last executing test programs: 8.145542189s ago: executing program 0 (id=33): timer_create(0x4, &(0x7f0000000100)={0x0, 0x31, 0x4, @thr={&(0x7f0000000000)="a9abefd2a31a9f2c901a4216c7cadea59dad52eac93a9fcf3de13e568630986796853b60a5a9ddc336f703609d7dc785b906ef87b08f8a0bc8aa0d88220f9c6a090a0d9d474347a90021ce18fc9f4e1a4a75d09616dd37142af5b2618bee7ef50ee7245c20d36771aa91edfc4c9419c007c805ca1fb9b382d11c770865009e3f8ceee66505caa61ac7dd5cc2454c67ca4e6ea330", &(0x7f00000000c0)="62e7b423ce825698aae83c364b06d3d1f118"}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}}, &(0x7f00000001c0)) (async) r1 = mq_open(&(0x7f0000000200)='-\'@\x00', 0x1, 0xaf85f685d98cfe0, &(0x7f0000000240)={0x7, 0x4, 0x8, 0x21}) r2 = gettid() mq_notify(r1, &(0x7f0000000280)={0x0, 0x3e, 0x0, @tid=r2}) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r3, 0x3508c000) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000500)={0x0, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0x33}, &(0x7f0000000400)=""/64, 0x40, &(0x7f0000000440)=""/57, &(0x7f0000000480)=[r2, r2], 0x2, {r4}}, 0x58) mq_unlink(&(0x7f0000000580)='syz0\x00') syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async, rerun: 64) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (rerun: 64) close(r5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x200, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) close(r5) (async) r6 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000640)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x4101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0xc7, {0x9, 0x21, 0x1ed9, 0x3, 0x1, {0x22, 0x366}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfa, 0x1, 0xf}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x5, 0x7, 0x8}}]}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x300, 0x1, 0x2, 0x40, 0x10, 0xc}, 0x1b, &(0x7f00000006c0)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x85, 0x8, 0x0, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x46, 0x2a, 0x7, 0x0, 0xf3}]}, 0x5, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000740)=@lang_id={0x4}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0xc1a}}, {0x7d, &(0x7f00000007c0)=@string={0x7d, 0x3, "062be811916dd9181d36cf6d67d4323e8773c8aecfa30f44051b00e497caa41b4250e72be42839400a2ac0db13903e23c860ca2f2936602c626092775fe701190752b1be5ccda6798b1ad3cd10133bde995eee7491e77719be9f08a1936f42c423722ee57776f41f96be7781895224ec13a5834e01bbc971db72b0"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x40f}}]}) syz_usb_control_io$hid(r6, &(0x7f0000000ac0)={0x24, &(0x7f0000000900)={0x40, 0x3e, 0x4a, {0x4a, 0xe, "c3a5a42f62d3393bc5cfcc6f8007299e58d61b866af4c9b52d634d6f9d8cab29c4418547096176575d60e8a4c2b6f0d8a4f80b9f1fef6419e4b712e61f251dd55a4c1afc775f10a7"}}, &(0x7f0000000980)={0x0, 0x3, 0xb7, @string={0xb7, 0x3, "fec769272d200cc871d7264148da86fd6dc5d521ff240dcd9b3df5dca1f1e4d1160bcb3aeb27be26cc94915977a9d78d74b9c5168651ea045e021ed5385255670176f7d8fb0f654e9c81952d30db9d89bdbf53ead1cda003465d362526c4dcf345edf0452f2dd2f7bb9794572fa7e84c6f160b58e046041dac9106097d9de4932b0ea0852de19efd96a355c229de304631f70da0968e6ea3c2b06002dba73d5f002863f173bb7a201a88928f92f89589d1dd09405b"}}, &(0x7f0000000a40)={0x0, 0x22, 0x1b, {[@local=@item_4={0x3, 0x2, 0x0, "202e37ca"}, @global=@item_012={0x1, 0x1, 0x1, '`'}, @main=@item_4={0x3, 0x0, 0x8, "b3ff5482"}, @main=@item_012={0x2, 0x0, 0x8, "4feb"}, @main, @global=@item_012={0x0, 0x1, 0x5}, @global=@item_4={0x3, 0x1, 0x8, "5912479f"}, @local=@item_4={0x3, 0x2, 0x7, "677d26a6"}]}}, &(0x7f0000000a80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0xe, 0x1, {0x22, 0xd8d}}}}, &(0x7f0000000d80)={0x2c, &(0x7f0000000b00)={0x40, 0x9, 0x7b, "89517c9e85a938ab26fd68991e73d4e72ea99d87dd5df243cefb5a363ab2375e883b6f7b8e4e775b59928c93c0e3ae35459b9ec03f41385626883441284eaed94fea1879d12b6c88a27013bc86127969a1b2e5a5a955c359807102386072a2ffe2e679c0cd0ad174bf2c8ac483ea1b6222338fe4415155622f4b68"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000c40)={0x20, 0x1, 0xce, "39ecd7d2283d452406102d5e72d8cf48ee16ae9d33762ed8eb68289c3ce4aa8106d38b3e78199e3197bee08b0a328d0004ac7a9e7fcc3637e58d9a40821e2a2c10e2ae5882527fc5531ee2140f310c4437f6c1bf63de5c47dbd3b4c8817c591305266e309416c761df431aeeb60e9ec425b5a518016cc45c645c08d538fe5ccb030e72a076d777a630b7cf8467373673902595b92b3c45bf55eae662645a6009a41d5a5b4780d29c7d17116c731f8d6624cc78ba7e0a7bcad6f4166a16ceac10ec9eba9313530cdb6ebf50cb2792"}, &(0x7f0000000d40)={0x20, 0x3, 0x1, 0xba}}) (async) socket$unix(0x1, 0x5, 0x0) (async) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0xc32) (async) link(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)='./file0\x00') (async) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000e40), 0x2001, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000e80)=0xa1d9, 0x4) syz_open_dev$radio(&(0x7f0000000ec0), 0x3, 0x2) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000f00)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r8, 0x111, 0x1, 0x7, 0x4) (async) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000f40)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x4}) (async) syz_clone(0x800000, &(0x7f0000000f80)="9359b6f7125f5e379d92054c763cfe7f96a3c22bfc894b72a212235d90127bd4b862624c02efd1b97856818981", 0x2d, &(0x7f0000000fc0), &(0x7f0000001000), &(0x7f0000001040)) (async) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f00000010c0)={0xcf, 0x2, {r2}, {0x0}, 0x4, 0x4}) fsetxattr$system_posix_acl(r7, &(0x7f0000001080)='system.posix_acl_access\x00', &(0x7f0000003440)={{}, {0x1, 0x5}, [{0x2, 0x3, r9}, {0x2, 0x5}, {0x2, 0x4}], {0x4, 0x1}, [{}, {0x8, 0x4}, {}, {0x8, 0xa}, {0x8, 0x2}, {0x8, 0x1, 0xee01}, {0x8, 0x4}, {0x8, 0x2}], {0x10, 0x5}, {0x20, 0x5}}, 0x7c, 0x1) 7.370848578s ago: executing program 0 (id=39): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="060000000000000002010040"]) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000380)="b805000000b90001c0fe0f01c13e0f79a8fb7f0000c46225a9fbc423656858883f66baf80cb8c6db7986ef66bafc0c66ed400f35b9800000c00f3235010000000f30f3470fc733c441fa532e66b8f7000f00d8", 0x53}], 0x1, 0x59, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000380)="b805000000b90001c0fe0f01c13e0f79a8fb7f0000c46225a9fbc423656858883f66baf80cb8c6db7986ef66bafc0c66ed400f35b9800000c00f3235010000000f30f3470fc733c441fa532e66b8f7000f00d8", 0x53}], 0x1, 0x59, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.149663376s ago: executing program 0 (id=44): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x2}) (async) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, &(0x7f00000002c0)) (async) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) (async) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r5, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@decrefs={0x4008630a}], 0x0, 0x0, 0x0}) (async) recvmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000004c0)=""/203, 0xcb}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x4000, 0x3, 0xfffffffb, 0x7538, 0x0, [{0xc, 0xfc, 0x8, '\x00', 0xb4}, {0x22, 0x9, 0x4, '\x00', 0x4b}, {0xf7, 0xe, 0x7, '\x00', 0xa}, {0x0, 0x5, 0x0, '\x00', 0x3}, {0x8, 0x10, 0x8, '\x00', 0xaa}, {0x2, 0x9, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x0, '\x00', 0x5}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0x6, 0x7, '\x00', 0x4}, {0x1, 0x9, 0x15, '\x00', 0x8}, {0x0, 0x7, 0x6, '\x00', 0x40}, {0x1, 0x8, 0x80, '\x00', 0x4}, {0x7, 0xf1, 0x6, '\x00', 0xb2}, {0x7, 0xd1, 0x0, '\x00', 0xfd}, {0x6, 0x61, 0x4, '\x00', 0xd}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xf3, 0x6, 0x4, '\x00', 0x3}, {0xf, 0x6, 0x6, '\x00', 0x3}, {0x9, 0x3, 0x54}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0xa}, {0x15, 0xfd, 0x7, '\x00', 0x3}, {0x8, 0x6, 0xfe, '\x00', 0x42}]}}) 7.07832341s ago: executing program 0 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000400)={&(0x7f00000001c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/193, 0xc1}, {&(0x7f00000002c0)=""/189, 0xbd}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/150, 0x96}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000000680)=""/113, 0x71}, {&(0x7f0000000240)=""/37, 0x25}], 0x7, &(0x7f0000000780)=""/203, 0xcb}, 0x12002) pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xd80, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x80}}, 0x0) r2 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x22) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0xf) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x28) 6.999381503s ago: executing program 0 (id=50): r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) fcntl$getflags(r0, 0x1) (async) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), 0x4) (async) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000040)) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r1, 0x0, 0xd3d}, &(0x7f0000000140)=0xc) ioctl$KVM_CAP_HYPERV_VP_INDEX(r0, 0x4068aea3, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000200)={r2, 0x4d, "555f2a7029b5b8e19c97b179c74e0e9d8b8cc1023863e6ac60b26d4f0b4eb151df4fb9e94dbab54363e65c9c91ed4fbf32d59a01712b91f18dac5466cc514222d75c830680323fb9937ff4acf3"}, &(0x7f0000000280)=0x55) (async) accept$netrom(r0, &(0x7f00000002c0)={{0x3, @rose}, [@null, @netrom, @netrom, @netrom, @default, @netrom, @netrom, @netrom]}, &(0x7f0000000340)=0x48) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000400)={r2, 0x54, &(0x7f0000000380)=[@in6={0xa, 0x4e24, 0x800, @private0, 0xf744}, @in6={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, @in6={0xa, 0x4e21, 0x7, @private1, 0xff}]}, &(0x7f0000000440)=0x10) (async) r4 = syz_open_dev$I2C(&(0x7f0000000480), 0xfffffffffffffff9, 0x8200) ioctl$I2C_FUNCS(r4, 0x705, &(0x7f00000004c0)=0x2) (async) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0xb, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x8, 0x1, '#&:\x00'}, @NFTA_COMPAT_NAME={0xd, 0x1, '&!\\.&(.&\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x20000004) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000640)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) r5 = syz_open_dev$I2C(&(0x7f0000000680), 0x42ed89e1, 0x2c601) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000700)={0x0, 0x5, 0x3, &(0x7f00000006c0)={0xf, "5e6fdca9c79c7dc558086c2dea3054c152560bb8ed3d2c2605d4b116a5759a8674"}}) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000740)={0x0, 'vlan0\x00', 0x4}, 0x18) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000780)={r1, 0x2}, &(0x7f00000007c0)=0x8) (async) ioctl$BTRFS_IOC_ADD_DEV(r4, 0x5000940a, &(0x7f0000000800)={{r0}, "5a92ddb905c463ce8e0fee5c4a6e00c80416d9b6128f0ce65def6e6dba7d4047090f7472ff8bd8e2da79580bc3b0236c003eeaa68f15ba76e5569d497aef771096efa1e47d2e88ea8097a56a14be21d36fd79c3715f94ae2f31fd4b051dc8702414633a084084f34d9f41e8c5b13e9b8cf1036230d07ac74c098c126a6c259a6e10d4c91b7578983b89a97292f43a86235d2ef75a1e407173d812b0bffe555060bbe060530c4662cd5d6dd62946860af7d1fc41ef12ccbad24debd9fd77649ddb3141545727e69ebde5c44e05497eaa40aad98c52c4c97034859fcd478aea539d6d4f8bd6ae8d089797d348a97726869051e0c1c03c4984fb054ad12d53105bc346bb9fd15c1bf4cbe46b30ba093d1674c05d23c1d4ae503bc4828f2274a23b590835862dbe4aa4bb9c454a8218269ae2847368c3fdf9fb1c5b4f9e96e26823fa58e9ddd87f21dcd5b7586bd42d4306d8becf635b7254c4b36d13226cda1a580c20d291838149d4c3fb7a5bf43b4b246148e1ac2acda64e5864a6a78509da2fdedbcbfaf46d2723cc3fc752511f55611e4dfdd1a67348815da725d75fb49c83245b7a485d9273b95fe9e12d4be66252a0e1a5181a810378ef81f0f18efc931f1b36073384b71417053d437412eec4cc908fcdb0531e0eabf6fe86b3437c3717b5da7eb03e49c30f48de3c0ab6aa0db1cf5dd212b09564b0b413bbac6b3f6a41ecb4be30b60bb1c5be6a0b21cee7ff9a239f9c3c16a42acefa17f980a1759810e94730aa6ee34f05a9d43bd441ab0a8dd23dda80d9f1c9b29d95d8b3211d5dcd967b3529a31621157d9adbafd19bf4cd6301bb7bef0450feb0f290c4f15aa1b8b0069a6fcf91bf3db5a252d7c94cd69aa969cc33ba845fafb3bad25603d83fbbc5689001a4e85bc3f5fdf552d287409a23cd8624ec4014957936046f0148905ec0185c45b49ef1e08ad7fdc72341c1d370ae1eeba7e240a2eb4d24f63b14569667142bad689f744118316ab6a2bd8810002e984813ff8e6010914fadd0387922ed6558d935cba63a35a07119a77e026a74d4c1c8de8ecb46d76b8efbf91bfa7e7dafce251ef6f8221e21f9d4f2f13a6213d9069d4382b69403aa3408993375dacb74e3f363fd42e8a4ce55feda201fe8cbb2c3937f3853738b39a1735f3bfe97fb21c9a13f670a514a60de722a57a3fe1f874cf555fcab2c2ab87c0902f1f7b8042ea18cc80af91cd31c235ade2e6126890d2a5c346de1eb023831854c6b882f92deffe9f1f5390b4bf905546e2a73124038c1540faed3682f358c8c353abb3af31d9b5ea41e1cfa5cd191e88c444f691d9f7bb7b80963b55d9e0a5aa13da9ddf4533fa27cf1c7049e659929218638c7df58c0567b1eddccb5bed8ffb07ced66ebdc199ca54b234a9fd7f390cd35999770eb470f4c7e4d03d15b77c0ce340136b5ff2d1f5b52381b20c898dad26b6eab6012c7e8a6127fe7b40f1388d1860045982b1c8b546799cbc1571e56e76e00165a8925370162a949d72b71997b1147c5b33a7301ed4237ac51c744681d6cedbdf5cd347a36a417ce65061d49a1849980b2ddc7f30117b2599635da4ae0f28c2b47a06ab830e2c9f324dcacd4c0664f5a6dc9b7993f73639bcf3e1c732046f96a6d7d6fc9ebbba7d69114ac2671cbe8199d7552747a30c45102fad56e2839f82e4cae898a52f50ccdeceda683332e0d0f6fa7ff3b4967471967b065c3a777d84347b096fa36cc917acf70bbacf15141fe206f6a653ec6e2c3caab01bb87011711246200f5dcc9e0ac70a446f4e95d8469afcd30fbae4e6ec7ebcf22ab12901781d4d4ead501abf5235855bec3ef38f1d5cf9bb030781a6388192eb5c636599610743063308ae2c7aa5d1104fe8f6080ed7bb3625b02b7acdeea584529178d8bbcaa74f34180a8990f17e0b33d7417eb5b5dc3e253713ed625e05eeb003aebe6bd69b97b1b75b7abc603da3e737e66cd57903ba3ceb583cb7eb18adb86f4e04f0b1d215d26c192f6fed570a16baf1eeef49c272e9f30e61cf2377f86d68e15ca0790da7ab861156cff097ef3e8502fe20c4cee3b41855c01efda003874b1a444960c9a0433a93b5259519935b23f2fa77b2237aa98ef6fd7dd63c4d529c764738226f1b36a14022f0209573746e6323c0a3ecfc0a503f9b43d7e128cc34938c6a1f91b74f9050203bc65e629c3e8bc7e0bd5047757c6c8a09388f17ee04a27f0c12e8fe22b4f55e71946f21e764323c081ec8dcd188bae3d678240b1c22418f7f1d8b2c2bed94fcb8e3a6229136d18b431bbd7845ea3c8b3c9c7a0cb95a8d2c35b7e25ac9875e1168a3503d7bc864b318ed88644cf730f736d1d122115d17e7d27d0b572a5315ecda2aa331446984cb5f23590333a78f94f58c619d8ced89cdce4b1d0a1653358a4720844b9386b17a68ce568dd7bc0237ef324e3b9e4daec4b39bcb7966c345f4f36cc86e508eb010ea25fb42343b71cd721876e1c5609388a14e882018644973678e21ffb56f5bf7e00f789662daad853320ceeb56f70ee6078a8b84a239a10b7912b14a5cff146383659f856ce605c1b6b6ccbb9c14bb0ffb5cc7bfeae2458437004449e70318c16113088f520f23229b1c448ada5775a44e4f3fd83a9d26c4abe0bc9359b2fb88297cf09be610d3817a75d5d1d3bb374aa990696ac860a98ec0c1f8664aace9aa882e72e5614a2d9792fb8eaca1e162c6ba5cf4bb6cfb24ab9d08e2210a086626be8db4310756cee3db7faef5c3bd42409507738e1c3d30208574989574ce6c3f82aa8a4241294098e94d0f354f41441c50046507453337be972dd6367385ba833db7550865be00fcdf0b1980de9e92a0c2bd3aceaf4d6be0bbc9238d9cb74e82d263c0721426c61997df878e6896ccfc71eeb7241d74317c76ca100c7158f62faad66d409cf7fac0091a16399577435dc34c05e3bf009c2a56d04a27de8e0f32c21fd6704ee1e0c35b744e96e65d4b51e4d12e3f30923113433090b8f83e7b35473a4b492979396a9c8c0989c7ec3e66a8bb34402c36300f47d8d7720f5e821807f9d8dee635ebb3c650d9e66bed2bf6bd702d959957a99f2b011d7510d41e6ae58239c54426defa24c113ff434c97e6434abae01e9c5286c682a1402c9448855b527fb97858c96dbdff8051ef01fba1f6650453caa03aa93b398b8bfdb4f55d0ad868b2ff752b6e90694fe8938a6c8c01490e805b7aabda26833d5eea6269f2c41bc16e753fe1616d1c66b07a26841ccdef6ed6c549b10d3a1c2b1b14191134cac77b8ee11fac21afc506ae5a201caaca7650d404e1ecee2cd18966c745882e83bf8f391e31ce0e43cdb110877117b0814a3feed5985548527c74030541552b615d67911add186433111be6b0072483bfd3bfed83cb85b27c4ed66588dc4fc1cb4741a12631f8e7c514937387ca6e7e74cfb9c3c12cb922b40b99c0ea84ae8d09c6ff7fa4bd7a44bc708cf7cd86786cb9245b73636beb89dbe0556cb13fd4c06234e6a0f0f21ecdfb9c5374fb63def116c4bd481a22e68a2eb666cbfdd9ac83cf694a669ef737cda4cae62d6c5f7aafbafe94d5ad2421c876728a5af0f9b12b1ab67b16d72a5d865ad578001b2ca2fef938a9ddaca66067d505b2db7fe66507c75831af0006e29a5b49517b5d593662382fcfc0c118de434e85fb793415a35a61207eb59304deccfa455267045ae64aecbd8e3e87891289d7665a4ec7d6f4e91442bc53159bb2ec27da0bdc9ad13dc61a188185064b5a8f2f441e8d3ea736cf592d145be57d8b8ecd93876cddcc3a130ed12b01a1c25b4fb7103b720196fd309d4b3f08a5a2f0149702a17f1e35d6935e38053012d6d0bd744c29843548bbc0a7056e84ec9cd58716e46a1d59f0a57c7c977512d6210165a5d30e62d37d7be6ebefa3a37e05d5adda089dd1b829cf6af4fdffe4bd489763cfc23ff7018aca5f32f3c3d9fc8b1e45898971cda687e0f576d4969ab32ab02408fc15a59564b1fe5179f1223575131d665656a2dc7a885b6ccbacfb4f3bb01dd3e7d44f2f52b7413ba0e1cf36ec866eac9e6d8f04a1a1a5a370a1da303ede044f37a43cca6d4caa66ad2c047d69eb7fa63e17d5744cf3c1d88219829dc6a9ec0953f51ff6ab06088e96a662a4b26c095536f378ad5b510145a902183dd16cb86056f94fb265fbbdd39d0b493270d09e1c6920c3e419467e7bdc3915a1faea42910b06a7c1736137f0c6c9200e2a3b04ce9033da8c5acc7b9466f3f14f724f52d6ec4af3f9a9b170c4bd389b43cf08c7793946952c42fbf0b6a5b264d0372789b874c9875667b7d830f47ca4a1388d53d45bb90d7d7af784848d672744e715fa26def6230c7b48422a5c74868cd1f7acc05b7110087456c8c20ec20c441bff42d4cc22547b89fd58c5b7324af3870855e7ba1441afaa01713fcf768ef358b4fce137f85d89b6cdbc5b1e8778048dc439d9c838bf686c6c45e3108ad8aaddd0c084591996bcd954ba1a0a3119897f6004365bce53792c0d3e375e57687b82f6ba8e51b0278d51b5b222c45f951c1b9d66feb2befda998afe77b61db92d344f9a80576b7e799d8025ac038304eb054e7121c9ce7a079ff3a7c4f724bd06b68ba6b48ec1d7281c32925a9a8c2d96fda001de55d5927bf34bdc042efbeda5d9f1ebfd7b5ac482c2a72983bf5ae5707c04cbf8c59f4e7bd2cfb161036248e7b72f502a0fde0ef56393b9f89f21154c4196f2bdf90fc4f13b2f8c5d99f6e4ba88d379d7fcfbd448e845b42b865b240111ac8da4b719edb7e4af3f255c49bf0938bead81727b116cc7909346503a8721a129d3e8653049fe469ab4391f2b83aa2b4b2cd35ef6dce231a6bbebfd532bf4dbefb3717dbfbf6104435c186c6068154399c34eb0aaafda5306d48df192d8d5401f1a358fce0b5c82ff65923c39e8fd3fb20ed9ea2ef886bf5431595a76659fcbec3a0e71c4c2b348d9adadcd9bbce145a41f06512bcdd4b7f07c812f6d4f082d8720fa13b65cbcdd2c46fcfabc000abdb936173deac0c8cbbf2905d4d39f14a2e3d3a28f778906172a9ee75750b5052f203deca9201b55b1f64ebddda5632b9b676c392d3d76c4922b4cf067de361c6136c46182983f5f8c522bc82123ab21ab054b1d6c665ea86897511e76bca837839a3814e14f9f542362324e6d1683d2820dfbe34d1342f90c3fd8dc1cd2aed5a2f0cc41d7c76111a2dacd5a00679440c99617228a6ff764279e32dcc81e176db4d01cf03393076800e9cfa78b811fa085d8f84ee004b59a7a7a2ad1855a820e609fed2da5159696b95eb5278aa3ca31d9834fab5d66157f5d73b26251f801036cd7f48f901b308058847b4e50ef3444d755f774c3365350a59bd3f26695e4f72789201605262f31c8385e7332e40dd1c4841911431dc56a53ca26ef238e00c3544d743b1dfdf126864cd6a26a6c4bca439041f7ab1337ab4959bb35d29aac29b7322bfb0b045593073485d77c956533bc73052a47151432ab58565ac41ec9851386f2c66820e9115f922b00796c2d143c4f830db42fcb6213d4c345a0a5fe3af1d227fbc15c08b68cb63877fd321ee06ca5aeb5519cc89c312f285750e5121d24337e141e6eb8dfa9dbb9b937fc1f290a4274c41a214afc17401f1bf14a8a485f336a6aba01617d3b1db08b0c1c8c23384478525dff03ed317d87c4530e5de57cf6669e922a485726095fafb58dfcdcf32049624f4f7c44c3b49ce7beb90477eeaa94b81f6"}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000001800)={r3, 0x7f}, &(0x7f0000001840)=0x8) (async) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000001880)={0x2c, 0x1a, 0x7, 0xe, 0x9, 0x9, 0x4, 0x113, 0xffffffffffffffff}) (async) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x30, r0, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0x10010, r0, 0x10000000) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000002c80)=@IORING_OP_WRITEV={0x2, 0x2dede36c9381e947, 0x6000, @fd=r4, 0x6, &(0x7f0000002c00)=[{&(0x7f00000018c0)="2575613a9757e5e498e7c32851d1c465b26a77e0cfa7dbd03e9dd5dbae22f23f4864019cf00a6c7fec7983be75f178b9428f10e8", 0x34}, {&(0x7f0000001900)="558d627bddceba1bd00107d0546b78d3e935c2868ce598a50e6e984bcd50d9b20925baf20074ddbc4f36f53c56ab72c00e655553e774dcad0c37ebb6955baf1f860f77579669c8aa4a42dec01305119ce7b724b83726c24e755d769e976d99d8b7fb841609828ca52d0ee4155d099897b0dc15464915e64a70603cd60da7221aa18a381b92f2697b9fd2247803f27bd4d1280d3feace8b4ec8661d74f657aded70398753b973d88cbce4926698edb27df57b13325ab670af33c5b4e4661d397ad54b7bb7844811a541535a90b638e66b3a20b539c92f46fe236500b85ef0b8953118f3f2220c01eee7e56e80386c38733e58be70f6cab5ed4d2b9d7dcd25b4", 0xff}, {&(0x7f0000001a00)="6287d4df48", 0x5}, {&(0x7f0000001a40)="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", 0x1000}, {&(0x7f0000002a40)="87ed9c693d4521fc73629192db3b792b10792f7b37c78db34bf0bea86437291f44c9e4806069487528b743a2e8ac398ca5acf350e7ba4ac45425147341a15fcad9bf3259b3f35f9af4e4471abc427f672827a4a90533c3161ea7381d51a4a5cf", 0x60}, {&(0x7f0000002ac0)="f2f30edcb366fe6bdd91f44beff10554e318199eb435070c91616b9ec3e9ddf4cf0cee5f8a0c7fd4625a8a336e6be8d008323bdb5b2052e2f932ee033890de388ff79e0caa95cccbf3555dad09373dfdb358275cb68296c71ce70a25800003e20cc1eb0ac8224096271ba5df9126f7dedbe21aa3449188c6d4464658cf53eb4df737f22557917367426d7f7e13b343939aa1c1b2", 0x94}, {&(0x7f0000002b80)="271318b6c6d2c2dfa43dd9a705f7c94c5cb5138e3e4c366aef361a6cc68d74cf2f7c385b138e7e7014c9be03bd9df27ea1bbd8f572c9c9ea88b271bbeb92e804e9f4d4e6cde1baaac7978344fe8a4cff6c744c0994", 0x55}], 0x7, 0xe, 0x0, {0x3, r9}}) (async) r10 = syz_open_dev$vcsu(&(0x7f0000002cc0), 0x2, 0x40) sendmsg$nl_route(r10, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)=@mpls_newroute={0x3c, 0x18, 0x300, 0x70bd2d, 0x25dfdbfe, {0x1c, 0x80, 0x20, 0x5, 0xfc, 0x3, 0xfe, 0x4, 0x400}, [@RTA_MULTIPATH={0xc, 0x9, {0x1, 0x38, 0xf6}}, @RTA_VIA={0x14, 0x12, {0x29, "0f470bc3d6b7c193c582c497f220"}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x400) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r5, 0x8008f512, &(0x7f0000002e00)) 6.678979223s ago: executing program 0 (id=52): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000ec001fb6330d70000008000100", @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 6.641728598s ago: executing program 32 (id=52): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000ec001fb6330d70000008000100", @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 3.487447394s ago: executing program 4 (id=97): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x2, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000002240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@euid_gt={'euid>', r1}}]}}) 3.438891082s ago: executing program 4 (id=99): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000000)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="1100000000001e00", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x11) clock_gettime(0x6, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r3, r4+60000000}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0)={0x7}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x8c2b01) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$EVIOCRMFF(r9, 0x40044581, 0x0) sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote}, 0x0, 0x2}}, 0x50}}, 0x1000) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r11, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r12, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000300)={0x8, {{0x2, 0x4f21, @private=0xb010102}}}, 0x88) ioctl$KVM_GET_XCRS(r5, 0x8188aea6, &(0x7f0000000040)) 3.329881441s ago: executing program 4 (id=102): move_pages(0x0, 0x9, &(0x7f0000000140)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0], 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x3}], 0x1c) sendto$inet6(r2, &(0x7f0000000100)="b8", 0x1, 0x24004851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x3}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) unlink(&(0x7f0000000000)='./file0\x00') r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x33, 0x2, 0x1dad9f8604b238cb, "0600836a330000000000000007000200268d09ff07690000010040c39b08fc00"}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000500)="66470f01b926ffffffc744240268000000c7442406000000000f011424450f2286c0f9c9f3446e66baf80cb8f44d7d86ef66bafc0cedc4021947c966baf80cb8776c048def66bafc0cec460f01d634950000001c56400f06", 0x58}], 0x1, 0x31, 0x0, 0x0) fsopen(&(0x7f0000001300)='jffs2\x00', 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r6, &(0x7f00000013c0)=[{&(0x7f0000000100)='}', 0xffffffd5}], 0x1, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.109715341s ago: executing program 4 (id=108): timer_create(0x3, 0x0, &(0x7f00000003c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000400)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000640)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000600)) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x1000, 0x1}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000680)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001e000100000000000000000002000000", @ANYBLOB="889331475626c4dc89631428b2e3c9b703c10e666dc1", @ANYBLOB="0000000006000500"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x4080) sched_setscheduler(0x0, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e24, 0x7, @loopback, 0xa}, 0x1c) sendto$inet6(r6, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000540)=[@in6={0xa, 0x4e20, 0xd6, @empty, 0x3d3}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x36}}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e20, 0x43b, @rand_addr=' \x01\x00', 0x4}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x30}, 0x9}, @in6={0xa, 0x4e21, 0x6, @mcast1, 0x101}], 0xb0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000004c0)={0x1, 0x0, [{0x1, 0xffffffff, 0x5, 0x100, 0xd, 0x0, 0x5}]}) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000080)={0x60, 0x7, 0xca, {0xca, 0x22, "78b10143da60591b32ddfd78b69b49716e53e53fc0374ee20311d38c603a4ad59b507fa397f9fd316cba609ae33a277d9a5dfbb33b43ea9957a04caa18b4c2bb3c6558ff36bbc4d493ad047537b028ab8b7e45d784e47c8ca05f7a8a5b2766b9e0c92fe9891ca9856bd9c5d95c38630f4a0289018ffa1230ebaa65f0590fea74ddea204b531c2fd8f2f05b6a9ae367af779d91f876e68346510c9e0005f3ff5f54255c2792678caaa87f4755a47d8246f9045335ba11636d8904d9ea36f9359235649ca1c8cc2c9b"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f00000006c0)=ANY=[@ANYBLOB="00220f00000057aecfcb8eb193b763b8108766e885a7d08c72bc6263880eb1dd190bafb384053d67b9ddcd4636455a582e19739d3ffe159b8f076398b436d61f908a182388acf81fe37623273e9e541b88b33dbf0ce78f4788d9b93393fbd81eaa9590ab8f066cfb10edf95d2a3b5515205efea647bcce08082b8565b5c7150f1a6ac434b01b2994239feecddfc508dcb51a7a8baad74d5290fdb24b2a8a7693"], &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0xa, 0x1, {0x22, 0x39a}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x18, 0xd5, "2d5521174f202bea72d001f37dad96ec32152967f93c53f915095ae2f2e0e8778f3fff4f29965a04c5908517abcd25391ffb2c15429da8abb9d099057447c34cca74ee9aeb61f579f09b1582f92466ce2921b5c9f8827ba55809c9bbc9c8294d20298f5b427c0cea0d4caa305c602347c5883854acaeb63e375c69db7046c9acde96b7b1e364e3978025876d2fbc05db84212dca9c0bb2fdabc1f56b755eb196c425deb242db148bbd6c75295890bf783e5bc66d55d13679cc9849c7b0a770b3d05418093eedd107c05d9376bd5e8b5f2101ec5ce4"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000400)={0x20, 0x1, 0xd, "11a8e4b55fc63a0215ee8e2597"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0xda}}) 2.963013787s ago: executing program 1 (id=117): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000010000001d04"]) 2.889939916s ago: executing program 1 (id=118): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$midi(r1, &(0x7f0000001240)=""/4096, 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0x8a00, 0x0) r3 = syz_io_uring_setup(0x2b06, &(0x7f0000000040), &(0x7f0000ffd000), &(0x7f0000ffe000)) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x90) io_uring_register$IORING_REGISTER_FILES(r3, 0x14, &(0x7f00000003c0), 0x2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0x7}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 2.697547824s ago: executing program 1 (id=121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000020000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2.693596867s ago: executing program 1 (id=122): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x3090c0, 0x0) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r3, &(0x7f0000000380)='./mnt\x00', r3, &(0x7f0000000340)='./file0\x00', 0x5) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x251, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xa, 0x60, 0xf, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1, 0x1, 0x77}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3}}}}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000300012800b00010067656e657665000020000280060005004e24000005000c000000000005000a00000000000400060008000a00", @ANYRES32=r5, @ANYBLOB="c5f2c946324dc4da4212f6baf25edef2e554a67d586926fcdc686d779ea4cbd3ee976d9655e69cefd40977259b2a7f630706ef84ec4b322b2fd8f3eb520b181b8dee6a83c0c5e4610384d2ee76b465416e51b0ab0ef38051a858292ab2e5b7ded6dc5b25b61c4fa83a8bd8852d5eccda71e7a7778d317593ea"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r1, 0x0, 0x9) openat$cgroup_procs(r7, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r9) socket(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="0bb97820edd4"}) close(r8) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='usrquota') r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xdddd0000, 0x100000}) preadv2(r0, &(0x7f0000000000), 0x0, 0x3, 0x4, 0xc) 1.858649547s ago: executing program 2 (id=138): socket(0x10, 0x3, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x1c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r2, 0x0, 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) 1.725632543s ago: executing program 2 (id=139): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x100f}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x12, r4, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = io_uring_setup(0x662, &(0x7f0000001740)={0x0, 0x8abd, 0x800, 0x0, 0x141}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) syz_clone(0x202000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000100), 0xffffffe3, 0x4004840, 0x0, 0xfffffffffffffe1b) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000000680)={0x1, 0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000100)=""/171, 0xab}], &(0x7f0000000640)=[0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000007300)={0x0, 0x0, &(0x7f0000007280)=[{0x0}], 0x0, 0x1}, 0x20) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r8, &(0x7f0000002140)=""/17, 0x11, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000080)={0xfffffffffffffffb, {0x20, 0x40, 0x9, 0x86, 0x6}}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0xfe, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xfe}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.609727763s ago: executing program 2 (id=140): r0 = socket$inet6(0xa, 0x809, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @local}) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="01f5050023000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x1, 0x200488c1) 1.188508403s ago: executing program 2 (id=142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x80}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="20002db97000fbdbdf2514000000080007000100000065fe160084e3000005006c0000000000080016000100010008000d0004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40851}, 0x4014) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = semget$private(0x0, 0x3, 0x39c) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000040)=[0x40, 0x12]) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r4 = getpid() (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x14, 0x13, 0x1, 0x40000000, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x88}, 0x0) r6 = syz_pidfd_open(r4, 0x0) setitimer(0x0, &(0x7f00000000c0)={{}, {0x1}}, 0x0) (async) getitimer(0x0, &(0x7f0000001740)) (async) setns(r6, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x8, 0x1, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x20001e58, 0xb, 0x8, 0x5, 0x8, 0x6, 0x10000, 0xfffffff8]}) (async) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0585611, &(0x7f0000000580)={0x0, 0x5, 0x0, {0x0, @win={{0xfbc, 0x0, 0x9, 0x3fd}, 0x0, 0x5, 0x0, 0x2, 0x0, 0x4}}, 0x8}) (async) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[r10], &(0x7f00000000c0)=[0x2], &(0x7f0000000580)=[r9], &(0x7f0000000040), 0x0, 0x2000}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 1.129898304s ago: executing program 2 (id=144): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) getsockopt$inet6_opts(r2, 0x29, 0x36, 0xffffffffffffffff, &(0x7f0000000440)=0x43) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x24, 0x24, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4040840) mmap(&(0x7f00003e6000/0x4000)=nil, 0x4000, 0x1000004, 0x11, r0, 0x67819000) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000007c0), 0x82502, 0x0) ppoll(&(0x7f0000000980)=[{r6, 0x4104}], 0x1, 0x0, 0x0, 0x0) write$FUSE_STATX(r6, &(0x7f0000000b00)={0x130, 0xfffffffffffffffe, 0x0, {0x19, 0x38, 0x0, '\x00', {0x200, 0x7, 0x0, 0x4591, 0xee00, 0x0, 0x2000, '\x00', 0x7ff, 0x0, 0x0, 0x1, {0x7, 0x527}, {0x4, 0x45a}, {0x7}, {0x10, 0xe}, 0x7, 0x2, 0x618, 0x9}}}, 0x130) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x1, &(0x7f0000000240)={0x3, 0x7, 0xfffa, 0x4360}, 0x8, 0x10006, 0x7d, 0x0, 0x1, 0x101, 0x0}) 889.56709ms ago: executing program 2 (id=147): socket(0x10, 0x3, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x1c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) 827.216076ms ago: executing program 3 (id=150): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec", 0x95}], 0x1, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r10 = dup3(r9, r8, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_LINK(r10, 0x40044160, &(0x7f0000000000)=0x9) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38368acdbd78b248fed917f45def63613b132e9beda2ce70ccaa3fa51a293308620d484bfa49efbc07303a9d2419966d832c8b01f24f5053fc9bf35777b2755fa81b73255f602ee40fb219f6bffe21db04b42d73694d55ac97b25d7b236be26c56f28700555eea1f5f09102ae932285c5c763b21a6261a38048d4e67562bdb6f323ac98c523398edb14804f8ed917751e9c9bb9c2b24958cf4ebc60dbc30f179f9b9976348", @ANYRES16=r0, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r2, @ANYRESHEX=0x0], 0x30}}, 0x0) 729.519808ms ago: executing program 3 (id=151): syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="06d1965de441", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @private=0xa010102, @random="78d38f749836", @private=0xa010101}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @local}}, 0x27c0}, 0x90) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 727.054233ms ago: executing program 3 (id=152): socket(0x10, 0x803, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x47, &(0x7f00000001c0)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x11, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @gue={{0x2, 0x1, 0x0, 0x9}, "e7"}}}}}}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x400200, 0x0) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000000)) 725.157614ms ago: executing program 3 (id=153): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0x1}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 647.128295ms ago: executing program 3 (id=154): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x73, @dev={0xac, 0x14, 0x14, 0xfd}, 0x0, 0x2, 'lblcr\x00', 0x10}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000100)) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range(r3, r3, 0x2) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendto(r3, &(0x7f0000000200)="ce84a9bf5452ac5d0c884c6ce342c86aa275d723d64a3060d8c1", 0x1a, 0x10, &(0x7f00000002c0)=@ethernet={0x301, @broadcast}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth1_vlan\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r8 = landlock_create_ruleset(&(0x7f0000006f80)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000100)={0x1}, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000280)={0x1, 0x3}, 0x0) (async) close_range(r7, 0xffffffffffffffff, 0x0) (async) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x9, 0x6, 0xfffffffffffffffe, 0x9, 0x7, 0xb, 0x651, 0xfffffffffffffffc, 0x9657, 0x0, 0x7fffffff, 0x0, 0x1000000000000008, 0xb, 0x0, 0xcc0, 0x0, 0x1, 0x80007, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffd, 0x3, 0x2000000000000}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x22700}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40) 644.966421ms ago: executing program 1 (id=155): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)={0x1cc, 0x35, 0x400, 0x70bd2b, 0x25dfdbfc, {0xc}, [@generic="2fdd15203cd98d70e0bf1366599e5d3fe28bd10a87b6c121877f349c85922120d7f795250b1a90bf5e543b4899a3c77541e7652b33571587eec9c60ed30ef8faf76ae95c0e79dcfb74b8ea87e40f400a49917d0cb80fec004517b375bcb8cba19caf8d7e31ea86befb1d372adf", @nested={0x20, 0x123, 0x0, 0x1, [@typed={0x8, 0x54, 0x0, 0x0, @u32=0x5b}, @typed={0x8, 0x137, 0x0, 0x0, @ipv4=@local}, @typed={0xc, 0x137, 0x0, 0x0, @u64=0x2}]}, @nested={0x4, 0xb6}, @nested={0x124, 0x71, 0x0, 0x1, [@nested={0x4, 0x9e}, @typed={0x14, 0x14, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="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", @nested={0x4, 0x141}, @typed={0x8, 0x22, 0x0, 0x0, @ipv4=@empty}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x800}, 0x24048040) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x20, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008090}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x220, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff6}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "eafab5261867abba2420e5aa32996e368ae3d852e6ddbe8d46b4c78c048fe303ab3f97"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa}, @TIPC_NLA_NODE_ID={0xf9, 0x3, "959556d62783e4f6f1a41febc3319573a6f903f5d1e4e3d40e9fc6be2b8f1c5dad9b3259cce452b5c3034dcebd95e8ddea6aff365b88b9cde83841e24c5aba381bb67915a7542c4fe2a7d5a1e50a5d5553e87715cad0a4f90435e9cd043a159166bd5c45621b2d6b0e98c39c69403f287a7e1b0abd9f164fe6656b096fc752a2a4f1b4ec46b06b25ed120a5df30412791dcb04f6cd17cff397a0c6a5964c5c3f59eb160d0b6e0411d69cbba9b4e4874dc33d8c40a553bd109312fee3f69a9294eef11c2c2966612b9f1f8f9dfe1394fbaf069c0f559c726eb2b91f01c3e8859b1e117cb8577deb8f339b5f6b97583bb19e2feabad7"}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x74}]}]}, 0x220}}, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000340)='gfs2\x00', 0x0, &(0x7f0000000380)='acl') 642.30025ms ago: executing program 3 (id=156): sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000844) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x2, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x5, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000047c000004000000140001"], 0x2c}}, 0x8004) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1], &(0x7f0000000000)='GPL\x00', 0x3000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000380)={0x0, 0x1, 0x0, "ee4f6da8d2cf4011ac7b00", 0x43353039}) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r4, &(0x7f0000000300)="ca0e80", 0x3) write$char_usb(r4, &(0x7f0000002600)="b56511e72c6cba780ce701ed0b2db27a336692892a6491e2488652ff00c468d353d809d5b20d8ee0f9fefa6cd7bd1036ed25f0e37053d291887c707a892884c2b4aa2ebac156ef8288264449eea05c4f51c3bb4355eb108744fe34e5d0e851d51a855854135f04dd5d854459226f090b6f0d6135e8f2824eed7469236cad2251116a381d8cd30bae59c1fe71e028a667cb", 0x91) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f00000000c0)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000003c0)="3bbf204e810a6d4a4db8b868ef400c67860f9e95639ca48ff9b967b8b292c9587bcb90eb03ac89043d3125195c639ba9690e09b431e9b1f4e299704d0218b8577f5de74b9269df4961dcadaa6fa06918de6b73716cdfd4695467416a4031e4c87e87766b2a6f78d3e5c3179b4debb03b75d475a7443e74ebb62919f66fa63afde3e9e39d34676a76efff6c423332b2f6c2f8e3119ca3ace8a0b3d54bbbd71b39fc780a704d8597e76df02d50a56b8fe7e7f4710fba1692ad05911d70a9050b311d14b583cc412cdc50b95fea22408d8116bcb7fbcb64936f9f596c6d64c320", 0xdf, 0xc880, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) 639.935857ms ago: executing program 1 (id=157): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000380)={0x0, 0x334e, 0x10000, 0x3, 0x312}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000380)=[{0x2, 0xffff}], 0x1) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000100)=[0x81]) semtimedop(r3, &(0x7f0000000000)=[{}, {}], 0x2, 0x0) semctl$IPC_RMID(r3, 0x0, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7, 0x0, {0x0, 0x0, r0}}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) io_uring_enter(r0, 0x79af, 0x7a5a, 0x20, &(0x7f0000000080)={[0x3ff]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r6}, 0x18) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r11, 0x0, 0x39000, 0x0) splice(r10, 0x0, r7, 0x0, 0x8000, 0x0) write$binfmt_elf64(r9, &(0x7f0000000200)=ANY=[], 0xfffffe3e) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 89.687512ms ago: executing program 4 (id=158): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0x5, 0x100000000, 0xffffffffffffffff}) (async) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x66000300) 0s ago: executing program 4 (id=159): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x50, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x4, 0xfff8, 0x66, 0x7, 0x0, 0x84, 0x4, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x3e) (async) keyctl$chown(0x4, r0, 0xee01, 0xee01) (async) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='.\x00', &(0x7f0000000900)='erofs\x00', 0x30c38, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x2) (async) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x4) (async) keyctl$setperm(0x5, r0, 0xd012117) (async) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x0) keyctl$read(0xb, r0, &(0x7f0000000100)=""/173, 0xad) keyctl$clear(0x3, r0) kernel console output (not intermixed with test programs): [ 38.170076][ T40] audit: type=1400 audit(1757302567.624:59): avc: denied { write } for pid=5872 comm="sh" path="pipe:[2628]" dev="pipefs" ino=2628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.179837][ T40] audit: type=1400 audit(1757302567.624:60): avc: denied { rlimitinh } for pid=5872 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.187223][ T40] audit: type=1400 audit(1757302567.624:61): avc: denied { siginh } for pid=5872 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:11063' (ED25519) to the list of known hosts. [ 39.017617][ T40] audit: type=1400 audit(1757302568.484:62): avc: denied { name_bind } for pid=5880 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.034180][ T40] audit: type=1400 audit(1757302568.504:63): avc: denied { write } for pid=5881 comm="sh" path="pipe:[2647]" dev="pipefs" ino=2647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.045847][ T40] audit: type=1400 audit(1757302568.514:64): avc: denied { execute } for pid=5881 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.052346][ T40] audit: type=1400 audit(1757302568.514:65): avc: denied { execute_no_trans } for pid=5881 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.955733][ T40] audit: type=1400 audit(1757302570.424:66): avc: denied { mounton } for pid=5881 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 40.958186][ T5881] cgroup: Unknown subsys name 'net' [ 41.096267][ T5881] cgroup: Unknown subsys name 'cpuset' [ 41.100240][ T5881] cgroup: Unknown subsys name 'rlimit' [ 41.322703][ T5885] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.032342][ T5881] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.178925][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 45.178935][ T40] audit: type=1400 audit(1757302574.644:80): avc: denied { execmem } for pid=5960 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.391609][ T40] audit: type=1400 audit(1757302574.854:81): avc: denied { create } for pid=5964 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.400733][ T40] audit: type=1400 audit(1757302574.854:82): avc: denied { read write } for pid=5964 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.408777][ T40] audit: type=1400 audit(1757302574.854:83): avc: denied { open } for pid=5964 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.415976][ T40] audit: type=1400 audit(1757302574.864:84): avc: denied { ioctl } for pid=5964 comm="syz-executor" path="socket:[5795]" dev="sockfs" ino=5795 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.433796][ T5971] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.438567][ T5977] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.441829][ T5977] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.445369][ T5977] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.448750][ T5980] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.451157][ T5969] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.451671][ T5980] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.454399][ T5969] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.456081][ T5980] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.458189][ T5969] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.462599][ T5969] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.466525][ T5978] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.467584][ T40] audit: type=1400 audit(1757302574.944:85): avc: denied { read } for pid=5964 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.468622][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.471725][ T5977] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.477097][ T5330] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.477165][ T40] audit: type=1400 audit(1757302574.944:86): avc: denied { open } for pid=5964 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.477188][ T40] audit: type=1400 audit(1757302574.944:87): avc: denied { mounton } for pid=5964 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.478954][ T5977] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.480712][ T5330] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.482770][ T5977] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.489493][ T5330] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.496778][ T5977] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.698940][ T40] audit: type=1400 audit(1757302575.164:88): avc: denied { module_request } for pid=5964 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.728660][ T5964] chnl_net:caif_netlink_parms(): no params data found [ 45.751568][ T5965] chnl_net:caif_netlink_parms(): no params data found [ 45.780282][ T5974] chnl_net:caif_netlink_parms(): no params data found [ 45.876124][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.879149][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.881526][ T5964] bridge_slave_0: entered allmulticast mode [ 45.885059][ T5964] bridge_slave_0: entered promiscuous mode [ 45.895480][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.897712][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.899941][ T5964] bridge_slave_1: entered allmulticast mode [ 45.902490][ T5964] bridge_slave_1: entered promiscuous mode [ 46.007456][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.009697][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.012018][ T5965] bridge_slave_0: entered allmulticast mode [ 46.015870][ T5965] bridge_slave_0: entered promiscuous mode [ 46.021518][ T5964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.040954][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.044702][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.046913][ T5974] bridge_slave_0: entered allmulticast mode [ 46.049468][ T5974] bridge_slave_0: entered promiscuous mode [ 46.055339][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.057621][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.059913][ T5965] bridge_slave_1: entered allmulticast mode [ 46.062474][ T5965] bridge_slave_1: entered promiscuous mode [ 46.079248][ T5964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.082348][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.085551][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.088676][ T5974] bridge_slave_1: entered allmulticast mode [ 46.092580][ T5974] bridge_slave_1: entered promiscuous mode [ 46.096412][ T5972] chnl_net:caif_netlink_parms(): no params data found [ 46.160468][ T5965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.212492][ T5965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.218205][ T5964] team0: Port device team_slave_0 added [ 46.221868][ T5974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.227974][ T5974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.254102][ T5964] team0: Port device team_slave_1 added [ 46.322996][ T5974] team0: Port device team_slave_0 added [ 46.360000][ T5965] team0: Port device team_slave_0 added [ 46.376350][ T5974] team0: Port device team_slave_1 added [ 46.378372][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.380735][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.382976][ T5972] bridge_slave_0: entered allmulticast mode [ 46.385838][ T5972] bridge_slave_0: entered promiscuous mode [ 46.390553][ T5965] team0: Port device team_slave_1 added [ 46.392976][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.396006][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.404926][ T5964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.434525][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.436801][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.439042][ T5972] bridge_slave_1: entered allmulticast mode [ 46.441573][ T5972] bridge_slave_1: entered promiscuous mode [ 46.469889][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.472128][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.480282][ T5964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.488445][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.490639][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.498645][ T5974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.545609][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.548510][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.559086][ T5965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.564078][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.566161][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.575046][ T5974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.581790][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.586196][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.589068][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.600060][ T5965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.624874][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.660708][ T5972] team0: Port device team_slave_0 added [ 46.679548][ T5964] hsr_slave_0: entered promiscuous mode [ 46.681889][ T5964] hsr_slave_1: entered promiscuous mode [ 46.688178][ T5972] team0: Port device team_slave_1 added [ 46.804479][ T5965] hsr_slave_0: entered promiscuous mode [ 46.806943][ T5965] hsr_slave_1: entered promiscuous mode [ 46.809050][ T5965] debugfs: 'hsr0' already exists in 'hsr' [ 46.810855][ T5965] Cannot create hsr debugfs directory [ 46.826005][ T5974] hsr_slave_0: entered promiscuous mode [ 46.828885][ T5974] hsr_slave_1: entered promiscuous mode [ 46.830943][ T5974] debugfs: 'hsr0' already exists in 'hsr' [ 46.832763][ T5974] Cannot create hsr debugfs directory [ 46.835932][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.838031][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.845892][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.867335][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.869873][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.878833][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.024279][ T5972] hsr_slave_0: entered promiscuous mode [ 47.026405][ T5972] hsr_slave_1: entered promiscuous mode [ 47.028330][ T5972] debugfs: 'hsr0' already exists in 'hsr' [ 47.030097][ T5972] Cannot create hsr debugfs directory [ 47.264310][ T5964] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.274483][ T5964] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.295543][ T5964] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.318690][ T5964] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.343264][ T5965] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.347956][ T5965] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.354322][ T5965] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.367996][ T5965] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.424915][ T5974] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.434210][ T5974] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.440502][ T5974] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.446426][ T5974] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.464169][ T5973] Bluetooth: hci0: command tx timeout [ 47.515354][ T5972] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.519844][ T5972] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.524349][ T5972] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.529776][ T5972] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.544035][ T5973] Bluetooth: hci2: command tx timeout [ 47.545919][ T5973] Bluetooth: hci1: command tx timeout [ 47.550166][ T5964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.553531][ T5977] Bluetooth: hci3: command tx timeout [ 47.558161][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.611240][ T5965] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.627622][ T5964] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.640676][ T5974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.647585][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.650493][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.664628][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.667271][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.676752][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.679768][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.690069][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.692224][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.701403][ T5974] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.719500][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.721737][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.741062][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.744050][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.769638][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.822944][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.835668][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.838584][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.847472][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.850449][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.853688][ T40] audit: type=1400 audit(1757302577.324:89): avc: denied { sys_module } for pid=5965 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.939884][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.976541][ T5964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.987257][ T5974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.007739][ T5965] veth0_vlan: entered promiscuous mode [ 48.020155][ T5965] veth1_vlan: entered promiscuous mode [ 48.026386][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.043288][ T5964] veth0_vlan: entered promiscuous mode [ 48.062246][ T5974] veth0_vlan: entered promiscuous mode [ 48.067474][ T5964] veth1_vlan: entered promiscuous mode [ 48.075266][ T5974] veth1_vlan: entered promiscuous mode [ 48.082830][ T5965] veth0_macvtap: entered promiscuous mode [ 48.088249][ T5965] veth1_macvtap: entered promiscuous mode [ 48.106561][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.109495][ T5972] veth0_vlan: entered promiscuous mode [ 48.117196][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.127678][ T5972] veth1_vlan: entered promiscuous mode [ 48.131646][ T5964] veth0_macvtap: entered promiscuous mode [ 48.144293][ T1177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.147630][ T1177] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.151477][ T5974] veth0_macvtap: entered promiscuous mode [ 48.156043][ T5964] veth1_macvtap: entered promiscuous mode [ 48.159285][ T1177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.161935][ T1177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.169524][ T5974] veth1_macvtap: entered promiscuous mode [ 48.187943][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.191836][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.205534][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.212585][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.221369][ T5972] veth0_macvtap: entered promiscuous mode [ 48.229929][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.235098][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.239571][ T5972] veth1_macvtap: entered promiscuous mode [ 48.252475][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.255568][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.261399][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.269217][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.272505][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.290552][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.294850][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.301215][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.322350][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.328218][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.333698][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.336453][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.346539][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.349178][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.373913][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.376241][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.383102][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.385675][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.405034][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.407807][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.434189][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.436614][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.447446][ T5974] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.465567][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.471457][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.499861][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.502387][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.510530][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.513949][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.582307][ T6065] bridge_slave_0: left allmulticast mode [ 48.585496][ T6065] bridge_slave_0: left promiscuous mode [ 48.588302][ T6065] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.599332][ T6065] bridge_slave_1: left allmulticast mode [ 48.601075][ T6065] bridge_slave_1: left promiscuous mode [ 48.602939][ T6065] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.616383][ T6065] bond0: (slave bond_slave_0): Releasing backup interface [ 48.632503][ T6074] binder: 6070:6074 ioctl c018620b 0 returned -14 [ 48.634724][ T6065] bond0: (slave bond_slave_1): Releasing backup interface [ 48.648777][ T6065] team0: Port device team_slave_0 removed [ 48.658962][ T6065] team0: Port device team_slave_1 removed [ 48.662305][ T6065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.665803][ T6065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.671619][ T6065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.676009][ T6065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.709150][ T6071] team0: Mode changed to "loadbalance" [ 48.720160][ T6088] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 48.788202][ T6088] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 48.851087][ T6102] openvswitch: netlink: Unknown key attributes 2 [ 48.880459][ T6104] netlink: 52 bytes leftover after parsing attributes in process `syz.1.15'. [ 48.962747][ T6112] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 48.964873][ T6112] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 48.973628][ T6112] vhci_hcd vhci_hcd.0: Device attached [ 48.976333][ T6113] vhci_hcd: unknown pdu 2 [ 48.976480][ T6110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18'. [ 48.984028][ T60] vhci_hcd: stop threads [ 48.985480][ T60] vhci_hcd: release socket [ 48.986861][ T60] vhci_hcd: disconnect device [ 49.124549][ T6119] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.170661][ T6122] syz.1.22 uses obsolete (PF_INET,SOCK_PACKET) [ 49.544708][ T5977] Bluetooth: hci0: command tx timeout [ 49.624246][ T5977] Bluetooth: hci3: command tx timeout [ 49.625973][ T5977] Bluetooth: hci1: command tx timeout [ 49.627767][ T5977] Bluetooth: hci2: command tx timeout [ 49.647904][ T6133] 9p: Unknown uid 00000000004294967295 [ 49.655665][ T6132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.658602][ T6132] batadv_slave_0: entered promiscuous mode [ 49.716730][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 49.740916][ T6143] kAFS: Can only specify source 'none' with -o dyn [ 49.863128][ T6156] mmap: syz.2.30 (6156) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.889698][ T6156] nvme_fabrics: missing parameter 'transport=%s' [ 49.891848][ T6156] nvme_fabrics: missing parameter 'nqn=%s' [ 50.263537][ T6020] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.427814][ T6020] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 250, changing to 11 [ 50.431181][ T6020] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 50.437247][ T6020] usb 5-1: New USB device found, idVendor=046d, idProduct=4101, bcdDevice= 0.40 [ 50.440697][ T6020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.443362][ T6020] usb 5-1: Product: చ [ 50.444768][ T6020] usb 5-1: SerialNumber: ⬆ᇨ涑ᣙ㘝淏푧㸲率껈ꏏ䐏ᬅ쪗ᮤ偂⯧⣤䀹⨊逓⌾惈⿊㘩Ⱡ恢瞒ᤁ切뺱최禦᪋췓ጐ庙瓮᥷龾ꄈ澓쑂爣癷ῴ뺖腷劉ꔓ亃묁燉狛 [ 50.697074][ T6020] usbhid 5-1:1.0: can't add hid device: -71 [ 50.699113][ T6020] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 50.702700][ T6020] usb 5-1: USB disconnect, device number 2 [ 50.708494][ T40] kauditd_printk_skb: 109 callbacks suppressed [ 50.708506][ T40] audit: type=1400 audit(1757302580.184:199): avc: denied { ioctl } for pid=6185 comm="syz.3.37" path="socket:[10744]" dev="sockfs" ino=10744 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 50.721327][ T40] audit: type=1400 audit(1757302580.184:200): avc: denied { write } for pid=6185 comm="syz.3.37" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 50.736900][ T40] audit: type=1400 audit(1757302580.184:201): avc: denied { write } for pid=6189 comm="syz.0.39" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 50.744559][ T40] audit: type=1400 audit(1757302580.184:202): avc: denied { ioctl } for pid=6189 comm="syz.0.39" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 50.751850][ T40] audit: type=1400 audit(1757302580.184:203): avc: denied { write } for pid=6185 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.759765][ T40] audit: type=1400 audit(1757302580.184:204): avc: denied { create } for pid=6185 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 50.768705][ T40] audit: type=1400 audit(1757302580.184:205): avc: denied { read } for pid=6191 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.774790][ T40] audit: type=1400 audit(1757302580.244:206): avc: denied { bind } for pid=6191 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.781029][ T40] audit: type=1400 audit(1757302580.244:207): avc: denied { node_bind } for pid=6191 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 50.787177][ T40] audit: type=1400 audit(1757302580.244:208): avc: denied { setopt } for pid=6195 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.970831][ T6215] overlay: Unknown parameter 'obj_role' [ 50.973574][ T6207] binder: BC_ATTEMPT_ACQUIRE not supported [ 50.975391][ T6207] binder: 6206:6207 ioctl c0306201 200000000300 returned -22 [ 51.178861][ T6226] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 51.180936][ T6226] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 51.184076][ T6226] vhci_hcd vhci_hcd.0: Device attached [ 51.312770][ T1177] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.373667][ T6123] vhci_hcd: vhci_device speed not set [ 51.389468][ T1177] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.434041][ T6123] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 51.445319][ T1177] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.513320][ T1177] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.580237][ T5977] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.583695][ T5977] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.587412][ T5977] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.591743][ T5977] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.597392][ T5977] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.625375][ T5977] Bluetooth: hci0: command tx timeout [ 51.633517][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 51.637444][ T1177] bridge_slave_1: left allmulticast mode [ 51.639285][ T1177] bridge_slave_1: left promiscuous mode [ 51.641431][ T1177] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.648880][ T1177] bridge_slave_0: left allmulticast mode [ 51.651272][ T1177] bridge_slave_0: left promiscuous mode [ 51.656129][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.704196][ T5977] Bluetooth: hci2: command tx timeout [ 51.704206][ T5973] Bluetooth: hci3: command tx timeout [ 51.783477][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 51.787491][ T10] usb 7-1: config 0 has no interfaces? [ 51.792691][ T10] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 51.797324][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.800463][ T10] usb 7-1: Product: syz [ 51.802090][ T10] usb 7-1: Manufacturer: syz [ 51.807733][ T10] usb 7-1: SerialNumber: syz [ 51.811830][ T10] usb 7-1: config 0 descriptor?? [ 51.900450][ T1177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.904625][ T1177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.908479][ T1177] bond0 (unregistering): Released all slaves [ 52.021747][ T6226] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 52.023852][ T6226] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 52.027586][ T6226] vhci_hcd vhci_hcd.0: Device attached [ 52.031500][ T6226] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(8) [ 52.033560][ T6226] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 52.039617][ T6226] vhci_hcd vhci_hcd.0: Device attached [ 52.041586][ T6256] vhci_hcd: connection closed [ 52.041767][ T12] vhci_hcd: stop threads [ 52.046202][ T6227] vhci_hcd: connection reset by peer [ 52.048461][ T1476] usb 7-1: USB disconnect, device number 2 [ 52.050914][ T6253] vhci_hcd: connection closed [ 52.052246][ T12] vhci_hcd: release socket [ 52.056780][ T12] vhci_hcd: disconnect device [ 52.058296][ T12] vhci_hcd: stop threads [ 52.059606][ T12] vhci_hcd: release socket [ 52.061045][ T12] vhci_hcd: disconnect device [ 52.062918][ T12] vhci_hcd: stop threads [ 52.066161][ T12] vhci_hcd: release socket [ 52.067581][ T12] vhci_hcd: disconnect device [ 52.073683][ T6261] block nbd3: Unsupported socket: shutdown callout must be supported. [ 52.076725][ T6261] block nbd3: Unsupported socket: shutdown callout must be supported. [ 52.118971][ T6260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 52.128434][ T6232] chnl_net:caif_netlink_parms(): no params data found [ 52.142805][ T6269] netlink: 'syz.1.60': attribute type 4 has an invalid length. [ 52.260959][ T6232] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.263190][ T6232] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.266890][ T6232] bridge_slave_0: entered allmulticast mode [ 52.269675][ T6232] bridge_slave_0: entered promiscuous mode [ 52.290912][ T6282] program syz.3.63 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.316839][ T1177] hsr_slave_0: left promiscuous mode [ 52.318951][ T1177] hsr_slave_1: left promiscuous mode [ 52.320914][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.323133][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.327323][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.329682][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.379102][ T1177] veth1_macvtap: left promiscuous mode [ 52.380963][ T1177] veth0_macvtap: left promiscuous mode [ 52.381278][ T6282] syz.3.63 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 52.383032][ T1177] veth1_vlan: left promiscuous mode [ 52.383140][ T1177] veth0_vlan: left promiscuous mode [ 52.454595][ T6291] capability: warning: `syz.3.65' uses deprecated v2 capabilities in a way that may be insecure [ 52.458377][ T6291] __vm_enough_memory: pid: 6291, comm: syz.3.65, bytes: 21200181673984 not enough memory for the allocation [ 52.846032][ T1177] team0 (unregistering): Port device team_slave_1 removed [ 52.892496][ T1177] team0 (unregistering): Port device team_slave_0 removed [ 53.200499][ T6232] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.202766][ T6232] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.205072][ T6232] bridge_slave_1: entered allmulticast mode [ 53.207831][ T6232] bridge_slave_1: entered promiscuous mode [ 53.276708][ T6232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.282820][ T6232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.350341][ T6326] netlink: 'syz.1.76': attribute type 1 has an invalid length. [ 53.352251][ T6327] netlink: 'syz.1.76': attribute type 1 has an invalid length. [ 53.373183][ T6319] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.375677][ T6319] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.446762][ T6319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.532427][ T6232] team0: Port device team_slave_0 added [ 53.535913][ T6232] team0: Port device team_slave_1 added [ 53.544943][ T46] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.547847][ T46] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.576240][ T6337] tmpfs: Unknown parameter 'grpquoTaxb9{HxOdliJ㯡' [ 53.578831][ T46] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.600704][ T97] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.612566][ T6232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.615442][ T6232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.626546][ T6232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.633539][ T6232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.635640][ T6232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.639930][ T5973] Bluetooth: hci1: command tx timeout [ 53.643346][ T6232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.648798][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 53.692755][ T6232] hsr_slave_0: entered promiscuous mode [ 53.695630][ T6232] hsr_slave_1: entered promiscuous mode [ 53.697682][ T6232] debugfs: 'hsr0' already exists in 'hsr' [ 53.699486][ T6232] Cannot create hsr debugfs directory [ 53.703562][ T5973] Bluetooth: hci0: command tx timeout [ 53.784637][ T5973] Bluetooth: hci3: command tx timeout [ 53.784659][ T5977] Bluetooth: hci2: command tx timeout [ 53.805786][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.808937][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.814195][ T9] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 53.817368][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 53.819967][ T9] usb 7-1: SerialNumber: syz [ 53.864373][ T6232] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.868809][ T6232] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.872995][ T6232] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.877990][ T6232] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.915029][ T6232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.927390][ T6232] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.934492][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.937031][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.949484][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.952508][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.990136][ T6382] macvlan2: entered promiscuous mode [ 53.991820][ T6382] macvlan2: entered allmulticast mode [ 54.021827][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.86'. [ 54.025726][ T6386] netlink: 31 bytes leftover after parsing attributes in process `syz.3.86'. [ 54.029172][ T6386] netlink: 'syz.3.86': attribute type 3 has an invalid length. [ 54.032551][ T6386] netlink: 'syz.3.86': attribute type 2 has an invalid length. [ 54.035300][ T6386] netlink: 31 bytes leftover after parsing attributes in process `syz.3.86'. [ 54.078182][ T6232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.132326][ T6392] capability: warning: `syz.3.87' uses 32-bit capabilities (legacy support in use) [ 54.226723][ T6232] veth0_vlan: entered promiscuous mode [ 54.231282][ T6232] veth1_vlan: entered promiscuous mode [ 54.244181][ T6232] veth0_macvtap: entered promiscuous mode [ 54.250043][ T6232] veth1_macvtap: entered promiscuous mode [ 54.260180][ T9] usb 7-1: 0:2 : does not exist [ 54.261767][ T6232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.264310][ T9] usb 7-1: unit 6 not found! [ 54.265360][ T6232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.275552][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.276821][ T9] usb 7-1: USB disconnect, device number 3 [ 54.278882][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.280138][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.88'. [ 54.286025][ T1146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.288729][ T1146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.303687][ T6057] udevd[6057]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 54.333307][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.336338][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.351242][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.356060][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.393072][ T6411] program syz.4.53 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.398272][ T6411] program syz.4.53 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.519508][ T5977] Bluetooth: hci2: unexpected event 0x14 length: 20 > 6 [ 54.597073][ T6428] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 54.601906][ T6428] overlayfs: missing 'lowerdir' [ 54.641067][ T6435] fuse: Unknown parameter 'euid>00000000000000000000' [ 54.678492][ T6438] netlink: 60 bytes leftover after parsing attributes in process `syz.4.99'. [ 54.681454][ T6438] unsupported nlmsg_type 40 [ 54.684024][ T6438] netlink: 'syz.4.99': attribute type 1 has an invalid length. [ 54.702585][ T6438] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.707898][ T6438] team0: Port device bond1 added [ 54.719186][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 54.725453][ T6448] erspan0: entered promiscuous mode [ 54.809555][ T6458] Zero length message leads to an empty skb [ 55.012845][ T6475] netlink: 40 bytes leftover after parsing attributes in process `syz.1.111'. [ 55.016121][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.111'. [ 55.148051][ T6490] program syz.1.117 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.193500][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 55.363593][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 55.370533][ T9] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 55.373704][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 55.376582][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 55.380101][ T9] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 55.385187][ T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 55.388010][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.613475][ T9] usb 9-1: GET_CAPABILITIES returned 0 [ 55.615308][ T9] usbtmc 9-1:16.0: can't read capabilities [ 55.644693][ T6020] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 55.649680][ T6523] Bluetooth: MGMT ver 1.23 [ 55.652013][ T6523] netlink: 14 bytes leftover after parsing attributes in process `syz.3.126'. [ 55.665794][ T6523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.671499][ T6523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.676182][ T6523] bond0 (unregistering): Released all slaves [ 55.703522][ T5977] Bluetooth: hci1: command tx timeout [ 55.716331][ T40] kauditd_printk_skb: 107 callbacks suppressed [ 55.716340][ T40] audit: type=1400 audit(55.630:316): avc: denied { ioctl } for pid=6507 comm="syz.1.122" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.725951][ T40] audit: type=1400 audit(55.630:317): avc: denied { unmount } for pid=5964 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 55.744014][ T40] audit: type=1400 audit(55.660:318): avc: denied { mounton } for pid=6527 comm="syz.2.127" path="/24/file0" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.796542][ T6020] usb 6-1: unable to get BOS descriptor or descriptor too short [ 55.799816][ T6020] usb 6-1: not running at top speed; connect to a high speed hub [ 55.802884][ T6020] usb 6-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 55.807460][ T6020] usb 6-1: config 1 interface 0 has no altsetting 0 [ 55.811465][ T6020] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.815101][ T6020] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.818065][ T6020] usb 6-1: Product: syz [ 55.819543][ T6020] usb 6-1: Manufacturer: syz [ 55.821054][ T6020] usb 6-1: SerialNumber: syz [ 55.959468][ T6540] fuse: Unknown parameter 'fowner>00000000004294967295' [ 55.962748][ T40] audit: type=1400 audit(55.870:319): avc: denied { create } for pid=6538 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 55.969412][ T40] audit: type=1400 audit(55.870:320): avc: denied { ioctl } for pid=6538 comm="syz.2.131" path="socket:[11965]" dev="sockfs" ino=11965 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 56.006538][ T40] audit: type=1400 audit(55.920:321): avc: denied { read write } for pid=6541 comm="syz.2.132" name="virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.014634][ T40] audit: type=1400 audit(55.920:322): avc: denied { open } for pid=6541 comm="syz.2.132" path="/dev/virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.026093][ T6508] netlink: 'syz.1.122': attribute type 1 has an invalid length. [ 56.030010][ T40] audit: type=1400 audit(55.940:323): avc: denied { sqpoll } for pid=6541 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 56.048380][ T6508] bond1: (slave geneve2): making interface the new active one [ 56.051183][ T6508] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 56.054719][ T1146] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 56.057678][ T1146] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 56.061139][ T1146] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 56.067201][ T1177] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 56.092533][ T6508] syzkaller0: entered promiscuous mode [ 56.218940][ T6560] tmpfs: Bad value for 'mpol' [ 56.222168][ T6560] Bluetooth: MGMT ver 1.23 [ 56.574725][ T6123] vhci_hcd: vhci_device speed not set [ 56.696292][ T40] audit: type=1400 audit(56.610:324): avc: denied { ioctl } for pid=6573 comm="syz.3.141" path="socket:[14425]" dev="sockfs" ino=14425 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.847458][ T6568] warning: `syz.2.140' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 56.885222][ T6578] openvswitch: netlink: Duplicate or invalid key (type 0). [ 56.887566][ T6578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.900952][ T6020] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 56.909762][ T6020] usb 6-1: USB disconnect, device number 2 [ 57.031460][ T6586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.040963][ T6586] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 57.047987][ T6586] gretap1: entered promiscuous mode [ 57.051101][ T6586] bond0: (slave gretap1): Enslaving as a backup interface with an up link [ 57.134903][ T1146] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 57.242794][ T6592] netlink: 'syz.3.148': attribute type 1 has an invalid length. [ 57.254384][ T46] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 57.306227][ T6599] binder: 6598:6599 ioctl 40044160 200000000000 returned -22 [ 57.344503][ T5973] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.347468][ T5973] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.350246][ T5973] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.352823][ T5973] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.355916][ T5973] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.358167][ T40] audit: type=1400 audit(57.270:325): avc: denied { name_bind } for pid=6604 comm="syz.3.152" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 57.438661][ T6618] block nbd1: Attempted send on invalid socket [ 57.440810][ T6618] I/O error, dev nbd1, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 57.445344][ T6618] gfs2: error -5 reading superblock [ 57.451161][ T6619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=6619 comm=syz.3.156 [ 57.456150][ T6619] netlink: 'syz.3.156': attribute type 1 has an invalid length. [ 57.472388][ T6602] chnl_net:caif_netlink_parms(): no params data found [ 57.553952][ T6602] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.556792][ T6602] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.559661][ T6602] bridge_slave_0: entered allmulticast mode [ 57.562901][ T6602] bridge_slave_0: entered promiscuous mode [ 57.566386][ T6602] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.568772][ T6602] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.571152][ T6602] bridge_slave_1: entered allmulticast mode [ 57.573939][ T6602] bridge_slave_1: entered promiscuous mode [ 57.605924][ T6602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.610939][ T6602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.641993][ T6602] team0: Port device team_slave_0 added [ 57.645591][ T6602] team0: Port device team_slave_1 added [ 57.674776][ T6602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.677690][ T6602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.688293][ T6602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.693000][ T6602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.695205][ T6602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.703212][ T6602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.739615][ T6602] hsr_slave_0: entered promiscuous mode [ 57.741932][ T6602] hsr_slave_1: entered promiscuous mode [ 57.744096][ T6602] debugfs: 'hsr0' already exists in 'hsr' [ 57.745919][ T6602] Cannot create hsr debugfs directory [ 57.783537][ T5977] Bluetooth: hci1: command tx timeout [ 57.850038][ T6602] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.917242][ T6602] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.964496][ T6013] usb 9-1: USB disconnect, device number 2 [ 57.977342][ T6602] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.043514][ T6602] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.104538][ T6632] syzkaller1: entered promiscuous mode [ 58.107203][ T6632] syzkaller1: entered allmulticast mode [ 58.118528][ T6632] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 58.122271][ T6632] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 58.126221][ T6632] CPU: 1 UID: 0 PID: 6632 Comm: syz.4.159 Not tainted syzkaller #0 PREEMPT(full) [ 58.129069][ T6632] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.132402][ T6632] RIP: 0010:h5_recv+0x104/0x950 [ 58.133964][ T6632] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 51 7c 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 58.138426][ T6602] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.139937][ T6632] RSP: 0018:ffffc900036c7c00 EFLAGS: 00010293 [ 58.143951][ T6632] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887b123a [ 58.146404][ T6632] RDX: ffff888056408000 RSI: ffffffff887b127f RDI: 0000000000000005 [ 58.148888][ T6632] RBP: ffffc900036c7d88 R08: 0000000000000005 R09: 0000000000000000 [ 58.151370][ T6632] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 58.153834][ T6632] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb47e80 [ 58.156290][ T6632] FS: 00007f924d63b6c0(0000) GS:ffff8880d67b5000(0000) knlGS:0000000000000000 [ 58.159091][ T6632] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.161150][ T6632] CR2: 00007f522575ef98 CR3: 0000000058730000 CR4: 0000000000352ef0 [ 58.163639][ T6632] Call Trace: [ 58.164703][ T6632] [ 58.165636][ T6632] ? __pfx_h5_recv+0x10/0x10 [ 58.167093][ T6632] hci_uart_tty_receive+0x251/0x7e0 [ 58.168770][ T6632] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 58.170578][ T6632] tty_ioctl+0x580/0x1680 [ 58.171959][ T6632] ? __pfx_tty_ioctl+0x10/0x10 [ 58.173475][ T6632] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 58.175608][ T6632] ? hook_file_ioctl_common+0x145/0x410 [ 58.177309][ T6632] ? selinux_file_ioctl+0x180/0x270 [ 58.178988][ T6632] ? selinux_file_ioctl+0xb4/0x270 [ 58.180559][ T6632] ? __pfx_tty_ioctl+0x10/0x10 [ 58.182063][ T6632] __x64_sys_ioctl+0x18b/0x210 [ 58.183590][ T6632] do_syscall_64+0xcd/0x4c0 [ 58.184987][ T6632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.186838][ T6632] RIP: 0033:0x7f924c78ebe9 [ 58.188246][ T6632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.194165][ T6632] RSP: 002b:00007f924d63b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.196744][ T6632] RAX: ffffffffffffffda RBX: 00007f924c9c6090 RCX: 00007f924c78ebe9 [ 58.199201][ T6632] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000006 [ 58.201616][ T6632] RBP: 00007f924c811e19 R08: 0000000000000000 R09: 0000000000000000 [ 58.204070][ T6632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.206478][ T6632] R13: 00007f924c9c6128 R14: 00007f924c9c6090 R15: 00007ffce1e39ab8 [ 58.208932][ T6632] [ 58.209869][ T6632] Modules linked in: [ 58.211217][ C1] vkms_vblank_simulate: vblank timer overrun [ 58.213596][ T6632] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 58.215443][ T6632] RIP: 0010:h5_recv+0x104/0x950 [ 58.217675][ T6632] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 51 7c 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 58.229656][ T6602] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.233932][ T6632] RSP: 0018:ffffc900036c7c00 EFLAGS: 00010293 [ 58.236220][ T6632] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887b123a [ 58.238641][ T6632] RDX: ffff888056408000 RSI: ffffffff887b127f RDI: 0000000000000005 [ 58.241061][ T6632] RBP: ffffc900036c7d88 R08: 0000000000000005 R09: 0000000000000000 [ 58.250602][ T6632] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 58.253117][ T6632] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb47e80 [ 58.255780][ T6632] FS: 00007f924d63b6c0(0000) GS:ffff8880d67b5000(0000) knlGS:0000000000000000 [ 58.258559][ T6632] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.260589][ T6632] CR2: 00007f522575ef98 CR3: 0000000058730000 CR4: 0000000000352ef0 [ 58.263102][ T6632] Kernel panic - not syncing: Fatal exception [ 58.265589][ T6632] Kernel Offset: disabled [ 58.266957][ T6632] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:36:27 Registers: info registers vcpu 0 CPU#0 RAX=ffffc90005ad0001 RBX=ffffc90005acfad8 RCX=ffffc90005ad0001 RDX=ffffc90005acfae0 RSI=ffffc90005acfaa8 RDI=ffffc90000007a58 RBP=0000000000000001 RSP=ffffc900000079d8 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc90000007a48 R11=00000000000516f4 R12=ffffc90000007a98 R13=ffffc90000007a48 R14=ffffc90005acfad8 R15=ffffc90000007a7c RIP=ffffffff816ae889 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555590598500 ffffffff 00c00000 GS =0000 ffff8880d66b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f924d63af98 CR3=000000004ccdd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffff8 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe0c7ad2f0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee4a212e1b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee4a212e13 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee4a212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee4a212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee4a212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee4a212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee4a212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee4a212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e00656369766564 5f77656e2f6d6973 76656474656e2f73 75622f7379732f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b0040464c534041 5f52404b0a484c56 53404151404b0a56 50470a565c560a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85646a35 RDI=ffffffff9b1150a0 RBP=ffffffff9b115060 RSP=ffffc900036c7600 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b115060 R15=ffffffff856469d0 RIP=ffffffff85646a5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f924d63b6c0 ffffffff 00c00000 GS =0000 ffff8880d67b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f522575ef98 CR3=0000000058730000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000014 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce1e39fc6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce1e39fc6 00007ffce1e39fcc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f924c812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f924c812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f924c812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f924c812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f924c812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f924c812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f924c9974a8 00007f924c9974a0 00007f924c997498 00007f924c997470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f924d4fd100 00007f924c997460 00007f924c997478 00007f924c9974c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f924c9974b8 00007f924c9974b0 00007f924c9974a8 00007f924c9974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a541e80 RCX=ffffffff81af8f21 RDX=ffff8880297ea440 RSI=ffffffff81af8efb RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000675f888 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=ffffed100d4a83d1 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff81af8efd RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f924d619f98 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000400001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb8db1f86 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb8db1f86 00007ffeb8db1f8c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c8a412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c8a412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c8a412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c8a412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c8a412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c8a412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 58c992b2b867b9f9 8fa49c63959e0f86 670c40ef68b8b84d 4a6d0a814e20bf3b ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 57b818024d7099e2 f4b1e931b4090e69 a99b635c1925313d 0489ac03eb90cb7b ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c8e431406a416754 69d4df6c71736bde 1869a06faaaddc61 49df69924be75d7f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fd3aa66ff61929b6 eb743e44a775d475 3bb0eb4d9b17c3e5 d3786f2a6b76877e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20c3646d6c599f6f 9364cbfbb7bc1681 8d4022ea5fb950dc 2c41cc83b5141d31 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0b05a9701d9105ad 9216ba0f71f4e7e7 8f6ba5502df06de7 97854d700a78fc39 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1bd7bb4bd5b3a0e8 aca39c11e3f8c2f6 b23233426cffef76 6a67349de3e9e3fd ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3aa66ff61929b6eb 743e44a775d4753b b0eb4d9b17c3e5d3 786f2a6b76877ec8 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff88806a73b540 RCX=ffffffff81afa673 RDX=0000000000000001 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90000157d08 RSP=ffffc90000157bb8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1cb981e R12=1ffff9200002af80 R13=0000000000000002 R14=0000000000000001 R15=ffffed100d4e76a9 RIP=ffffffff81bb8a1a RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f924d61ad58 CR3=000000004f520000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb8db1e00 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb8db1f86 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb8db1f86 00007ffeb8db1f8c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c8a412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c8a412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c8a412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c8a412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c8a412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c8a412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000