb5a78a4677936846130ec3693b2ad98d1866482a9dc62c1b506bc8921db0626f984c7489f39a03ebbdb5022238274898da71a6f8dac360c1d8e410d5391858ebae6269f73f5037fdca50fe9604bcb5896e90e", 0xc5}, {&(0x7f0000000dc0)="8e09642d64ecc52cf5dfaed43b7d56db919c47afef841f70e19913656d0f563a749111d6d90b", 0x26}], 0x4}}], 0x4, 0x20040010) (async) sendmmsg$inet(r2, &(0x7f0000000e40)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="4ba891939b83f141021962fd17c2e50511b864e85056f6731b63", 0x1a}, {&(0x7f0000000400)="5ebc1a1e71559de86ea8b76fc92395dcb8a12129ac72c1483aff4fb46b307fadd64e1c98221337f7c190c3ca12f56ec9a3c3eee505cc816e6902efb128bbb8ec58dfaf485963e89ae33581269d9019c71562a6c85851398a4a2fa810ac5d8caccd826c2835aa9cfa6f5089a38b19d1f8def4fcd12accb7f191b2ef736b3d87cbf53d067fab7c6289a7e7b5b97818c71317e512a677ecb9cda0cd1f52fee0e058027176f30ffcdc779be4e813f549a2c5fddd3160a68e8a0491c45aec90f489bedb3c0d7f4c7bad15d705b7cb20", 0xcd}, {&(0x7f0000000580)="69029571bd51d4f1782f7cd3d92f39c9729cfc5e6961f3f4d28c6a9cfaae586634b174f723cfab8bcc3cf3f04675e58a2c4168343dbeeb4a9ce0c334707cee73f9c0e2f10a287eee14741eefb886431f6fbe06c649e49208ccfa2f6207fd5218c794e72dd7024f0c5147a126f2ac5f58596f5b5fdef003e721dfc090957ad6a2214a2436e7ef978810c5832827754e2d9d6a68592bd3a9d8fbfea39acc6573a159c926985ef6e8a030ca4aa299c2e4aecab89a478dba7d73b3eb47d46455327e950cc194188ec285e2f98e0e4baa", 0xce}, {&(0x7f00000025c0)="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", 0x1000}, {&(0x7f0000000680)="7b3af8c28e9c366baabf487e2a438de114174d0c26cf04e7bcf2e91e9b1f20d38db6ccaabb2886e1f1e64c350510f87e0aaeec1e24670a93b8dfbb192e71e1bc3406466a24774a44144bc880cdbd412306d3df65519f1bd8588f837147728a79b7af440ea5344489569c711c96aed266b4bc934088cc6baa408690add77cbbb175a239895630d14c805d6850fc212023c7339db8583bc43ae9a762e54c9eed10d457ff5aaf1cdfa45425e9bac08678fddc92826e20e8654f1b8dc675b330ee834ff65fddbf914d47b903", 0xca}, {0xffffffffffffffff}], 0x6, &(0x7f0000000340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010102, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010101, @multicast1}}}], 0x70}}, {{&(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000500)="7c6db295b5c853b9", 0x8}], 0x1, &(0x7f0000000880)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x18}}, {{&(0x7f00000008c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000900)="d1dcf27734073aabcab2983c525d781009061f06f00ca85909051476d7bfa9ce2ceea70893bb0a73c42540f653eb6f4d6a47924d3405dfa0d0f33d186a6bf020217930c399c5ca01cf3cef1e8cb3960b44de2c332a6f16be789c6bf6d3dbc729181eedf7512eab792c85c46d941e0480ed905dd2e41db47ab2f059a24b41627353a166e1cde7c4df442a25fe89823a4ab7ebd01b3f71d3f5c0392470e2733c05b0ec5fb5872ea7d70502d2291392af354febe1f75fe4aa4dc3fa83fcd0c572cc084e628738d5a59dd3ca92335a822dcdffe77f61e94896e8", 0xd8}, {&(0x7f0000000a00)="a0c384c000a6ff289cc34fb3f87bd37f37ffc4ec190dd237465d5350206f224b636608b46b8bdfc8b41549f762", 0x2d}], 0x2, &(0x7f0000000b00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @loopback, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x38}}, {{&(0x7f0000000b40)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000b80)="6623adc814b25405389d5b7cb2c0c2", 0xf}, {&(0x7f0000000bc0)="7eb8b321cd1cae59743b0102e2ded1ed1296f1256a266af7db4b387c70e47b6e9e397c24f514f5993c3c3ea82aa975eb2007d0346db984a17f46c5405129c71a93f3eb663a8bfc0e466440b6bc72faece296024974641d28cbb671288f55f66cf06881e75b52cc5dd814a3bd622ad154c91061215602f98e328c2ffee43a6e73d01308f6ccfc28b3a10c8903a9089364077951bfe8719ba454bfac4294d186bb21e9ee9b170d7468549697c38fce974139c10e629ae543a8c45bc2ebf8147e0de487102632518b1cad83ce6b347ba52a4288b1301927ac62eb9b5abc2662", 0xde}, {&(0x7f0000000cc0)="3405aa32a3c2d9924b4a4967876c1987da243168f0bc7e5862ef98c435a41bec0082fe837703bf196159d09c78efd24168bf1ace34c5cca44513d3dfd45605f44c41bcd70362bc55535b41838feb6c7b4693852a098acd58e50b6b96d2b208a72b7a945aaeb0d78cee942f88e477fc207394bb5a78a4677936846130ec3693b2ad98d1866482a9dc62c1b506bc8921db0626f984c7489f39a03ebbdb5022238274898da71a6f8dac360c1d8e410d5391858ebae6269f73f5037fdca50fe9604bcb5896e90e", 0xc5}, {&(0x7f0000000dc0)="8e09642d64ecc52cf5dfaed43b7d56db919c47afef841f70e19913656d0f563a749111d6d90b", 0x26}], 0x4}}], 0x4, 0x20040010) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r8}, 0x10) (async) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r8}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r10}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r10, 0x0, 0x180000}, 0x18) close(r9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x4) socket(0x10, 0x3, 0x0) (async) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0x31) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)=ANY=[@ANYBLOB="440000001800010028bd7000fedbdf251d01070008000a00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB="150003000100008007010000d3698ac6600613060400000008000e00", @ANYRES32=r12, @ANYBLOB="8d62"], 0x44}, 0x1, 0x0, 0x0, 0xde50a9659187563d}, 0x40000c0) newfstatat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80), 0x400) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000001080)={0x130, 0x0, 0x0, {0xdc00, 0x2, 0x0, '\x00', {0x8, 0x7, 0x100, 0x9, r12, r13, 0xc000, '\x00', 0x4, 0x3ff, 0x3, 0xac8, {0xa, 0x8}, {0x3, 0x1000}, {0x186}, {0x6, 0x8}, 0x6, 0x3, 0x81, 0x5}}}, 0x130) (async) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000001080)={0x130, 0x0, 0x0, {0xdc00, 0x2, 0x0, '\x00', {0x8, 0x7, 0x100, 0x9, r12, r13, 0xc000, '\x00', 0x4, 0x3ff, 0x3, 0xac8, {0xa, 0x8}, {0x3, 0x1000}, {0x186}, {0x6, 0x8}, 0x6, 0x3, 0x81, 0x5}}}, 0x130) write(r11, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) (async) write(r11, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) socket$inet6(0xa, 0x800, 0x9) 5.128330831s ago: executing program 2 (id=544): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fd, 0x101042) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x20, 0x3, 0x17, 0xfffc, 0x0, 0x2, 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0xe, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880)={0x0, 0x3, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_AUDIO(r3, 0x40345622, &(0x7f0000000000)={0x3, "57ee6594b5d55126cb250b5be7ed7c9a23ccc76a80dee700", 0x1}) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) preadv(r4, &(0x7f00000032c0)=[{&(0x7f0000001080)=""/60, 0x3c}], 0x1, 0x4, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) prlimit64(0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) keyctl$join(0x1, 0xfffffffffffffffd) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r5}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000300)=@framed={{0x61, 0x0, 0xa, 0xfe00, 0x0, 0x5}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000180), 0x800000000000009, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) 4.258152933s ago: executing program 0 (id=559): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r1 = memfd_secret(0x0) r2 = fsmount(r1, 0x0, 0xfa) openat$cgroup_ro(r2, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000001700), 0x4) (async) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000980)={0x2, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x27, 0x81, '\x00', 0x7f}, {0x1, 0xc, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x9, '\x00', 0xe}, {0x1, 0x8, 0x3, '\x00', 0x8f}, {0xff, 0x80, 0xb1, '\x00', 0x7}, {0xf, 0x2, 0x28, '\x00', 0x2}, {0x7f, 0x8, 0x3, '\x00', 0xe9}, {0x2, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x91, '\x00', 0xc0}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x13, 0x3, '\x00', 0x8}, {0x6, 0x6, 0x8, '\x00', 0xa6}, {0x8, 0x0, 0xa, '\x00', 0x9}, {0x1, 0x4e, 0x9}, {0x8, 0x5e, 0x5, '\x00', 0x1}, {0x5, 0x5, 0x7, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xb, '\x00', 0x1}, {0x4, 0x6, 0xb, '\x00', 0x3}, {0x40, 0xf1, 0x7, '\x00', 0x4}, {0x7, 0x40, 0x9, '\x00', 0x10}, {0x8f, 0x8, 0x1, '\x00', 0x6}, {0x2, 0xc, 0x8f, '\x00', 0x8}]}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r5, &(0x7f0000000800)=[{&(0x7f0000000140)="89e7ee2c7cdad9b4b47381", 0xb}, {&(0x7f00000005c0)="c2c080", 0x3}], 0x10000000000001a5) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) openat(r6, 0x0, 0x80180, 0x38) (async) ioctl$FBIOPUTCMAP(r6, 0x4605, &(0x7f0000000300)={0x9, 0xa, &(0x7f0000000200)=[0x9, 0x40, 0x7, 0x7202, 0x1, 0x5, 0x7ff, 0x2, 0x2, 0x98e5], &(0x7f0000000240)=[0x2], &(0x7f0000000280)=[0x3, 0x0, 0x1, 0x6, 0x8], &(0x7f00000002c0)=[0xffff, 0x6, 0x9]}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r8 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r12, 0x8982, &(0x7f0000000080)={0x0, 'batadv0\x00', {0x8}, 0x1}) (async) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) io_uring_enter(r8, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000040)={'batadv_slave_0\x00', @random="8aa8f29f5f03"}) 4.126711996s ago: executing program 0 (id=561): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) (async) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x1) (async, rerun: 32) ioctl$TIOCSETD(r3, 0x5412, 0x0) (async, rerun: 32) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000240)=0x4) (async, rerun: 64) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)) (rerun: 64) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xe) (async) ioctl$TCFLSH(r3, 0x400455c8, 0x1) (async) ioctl$TIOCNOTTY(r0, 0x5422) 4.101304087s ago: executing program 2 (id=562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r1, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x1c, 0x17, {0x2, 0x2, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}}}, [""]}, 0x38}}, 0x2000009c) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_4ADDR={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8008808}, 0x20000000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r5 = socket(0x1d, 0x2, 0x6) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000480)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r7, 0x8000000000000002}, 0x18) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000100)={0x1, @pix={0x3, 0x200, 0x34524742, 0x9, 0x5, 0x0, 0x4, 0x3, 0x1, 0x4, 0x2, 0x5}}) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f0000000040), 0x4) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000340)={0x3, @vbi={0x101, 0xd7, 0x4, 0x38414262, [0x6, 0x3ff00], [0xa2, 0x8], 0x2}}) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000240)=ANY=[@ANYBLOB="16000000", @ANYRES16=r2, @ANYBLOB="0103044e8a7a0e5519e30b"], 0x14}}, 0x20044084) 4.002984913s ago: executing program 2 (id=564): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, r0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3f3f}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xbe}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x5) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x140, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xd42b}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4262}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x400}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x400}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x44}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4040}, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000001040)={&(0x7f0000000400), 0xc, &(0x7f0000001000)={&(0x7f0000000440)={0xbb8, 0x1, 0x5, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [{{0x254, 0x1, {{0x0, 0x5}, 0x4, 0xf, 0x0, 0x5, 0xc, 'syz1\x00', "104e51c3bc9a99812c0cd02628cbe6282b9101f2584a152dce055af436913d0a", "17b18c35b6db4435dd612ebf86c3468ac2b55f7ed9281017b772f11d4315ae27", [{0x5, 0x5, {0x0, 0x200}}, {0x2, 0x0, {0x1, 0x8001}}, {0x7, 0x80, {0x0, 0x3}}, {0x1, 0x4, {0x3}}, {0x8, 0x5, {0x1, 0x81}}, {0x5, 0x42a, {0x1, 0x10000}}, {0x4, 0x200, {0x3, 0x80000001}}, {0x2, 0x1, {0x2, 0x7}}, {0x6, 0x4, {0x0, 0xa}}, {0x8, 0x6, {0x0, 0x995a}}, {0x81, 0x7fff, {0x1, 0xac3}}, {0x101, 0x3}, {0xfff8, 0x4, {0x3, 0x10}}, {0x0, 0x3, {0x3, 0x2c}}, {0x6, 0xfff9, {0x3, 0x6}}, {0x2, 0x7, {0x0, 0xe3}}, {0x5, 0x4, {0x1, 0x2}}, {0xb37, 0x3, {0x2, 0x2eb1}}, {0x2, 0x7f, {0x3, 0xfffffff8}}, {0x0, 0x80, {0x0, 0xfff}}, {0x7, 0x5, {0x2, 0x3}}, {0x3, 0x7d2, {0x2, 0x200}}, {0x7, 0x9, {0x0, 0x6}}, {0x7, 0xd, {0x1, 0x2}}, {0x8, 0x40, {0x2, 0x8}}, {0x8000, 0x2}, {0x4000, 0x5, {0x3, 0x4b1}}, {0x6, 0x9, {0x0, 0x6}}, {0x7, 0x1, {0x0, 0x6b0000}}, {0x2, 0x1ac, {0x3, 0x1000}}, {0x6, 0x1ff, {0x1, 0xa62}}, {0x5, 0x4, {0x1, 0x800}}, {0x1, 0x9, {0x2, 0xc08}}, {0x3, 0x7, {0x0, 0x40df}}, {0x401, 0x1, {0x3, 0xb}}, {0x3, 0xe, {0x3, 0x101}}, {0x46, 0x301, {0x1, 0x3}}, {0x5, 0x6, {0x2, 0x2}}, {0x2, 0x6, {0x3, 0xd}}, {0x9, 0x5, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0x8, 0x5, 0xf001, 0xb575, 0x1b, 'syz1\x00', "0af888ca83ae096e25c30aea321fe62f2c6a83fee5073085399ab4f3b817517e", "f56cd62273f3c257fe51145b78b0e9b329ab0b98df22354200903504efff5d9a", [{0x6, 0x7, {0x1, 0x401}}, {0xf, 0x4, {0x3, 0x9}}, {0xfffb, 0x6, {0x2, 0xc}}, {0x4, 0x0, {0x3, 0xffff}}, {0x7ff, 0x1, {0x0, 0x6}}, {0x194, 0x3, {0x2, 0xfff}}, {0x4, 0x745f, {0x2, 0x7}}, {0x4, 0x5, {0x2, 0x8}}, {0xb996, 0x5ce, {0x0, 0x2}}, {0x8, 0x0, {0x0, 0x3}}, {0x6, 0x7b7c, {0x2, 0x9}}, {0x9, 0x101, {0x0, 0x4}}, {0x7, 0xfffc}, {0xfff7, 0x1, {0x1, 0x3}}, {0x1, 0x0, {0x7, 0x8}}, {0xf2, 0x7ff}, {0x6, 0x3ea1, {0x3, 0x5}}, {0x2, 0x400, {0x1, 0x8}}, {0x4, 0x4, {0x1, 0x2}}, {0xfffd, 0x1638, {0x1, 0xff}}, {0x8, 0x0, {0x3, 0x8}}, {0x24, 0x9, {0x2, 0x4}}, {0xff, 0xfff9, {0x1}}, {0x0, 0x4, {0x3, 0x9d06}}, {0xd, 0x7367, {0x0, 0x8}}, {0x4ef, 0x7ff, {0x2, 0x7}}, {0x0, 0x800, {0x1, 0x200}}, {0x1, 0xfeff, {0x0, 0x9}}, {0x4, 0xda1, {0x0, 0x4}}, {0x0, 0x5, {0x2, 0xd}}, {0x8, 0xf79, {0x0, 0x1}}, {0x2, 0x0, {0x0, 0x10}}, {0x80, 0xa4, {0x0, 0xffffffff}}, {0x3, 0x336, {0x1, 0x400}}, {0x1000, 0xc0, {0x2, 0x9}}, {0x6, 0xa, {0x0, 0x6}}, {0x6, 0x6, {0x3, 0x8f}}, {0x8, 0x2, {0x2, 0x3}}, {0x9, 0x0, {0x3, 0x6e}}, {0x400, 0x9, {0x5e3198b1f29438db, 0x80000001}}]}}}, {{0x254, 0x1, {{0x2, 0x8757}, 0x4, 0x8, 0x7, 0x80, 0x25, 'syz0\x00', "5173c14b929db3240ebddca7e59876764bab47464e70dd092447371691a26936", "7fef4a53eb35007461d0c530d880c606a4d82323b5f911c7260041089e753826", [{0x87, 0x1, {0x0, 0x7}}, {0xe, 0x6, {0x3, 0x7}}, {0x100, 0x40, {0x3, 0x10000}}, {0x3, 0x2111, {0x0, 0x2}}, {0x200, 0x9, {0x0, 0x5}}, {0xb86, 0x8, {0x1, 0x1}}, {0x1, 0x6, {0x3, 0x4}}, {0xaa, 0x9, {0x1, 0x3ff}}, {0x0, 0xe, {0x0, 0x401}}, {0x7, 0x3, {0x0, 0x9}}, {0x68, 0x2, {0x2, 0x2}}, {0x7, 0x3, {0x0, 0x9}}, {0x0, 0x7, {0x1, 0x9}}, {0x4, 0x6, {0x2, 0x10001}}, {0x10, 0x3, {0x2}}, {0xfffb, 0x5, {0x2, 0xfffffffb}}, {0x101, 0x17, {0x0, 0x6}}, {0xfff9, 0x5b9, {0x0, 0x3}}, {0x10, 0x3, {0x3, 0x275}}, {0x7, 0x1ff, {0x1, 0xcf}}, {0x9, 0x3, {0x2, 0x80000000}}, {0x1, 0xfff9, {0x3, 0xfffffffd}}, {0x1, 0x7ff, {0x1, 0x9}}, {0x7, 0x0, {0x1, 0xfffffff7}}, {0x435, 0x3, {0x0, 0xe}}, {0x2, 0x400, {0x2, 0x5}}, {0x0, 0x4bb, {0x2, 0xae60}}, {0x3, 0x8, {0x2, 0x7fff}}, {0x2b3e, 0xff00, {0x2, 0x18ed}}, {0x4, 0x9, {0x3}}, {0x3, 0x10, {0x3, 0x6}}, {0x0, 0xd, {0x1, 0xd}}, {0x200, 0x9, {0x3, 0x8}}, {0xff80, 0x3, {0x3, 0x6}}, {0x2000, 0x0, {0x3, 0x3ff}}, {0x3, 0x1, {0x2, 0x10}}, {0x8, 0x996, {0x3, 0xdf}}, {0x6, 0x8fd2, {0x1, 0x6}}, {0x339c, 0x2, {0x0, 0x7}}, {0x1, 0x3, {0x0, 0x430}}]}}}, {{0x254, 0x1, {{0x2, 0x9}, 0x5, 0x4c, 0x100, 0x0, 0xf, 'syz0\x00', "74d5d62fe1b408c9b164fcccccaaad24b5aae346323f72c5727c93897f9315fc", "d5fae4d6b584d0a573cc81368a736f4523c75d1affad1a3424b21ab415f54058", [{0x9, 0x2, {0x1, 0x4}}, {0xdf5, 0x4, {0x1, 0x4}}, {0x0, 0x5, {0x2, 0x3}}, {0x5, 0xa, {0x2, 0x4}}, {0xea7b, 0x400, {0x3, 0x8}}, {0x8, 0x100, {0x2, 0x1000}}, {0x4, 0x0, {0x3, 0x8bde}}, {0x40b, 0x0, {0x2, 0xffe}}, {0x8000, 0x9, {0x1, 0x7}}, {0x5, 0x0, {0x3, 0xf}}, {0x5, 0xfffe, {0x3, 0x1}}, {0xf, 0x3948, {0x2, 0x3}}, {0x80, 0x4552, {0x2, 0x3dff}}, {0x7, 0x8, {0x1, 0x91}}, {0x4, 0x1ff, {0x2, 0xffffffff}}, {0x7, 0x3, {0x0, 0x65f1}}, {0x2, 0xe8, {0x3, 0x80}}, {0x7, 0x3, {0x3, 0x2}}, {0x5, 0x3ff, {0x0, 0x1}}, {0x2, 0x39, {0x2, 0x2}}, {0x5, 0x40, {0x3, 0x6}}, {0xc, 0xfff9, {0x1}}, {0x40, 0x3, {0x3, 0x5}}, {0x8, 0x3, {0x0, 0x7}}, {0x800, 0xffdf, {0x2, 0x8000}}, {0x2, 0x9, {0x0, 0xb3}}, {0x5, 0x2d, {0x0, 0x9}}, {0x800, 0xff, {0x0, 0x5}}, {0x5, 0x2, {0x2, 0x8}}, {0x5, 0xa69, {0x1, 0x1ff}}, {0xfffc, 0x400, {0x2, 0xfffffff4}}, {0x1ff, 0xffff, {0x2, 0x93f4}}, {0xc7, 0x1, {0x1}}, {0x7, 0x8, {0x2, 0x4}}, {0x7, 0x5, {0x3, 0x7ff}}, {0x0, 0x7, {0x0, 0xb}}, {0x5, 0x3}, {0x3, 0x1, {0x0, 0xf3d}}, {0x9, 0xd4, {0x3, 0x1}}, {0x1, 0x6, {0x2, 0xfffffbff}}]}}}, {{0x254, 0x1, {{0x1, 0x64}, 0x9, 0x8, 0x0, 0xe, 0xff00, 'syz1\x00', "6a103d91c6df77e4d2ddbb61e06eb333457d65c3a30aab98eaa9727b78bd76aa", "ef1d095550e1475365b2938dc725d88a121945c313361b9d32314d5248c4afef", [{0x29f, 0x6, {0x3, 0x36}}, {0x9, 0x9, {0x0, 0xfffffffd}}, {0x100, 0xffff, {0x2, 0x49}}, {0x6, 0x9, {0x1, 0x2}}, {0x2, 0x1, {0x3, 0x5}}, {0x7, 0x3, {0x3, 0x8000}}, {0x8, 0x5, {0x3, 0x7}}, {0x100, 0x3, {0x3, 0x7f}}, {0x7, 0x5f7, {0x3, 0x4}}, {0x6, 0x5, {0x2, 0x100}}, {0xc2, 0x8, {0x2, 0x7}}, {0xfffc, 0xfff, {0x3, 0x1}}, {0x0, 0x0, {0x3, 0x5}}, {0x3c8f, 0x706, {0x2, 0x1}}, {0xb9, 0x6, {0x3, 0x80000000}}, {0xd, 0x6, {0x2, 0x101}}, {0x9, 0x7fff, {0x2, 0x8}}, {0xc7, 0x9c2, {0x2}}, {0x7, 0x1, {0x2, 0x5}}, {0x3, 0xf801, {0x3, 0xfff}}, {0x101, 0x81, {0x1, 0x9ee1}}, {0x7, 0x50, {0x2, 0x7}}, {0x5, 0x4, {0x1, 0x5}}, {0x2, 0x800, {0x2, 0x17}}, {0x0, 0x6, {0x2, 0x81}}, {0x81, 0x52d2, {0x3, 0x3}}, {0x4}, {0xfff, 0x2, {0x1, 0xdac0}}, {0x6, 0x7, {0x0, 0x8}}, {0x4, 0x401, {0x3, 0x30000}}, {0x4, 0x0, {0x3, 0x7}}, {0x5, 0x5, {0x3, 0x7cf3eb01}}, {0x1, 0x9, {0x2, 0x3}}, {0x3, 0x4, {0x0, 0x1000}}, {0x60, 0x401}, {0x2, 0x8, {0x3, 0x5}}, {0x30, 0x3, {0x1, 0x6}}, {0x3428, 0x4}, {0x40, 0x7}, {0x1ff, 0x8, {0x2, 0x290}}]}}}]}, 0xbb8}}, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000001080), 0x6, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000010c0)={0x1, 0x5, 0x4, 0x10, 0x80000001, {0x0, 0xea60}, {0x0, 0x1, 0x6, 0x9, 0xc, 0x9, 'N>`b'}, 0x0, 0x4, {0xffffffffffffffff}, 0x1}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001140)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000001200)=@multiplanar_fd={0x3, 0x3, 0x4, 0x100, 0xffff8000, {}, {0x2, 0x1, 0x24, 0x2, 0x7, 0x3, "2d1f2c0e"}, 0x7fff, 0x4, {&(0x7f0000001180)=[{0x53691d55, 0x6, {r3}, 0xd1}, {0x81, 0x4, {r4}, 0x4}]}, 0x6, 0x0, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x34, r6, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x20008884) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r4) sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x20, r8, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xc5d0, 0x31}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40081}, 0x4054) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000001500)={0x7fffffff, 0x0, 0x1, 0x0, 0x2}) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000001580)={0x2, 0x7f, {0xffffffffffffffff}, {}, 0x1}) sendmsg$nl_netfilter(r4, &(0x7f0000001740)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001700)={&(0x7f00000015c0)={0x130, 0x2, 0x1, 0x3, 0x70bd26, 0x25dfdbfc, {0x3, 0x0, 0x7}, [@typed={0x8, 0x7b, 0x0, 0x0, @u32=0x5}, @generic="73c3794b4a288899919d78cbca42cfdac54c1c1ee1b406395ab9a28d9c5d00c615bb00b8998a98e096a30f8eaa82a5a9045d657a224de439f6c3c73de949117f5c4c4749bc05e3483e895695344a716c85c115a586edc29e3c3ff60d4f9ca7accedd53d8521ce8abcdc1fc8d376229ea4071fe6ce00674ad788bd9b7b433949178eda1b1301d5e76d2ef05951aebbfb02921ea2d95bab6dabb52cb75", @typed={0x8, 0x143, 0x0, 0x0, @pid=r9}, @typed={0x8, 0x100, 0x0, 0x0, @ipv4=@multicast2}, @generic="8d8721da3e51b75799f6e57bf200873396b3c46950988f3a3d01e735496d1da8f605cce2fcab891875cb968ff65b23996aa6e418a15f37fe79d9495164d9af4108b9462e58a60d380b72576d9a19a95b859af8ec93d61874b2cde98d6542e46bdbd370af607ff7"]}, 0x130}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) mount(&(0x7f0000001780)=@sg0, &(0x7f00000017c0)='./file1\x00', &(0x7f0000001800)='efivarfs\x00', 0x842, &(0x7f0000001840)='{+-\x00') setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000001880)={@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "21c5514e3e9ac70e195b4ccfb486a8a2f96180682007ecb213d54e4dde8744fb", 0xe, 0xfffffff8, 0x6, 0x2}, 0x3c) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r10, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x68, r11, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) r12 = accept4$phonet_pipe(r4, 0x0, &(0x7f0000001a40), 0x80800) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r12, 0x8982, &(0x7f0000001a80)={0x0, 'geneve1\x00', {0x2}, 0x8}) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b00), r10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r10, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x44, r13, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x44}}, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f0000001c40)={@desc={0x1, 0x0, @auto="462e9ed5d7697579"}}) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001cc0), r10) sendmsg$NLBL_MGMT_C_VERSION(r10, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x1c, r14, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000001e40)=@multiplanar_overlay={0x2, 0x2, 0x4, 0x8, 0xcc, {}, {0x5, 0xc, 0x0, 0x5, 0x2, 0x8, "bc19654e"}, 0x8001, 0x3, {&(0x7f0000001dc0)=[{0x6, 0x81, {0x4}, 0x9}, {0x5c3, 0x0, {0x6}, 0x7fff}]}, 0x2, 0x0, r5}) 3.856484091s ago: executing program 2 (id=565): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ppoll(&(0x7f00000002c0)=[{r3, 0x200}, {r1, 0x1000}, {r2, 0x4080}], 0x3, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0xfffffffffffffff1]}, 0x8) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x4019812, r5, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f0000000040)) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0xfe}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x400}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000380)=0x1) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3], 0x0, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800060000000401a800080008000a4003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x3, 0x7, 0x2bf8}) 2.530290664s ago: executing program 3 (id=580): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="800000000b0601020000000000000000030000000900020073797a30000000000500010007000000580008800c00078007001a00242e0000100007800c001840fffffffffffffffd100007800c001b4000000000000000100c00078008000a400000ffff100007800c00028008000140ac1414aa0c000780060001404e"], 0x80}}, 0x40800) openat$nvram(0xffffffffffffff9c, &(0x7f0000002980), 0x82, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000c90217ec0c000180060006002b98a99b05"], 0x528}}, 0x4800) 2.46526361s ago: executing program 3 (id=581): r0 = socket$inet6(0xa, 0x80002, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x44, 0x30, 0xb, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x14000001) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 32) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001400)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004", @ANYRES16=r6, @ANYRES8=r1, @ANYRESHEX=r7], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ptrace$getregset(0x4204, r2, 0x3, &(0x7f0000000240)={&(0x7f0000002dc0)=""/4103, 0x1007}) (async) r11 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$CDROMVOLCTRL(r11, 0x5392, &(0x7f0000000040)={0x9, 0x5, 0x6, 0x7f}) (async) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) (async) userfaultfd(0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r14) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_DEL_STATION(r12, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="fc890000", @ANYRES16=r13, @ANYBLOB="01002cbd7000fedbdf251400000008000300", @ANYRES8=r14, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40001}, 0x4000400) (async) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0186dd602abe0000181100fe800000000000000000000000000022000000000000000000000000000000004e1d0018907804000000c0ff000007000000000000000000"], 0x0) 2.390718106s ago: executing program 3 (id=582): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @default, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) sendto$netrom(r3, 0x0, 0x0, 0x80, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) keyctl$set_reqkey_keyring(0xe, 0x5) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000580)={0x0, 0x8001}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e24, 0x6dca, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, 0x10000, 0x6, 0x2, 0x6, 0xc}, &(0x7f00000004c0)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000500)={0x9, 0x6, 0xc20c, 0x6, 0x0, 0x0, 0xfffffffc, 0x4e, r5}, &(0x7f0000000540)=0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r7}, &(0x7f00000001c0), &(0x7f0000000200)=r8}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000003c0)={0x1d, r9, 0x3, {0x0, 0xf0, 0x3}, 0x1}, 0x18) write$P9_RREAD(r2, &(0x7f0000000600)={0x61, 0x75, 0x2, {0x56, "8d8e51368db9003790d5bb27b7b74a25023e5076ce59224e38c53b8ac490eb7d3a9bd05b2a420690a52112e4ae10ba462a717c55502926d8fdb200c0b0fc0e57c0f80e7e7354eac5eafe60e173afea947275924191ef"}}, 0x61) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x27, 0x0, 0x120, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) shutdown(0xffffffffffffffff, 0x0) 2.070745749s ago: executing program 3 (id=583): r0 = openat$fb0(0xffffff9c, &(0x7f00000001c0), 0x80080, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000480)={0x30, 0x140, 0x550, 0x640, 0xfffffff8, 0x0, 0x4, 0x1, {0x3}, {0x4, 0x6, 0x1}, {0x1, 0xcd3, 0x1}, {0xa}, 0x1, 0x80, 0x4, 0x2, 0x1, 0xffffff81, 0x81, 0x9, 0x7, 0xffd7, 0xb, 0x10001, 0x10, 0x100, 0x0, 0x6}) r1 = socket$netlink(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x8, 0x8, 0x34324152, 0x0, 0x1, [{0x0, 0x2fd5}, {0x10}, {}, {}, {0x0, 0x8}, {}, {0xfffffffd}, {0x400000}], 0x0, 0x4, 0x0, 0x0, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010004b0400000000ea0000007a000000e272c728563c9d9dfbebc3bf0488b4f0f3801454a3d242b9e74f4a3faa5efbe2bf915a28d9c0ead975906d432154a426fbf0a78fcdae55", @ANYRESOCT=r1, @ANYRES8], 0x44}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0x7d}, 0xffffffffffffffff, "e2410fc7932741e6b70674a7718a57756107b3972fd02b2504ecf28f14ee12cc", 0x192, 0x0, 0x2, 0x7}, 0x3c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100000000000000000002"], 0x28}}, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000300)={0x2c, &(0x7f0000000200)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r7, 0xd01c4813, &(0x7f0000000180)={0x2, 0x200, 0x0, 0x7, 0x20000000, 0x3ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) r10 = syz_open_dev$video(&(0x7f0000000040), 0x10, 0x0) ioctl$VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000380)={0x9, @pix_mp={0x3, 0x6, 0x51424752, 0x9, 0x4, [{0x1, 0xfffffff9}, {0x7, 0x1}, {0x1, 0x11da}, {0xa, 0x4}, {0x1e47e14a, 0x4058}, {0x1, 0x1d9}, {0x8, 0x1}, {0x2, 0x2}], 0x3, 0x81, 0x6, 0x2, 0x3}}) r11 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x28000, 0x0) ioctl$TIOCL_SELLOADLUT(r11, 0x541c, &(0x7f00000001c0)={0x5, 0x4, 0xf04, 0x2, 0x1}) 1.811603496s ago: executing program 0 (id=585): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r3}, 0x47) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000003000000000000000000000d"], 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x800083ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00002ad000/0x3000)=nil}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r5, &(0x7f0000000280), &(0x7f0000000340)=""/140}, 0x20) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, 0x0, 0x93020007) 1.183239256s ago: executing program 1 (id=590): socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x8000) r1 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="501d0000", @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x840) r4 = socket(0x1f, 0x80003, 0x0) socket$vsock_stream(0x28, 0x1, 0x28) write(r4, &(0x7f00000007c0)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000e073c32ac7b5f28af4e60be414f9c6e019becb9e32c1d18384affe96c42b13a1acef70d59b2f1129028c7485742ff908021b8b6e56b3b62012805af00aa8a4cb2eb490f10a0dfce2820ce8f172b9b2bbfb989642cd77706bd626d0dad93500a5cd33278bf7ec6f4aa644c7735181067634482ceb9419b64f8728af668b627673535cf4336a8f0a3f5524fb382eb0c52ecddfcdcdc88997aebf1d9bd4743dcd53d950448bb52f804d4cc6f8b84ed719fe9434fe23a22f7633c463ca049c8802f74948090e2e784a6981044341f8898cd0acde6cafb0329d8749b02e86079d9b467e631d5d70dea197a255eeb4bbfd3b49d4aba7f1728ecaba8605117a52c4eef3e97998347d86c604c506ffe0e5a859b0195d1d597e719410aabbed47f54ecdaa9d432ab32c2d40cf536c", 0x14e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a6c000000060a0104000000000000000002000000400004803c0001800c0001007061796c586164002c000280080004400000000008000540000000000800034000000000080002861f00000208000840000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSPTLCK(r8, 0x40045431, &(0x7f0000000140)) getpeername(r6, &(0x7f0000000040)=@nfc, &(0x7f00000000c0)=0x80) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'lo\x00'}) r9 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xc8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\x16\x82\xe8=\xa3\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\xba\x89#=2G0x0}, 0x2020) write$FUSE_WRITE(r4, &(0x7f0000000080)={0x18, 0x0, r5, {0x7}}, 0x18) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) close(r0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_GET_VERSION(r7, 0x8004552d, &(0x7f0000000080)) ioctl$SIOCRSACCEPT(r6, 0x89e3) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_read_auth_payload_to={{0x7}, {0x5, 0xc9, 0xde}}}}, 0xb) 872.205661ms ago: executing program 1 (id=592): recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x700) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6c, @local, 0x4e21, 0x3, 'rr\x00', 0xc, 0x7, 0x37}, 0x2c) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x90) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r2, &(0x7f00000004c0)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x24, &(0x7f0000000280), 0x8c) capset(0x0, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x5, 0x5}) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa}, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{0x1, 0x2, 0x3, 0x73e, 'syz0\x00', 0x462}, 0x4, 0x2, 0x5, 0x0, 0x1, 0x8000000, 'syz1\x00', &(0x7f00000000c0)=['/dev/kvm\x00'], 0x9}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 871.927137ms ago: executing program 0 (id=593): mkdir(&(0x7f0000000440)='./file1\x00', 0x1) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0xc0bc5310, &(0x7f00000000c0)={0x18}) (async) chdir(&(0x7f0000000140)='./file1\x00') (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) read$FUSE(r3, &(0x7f0000000c40)={0x2020}, 0x2020) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x3, 0x0}, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r3, 0x37, 0x0, @val=@tracing={r4, 0x4f09}}, 0x20) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x10000000000, 0x5b81, 0x4, 0x6, 0x400000000000009, 0x9, 0xffffffffffffffff, 0x0, 0x20000de}) (async) fchown(r5, 0xee01, 0x0) 740.880731ms ago: executing program 0 (id=594): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRES8=0x0], 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x4004000) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x4004000) 626.508718ms ago: executing program 0 (id=595): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000340)=""/186, 0xba}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1a, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}}, @exit, @ldst={0x2, 0x1, 0x1, 0x6, 0x0, 0x20, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000600)=""/4096, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r4, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000001600)='f2fs_direct_IO_exit\x00', r5, 0x0, 0x2}, 0x18) unshare(0x2c020400) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/19}, 0x1b, 0xffffff7f00000000, 0x3000) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)) 538.485882ms ago: executing program 1 (id=596): r0 = open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x4019812, r1, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x5, 0x9, 0x0, 0x0, 0xf}) socket(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) read(r2, &(0x7f0000000400)=""/213, 0xfe06) 406.833888ms ago: executing program 1 (id=597): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ebffffff0000f77fff00"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000080)) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="050053000100"/16], 0x2c}}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000340)={'\x00', 0x200, 0x5, 0x3, 0x0, 0x1, "f759ca14860e00", '\x00', "00060019", "eb914992", ["ff954991066edcf5d7cc00", "c2248c084fcfc02000000008", '\x00', "001003000000000000000010"]}) 145.799873ms ago: executing program 1 (id=598): r0 = syz_open_procfs(0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) (async) statx(r0, &(0x7f0000000080)='./file0\x00', 0x800, 0x7fd, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) (async, rerun: 64) sendto$packet(r1, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) (rerun: 64) 145.173503ms ago: executing program 3 (id=599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000340), 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r4, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000000731aa7d97653dfe21f25a6e8a0ef1f880e2152ccdd9cae238621f40974cb23b0fb6d5b324b541a9b29a9b54822116754541650749f2bae205149d4b90008edff0de8b0a6fffe8de8a73c6fc2b2cffc62a8ddb40f70f0a9552690fcb9edad40625150d4c167c1f1ad5c74cbcfa0666cbba0939ea85b128d78862f13cb0e9b3292ce14437044674197f02f818d04d006a4", @ANYRES16=r1, @ANYRES32=r4], 0x4c}}, 0x0) 0s ago: executing program 3 (id=600): r0 = inotify_init() readv(r0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/174, 0xae}], 0x1) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000009, 0x1010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x114, &(0x7f0000000040)=0x1, 0x0, 0x4) creat(&(0x7f00000001c0)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): [ 38.245330][ T40] audit: type=1400 audit(1737027818.172:81): avc: denied { rlimitinh } for pid=5924 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.251767][ T40] audit: type=1400 audit(1737027818.172:82): avc: denied { siginh } for pid=5924 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.361427][ T40] audit: type=1400 audit(1737027819.302:83): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.367654][ T40] audit: type=1400 audit(1737027819.302:84): avc: denied { append } for pid=5334 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.374058][ T40] audit: type=1400 audit(1737027819.302:85): avc: denied { open } for pid=5334 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.380227][ T40] audit: type=1400 audit(1737027819.302:86): avc: denied { getattr } for pid=5334 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:30856' (ED25519) to the list of known hosts. [ 39.513900][ T40] audit: type=1400 audit(1737027819.462:87): avc: denied { name_bind } for pid=5928 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.053997][ T5930] cgroup: Unknown subsys name 'net' [ 41.217891][ T5930] cgroup: Unknown subsys name 'cpuset' [ 41.221729][ T5930] cgroup: Unknown subsys name 'rlimit' [ 41.387572][ T5936] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 41.965566][ T5930] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.202217][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 44.202228][ T40] audit: type=1400 audit(1737027824.142:105): avc: denied { execmem } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.372376][ T40] audit: type=1400 audit(1737027824.312:106): avc: denied { create } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.378850][ T40] audit: type=1400 audit(1737027824.312:107): avc: denied { read write } for pid=5941 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.385876][ T40] audit: type=1400 audit(1737027824.312:108): avc: denied { open } for pid=5941 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.392593][ T40] audit: type=1400 audit(1737027824.322:109): avc: denied { ioctl } for pid=5942 comm="syz-executor" path="socket:[7372]" dev="sockfs" ino=7372 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.407272][ T5950] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.409769][ T5950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.412977][ T5950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.415145][ T5950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.417219][ T5953] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.417898][ T5950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.420630][ T5953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.422977][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.426074][ T5953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.427007][ T5950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.429890][ T5953] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.431875][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.433841][ T5953] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.434728][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.435863][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.437831][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.437924][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.438180][ T5950] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.438363][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.439657][ T5950] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 44.440242][ T5959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.440442][ T5959] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 44.440541][ T5959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.447035][ T40] audit: type=1400 audit(1737027824.382:110): avc: denied { read } for pid=5949 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.448226][ T5950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.451851][ T40] audit: type=1400 audit(1737027824.382:111): avc: denied { open } for pid=5949 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.471001][ T40] audit: type=1400 audit(1737027824.392:112): avc: denied { mounton } for pid=5949 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 44.592592][ T40] audit: type=1400 audit(1737027824.532:113): avc: denied { module_request } for pid=5942 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 44.603845][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 44.608735][ T5956] chnl_net:caif_netlink_parms(): no params data found [ 44.632202][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 44.746293][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 44.750479][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.752718][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.754902][ T5956] bridge_slave_0: entered allmulticast mode [ 44.757146][ T5956] bridge_slave_0: entered promiscuous mode [ 44.791792][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.795116][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.797783][ T5956] bridge_slave_1: entered allmulticast mode [ 44.800328][ T5956] bridge_slave_1: entered promiscuous mode [ 44.835756][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.838083][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.840769][ T5942] bridge_slave_0: entered allmulticast mode [ 44.843105][ T5942] bridge_slave_0: entered promiscuous mode [ 44.857178][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.859903][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.862460][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.865970][ T5949] bridge_slave_0: entered allmulticast mode [ 44.868674][ T5949] bridge_slave_0: entered promiscuous mode [ 44.886120][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.888692][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.891399][ T5942] bridge_slave_1: entered allmulticast mode [ 44.894155][ T5942] bridge_slave_1: entered promiscuous mode [ 44.906313][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.909800][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.912716][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.915363][ T5949] bridge_slave_1: entered allmulticast mode [ 44.918007][ T5949] bridge_slave_1: entered promiscuous mode [ 44.947239][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.985520][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.989858][ T5956] team0: Port device team_slave_0 added [ 45.001865][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.004654][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.007330][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.009970][ T5941] bridge_slave_0: entered allmulticast mode [ 45.012671][ T5941] bridge_slave_0: entered promiscuous mode [ 45.016873][ T5956] team0: Port device team_slave_1 added [ 45.028163][ T5942] team0: Port device team_slave_0 added [ 45.031881][ T5942] team0: Port device team_slave_1 added [ 45.036287][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.046988][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.049067][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.051124][ T5941] bridge_slave_1: entered allmulticast mode [ 45.053528][ T5941] bridge_slave_1: entered promiscuous mode [ 45.114469][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.117235][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.125957][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.131519][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.135195][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.145236][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.151626][ T5949] team0: Port device team_slave_0 added [ 45.154734][ T5949] team0: Port device team_slave_1 added [ 45.157842][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.161161][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.163989][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.173069][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.177345][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.179602][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.188053][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.206702][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.236375][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.239224][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.249250][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.271000][ T5941] team0: Port device team_slave_0 added [ 45.275298][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.277821][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.287508][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.307098][ T5941] team0: Port device team_slave_1 added [ 45.364654][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.366666][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.374829][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.378901][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.380966][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.388854][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.395548][ T5942] hsr_slave_0: entered promiscuous mode [ 45.398578][ T5942] hsr_slave_1: entered promiscuous mode [ 45.403209][ T5956] hsr_slave_0: entered promiscuous mode [ 45.405497][ T5956] hsr_slave_1: entered promiscuous mode [ 45.407339][ T5956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.409890][ T5956] Cannot create hsr debugfs directory [ 45.430809][ T5949] hsr_slave_0: entered promiscuous mode [ 45.433156][ T5949] hsr_slave_1: entered promiscuous mode [ 45.435231][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.437433][ T5949] Cannot create hsr debugfs directory [ 45.527987][ T5941] hsr_slave_0: entered promiscuous mode [ 45.530001][ T5941] hsr_slave_1: entered promiscuous mode [ 45.531880][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.534129][ T5941] Cannot create hsr debugfs directory [ 45.695080][ T5956] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.702062][ T5956] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.705423][ T5956] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.708847][ T5956] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.727610][ T5941] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.731608][ T5941] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.734783][ T5941] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.738028][ T5941] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.761084][ T5949] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.765325][ T5949] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.778216][ T5949] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.782329][ T5949] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.800159][ T5942] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.810274][ T5942] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.814621][ T5942] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.818229][ T5942] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.855446][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.868351][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.886917][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.893184][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.902327][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.905170][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.913378][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.915419][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.932183][ T1251] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.934806][ T1251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.940173][ T1251] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.943128][ T1251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.971802][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.979032][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.994802][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.999892][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.002358][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.004937][ T40] audit: type=1400 audit(1737027825.942:114): avc: denied { sys_module } for pid=5956 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 46.015117][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.021652][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.023748][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.027017][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.029079][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.036801][ T1206] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.038868][ T1206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.068527][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.075488][ T5949] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.078462][ T5949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.101610][ T5956] veth0_vlan: entered promiscuous mode [ 46.108408][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.111283][ T5956] veth1_vlan: entered promiscuous mode [ 46.140530][ T5941] veth0_vlan: entered promiscuous mode [ 46.146159][ T5956] veth0_macvtap: entered promiscuous mode [ 46.151547][ T5941] veth1_vlan: entered promiscuous mode [ 46.158512][ T5956] veth1_macvtap: entered promiscuous mode [ 46.165973][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.175225][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.183770][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.193897][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.196495][ T5941] veth0_macvtap: entered promiscuous mode [ 46.199708][ T5956] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.202531][ T5956] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.205055][ T5956] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.207540][ T5956] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.216278][ T5941] veth1_macvtap: entered promiscuous mode [ 46.225606][ T5942] veth0_vlan: entered promiscuous mode [ 46.230960][ T5942] veth1_vlan: entered promiscuous mode [ 46.250838][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.255150][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.259393][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.287541][ T1206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.291784][ T1206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.296145][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.299111][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.302980][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.311568][ T5949] veth0_vlan: entered promiscuous mode [ 46.318045][ T5941] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.320601][ T5941] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.326055][ T5941] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.328564][ T5941] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.335855][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.338526][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.348301][ T5942] veth0_macvtap: entered promiscuous mode [ 46.350835][ T5949] veth1_vlan: entered promiscuous mode [ 46.355852][ T5942] veth1_macvtap: entered promiscuous mode [ 46.374368][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.374707][ T5956] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.378349][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.387249][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.391256][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.396896][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.405065][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.408037][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.411326][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.414804][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.417942][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.430565][ T1206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.435096][ T1206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.438762][ T5942] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.441404][ T5942] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.444433][ T5942] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.447034][ T5942] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.460357][ T5949] veth0_macvtap: entered promiscuous mode [ 46.469442][ T66] Bluetooth: hci2: command tx timeout [ 46.469449][ T5950] Bluetooth: hci0: command tx timeout [ 46.473096][ T5950] Bluetooth: hci3: command tx timeout [ 46.475907][ T5949] veth1_macvtap: entered promiscuous mode [ 46.483756][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.486072][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.508114][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.510093][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5'. [ 46.511200][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.511207][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.511214][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.511219][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.511225][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.513091][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.537805][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.540935][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.544180][ T5950] Bluetooth: hci1: command tx timeout [ 46.544485][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.548955][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.551775][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.555003][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.557127][ T6010] ip6t_REJECT: ECHOREPLY is not supported [ 46.558564][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.566134][ T5949] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.568634][ T5949] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.571130][ T5949] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.573772][ T5949] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.586773][ T1251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.589012][ T1251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.604602][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.607063][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.613245][ T6010] orangefs_mount: mount request failed with -4 [ 46.621348][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.630491][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.645634][ T1206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.648059][ T1206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.705485][ T6026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9'. [ 46.708150][ T6026] netlink: 'syz.3.9': attribute type 7 has an invalid length. [ 46.710508][ T6026] netlink: 'syz.3.9': attribute type 8 has an invalid length. [ 46.715664][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'. [ 46.725154][ T6030] devpts: called with bogus options [ 46.912527][ T6058] xt_hashlimit: size too large, truncated to 1048576 [ 46.961469][ T6048] netlink: 'syz.2.13': attribute type 13 has an invalid length. [ 46.963881][ T6048] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13'. [ 46.967059][ T6048] syz_tun: refused to change device tx_queue_len [ 46.968978][ T6048] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 46.980679][ T6048] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 46.982708][ T6048] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 46.986380][ T6048] vhci_hcd vhci_hcd.0: Device attached [ 47.014122][ T6072] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21'. [ 47.041752][ T6075] netlink: 2088 bytes leftover after parsing attributes in process `syz.3.20'. [ 47.051921][ T6077] Invalid logical block size (585) [ 47.058356][ T6077] syz.0.22: attempt to access beyond end of device [ 47.058356][ T6077] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 47.064164][ T6077] EXT4-fs (nbd0): unable to read superblock [ 47.252413][ T6003] usb 42-1: SetAddress Request (2) to port 0 [ 47.254364][ T6003] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 47.293433][ T6091] Zero length message leads to an empty skb [ 47.382820][ T6093] tty tty3: ldisc open failed (-12), clearing slot 2 [ 47.421591][ T6101] netlink: 108 bytes leftover after parsing attributes in process `syz.1.30'. [ 47.425645][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 47.512751][ T6107] fuse: Bad value for 'fd' [ 47.640202][ T6066] vhci_hcd: connection reset by peer [ 47.652689][ T46] vhci_hcd: stop threads [ 47.654229][ T46] vhci_hcd: release socket [ 47.655987][ T46] vhci_hcd: disconnect device [ 47.683136][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 47.856610][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.39'. [ 48.025660][ T6141] bond0: entered promiscuous mode [ 48.027173][ T6141] bond_slave_0: entered promiscuous mode [ 48.028881][ T6141] bond_slave_1: entered promiscuous mode [ 48.087711][ T6148] syz.1.43 (6148): attempted to duplicate a private mapping with mremap. This is not supported. [ 48.222093][ T6160] program syz.1.50 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.279778][ T6160] team0: Port device team_slave_1 removed [ 48.385631][ T6173] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 48.415119][ T6175] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 48.450729][ T5984] libceph: connect (1)[c::]:6789 error -101 [ 48.453133][ T5984] libceph: mon0 (1)[c::]:6789 connect error [ 48.492812][ T6181] ceph: No mds server is up or the cluster is laggy [ 48.552560][ T5950] Bluetooth: hci3: command tx timeout [ 48.552625][ T66] Bluetooth: hci0: command tx timeout [ 48.632474][ T66] Bluetooth: hci1: command tx timeout [ 48.834939][ T6205] ref_ctr_offset mismatch. inode: 0x64 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 49.453910][ T40] kauditd_printk_skb: 162 callbacks suppressed [ 49.453920][ T40] audit: type=1400 audit(1737027829.392:277): avc: denied { write } for pid=6208 comm="syz.2.65" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 49.472794][ T40] audit: type=1400 audit(1737027829.422:278): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 49.479062][ T40] audit: type=1400 audit(1737027829.422:279): avc: denied { search } for pid=5334 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.493662][ T40] audit: type=1400 audit(1737027829.422:280): avc: denied { open } for pid=5334 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.500168][ T40] audit: type=1400 audit(1737027829.422:281): avc: denied { getattr } for pid=5334 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.519187][ T6211] kvm: emulating exchange as write [ 49.523601][ T40] audit: type=1400 audit(1737027829.472:282): avc: denied { read write } for pid=6212 comm="syz.0.66" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 49.530346][ T40] audit: type=1400 audit(1737027829.472:283): avc: denied { open } for pid=6212 comm="syz.0.66" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 49.537762][ T6209] SELinux: Context system_u:object_r:dhcpc_exec_t:s0 is not valid (left unmapped). [ 49.537814][ T40] audit: type=1400 audit(1737027829.482:284): avc: denied { mac_admin } for pid=6208 comm="syz.2.65" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.547280][ T40] audit: type=1400 audit(1737027829.482:285): avc: denied { relabelto } for pid=6208 comm="syz.2.65" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dhcpc_exec_t:s0" [ 49.555093][ T40] audit: type=1400 audit(1737027829.482:286): avc: denied { associate } for pid=6208 comm="syz.2.65" name="kvm" dev="devtmpfs" ino=84 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcpc_exec_t:s0" [ 49.734462][ T6228] ======================================================= [ 49.734462][ T6228] WARNING: The mand mount option has been deprecated and [ 49.734462][ T6228] and is ignored by this kernel. Remove the mand [ 49.734462][ T6228] option from the mount to silence this warning. [ 49.734462][ T6228] ======================================================= [ 49.933518][ T6241] fuse: Unknown parameter 'group_GKOÿÿÿÿÿÿÿÿ' [ 50.013800][ T6239] fuse: root generation should be zero [ 50.020196][ T6239] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.298740][ T6282] orangefs: client-core tried to read wrong size [ 50.345169][ T6302] bridge_slave_1: left allmulticast mode [ 50.347269][ T6302] bridge_slave_1: left promiscuous mode [ 50.349108][ T6307] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 50.351206][ T6307] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 50.353834][ T6307] vhci_hcd vhci_hcd.0: Device attached [ 50.357632][ T6306] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 50.360285][ T6306] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 50.360448][ T6302] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.363163][ T6306] vhci_hcd vhci_hcd.0: Device attached [ 50.617857][ T6344] warning: `syz.2.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 50.623348][ T66] Bluetooth: hci3: command tx timeout [ 50.625794][ T66] Bluetooth: hci0: command tx timeout [ 50.632519][ T57] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 50.642451][ T25] usb 40-1: SetAddress Request (2) to port 0 [ 50.644246][ T25] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 50.702785][ T5950] Bluetooth: hci1: command tx timeout [ 50.772457][ T57] usb 6-1: device descriptor read/64, error -71 [ 50.839392][ T6363] xt_hashlimit: size too large, truncated to 1048576 [ 51.022489][ T57] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 51.172403][ T57] usb 6-1: device descriptor read/64, error -71 [ 51.294570][ T57] usb usb6-port1: attempt power cycle [ 51.583156][ T5950] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 51.586551][ T5950] Bluetooth: hci2: Injecting HCI hardware error event [ 51.589818][ T5950] Bluetooth: hci2: hardware error 0x00 [ 51.621881][ T6386] Invalid source name [ 51.625711][ T6386] UBIFS error (pid: 6386): cannot open "/dev/sg0", error -22 [ 51.652587][ T57] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 51.663240][ T6389] __nla_validate_parse: 6 callbacks suppressed [ 51.663250][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.114'. [ 51.676138][ T57] usb 6-1: device descriptor read/8, error -71 [ 51.712034][ T6390] "syz.2.113" (6390) uses obsolete ecb(arc4) skcipher [ 51.764109][ T6408] block nbd2: NBD_DISCONNECT [ 51.900374][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'. [ 51.933538][ T57] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 51.951687][ T6429] syz.2.122 uses obsolete (PF_INET,SOCK_PACKET) [ 51.954052][ T57] usb 6-1: device descriptor read/8, error -71 [ 52.063568][ T57] usb usb6-port1: unable to enumerate USB device [ 52.140172][ T6435] delete_channel: no stack [ 52.143207][ T6439] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 52.302804][ T6003] usb 42-1: device descriptor read/8, error -110 [ 52.306373][ T6460] overlayfs: failed to resolve './file0': -2 [ 52.309192][ T6461] wireguard0: entered promiscuous mode [ 52.311232][ T6461] wireguard0: entered allmulticast mode [ 52.390085][ T6469] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 52.392851][ T6469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 52.528383][ T6485] support for the xor transformation has been removed. [ 52.552151][ T6487] mkiss: ax0: crc mode is auto. [ 52.702770][ T5953] Bluetooth: hci3: command tx timeout [ 52.704951][ T5954] Bluetooth: hci0: command tx timeout [ 52.708480][ T6003] usb usb42-port1: attempt power cycle [ 52.782364][ T5954] Bluetooth: hci1: command tx timeout [ 53.273093][ T6003] usb usb42-port1: unable to enumerate USB device [ 53.354567][ T6308] vhci_hcd: connection closed [ 53.356514][ T6309] vhci_hcd: connection reset by peer [ 53.356806][ T1251] vhci_hcd: stop threads [ 53.362431][ T1251] vhci_hcd: release socket [ 53.364182][ T1251] vhci_hcd: disconnect device [ 53.366939][ T1251] vhci_hcd: stop threads [ 53.368680][ T1251] vhci_hcd: release socket [ 53.370506][ T1251] vhci_hcd: disconnect device [ 53.673018][ T5950] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 53.822790][ T5950] Bluetooth: hci4: command 0x1003 tx timeout [ 53.825208][ T66] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 54.065804][ T6553] netlink: 'syz.3.154': attribute type 1 has an invalid length. [ 54.092489][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.154'. [ 54.342402][ T6013] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.482417][ T6013] usb 8-1: device descriptor read/64, error -71 [ 54.607219][ T40] kauditd_printk_skb: 147 callbacks suppressed [ 54.607235][ T40] audit: type=1400 audit(1737028090.550:434): avc: denied { setattr } for pid=6529 comm="syz.0.151" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 54.633898][ T6561] netlink: 24 bytes leftover after parsing attributes in process `syz.1.155'. [ 54.639722][ T6563] openvswitch: netlink: Flow actions attr not present in new flow. [ 54.691507][ T6566] ptrace attach of "/syz-executor exec"[6568] was attempted by "/syz-executor exec"[6566] [ 54.708057][ T40] audit: type=1400 audit(1737028090.650:435): avc: denied { bind } for pid=6569 comm="syz.1.158" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.711455][ T6570] netlink: 'syz.1.158': attribute type 1 has an invalid length. [ 54.715503][ T40] audit: type=1400 audit(1737028090.650:436): avc: denied { node_bind } for pid=6569 comm="syz.1.158" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 54.738538][ T6570] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 54.743123][ T6570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.743557][ T6013] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 54.745852][ T1141] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 54.754103][ T40] audit: type=1400 audit(1737028090.700:437): avc: denied { listen } for pid=6572 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.838303][ T6584] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 54.847871][ T6584] CIFS mount error: No usable UNC path provided in device string! [ 54.847871][ T6584] [ 54.851403][ T6584] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 54.863357][ T74] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 54.882416][ T6013] usb 8-1: device descriptor read/64, error -71 [ 54.890486][ T40] audit: type=1400 audit(1737028090.830:438): avc: denied { execute } for pid=6585 comm="syz.0.162" path="/selinux/commit_pending_bools" dev="selinuxfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 54.936439][ T40] audit: type=1400 audit(1737028090.880:439): avc: denied { read } for pid=6587 comm="syz.0.163" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 54.954661][ T40] audit: type=1400 audit(1737028090.880:440): avc: denied { open } for pid=6587 comm="syz.0.163" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 54.965407][ T40] audit: type=1400 audit(1737028090.880:441): avc: denied { ioctl } for pid=6587 comm="syz.0.163" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x70cc scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 54.979696][ T40] audit: type=1400 audit(1737028090.920:442): avc: denied { create } for pid=6581 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.986127][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'. [ 54.987311][ T40] audit: type=1400 audit(1737028090.930:443): avc: denied { setopt } for pid=6581 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.996430][ T6013] usb usb8-port1: attempt power cycle [ 55.007190][ T6582] new mount options do not match the existing superblock, will be ignored [ 55.034593][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.165'. [ 55.332483][ T6013] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 55.353097][ T6013] usb 8-1: device descriptor read/8, error -71 [ 55.602451][ T6013] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 55.623426][ T6013] usb 8-1: device descriptor read/8, error -71 [ 55.744028][ T6013] usb usb8-port1: unable to enumerate USB device [ 55.752373][ T25] usb 40-1: device descriptor read/8, error -110 [ 55.918991][ T6604] 9pnet: Found fid 0 not clunked [ 56.111837][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.115496][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.118421][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.121202][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.124055][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.126704][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.128950][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.131129][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.133570][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.135994][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.138896][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.141389][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.143888][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.146459][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.149499][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.152526][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.153095][ T25] usb usb40-port1: attempt power cycle [ 56.155541][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.160924][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.165236][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.167609][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.170068][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.172574][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.175055][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.177477][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.180433][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.184966][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.187969][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.190812][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.193162][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.195713][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.198696][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.201465][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.203805][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.206168][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.208474][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.210798][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.213146][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.215689][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.218490][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.221395][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.224140][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.227027][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.230105][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.233216][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.235982][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.238741][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.241382][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.243793][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.246378][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.249291][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.252179][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.255120][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.257993][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.261370][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.264330][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.267339][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.270442][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.273611][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.276234][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.278485][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.280817][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.283154][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.286079][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.289068][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.291991][ T66] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 56.732874][ T25] usb usb40-port1: unable to enumerate USB device [ 57.073563][ T6644] netlink: 40 bytes leftover after parsing attributes in process `syz.0.180'. [ 57.243153][ T6651] netlink: 'syz.3.182': attribute type 1 has an invalid length. [ 57.245468][ T6651] netlink: 'syz.3.182': attribute type 3 has an invalid length. [ 57.247672][ T6651] netlink: 224 bytes leftover after parsing attributes in process `syz.3.182'. [ 57.929591][ T6677] sg_write: data in/out 440207358/4056 bytes for SCSI command 0x45-- guessing data in; [ 57.929591][ T6677] program syz.3.188 not setting count and/or reply_len properly [ 58.117914][ T6682] 9pnet_fd: p9_fd_create_tcp (6682): problem connecting socket to 127.0.0.1 [ 58.165321][ T6682] usb usb9: usbfs: process 6682 (syz.3.190) did not claim interface 0 before use [ 58.337616][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'. [ 58.662437][ T6701] devtmpfs: Unknown parameter ' TDíó#9ps' [ 58.857077][ T6711] netlink: 24 bytes leftover after parsing attributes in process `syz.0.197'. [ 59.107212][ T6718] input: syz1 as /devices/virtual/input/input6 [ 59.340380][ T6727] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 59.342355][ T6727] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 59.346403][ T6727] vhci_hcd vhci_hcd.0: Device attached [ 59.375218][ T6727] SELinux: policydb version 0 does not match my version range 15-33 [ 59.377850][ T6727] SELinux: failed to load policy [ 59.386751][ T6728] vhci_hcd: connection closed [ 59.390125][ T12] vhci_hcd: stop threads [ 59.394758][ T12] vhci_hcd: release socket [ 59.396050][ T12] vhci_hcd: disconnect device [ 59.854494][ T40] kauditd_printk_skb: 590 callbacks suppressed [ 59.854504][ T40] audit: type=1400 audit(1737028095.800:1034): avc: denied { read write } for pid=5949 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.872319][ T40] audit: type=1400 audit(1737028095.800:1035): avc: denied { read write open } for pid=5949 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.879333][ T40] audit: type=1400 audit(1737028095.800:1036): avc: denied { ioctl } for pid=5949 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.966439][ T40] audit: type=1400 audit(1737028095.910:1037): avc: denied { read write } for pid=5949 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.991167][ T40] audit: type=1400 audit(1737028095.910:1038): avc: denied { read write open } for pid=5949 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 60.008969][ T40] audit: type=1400 audit(1737028095.910:1039): avc: denied { ioctl } for pid=5949 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 60.030339][ T40] audit: type=1400 audit(1737028095.950:1040): avc: denied { read write } for pid=5942 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 60.040443][ T40] audit: type=1400 audit(1737028095.950:1041): avc: denied { read write open } for pid=5942 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 60.060650][ T40] audit: type=1400 audit(1737028095.960:1042): avc: denied { ioctl } for pid=5942 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 60.070756][ T40] audit: type=1400 audit(1737028095.980:1043): avc: denied { read } for pid=6741 comm="syz.1.204" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 60.172517][ T66] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 60.175126][ T66] Bluetooth: hci3: Injecting HCI hardware error event [ 60.178105][ T66] Bluetooth: hci3: hardware error 0x00 [ 60.276530][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 60.279090][ T6749] netlink: 24 bytes leftover after parsing attributes in process `syz.1.206'. [ 60.699679][ T6758] netlink: 32 bytes leftover after parsing attributes in process `syz.2.209'. [ 60.876078][ T6769] tls_set_device_offload: netdev not found [ 60.891446][ T6769] tmpfs: Bad value for 'mpol' [ 61.208106][ T6778] IPv6: NLM_F_CREATE should be specified when creating new route [ 61.294377][ T6779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 61.311211][ T6779] program syz.2.215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.425853][ T6787] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6787 comm=syz.0.219 [ 61.607784][ T6795] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 61.635380][ T6795] kvm: pic: level sensitive irq not supported [ 61.635794][ T6795] kvm: pic: non byte read [ 61.653537][ T6795] kvm: pic: level sensitive irq not supported [ 61.653806][ T6795] kvm: pic: non byte read [ 61.657942][ T6795] kvm: pic: level sensitive irq not supported [ 61.658200][ T6795] kvm: pic: non byte read [ 61.669381][ T6795] kvm: pic: level sensitive irq not supported [ 61.669643][ T6795] kvm: pic: non byte read [ 61.677572][ T6795] kvm: pic: level sensitive irq not supported [ 61.677848][ T6795] kvm: pic: non byte read [ 61.727735][ T6795] netlink: 'syz.0.222': attribute type 10 has an invalid length. [ 61.776260][ T6795] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 61.778730][ T6795] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 61.812100][ T6805] netlink: 36 bytes leftover after parsing attributes in process `syz.1.224'. [ 61.832241][ T6805] netlink: 'syz.1.224': attribute type 4 has an invalid length. [ 61.834526][ T6805] netlink: 17 bytes leftover after parsing attributes in process `syz.1.224'. [ 61.844719][ T6805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.224'. [ 62.122773][ T6013] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 62.227199][ T66] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 62.274962][ T6013] usb 6-1: device descriptor read/64, error -71 [ 62.512687][ T6013] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 62.551525][ T6820] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 62.561488][ T6820] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 62.642486][ T6013] usb 6-1: device descriptor read/64, error -71 [ 62.688300][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.232'. [ 62.763835][ T6013] usb usb6-port1: attempt power cycle [ 63.011123][ T6840] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 63.107515][ T6013] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 63.125311][ T6013] usb 6-1: device descriptor read/8, error -71 [ 63.362624][ T6013] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 63.387030][ T6013] usb 6-1: device descriptor read/8, error -71 [ 63.392220][ T6853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6853 comm=syz.2.242 [ 63.397882][ T6854] netlink: 36 bytes leftover after parsing attributes in process `syz.2.242'. [ 63.402355][ T6853] netlink: 36 bytes leftover after parsing attributes in process `syz.2.242'. [ 63.502614][ T6013] usb usb6-port1: unable to enumerate USB device [ 63.583403][ T1141] wlan1: Trigger new scan to find an IBSS to join [ 63.678105][ T6861] input: syz0 as /devices/virtual/input/input8 [ 64.672473][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.762354][ T6881] Bluetooth: MGMT ver 1.23 [ 64.782665][ T5984] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 64.842366][ T25] usb 5-1: device descriptor read/64, error -71 [ 64.869681][ T40] kauditd_printk_skb: 1337 callbacks suppressed [ 64.869691][ T40] audit: type=1400 audit(1737028100.790:2381): avc: denied { recv } for pid=29 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50110 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 64.884129][ T40] audit: type=1400 audit(1737028100.790:2382): avc: denied { recv } for pid=29 comm="ksoftirqd/1" saddr=127.0.0.1 src=50110 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 64.891933][ T40] audit: type=1400 audit(1737028100.790:2383): avc: denied { recv } for pid=29 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50110 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 64.901196][ T40] audit: type=1400 audit(1737028100.800:2384): avc: denied { recv } for pid=5928 comm="sshd" saddr=10.0.2.2 src=42004 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 64.909589][ T40] audit: type=1400 audit(1737028100.800:2385): avc: denied { recv } for pid=5928 comm="sshd" saddr=10.0.2.2 src=42004 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 64.918802][ T40] audit: type=1400 audit(1737028100.800:2386): avc: denied { recv } for pid=5928 comm="sshd" saddr=10.0.2.2 src=42004 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 64.927204][ T40] audit: type=1400 audit(1737028100.810:2387): avc: denied { recv } for pid=5928 comm="sshd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50110 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 64.934339][ T40] audit: type=1400 audit(1737028100.810:2388): avc: denied { recv } for pid=5928 comm="sshd" saddr=127.0.0.1 src=50110 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 64.941241][ T40] audit: type=1400 audit(1737028100.820:2389): avc: denied { create } for pid=6882 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.946769][ T40] audit: type=1400 audit(1737028100.820:2390): avc: denied { ioctl } for pid=6882 comm="syz.1.251" path="socket:[13622]" dev="sockfs" ino=13622 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.076893][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 65.092346][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 65.232545][ T25] usb 5-1: device descriptor read/64, error -71 [ 65.307891][ T6892] 9p: Unknown uid 00000000004294967295 [ 65.353511][ T25] usb usb5-port1: attempt power cycle [ 65.356573][ T6895] netlink: 'syz.1.254': attribute type 10 has an invalid length. [ 65.361363][ T6895] macvlan0: entered allmulticast mode [ 65.366717][ T6895] veth1_vlan: entered allmulticast mode [ 65.371056][ T6895] team0: Port device macvlan0 added [ 65.590125][ T6904] netlink: 44 bytes leftover after parsing attributes in process `syz.1.257'. [ 65.692352][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 65.726573][ T25] usb 5-1: device descriptor read/8, error -71 [ 65.765323][ T6880] hub 6-0:1.0: USB hub found [ 65.767078][ T6880] hub 6-0:1.0: 1 port detected [ 65.962345][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 65.985309][ T25] usb 5-1: device descriptor read/8, error -71 [ 66.008563][ T6917] overlayfs: failed to resolve './file1': -2 [ 66.102486][ T25] usb usb5-port1: unable to enumerate USB device [ 66.209992][ T6924] 9pnet_fd: Insufficient options for proto=fd [ 66.246889][ T6924] netlink: 84 bytes leftover after parsing attributes in process `syz.1.265'. [ 66.554625][ T1141] wlan1: Trigger new scan to find an IBSS to join [ 66.614972][ T6937] debugfs: Bad value for 'gid' [ 66.616406][ T6937] debugfs: Bad value for 'gid' [ 66.632375][ T57] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 66.727568][ T6941] capability: warning: `syz.3.271' uses 32-bit capabilities (legacy support in use) [ 66.931025][ T6947] vti0: entered allmulticast mode [ 67.292174][ T6957] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.553906][ T6976] process 'syz.2.281' launched './file0' with NULL argv: empty string added [ 67.554790][ T6969] netlink: 'syz.0.280': attribute type 6 has an invalid length. [ 67.557264][ T6973] capability: warning: `syz.3.282' uses deprecated v2 capabilities in a way that may be insecure [ 67.930887][ T6996] netlink: 72 bytes leftover after parsing attributes in process `syz.2.287'. [ 68.346624][ T7013] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 68.927939][ T7026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 69.237505][ T7036] binder: BINDER_SET_CONTEXT_MGR already set [ 69.239541][ T7036] binder: 7035:7036 ioctl 4018620d 20000140 returned -16 [ 69.252913][ T7036] netlink: 'syz.3.300': attribute type 9 has an invalid length. [ 69.391083][ T7040] sp0: Synchronizing with TNC [ 69.404191][ T7052] openvswitch: netlink: Tunnel attr 6 has unexpected len 16 expected 0 [ 69.405839][ T7054] openvswitch: netlink: Tunnel attr 6 has unexpected len 16 expected 0 [ 69.592430][ T1206] wlan1: Trigger new scan to find an IBSS to join [ 69.872895][ T40] kauditd_printk_skb: 1238 callbacks suppressed [ 69.872906][ T40] audit: type=1400 audit(1737028105.820:3629): avc: denied { recv } for pid=7059 comm="modprobe" saddr=10.0.2.2 src=42004 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 69.881984][ T40] audit: type=1400 audit(1737028105.820:3630): avc: denied { recv } for pid=7059 comm="modprobe" saddr=10.0.2.2 src=42004 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 69.906397][ T40] audit: type=1400 audit(1737028105.820:3631): avc: denied { recv } for pid=5928 comm="sshd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50110 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 69.918317][ T40] audit: type=1400 audit(1737028105.840:3632): avc: denied { module_request } for pid=7055 comm="syz.2.305" kmod="net-pf-10-proto-4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 69.932316][ T40] audit: type=1400 audit(1737028105.860:3633): avc: denied { setopt } for pid=7062 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 69.937836][ T40] audit: type=1400 audit(1737028105.860:3634): avc: denied { create } for pid=7062 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.952321][ T40] audit: type=1400 audit(1737028105.870:3635): avc: denied { setopt } for pid=7062 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 69.957856][ T40] audit: type=1400 audit(1737028105.870:3636): avc: denied { setopt } for pid=7062 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 69.972317][ T40] audit: type=1400 audit(1737028105.870:3637): avc: denied { recv } for pid=7064 comm="modprobe" saddr=127.0.0.1 src=50110 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 69.979409][ T40] audit: type=1400 audit(1737028105.870:3638): avc: denied { bind } for pid=7062 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.670323][ T46] wlan1: Creating new IBSS network, BSSID 9a:f8:db:3d:34:b7 [ 70.705940][ T7089] debugfs: Bad value for 'uid' [ 70.707427][ T7089] debugfs: Bad value for 'uid' [ 70.749838][ T7089] tmpfs: Unknown parameter 'subj_role' [ 70.804421][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 70.806982][ T7089] bridge_slave_1: left allmulticast mode [ 70.808594][ T7089] bridge_slave_1: left promiscuous mode [ 70.823304][ T7089] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.863015][ T7089] bridge_slave_0: left allmulticast mode [ 70.864686][ T7089] bridge_slave_0: left promiscuous mode [ 70.866375][ T7089] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.198323][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.200434][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.256213][ T7098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7098 comm=syz.3.318 [ 71.256352][ T7100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7100 comm=syz.3.318 [ 71.285165][ T7098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=7098 comm=syz.3.318 [ 71.717610][ T7119] netlink: 16 bytes leftover after parsing attributes in process `syz.3.323'. [ 71.754029][ T7119] fuse: Bad value for 'fd' [ 72.292521][ T7130] veth1_vlan: left allmulticast mode [ 72.302630][ T7130] macvlan0: left allmulticast mode [ 72.312203][ T7130] netlink: 'syz.1.327': attribute type 2 has an invalid length. [ 73.103854][ T66] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 73.107037][ T66] Bluetooth: hci0: Injecting HCI hardware error event [ 73.110797][ T5950] Bluetooth: hci0: hardware error 0x00 [ 73.306627][ T7158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2157 sclass=netlink_route_socket pid=7158 comm=syz.3.328 [ 73.325832][ T7165] netlink: 'syz.1.336': attribute type 10 has an invalid length. [ 73.330705][ T7165] macvlan0: entered promiscuous mode [ 73.332774][ T7165] macvlan0: entered allmulticast mode [ 73.338683][ T7165] team0: Port device macvlan0 removed [ 73.341037][ T7165] veth1_vlan: entered allmulticast mode [ 73.346467][ T7165] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 73.560727][ T7178] netlink: 'syz.1.340': attribute type 1 has an invalid length. [ 74.157006][ T7205] xt_hashlimit: size too large, truncated to 1048576 [ 74.252470][ T7209] netlink: 180 bytes leftover after parsing attributes in process `syz.1.349'. [ 74.308359][ T7209] program syz.1.349 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.646915][ T7214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7214 comm=syz.0.350 [ 74.650533][ T7214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=7214 comm=syz.0.350 [ 74.657660][ T7212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7212 comm=syz.0.350 [ 74.661296][ T7212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=7212 comm=syz.0.350 [ 74.856243][ T7216] xt_TPROXY: Can be used only with -p tcp or -p udp [ 74.886702][ T40] kauditd_printk_skb: 1085 callbacks suppressed [ 74.886712][ T40] audit: type=1400 audit(1737028110.830:4724): avc: denied { unmount } for pid=5956 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.920101][ T40] audit: type=1400 audit(1737028110.860:4725): avc: denied { recv } for pid=5956 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50110 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 74.932355][ T40] audit: type=1400 audit(1737028110.860:4726): avc: denied { recv } for pid=5956 comm="syz-executor" saddr=127.0.0.1 src=50110 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 74.939403][ T40] audit: type=1400 audit(1737028110.860:4727): avc: denied { recv } for pid=5956 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50110 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 74.956958][ T40] audit: type=1400 audit(1737028110.860:4728): avc: denied { recv } for pid=834 comm="kworker/1:2" saddr=10.0.2.2 src=42004 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 74.966748][ T40] audit: type=1400 audit(1737028110.860:4729): avc: denied { recv } for pid=834 comm="kworker/1:2" saddr=10.0.2.2 src=42004 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 74.976367][ T40] audit: type=1400 audit(1737028110.870:4730): avc: denied { read write } for pid=5956 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 74.990339][ T40] audit: type=1400 audit(1737028110.870:4731): avc: denied { read write open } for pid=5956 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.001059][ T40] audit: type=1400 audit(1737028110.870:4732): avc: denied { ioctl } for pid=5956 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.011732][ T40] audit: type=1400 audit(1737028110.880:4733): avc: denied { recv } for pid=5928 comm="sshd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50110 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 75.182579][ T5950] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 75.243158][ T7223] overlayfs: conflicting options: userxattr,redirect_dir=on [ 75.283629][ T7222] pim6reg: entered allmulticast mode [ 75.286022][ T7224] pim6reg: left allmulticast mode [ 75.309757][ T7223] syz.0.354: attempt to access beyond end of device [ 75.309757][ T7223] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 75.314300][ T7223] VFS: unable to read V7 FS superblock on device nbd0. [ 75.318157][ T7223] VFS: could not find a valid V7 on nbd0. [ 75.538284][ T7231] program syz.2.357 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.627026][ T7236] vim2m vim2m.0: vidioc_s_fmt queue busy [ 75.817307][ T7250] netlink: 92 bytes leftover after parsing attributes in process `syz.2.362'. [ 75.886316][ T7252] xt_hashlimit: overflow, rate too high: 0 [ 75.933751][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 75.937478][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'. [ 75.941647][ T7257] netlink: 'syz.0.365': attribute type 4 has an invalid length. [ 76.361706][ T58] cfg80211: failed to load regulatory.db [ 76.613285][ T6350] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 76.752553][ T6350] usb 8-1: device descriptor read/64, error -71 [ 77.012550][ T6350] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 77.056759][ T7295] netlink: 44 bytes leftover after parsing attributes in process `syz.1.376'. [ 77.152535][ T6350] usb 8-1: device descriptor read/64, error -71 [ 77.265876][ T6350] usb usb8-port1: attempt power cycle [ 77.622331][ T6350] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 77.654736][ T6350] usb 8-1: device descriptor read/8, error -71 [ 77.902392][ T6350] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 77.925008][ T6350] usb 8-1: device descriptor read/8, error -71 [ 77.926702][ T7309] (unnamed net_device) (uninitialized): peer notification delay (10) is not a multiple of miimon (100), value rounded to 0 ms [ 77.936795][ T7309] bond1: entered promiscuous mode [ 77.938300][ T7309] bond1: entered allmulticast mode [ 77.940764][ T7309] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.014839][ T7312] netlink: 'syz.1.380': attribute type 10 has an invalid length. [ 78.028950][ T7312] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 78.090771][ T6350] usb usb8-port1: unable to enumerate USB device [ 78.207049][ T7316] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 78.217400][ T7314] vxfs: WRONG superblock magic 00000000 at 1 [ 78.219830][ T7314] vxfs: WRONG superblock magic 00000000 at 8 [ 78.221617][ T7314] vxfs: can't find superblock. [ 78.280992][ T7314] kvm: kvm [7313]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x7b6e [ 78.288235][ T7314] kvm: kvm [7313]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x9081 [ 78.422454][ T6350] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 78.587701][ T6350] usb 6-1: Using ep0 maxpacket: 8 [ 78.605212][ T6350] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 78.608012][ T6350] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 78.610768][ T6350] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 78.618279][ T6350] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.621939][ T6350] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 78.628559][ T6350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.664309][ T7331] geneve2: entered allmulticast mode [ 78.736910][ T7331] geneve2: entered allmulticast mode [ 78.805862][ T7331] geneve2: entered allmulticast mode [ 78.865733][ T6350] usb 6-1: GET_CAPABILITIES returned 0 [ 78.867575][ T6350] usbtmc 6-1:16.0: can't read capabilities [ 78.885612][ T7331] geneve2: entered allmulticast mode [ 79.018111][ T7331] geneve2: entered allmulticast mode [ 79.085847][ T7331] geneve2: entered allmulticast mode [ 79.219810][ T7331] geneve2: entered allmulticast mode [ 79.249670][ T5950] Bluetooth: hci1: unexpected event 0x33 length: 6 < 10 [ 79.301207][ T7340] snd_dummy snd_dummy.0: control 1:5:65266:syz1:134217728 is already present [ 79.311423][ T5950] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 79.335809][ T7331] geneve2: entered allmulticast mode [ 79.417166][ T7331] geneve2: entered allmulticast mode [ 79.548937][ T9] usb 6-1: USB disconnect, device number 12 [ 79.684982][ T7354] xt_hashlimit: size too large, truncated to 1048576 [ 79.893008][ T40] kauditd_printk_skb: 1020 callbacks suppressed [ 79.893023][ T40] audit: type=1400 audit(1737028115.840:5754): avc: denied { recv } for pid=7350 comm="syz.2.394" saddr=::1 daddr=::1 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 79.901980][ T40] audit: type=1400 audit(1737028115.840:5755): avc: denied { read write } for pid=5956 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 79.914670][ T40] audit: type=1400 audit(1737028115.850:5756): avc: denied { read write open } for pid=5956 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 79.935019][ T40] audit: type=1400 audit(1737028115.850:5757): avc: denied { ioctl } for pid=5956 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 79.955407][ T40] audit: type=1400 audit(1737028115.850:5758): avc: denied { write } for pid=7350 comm="syz.2.394" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.961630][ T40] audit: type=1400 audit(1737028115.860:5759): avc: denied { recv } for pid=7350 comm="syz.2.394" saddr=::1 daddr=::1 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 79.970519][ T40] audit: type=1400 audit(1737028115.870:5760): avc: denied { write } for pid=7350 comm="syz.2.394" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.978865][ T40] audit: type=1400 audit(1737028115.870:5761): avc: denied { recv } for pid=7350 comm="syz.2.394" saddr=::1 daddr=::1 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 79.988000][ T40] audit: type=1400 audit(1737028115.870:5762): avc: denied { write } for pid=7350 comm="syz.2.394" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.998038][ T40] audit: type=1400 audit(1737028115.870:5763): avc: denied { recv } for pid=7350 comm="syz.2.394" saddr=::1 daddr=::1 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 81.536348][ T7394] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.539354][ T7392] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.752663][ T833] psmouse serio2: Failed to reset mouse on : -5 [ 81.870560][ T7401] bridge_slave_1: entered promiscuous mode [ 81.896242][ T7401] bridge_slave_1: left promiscuous mode [ 81.954167][ T7408] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 81.956368][ T7408] SELinux: failed to load policy [ 82.184839][ T7425] kAFS: unparsable volume name [ 82.253357][ T7428] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 82.301302][ T7431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.418'. [ 82.308843][ T1141] Bluetooth: hci4: Frame reassembly failed (-84) [ 82.313588][ T7429] geneve2: entered promiscuous mode [ 82.315729][ T7429] geneve2: entered allmulticast mode [ 82.978519][ T7458] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 83.045950][ T7459] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 83.442545][ T6350] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 83.613574][ T6350] usb 6-1: Invalid ep0 maxpacket: 64 [ 83.752653][ T6350] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 83.927457][ T6350] usb 6-1: Invalid ep0 maxpacket: 64 [ 83.929784][ T6350] usb usb6-port1: attempt power cycle [ 84.019270][ T7467] syz.3.429: attempt to access beyond end of device [ 84.019270][ T7467] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 84.024765][ T7467] syz.3.429: attempt to access beyond end of device [ 84.024765][ T7467] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 84.185947][ T7469] binder: 7468:7469 ioctl c0306201 20000180 returned -22 [ 84.319194][ T6350] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 84.342607][ T6350] usb 6-1: Invalid ep0 maxpacket: 64 [ 84.400586][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.432'. [ 84.406209][ T7478] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 84.479611][ T5950] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 84.490322][ T6350] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 84.516223][ T6350] usb 6-1: Invalid ep0 maxpacket: 64 [ 84.524032][ T6350] usb usb6-port1: unable to enumerate USB device [ 84.616377][ T7484] program syz.3.433 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.017371][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.437'. [ 85.048419][ T40] kauditd_printk_skb: 2832 callbacks suppressed [ 85.048431][ T40] audit: type=1400 audit(1737028120.857:8596): avc: denied { module_request } for pid=7487 comm="syz.2.436" kmod="crypto-vmac64(camellia-generic)-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 85.069841][ T40] audit: type=1400 audit(1737028120.866:8597): avc: denied { recv } for pid=5930 comm="syz-executor" saddr=127.0.0.1 src=50110 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 85.076906][ T40] audit: type=1400 audit(1737028120.875:8598): avc: denied { recv } for pid=5334 comm="syslogd" saddr=10.0.2.2 src=42004 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 85.098815][ T40] audit: type=1400 audit(1737028120.903:8599): avc: denied { read write } for pid=5942 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.107802][ T40] audit: type=1400 audit(1737028120.903:8600): avc: denied { read write open } for pid=5942 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.117556][ T40] audit: type=1400 audit(1737028120.903:8601): avc: denied { ioctl } for pid=5942 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.128054][ T40] audit: type=1400 audit(1737028120.931:8602): avc: denied { recv } for pid=5942 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50110 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 85.137309][ T40] audit: type=1400 audit(1737028120.931:8603): avc: denied { recv } for pid=5942 comm="syz-executor" saddr=127.0.0.1 src=50110 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 85.146077][ T40] audit: type=1400 audit(1737028120.931:8604): avc: denied { recv } for pid=5942 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50110 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 85.154148][ T40] audit: type=1400 audit(1737028120.941:8605): avc: denied { recv } for pid=7503 comm="modprobe" saddr=10.0.2.2 src=42004 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 85.700758][ T7538] Driver unsupported XDP return value 0 on prog (id 63) dev N/A, expect packet loss! [ 85.714800][ T833] misc userio: Buffer overflowed, userio client isn't keeping up [ 85.890325][ T7546] netlink: 20 bytes leftover after parsing attributes in process `syz.3.449'. [ 86.168736][ T25] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 86.338088][ T25] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 86.348535][ T25] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.351196][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.353449][ T25] usb 8-1: Product: 舞⸩盅뛇᪓蟽騽ଲే仹宱웽횢㽥䃷ë¸ì…£í˜³ãº ê¬Žå‚¨éº’桴쩌圢æœã¤†è¿Žï€¶ï“œà¯å´»æ••ã„‰å¸£æ›‚åšë½¢ê£ží•†ì¥¨î›Œá¹œâ»ç‰ˆè°Œé—šå›¸î®§âš•í í•™é—ƒã«¢äœ…쥃ৠ[ 86.358848][ T25] usb 8-1: Manufacturer: Ð’ [ 86.360196][ T25] usb 8-1: SerialNumber: å“묂닛㟤럩䲚èžâ’žä›ç¥¿ç„§é †à­» [ 86.453474][ T7549] ipt_REJECT: TCP_RESET invalid for non-tcp [ 86.592705][ T25] cdc_ncm 8-1:1.0: bind() failure [ 86.596181][ T25] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 86.598905][ T25] cdc_ncm 8-1:1.1: bind() failure [ 86.602182][ T25] usb 8-1: USB disconnect, device number 10 [ 86.834028][ T7563] openvswitch: netlink: IP tunnel TTL not specified. [ 86.844475][ T833] input: PS/2 Generic Mouse as /devices/serio2/input/input10 [ 86.997392][ T7565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.454'. [ 87.078953][ T833] psmouse serio2: Failed to enable mouse on [ 87.262157][ T7570] team0: entered promiscuous mode [ 87.263679][ T7570] team_slave_0: entered promiscuous mode [ 87.265438][ T7570] team_slave_1: entered promiscuous mode [ 87.286841][ T7571] team0: left promiscuous mode [ 87.288235][ T7571] team_slave_0: left promiscuous mode [ 87.297471][ T7571] team_slave_1: left promiscuous mode [ 87.516538][ T7579] GUP no longer grows the stack in syz.0.458 (7579): 20004000-2000a000 (20002000) [ 87.519564][ T7579] CPU: 2 UID: 0 PID: 7579 Comm: syz.0.458 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 87.522661][ T7579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.526003][ T7579] Call Trace: [ 87.527046][ T7579] [ 87.527967][ T7579] dump_stack_lvl+0x16c/0x1f0 [ 87.529546][ T7579] gup_vma_lookup+0x1d2/0x220 [ 87.530967][ T7579] __get_user_pages+0x236/0x3b50 [ 87.532445][ T7579] ? find_held_lock+0x2d/0x110 [ 87.533887][ T7579] ? mtree_load+0x30a/0xa40 [ 87.535246][ T7579] ? __pfx_lock_release+0x10/0x10 [ 87.536709][ T7579] ? __pfx___get_user_pages+0x10/0x10 [ 87.538292][ T7579] get_user_pages_remote+0x25e/0xb30 [ 87.539846][ T7579] ? __pfx_get_user_pages_remote+0x10/0x10 [ 87.541604][ T7579] __access_remote_vm+0x235/0x7a0 [ 87.543104][ T7579] ? __pfx___access_remote_vm+0x10/0x10 [ 87.544869][ T7579] ? lock_acquire+0x2f/0xb0 [ 87.546310][ T7579] ? proc_pid_cmdline_read+0x25c/0x900 [ 87.547887][ T7579] proc_pid_cmdline_read+0x4f5/0x900 [ 87.549530][ T7579] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 87.551384][ T7579] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 87.553088][ T7579] vfs_readv+0x6bf/0x890 [ 87.554319][ T7579] ? __pfx___lock_acquire+0x10/0x10 [ 87.555844][ T7579] ? __pfx_vfs_readv+0x10/0x10 [ 87.557242][ T7579] ? __fget_files+0x1fc/0x3a0 [ 87.558654][ T7579] ? __pfx_lock_release+0x10/0x10 [ 87.560134][ T7579] ? __fget_files+0x206/0x3a0 [ 87.561930][ T7579] ? do_preadv+0x1b1/0x270 [ 87.563317][ T7579] do_preadv+0x1b1/0x270 [ 87.564572][ T7579] ? __pfx_do_preadv+0x10/0x10 [ 87.565975][ T7579] do_syscall_64+0xcd/0x250 [ 87.567365][ T7579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.569215][ T7579] RIP: 0033:0x7fe055b85d29 [ 87.570678][ T7579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.576230][ T7579] RSP: 002b:00007fe05699c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 87.578621][ T7579] RAX: ffffffffffffffda RBX: 00007fe055d75fa0 RCX: 00007fe055b85d29 [ 87.580938][ T7579] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000008 [ 87.583262][ T7579] RBP: 00007fe055c01b08 R08: 0000000000000000 R09: 0000000000000000 [ 87.585579][ T7579] R10: 0000000000000500 R11: 0000000000000246 R12: 0000000000000000 [ 87.587890][ T7579] R13: 0000000000000000 R14: 00007fe055d75fa0 R15: 00007ffd5b1ab968 [ 87.590107][ T7579] [ 87.591069][ C2] vkms_vblank_simulate: vblank timer overrun [ 87.988284][ T7608] netlink: 'syz.1.463': attribute type 1 has an invalid length. [ 88.008882][ T7608] 8021q: adding VLAN 0 to HW filter on device bond2 [ 88.109561][ T7613] tmpfs: Bad value for 'mpol' [ 88.386251][ T7608] bond2: (slave gretap1): making interface the new active one [ 88.390346][ T7608] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 88.420527][ T7616] netlink: 'syz.0.464': attribute type 8 has an invalid length. [ 88.423572][ T7616] netlink: 163260 bytes leftover after parsing attributes in process `syz.0.464'. [ 88.767552][ T7623] netlink: 'syz.3.467': attribute type 10 has an invalid length. [ 88.768575][ T7624] netlink: 'syz.3.467': attribute type 10 has an invalid length. [ 88.777968][ T7623] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.781247][ T7623] bond0: (slave team0): Enslaving as an active interface with an up link [ 89.269006][ T66] Bluetooth: hci4: command 0x1003 tx timeout [ 89.271926][ T5950] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 90.383120][ T7678] SELinux: Context system_u:object_r:ssh_agent_exec_t:s0 is not valid (left unmapped). [ 90.402409][ T40] kauditd_printk_skb: 1113 callbacks suppressed [ 90.402419][ T40] audit: type=1400 audit(1737028125.870:9719): avc: denied { append open } for pid=5334 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.423706][ T40] audit: type=1400 audit(1737028125.870:9720): avc: denied { write } for pid=7674 comm="syz.2.480" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 90.433864][ T40] audit: type=1400 audit(1737028125.870:9721): avc: denied { write open } for pid=7674 comm="syz.2.480" path="/dev/input/event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 90.451666][ T40] audit: type=1400 audit(1737028125.870:9722): avc: denied { read } for pid=7674 comm="syz.2.480" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 90.461099][ T40] audit: type=1400 audit(1737028125.870:9723): avc: denied { read open } for pid=7674 comm="syz.2.480" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 90.474506][ T40] audit: type=1400 audit(1737028125.870:9724): avc: denied { getattr } for pid=5334 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.492674][ T40] audit: type=1400 audit(1737028125.870:9725): avc: denied { recv } for pid=5930 comm="syz-executor" saddr=127.0.0.1 src=50110 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 90.502272][ T40] audit: type=1400 audit(1737028125.880:9726): avc: denied { recv } for pid=5942 comm="syz-executor" saddr=10.0.2.2 src=42004 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 90.511444][ T40] audit: type=1400 audit(1737028125.898:9727): avc: denied { read write } for pid=5942 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.518245][ T40] audit: type=1400 audit(1737028125.898:9728): avc: denied { read write open } for pid=5942 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.530120][ T7684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.482'. [ 90.717911][ T7691] netlink: 'syz.3.485': attribute type 1 has an invalid length. [ 90.748203][ T7693] block device autoloading is deprecated and will be removed. [ 90.751304][ T7691] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 90.753194][ T7691] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.766427][ T7691] vhci_hcd vhci_hcd.0: Device attached [ 90.795957][ T7697] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7697 comm=syz.2.487 [ 90.797355][ T7692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.484'. [ 90.806596][ T7697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.487'. [ 90.958168][ T6350] vhci_hcd: vhci_device speed not set [ 91.033083][ T6350] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 91.043991][ T35] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 91.112248][ T7706] netlink: 36 bytes leftover after parsing attributes in process `syz.0.490'. [ 91.193810][ T35] usb 8-1: device descriptor read/64, error -71 [ 91.460545][ T35] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 91.500582][ T7713] netlink: 36 bytes leftover after parsing attributes in process `syz.0.492'. [ 91.631682][ T35] usb 8-1: device descriptor read/64, error -71 [ 91.635341][ T7719] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 91.638625][ T7719] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 91.750167][ T35] usb usb8-port1: attempt power cycle [ 92.123474][ T35] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 92.139331][ T7729] can0: slcan on ptm0. [ 92.148841][ T35] usb 8-1: device descriptor read/8, error -71 [ 92.241874][ T7729] can0 (unregistered): slcan off ptm0. [ 92.412129][ T35] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 92.439735][ T35] usb 8-1: device descriptor read/8, error -71 [ 92.562653][ T35] usb usb8-port1: unable to enumerate USB device [ 92.994841][ T7732] syz.0.498 (7732): drop_caches: 2 [ 93.229143][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.501'. [ 93.716294][ T66] Bluetooth: hci1: command 0x0405 tx timeout [ 93.949843][ T7694] vhci_hcd: connection reset by peer [ 93.952084][ T12] vhci_hcd: stop threads [ 93.953317][ T12] vhci_hcd: release socket [ 93.954693][ T12] vhci_hcd: disconnect device [ 94.048301][ T7768] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.192993][ T7792] syz.2.512[7792] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.193510][ T7792] syz.2.512[7792] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.198773][ T7792] syz.2.512[7792] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.215701][ T7792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.512'. [ 95.245624][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.513'. [ 95.736052][ T5950] Bluetooth: min 0 < 6 [ 95.760291][ T40] kauditd_printk_skb: 909 callbacks suppressed [ 95.760301][ T40] audit: type=1400 audit(1737028130.884:10638): avc: denied { create } for pid=7800 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 95.767847][ T40] audit: type=1400 audit(1737028130.884:10639): avc: denied { write } for pid=7800 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 95.775099][ T40] audit: type=1400 audit(1737028130.893:10640): avc: denied { read write } for pid=5942 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.788356][ T40] audit: type=1400 audit(1737028130.893:10641): avc: denied { read write open } for pid=5942 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.795695][ T40] audit: type=1400 audit(1737028130.893:10642): avc: denied { ioctl } for pid=5942 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.804895][ T40] audit: type=1400 audit(1737028130.921:10643): avc: denied { recv } for pid=7800 comm="syz.1.516" saddr=::1 daddr=::1 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 95.814082][ T40] audit: type=1400 audit(1737028130.931:10644): avc: denied { recv } for pid=7806 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50110 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 95.821274][ T40] audit: type=1400 audit(1737028130.931:10645): avc: denied { recv } for pid=7806 comm="syz-executor" saddr=127.0.0.1 src=50110 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 95.828687][ T40] audit: type=1400 audit(1737028130.931:10646): avc: denied { recv } for pid=7806 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50110 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 95.835768][ T40] audit: type=1400 audit(1737028130.931:10647): avc: denied { recv } for pid=5352 comm="udevd" saddr=10.0.2.2 src=42004 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 95.920745][ T7809] netlink: 'syz.1.519': attribute type 4 has an invalid length. [ 96.116046][ T7820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.124909][ T7820] batadv_slave_1: entered promiscuous mode [ 96.453275][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 96.538598][ T6350] vhci_hcd: vhci_device speed not set [ 96.635177][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 96.644041][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.656249][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 96.661266][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.674450][ T9] usb 5-1: config 0 descriptor?? [ 96.845148][ T7851] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 96.850722][ T7851] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 96.993892][ T7856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.532'. [ 97.019486][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 97.021947][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 97.030776][ T9] usb 5-1: USB disconnect, device number 6 [ 97.052615][ T7856] ip6gre1: entered allmulticast mode [ 97.083886][ T833] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 97.251334][ T833] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 97.253840][ T833] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 97.260648][ T833] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 97.263208][ T833] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 97.267562][ T833] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 97.277013][ T833] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 97.279622][ T833] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 97.286086][ T833] usb 8-1: Product: syz [ 97.288640][ T833] usb 8-1: Manufacturer: syz [ 97.302292][ T833] cdc_wdm 8-1:1.0: skipping garbage [ 97.303886][ T833] cdc_wdm 8-1:1.0: skipping garbage [ 97.309139][ T833] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 97.310858][ T833] cdc_wdm 8-1:1.0: Unknown control protocol [ 97.436549][ T35] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 97.550984][ T833] usb 8-1: USB disconnect, device number 15 [ 97.607851][ T35] usb 6-1: Using ep0 maxpacket: 16 [ 97.622535][ T35] usb 6-1: config 0 interface 0 has no altsetting 0 [ 97.625040][ T35] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 97.628390][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.637162][ T35] usb 6-1: config 0 descriptor?? [ 97.910280][ T5950] Bluetooth: hci1: command 0x0405 tx timeout [ 98.131083][ T35] usbhid 6-1:0.0: can't add hid device: -71 [ 98.133567][ T35] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 98.137422][ T35] usb 6-1: USB disconnect, device number 17 [ 98.270852][ T6003] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 98.457444][ T6003] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 98.461791][ T6003] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 98.469648][ T6003] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 98.474549][ T6003] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 98.484430][ T6003] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 98.502388][ T6003] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 98.509403][ T6003] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 98.514255][ T6003] usb 8-1: Product: syz [ 98.516659][ T6003] usb 8-1: Manufacturer: syz [ 98.549282][ T6003] cdc_wdm 8-1:1.0: skipping garbage [ 98.553272][ T6003] cdc_wdm 8-1:1.0: skipping garbage [ 98.565782][ T6003] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 98.569903][ T6003] cdc_wdm 8-1:1.0: Unknown control protocol [ 98.793020][ T7849] bridge0: entered promiscuous mode [ 98.800751][ T7849] macvlan2: entered promiscuous mode [ 98.803690][ T7849] bridge0: port 3(macvlan2) entered blocking state [ 98.809770][ T7849] bridge0: port 3(macvlan2) entered disabled state [ 98.812406][ T7849] macvlan2: entered allmulticast mode [ 98.814519][ T7849] bridge0: entered allmulticast mode [ 98.824905][ T7849] macvlan2: left allmulticast mode [ 98.827045][ T7849] bridge0: left allmulticast mode [ 98.832543][ T7849] bridge0: left promiscuous mode [ 98.904763][ T1020] usb 8-1: USB disconnect, device number 16 [ 99.627910][ T7743] udevd[7743]: failed to send result of seq 14596 to main daemon: Connection refused [ 99.978868][ T7947] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 99.986725][ T7947] exFAT-fs (nullb0): invalid boot record signature [ 99.989313][ T7947] exFAT-fs (nullb0): failed to read boot sector [ 99.996487][ T7947] exFAT-fs (nullb0): failed to recognize exfat type [ 100.001720][ T7945] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 100.006294][ T7945] exFAT-fs (nullb0): invalid boot record signature [ 100.008724][ T7945] exFAT-fs (nullb0): failed to read boot sector [ 100.011058][ T7945] exFAT-fs (nullb0): failed to recognize exfat type [ 100.085110][ T58] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 100.298247][ T7960] mkiss: ax0: crc mode is auto. [ 100.323207][ T58] usb 6-1: Using ep0 maxpacket: 8 [ 100.336178][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 100.339972][ T58] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 100.342567][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.348962][ T58] usb 6-1: config 0 descriptor?? [ 100.356125][ T58] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 100.492598][ T7967] netlink: 'syz.2.565': attribute type 21 has an invalid length. [ 100.614062][ T833] usb 6-1: USB disconnect, device number 18 [ 101.149714][ T40] kauditd_printk_skb: 1240 callbacks suppressed [ 101.149773][ T40] audit: type=1400 audit(1737028135.916:11888): avc: denied { recv } for pid=34 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50110 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 101.170652][ T40] audit: type=1400 audit(1737028135.916:11889): avc: denied { recv } for pid=34 comm="ksoftirqd/3" saddr=127.0.0.1 src=50110 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 101.177867][ T40] audit: type=1400 audit(1737028135.916:11890): avc: denied { recv } for pid=5928 comm="sshd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50110 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 101.185082][ T40] audit: type=1400 audit(1737028135.916:11891): avc: denied { recv } for pid=7992 comm="syz.3.573" saddr=10.0.2.2 src=42004 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 101.192771][ T40] audit: type=1400 audit(1737028135.916:11892): avc: denied { read } for pid=7992 comm="syz.3.573" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 101.200343][ T40] audit: type=1400 audit(1737028135.916:11893): avc: denied { read open } for pid=7992 comm="syz.3.573" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 101.207145][ T40] audit: type=1400 audit(1737028135.935:11894): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=42004 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 101.216128][ T40] audit: type=1400 audit(1737028135.935:11895): avc: denied { egress } for pid=16 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 101.222850][ T40] audit: type=1400 audit(1737028135.935:11896): avc: denied { sendto } for pid=16 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 101.231259][ T40] audit: type=1400 audit(1737028135.935:11897): avc: denied { recv } for pid=5928 comm="sshd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50110 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 101.287110][ T7993] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 101.289076][ T7993] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 101.296247][ T7993] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 101.426721][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.575'. [ 102.211428][ T8027] netlink: 36 bytes leftover after parsing attributes in process `syz.3.583'. [ 102.216959][ T8027] netlink: 'syz.3.583': attribute type 4 has an invalid length. [ 102.219264][ T8027] netlink: 17 bytes leftover after parsing attributes in process `syz.3.583'. [ 102.227072][ T8027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.583'. [ 102.354346][ T5950] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 102.354994][ T66] Bluetooth: hci4: command 0x1003 tx timeout [ 102.527804][ T58] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 102.706003][ T58] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 102.709463][ T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 102.712581][ T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 102.715689][ T58] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.721516][ T58] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.724511][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.730488][ T58] usb 8-1: config 0 descriptor?? [ 102.740622][ T8027] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.852454][ T8041] xt_l2tp: v2 sid > 0xffff: 150994944 [ 102.930434][ T8044] tipc: Trying to set illegal importance in message [ 103.140827][ T8049] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 103.266954][ T8051] netlink: 104 bytes leftover after parsing attributes in process `syz.1.591'. [ 103.284171][ T8051] overlayfs: missing 'lowerdir' [ 103.477000][ T5950] Bluetooth: hci1: command 0x0405 tx timeout [ 103.509539][ T58] usbhid 8-1:0.0: can't add hid device: -71 [ 103.511294][ T58] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 103.514779][ T58] usb 8-1: USB disconnect, device number 17 [ 103.894702][ T5984] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 103.954835][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.597'. [ 104.075467][ T5984] usb 5-1: Using ep0 maxpacket: 32 [ 104.084488][ T5984] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 104.088355][ T5984] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 104.091345][ T5984] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 104.093955][ T5984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.097229][ T5984] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 104.100020][ T5984] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 104.103829][ T5984] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 104.106426][ T5984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.116875][ T5984] usb 5-1: config 0 descriptor?? [ 104.260499][ T8076] ================================================================== [ 104.262886][ T8076] BUG: KASAN: slab-use-after-free in ip6gre_tunnel_xmit+0x10d3/0x10f0 [ 104.266056][ T8076] Read of size 8 at addr ffff8880538ac6dc by task syz.1.598/8076 [ 104.270585][ T8076] [ 104.271343][ T8076] CPU: 3 UID: 0 PID: 8076 Comm: syz.1.598 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 104.274299][ T8076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.277343][ T8076] Call Trace: [ 104.278305][ T8076] [ 104.279188][ T8076] dump_stack_lvl+0x116/0x1f0 [ 104.280563][ T8076] print_report+0xc3/0x620 [ 104.281853][ T8076] ? __virt_addr_valid+0x5e/0x590 [ 104.283299][ T8076] ? __phys_addr+0xc6/0x150 [ 104.284622][ T8076] kasan_report+0xd9/0x110 [ 104.285910][ T8076] ? ip6gre_tunnel_xmit+0x10d3/0x10f0 [ 104.287447][ T8076] ? ip6gre_tunnel_xmit+0x10d3/0x10f0 [ 104.288994][ T8076] ip6gre_tunnel_xmit+0x10d3/0x10f0 [ 104.290483][ T8076] ? dev_queue_xmit_nit+0x8d2/0xbc0 [ 104.291970][ T8076] ? __pfx_ip6gre_tunnel_xmit+0x10/0x10 [ 104.293582][ T8076] ? packet_rcv+0x171/0x15a0 [ 104.294918][ T8076] dev_hard_start_xmit+0x9a/0x7b0 [ 104.296367][ T8076] sch_direct_xmit+0x1ae/0xc30 [ 104.297760][ T8076] ? rcu_is_watching+0x12/0xc0 [ 104.299176][ T8076] ? __pfx_sch_direct_xmit+0x10/0x10 [ 104.300690][ T8076] ? do_raw_spin_trylock+0xb1/0x180 [ 104.302170][ T8076] ? __dev_queue_xmit+0x11b2/0x43e0 [ 104.303650][ T8076] ? lock_acquire+0x2f/0xb0 [ 104.304961][ T8076] ? __dev_queue_xmit+0x11b2/0x43e0 [ 104.306446][ T8076] __dev_queue_xmit+0x13d4/0x43e0 [ 104.307888][ T8076] ? avc_perm_nonode+0xee/0x180 [ 104.309344][ T8076] ? __pfx___dev_queue_xmit+0x10/0x10 [ 104.310882][ T8076] ? lock_acquire+0x2f/0xb0 [ 104.312188][ T8076] ? avc_has_perm_noaudit+0x61/0x3a0 [ 104.313699][ T8076] ? avc_has_perm_noaudit+0x143/0x3a0 [ 104.315232][ T8076] ? packet_parse_headers+0x79c/0xb10 [ 104.316746][ T8076] ? packet_parse_headers+0x7a8/0xb10 [ 104.318269][ T8076] ? packet_parse_headers+0x21e/0xb10 [ 104.319836][ T8076] ? __pfx_packet_parse_headers+0x10/0x10 [ 104.321466][ T8076] ? cap_capable+0x1cf/0x240 [ 104.322778][ T8076] packet_xmit+0x23e/0x360 [ 104.324048][ T8076] packet_sendmsg+0x2700/0x5660 [ 104.325450][ T8076] ? sock_has_perm+0x25a/0x2f0 [ 104.326837][ T8076] ? __pfx_sock_has_perm+0x10/0x10 [ 104.328313][ T8076] ? __pfx_packet_sendmsg+0x10/0x10 [ 104.329835][ T8076] __sys_sendto+0x488/0x4f0 [ 104.331137][ T8076] ? __pfx___sys_sendto+0x10/0x10 [ 104.332584][ T8076] ? sock_ioctl+0x3ae/0x6c0 [ 104.333892][ T8076] ? xfd_validate_state+0x5d/0x180 [ 104.335354][ T8076] ? rcu_is_watching+0x12/0xc0 [ 104.336733][ T8076] __x64_sys_sendto+0xe0/0x1c0 [ 104.338110][ T8076] ? do_syscall_64+0x91/0x250 [ 104.339504][ T8076] ? lockdep_hardirqs_on+0x7c/0x110 [ 104.341008][ T8076] do_syscall_64+0xcd/0x250 [ 104.342319][ T8076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.344001][ T8076] RIP: 0033:0x7fb80d985d29 [ 104.345269][ T8076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.350666][ T8076] RSP: 002b:00007fb80e6f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 104.352964][ T8076] RAX: ffffffffffffffda RBX: 00007fb80db76080 RCX: 00007fb80d985d29 [ 104.355166][ T8076] RDX: 0000000000000028 RSI: 0000000020000180 RDI: 0000000000000003 [ 104.357423][ T8076] RBP: 00007fb80da01b08 R08: 0000000020000140 R09: 0000000000000014 [ 104.359710][ T8076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.361973][ T8076] R13: 0000000000000000 R14: 00007fb80db76080 R15: 00007ffc83268db8 [ 104.364196][ T8076] [ 104.365098][ T8076] [ 104.365785][ T8076] Allocated by task 8076: [ 104.367016][ T8076] kasan_save_stack+0x33/0x60 [ 104.368385][ T8076] kasan_save_track+0x14/0x30 [ 104.369731][ T8076] __kasan_slab_alloc+0x89/0x90 [ 104.371135][ T8076] kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 104.372847][ T8076] kmalloc_reserve+0x18b/0x2c0 [ 104.374217][ T8076] __alloc_skb+0x164/0x380 [ 104.375506][ T8076] alloc_skb_with_frags+0xe4/0x850 [ 104.376966][ T8076] sock_alloc_send_pskb+0x7f1/0x980 [ 104.378449][ T8076] packet_sendmsg+0x1f70/0x5660 [ 104.379862][ T8076] __sys_sendto+0x488/0x4f0 [ 104.381174][ T8076] __x64_sys_sendto+0xe0/0x1c0 [ 104.382521][ T8076] do_syscall_64+0xcd/0x250 [ 104.383828][ T8076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.385516][ T8076] [ 104.386204][ T8076] Freed by task 8076: [ 104.387344][ T8076] kasan_save_stack+0x33/0x60 [ 104.388704][ T8076] kasan_save_track+0x14/0x30 [ 104.390029][ T8076] kasan_save_free_info+0x3b/0x60 [ 104.391439][ T8076] __kasan_slab_free+0x51/0x70 [ 104.392788][ T8076] kmem_cache_free+0x152/0x4c0 [ 104.394139][ T8076] skb_free_head+0x18a/0x1d0 [ 104.395464][ T8076] skb_release_data+0x560/0x730 [ 104.396884][ T8076] sk_skb_reason_drop+0x129/0x1a0 [ 104.398315][ T8076] packet_rcv+0x16c/0x15a0 [ 104.399626][ T8076] dev_queue_xmit_nit+0x89f/0xbc0 [ 104.401065][ T8076] dev_hard_start_xmit+0x283/0x7b0 [ 104.402509][ T8076] sch_direct_xmit+0x1ae/0xc30 [ 104.403862][ T8076] __dev_queue_xmit+0x13d4/0x43e0 [ 104.405296][ T8076] packet_xmit+0x23e/0x360 [ 104.406554][ T8076] packet_sendmsg+0x2700/0x5660 [ 104.407944][ T8076] __sys_sendto+0x488/0x4f0 [ 104.409250][ T8076] __x64_sys_sendto+0xe0/0x1c0 [ 104.410614][ T8076] do_syscall_64+0xcd/0x250 [ 104.411920][ T8076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.413598][ T8076] [ 104.414285][ T8076] The buggy address belongs to the object at ffff8880538ac600 [ 104.414285][ T8076] which belongs to the cache skbuff_small_head of size 640 [ 104.418321][ T8076] The buggy address is located 220 bytes inside of [ 104.418321][ T8076] freed 640-byte region [ffff8880538ac600, ffff8880538ac880) [ 104.422191][ T8076] [ 104.422884][ T8076] The buggy address belongs to the physical page: [ 104.424689][ T8076] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x538ac [ 104.427153][ T8076] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 104.429521][ T8076] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 104.431632][ T8076] page_type: f5(slab) [ 104.432786][ T8076] raw: 00fff00000000040 ffff88801e2bca00 ffffea00008baf00 dead000000000002 [ 104.435206][ T8076] raw: 0000000000000000 0000000080150015 00000001f5000000 0000000000000000 [ 104.437683][ T8076] head: 00fff00000000040 ffff88801e2bca00 ffffea00008baf00 dead000000000002 [ 104.440161][ T8076] head: 0000000000000000 0000000080150015 00000001f5000000 0000000000000000 [ 104.442627][ T8076] head: 00fff00000000002 ffffea00014e2b01 ffffffffffffffff 0000000000000000 [ 104.445084][ T8076] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 104.447528][ T8076] page dumped because: kasan: bad access detected [ 104.449372][ T8076] page_owner tracks the page as allocated [ 104.451004][ T8076] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xf2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_MEMALLOC), pid 9, tgid 9 (kworker/0:1), ts 80527568345, free_ts 80120782846 [ 104.457037][ T8076] post_alloc_hook+0x2d1/0x350 [ 104.458441][ T8076] get_page_from_freelist+0xfce/0x2f80 [ 104.460020][ T8076] __alloc_pages_noprof+0x223/0x25b0 [ 104.461512][ T8076] alloc_pages_mpol_noprof+0x2c8/0x620 [ 104.463033][ T8076] new_slab+0x2c9/0x410 [ 104.464212][ T8076] ___slab_alloc+0xd7d/0x17a0 [ 104.465595][ T8076] __slab_alloc.constprop.0+0x56/0xb0 [ 104.467129][ T8076] kmem_cache_alloc_node_noprof+0xfc/0x3c0 [ 104.468849][ T8076] kmalloc_reserve+0x18b/0x2c0 [ 104.470218][ T8076] __alloc_skb+0x164/0x380 [ 104.471509][ T8076] __netdev_alloc_skb+0x76/0x920 [ 104.472919][ T8076] __ieee80211_beacon_get+0xc1f/0x16b0 [ 104.474470][ T8076] ieee80211_beacon_get_tim+0xa7/0x280 [ 104.476020][ T8076] mac80211_hwsim_beacon_tx+0x4ea/0xa10 [ 104.477579][ T8076] __iterate_interfaces+0x2e5/0x640 [ 104.479099][ T8076] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 104.481086][ T8076] page last free pid 6732 tgid 6732 stack trace: [ 104.482865][ T8076] free_unref_page+0x661/0x1080 [ 104.484266][ T8076] __put_partials+0x14c/0x170 [ 104.485616][ T8076] qlist_free_all+0x4e/0x120 [ 104.486949][ T8076] kasan_quarantine_reduce+0x195/0x1e0 [ 104.488513][ T8076] __kasan_slab_alloc+0x69/0x90 [ 104.489910][ T8076] __kmalloc_noprof+0x1cd/0x510 [ 104.491295][ T8076] tomoyo_realpath_from_path+0xb9/0x720 [ 104.492869][ T8076] tomoyo_check_open_permission+0x2ad/0x3c0 [ 104.494553][ T8076] tomoyo_file_open+0x6b/0x90 [ 104.495793][ T8076] security_file_open+0x84/0x1e0 [ 104.497127][ T8076] do_dentry_open+0x57e/0x1ea0 [ 104.498498][ T8076] vfs_open+0x82/0x3f0 [ 104.499668][ T8076] path_openat+0x1e6a/0x2d60 [ 104.501000][ T8076] do_filp_open+0x20c/0x470 [ 104.502307][ T8076] do_sys_openat2+0x17a/0x1e0 [ 104.503648][ T8076] __x64_sys_openat+0x175/0x210 [ 104.505046][ T8076] [ 104.505732][ T8076] Memory state around the buggy address: [ 104.507314][ T8076] ffff8880538ac580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 104.509583][ T8076] ffff8880538ac600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.511860][ T8076] >ffff8880538ac680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.514135][ T8076] ^ [ 104.516081][ T8076] ffff8880538ac700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.518350][ T8076] ffff8880538ac780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.520617][ T8076] ================================================================== [ 104.522974][ T8076] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 104.525040][ T8076] CPU: 3 UID: 0 PID: 8076 Comm: syz.1.598 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 104.527995][ T8076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.531090][ T8076] Call Trace: [ 104.532046][ T8076] [ 104.532910][ T8076] dump_stack_lvl+0x3d/0x1f0 [ 104.534245][ T8076] panic+0x71d/0x800 [ 104.535376][ T8076] ? mark_held_locks+0x9f/0xe0 [ 104.536753][ T8076] ? __pfx_panic+0x10/0x10 [ 104.538041][ T8076] ? irqentry_exit+0x3b/0x90 [ 104.539402][ T8076] ? lockdep_hardirqs_on+0x7c/0x110 [ 104.540897][ T8076] ? check_panic_on_warn+0x1f/0xb0 [ 104.542354][ T8076] check_panic_on_warn+0xab/0xb0 [ 104.543747][ T8076] end_report+0x117/0x180 [ 104.544998][ T8076] kasan_report+0xe9/0x110 [ 104.546286][ T8076] ? ip6gre_tunnel_xmit+0x10d3/0x10f0 [ 104.547826][ T8076] ? ip6gre_tunnel_xmit+0x10d3/0x10f0 [ 104.549382][ T8076] ip6gre_tunnel_xmit+0x10d3/0x10f0 [ 104.550864][ T8076] ? dev_queue_xmit_nit+0x8d2/0xbc0 [ 104.552354][ T8076] ? __pfx_ip6gre_tunnel_xmit+0x10/0x10 [ 104.553934][ T8076] ? packet_rcv+0x171/0x15a0 [ 104.555267][ T8076] dev_hard_start_xmit+0x9a/0x7b0 [ 104.556710][ T8076] sch_direct_xmit+0x1ae/0xc30 [ 104.558084][ T8076] ? rcu_is_watching+0x12/0xc0 [ 104.559489][ T8076] ? __pfx_sch_direct_xmit+0x10/0x10 [ 104.561009][ T8076] ? do_raw_spin_trylock+0xb1/0x180 [ 104.562477][ T8076] ? __dev_queue_xmit+0x11b2/0x43e0 [ 104.563957][ T8076] ? lock_acquire+0x2f/0xb0 [ 104.565257][ T8076] ? __dev_queue_xmit+0x11b2/0x43e0 [ 104.566736][ T8076] __dev_queue_xmit+0x13d4/0x43e0 [ 104.568171][ T8076] ? avc_perm_nonode+0xee/0x180 [ 104.569601][ T8076] ? __pfx___dev_queue_xmit+0x10/0x10 [ 104.571122][ T8076] ? lock_acquire+0x2f/0xb0 [ 104.572424][ T8076] ? avc_has_perm_noaudit+0x61/0x3a0 [ 104.573938][ T8076] ? avc_has_perm_noaudit+0x143/0x3a0 [ 104.575468][ T8076] ? packet_parse_headers+0x79c/0xb10 [ 104.576998][ T8076] ? packet_parse_headers+0x7a8/0xb10 [ 104.578543][ T8076] ? packet_parse_headers+0x21e/0xb10 [ 104.580052][ T8076] ? __pfx_packet_parse_headers+0x10/0x10 [ 104.581659][ T8076] ? cap_capable+0x1cf/0x240 [ 104.582988][ T8076] packet_xmit+0x23e/0x360 [ 104.584278][ T8076] packet_sendmsg+0x2700/0x5660 [ 104.585680][ T8076] ? sock_has_perm+0x25a/0x2f0 [ 104.587051][ T8076] ? __pfx_sock_has_perm+0x10/0x10 [ 104.588533][ T8076] ? __pfx_packet_sendmsg+0x10/0x10 [ 104.590021][ T8076] __sys_sendto+0x488/0x4f0 [ 104.591332][ T8076] ? __pfx___sys_sendto+0x10/0x10 [ 104.592779][ T8076] ? sock_ioctl+0x3ae/0x6c0 [ 104.594085][ T8076] ? xfd_validate_state+0x5d/0x180 [ 104.595539][ T8076] ? rcu_is_watching+0x12/0xc0 [ 104.596919][ T8076] __x64_sys_sendto+0xe0/0x1c0 [ 104.598290][ T8076] ? do_syscall_64+0x91/0x250 [ 104.599665][ T8076] ? lockdep_hardirqs_on+0x7c/0x110 [ 104.601148][ T8076] do_syscall_64+0xcd/0x250 [ 104.602444][ T8076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.604122][ T8076] RIP: 0033:0x7fb80d985d29 [ 104.605403][ T8076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.610845][ T8076] RSP: 002b:00007fb80e6f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 104.613225][ T8076] RAX: ffffffffffffffda RBX: 00007fb80db76080 RCX: 00007fb80d985d29 [ 104.615468][ T8076] RDX: 0000000000000028 RSI: 0000000020000180 RDI: 0000000000000003 [ 104.617718][ T8076] RBP: 00007fb80da01b08 R08: 0000000020000140 R09: 0000000000000014 [ 104.619994][ T8076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.622258][ T8076] R13: 0000000000000000 R14: 00007fb80db76080 R15: 00007ffc83268db8 [ 104.624544][ T8076] [ 104.626036][ T8076] Kernel Offset: disabled [ 104.627286][ T8076] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:44:44 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=0000000000000000 RCX=ffffffff8175e32e RDX=ffffffff96e5d018 RSI=0000000000000008 RDI=ffffffff96e5d018 RBP=ffffffff96e5cfd8 RSP=ffffc900043174e0 R8 =0000000000000000 R9 =fffffbfff2dca79a R10=ffffffff96e53cd7 R11=0000000000000001 R12=ffffed10049ea5e3 R13=ffff888024f52440 R14=0000000000000003 R15=ffff888024f52f48 RIP=ffffffff81769d6a RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb80e7156c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020000440 CR3=00000000359dc000 CR4=00352ef0 DR0=0000000000000000 DR1=000000000000000a DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000280001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb80e714f90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb80da02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb80da02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb80da02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb80da02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb80da02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb80da02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666c65732f636f72 702f0073252f666c 65732d6461657268 742f636f72702f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434940560a464a57 550a0056000a4349 405608414440574d 510a464a57550a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=1ffff920000d5fb8 RCX=ffffffff8176cb79 RDX=1ffffffff3537ba8 RSI=0000000000000000 RDI=ffff88801d2ad35c RBP=ffffffff905f7cb4 RSP=ffffc900006afdb0 R8 =0000000000000000 R9 =fffffbfff20be932 R10=ffffffff905f4997 R11=0000000000000003 R12=ffffffff9a9bdd40 R13=0000000000000001 R14=ffff88801d2ac880 R15=0000000000000202 RIP=ffffffff8176cc40 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb80e6d2f98 CR3=00000000359dc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=616f711a00580089 fcd733095f1a892a 6f0f52c9eb7076bf 593caabc4ee1f242 9c4b8beb6ae8c7ee 5442a2f8502ce5fe 88ac46ef459c91f4 0742772722f8b457 ZMM17=05e60328020005e4 0328020005e20302 d8020005e0031c80 80808404880005d8 030004840005d403 52020005d2030a02 0005d00300048400 05cc0301ce048400 ZMM18=020007a603280200 07a40302d8020007 a2032ce404880007 9a0302d402000798 0328020007960328 020007940302d802 0007920306048800 078a031ffffffffe ZMM19=0240a080820006e0 0302408080820006 e00303c4020006de 0378020006dc0301 88020006da03ebad 69c7e3f34ef4c96a b21f491a0806c003 1e020006be030002 ZMM20=683fd4ca683fd4ca 683fd4ca683fd4ca 683fd4ca683fd4ca 683fd4ca683fd4ca 683fd4ca683fd4ca 683fd4ca683fd4ca 683fd4ca683fd4ca 683fd4ca683fd4ca ZMM21=3cec40dc3cec40dc 3cec40dc3cec40dc 3cec40dc3cec40dc 3cec40dc3cec40dc 3cec40dc3cec40dc 3cec40dc3cec40dc 3cec40dc3cec40dc 3cec40dc3cec40dc ZMM22=ae871387ae871387 ae871387ae871387 ae871387ae871387 ae871387ae871387 ae871387ae871387 ae871387ae871387 ae871387ae871387 ae871387ae871387 ZMM23=08fbd5d008fbd5d0 08fbd5d008fbd5d0 08fbd5d008fbd5d0 08fbd5d008fbd5d0 08fbd5d008fbd5d0 08fbd5d008fbd5d0 08fbd5d008fbd5d0 08fbd5d008fbd5d0 ZMM24=b8ee95d3b8ee95d3 b8ee95d3b8ee95d3 b8ee95d3b8ee95d3 b8ee95d3b8ee95d3 b8ee95d3b8ee95d3 b8ee95d3b8ee95d3 b8ee95d3b8ee95d3 b8ee95d3b8ee95d3 ZMM25=01af65db01af65db 01af65db01af65db 01af65db01af65db 01af65db01af65db 01af65db01af65db 01af65db01af65db 01af65db01af65db 01af65db01af65db ZMM26=4445444e4445444e 4445444e4445444e 4445444e4445444e 4445444e4445444e 4445444e4445444e 4445444e4445444e 4445444e4445444e 4445444e4445444e ZMM27=27d05fc127d05fc1 27d05fc127d05fc1 27d05fc127d05fc1 27d05fc127d05fc1 27d05fc127d05fc1 27d05fc127d05fc1 27d05fc127d05fc1 27d05fc127d05fc1 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=8c0300008c030000 8c0300008c030000 8c0300008c030000 8c0300008c030000 8c0300008c030000 8c0300008c030000 8c0300008c030000 8c0300008c030000 info registers vcpu 2 CPU#2 RAX=000000000008eb27 RBX=0000000000000002 RCX=ffffffff8b2a17c9 RDX=0000000000000000 RSI=ffffffff8b6cd9e0 RDI=ffffffff8bd1ef20 RBP=ffffed1003a58000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d506fed R10=ffff88806a837f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d2c0000 R14=ffffffff905f4990 R15=0000000000000000 RIP=ffffffff8b2a2baf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055555ad37808 CR3=00000000359dc000 CR4=00352ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0700141500000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb80da02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb80da02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb80da02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb80da02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb80da02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb80da02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a08ae45c48ede02 309cc3d8104cf386 e9a5dd8650ce300c 32f8e520a1a8bea6 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 91c66f088ac07f4b 3a08ae45c48ede02 309cc3d8104cf386 e9a5dd8650ce300c ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9500000023000000 8500000006000000 8500000000000003 b700000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b7fffffff8000001 07000000000000a1 bf00000000fff81a 7b20202000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000000d RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff851c0de5 RDI=ffffffff9ab11b20 RBP=ffffffff9ab11ae0 RSP=ffffc90004556f90 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000000d R14=ffffffff851c0d80 R15=0000000000000000 RIP=ffffffff851c0e0f RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fb80e6f46c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5c387f8f98 CR3=00000000359dc000 CR4=00352ef0 DR0=0000000000000000 DR1=000000000000000a DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb80da02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb80da02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb80da02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb80da02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb80da02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb80da02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb80db4b488 00007fb80db4b480 00007fb80db4b478 00007fb80db4b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb80e6ad100 00007fb80db4b440 00007fb80db4b458 00007fb80db4b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb80db4b498 00007fb80db4b490 00007fb80db4b488 00007fb80db4b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000