last executing test programs: 2.588398336s ago: executing program 0 (id=195): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) getgid() bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/389], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.436388637s ago: executing program 0 (id=196): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="1800000072006bcdb13fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000240), 0x41000004, &(0x7f0000000040)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) rt_tgsigqueueinfo(r2, r2, 0x8, &(0x7f00000002c0)={0x23, 0x7, 0xfffffbff}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r4) sendmmsg(r4, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000640)="677aecfe797f8d51d044ffe055cad917bec425f37e820d7bf3139d969938bb9555deb072de644dddf4e6f6a34f8321785db05d761836e6168b5fcf9f0d36b713fb378e75f0d11d21e17c24142f4c7a661f8c732a0c4b99aae62873e2918d478bcfcb4574028110654d", 0xb}, {&(0x7f0000001700)="3bfaf02721041965812a2356457bdc49d359b0ca77b8e8", 0x17}], 0x2, &(0x7f00000027c0)=ANY=[@ANYBLOB="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"], 0x1118}}, {{&(0x7f0000000440)=@hci, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="40f89449f592700b61795d424d729652c635c99468324abc6c876de3b8b9dbe984018f74a26be2bf33d5d059f1e1e9228a069dfca3bef7c40e1f8ee914ac75f177f6d39a267a3b131cfdbd9ab41b32b800d392d44dea8a3e9ca73ddfb174de12e2b3deebeff08553a21af25d1d3d9ddac3456f65fc3077323191c4608e8f661625eac40974c8f30af796ade15ecb979e21393094eb7b3158ca0ea256f29814bf9e0fd3816301e4078d6f316d4c461971de3698c96ac1691bddae9fe7a6b3189aabee8a50267001cda5"}], 0x0, &(0x7f00000006c0)=[{0x0, 0x10a, 0x2, "cbac0db0bfc9d454e2be1cf2a02e55c9133353c09825400be5aea3b55a5ac037b8cb223d58902faf93e27488f7f4c47b607a368a5c340357f1724ed1612b80aae5743047008196fdf21964ecb65c1399f11dd765e9fa59c06e2e77a5f2be69dbb5b2"}, {0x0, 0xff, 0xb69, "55f02f05e9e9bbe6a3f5363217300b6fdca06800bd4bf01fcd67628cff31b6bf9b1455badc6c74826a85cbc17bcb297b907d7a3012705c48e08671cf8eb40ad0e6dd835f68a914c400b8aa99c072e6c6de504baac3d18a236d21b3148fcc2c04f87dc0be1daa30022e657b913a99bf32c813f410d897bf7cfbc6c20d42ba93079f5e67eb39afe088d9ca17100bbf405aae"}, {0x0, 0x111, 0x400, "83f1fdd7262363dc653fc33a2f5f58b7c0050410f9bb08d567f97872c6c044adc89ae6b1a8edec4e1e9da16a08beaa245ae394343fa42be1c622ffd1"}, {0x0, 0x10a, 0x9, "ad7e9a672d2809d28fe4e201be73c17979749b946d0bb477c7950f15d418d3b4b1ffdbc7b80ea2b932c32b4171e1527e842847960ed46c352ec761269edfe801e25e009862b6202d97559499e80a5780dc28c0252d5e530acc50ef6e945e50b14f006c623d320211786c8a57c9c7abeba2ee51bec13af12fa06c5a986001f26c49675d86a556262286a6631a178e361967fb"}]}}, {{&(0x7f00000005c0)=@llc={0x1a, 0x103, 0xfd, 0x7, 0x80, 0xc7, @local}, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000900)="efeff002d51534094db902c764554c4aa21caa3178d06f6c2f2ff131053357d8d8f9cd6e2c392406e818862a3942b43f91e3a5f7dc77335b50cd859b8c35c450b904b4ac357480549601e45af5ab3bac4283a4711a0925a03c68fe436d486fbc0fe625c4301237cad2a6153a119adc9f"}, {&(0x7f0000000980)="2c21efcf4c8de3f5f1098f0b764bf016422ab7efbdd25b8908e05c4aeeff47ba0690f2e1d183531848e2df979654d085194eb2a833da272ee5c62219e59c8dcbb0bf0f59494911081ba09cf77b2d737070fc3b1cadbaf6b0"}, {&(0x7f0000000a00)="3861b6702447d178c975016af22a94577d530db8b221b85d22b52be3f1f6d36f7fc52aac02c3fa98a1192d314bc97f5f7f96828ba517bb88789da10131f8a3c45f3d289989b075bbdc125a9964c599ee79ba6c553139fea4d467e9efee0fdb3635863d538a0708ec6bec1add285fc2f8beaf0553f1e7b1707ed2bab7b8bf4b6cbe9d1ad115c06c76cf2f5fc7b8584875b6b9353acbe1f50c07fdc75fcbdaa8ac0ba9ec6f3fdc853517"}, {&(0x7f0000000ac0)="afeaa10a124e6612fe06f5bbd581f57acf440fa730767f099b3b9c0d4c23fc77876ace035c1c0c3d43b0fbce639dc1160197e34a0dc09f265f69fc4f711bf553a1a3815a8f2599135461bfd4e3711dfec208f76855061de6a6349c3dadfdff387ad91c23b80dceec9feba8f816a95e034c512b2cb933743a5008b652462c0dabc019b6f89cde18357953b2692c"}], 0x0, &(0x7f0000000bc0)=[{0x0, 0x102, 0xcf, "5140488ca41f496186992f583af60a0e1cdd04"}, {0x0, 0x118, 0x60000000, "18bc639e0357e90c37db17c78582fa2d919c2207d0ec2b9678f4d8858f5a6f906834fca34ab0685988ddad8d0ad3ead5a07f1ce8618f1cad95bf59d6e06c43b26478362db991d10e0084e3a2b9dd6b16a93bff604bb8e82d5649a3320b0adb7d2817254e7b165b7ad4f7ea7a34b6d0af1c62e325e1d17d160aaf9f9fb0ae5dba206fa006c0596edf52071ca6c4eb8f7c341944c10a8db33e5dfae2df"}, {0x0, 0x10d, 0x8, "cc9702dfa0f63428d0ec8bfb805989405a356711b75489f330de8ac999fd774c2f30c3c30e03f9549ebb5e8520533c91863bcfde386be4e539620cb2761172fa22e82e5dcb240904ff4dbfc00b36f86231c982c33d0a539f0b6ed3831d48f7f17623a073a18893b09536bfcee7468ff92b588bfc06c3ca487c92cfaaca5452996b8b150e77632ba716f70905d5fed542532db8c6064716ba48a6b1b3d9b64d26290b274f2bae07196ae886cc62261bc86d084486c2372dc0e658819655dd89ab7be1eb064ff724f3bb4bfbfad1dd073a61c8387212bb90f422467e4bc2abde3a1af2ccc4e4da6a92a469c11e37ffd2"}, {0x0, 0x29, 0x3, "c5937cded171f52fbd50ab61f5ddf83532261116ec2457ff73c8795faa916fc4de39aff8f7e1f30f5e92831ef49739eefe42278baffe0e2f7a3d836235636250ed2c797a74f5e012e1cbf5784cbf45a50e467ed074d37af28b3d347bb1ca3da03dfbbdc044b1d17e54818f9129aa3f47"}, {0x0, 0x10a, 0x7, "dcd89b66e77cebdb9307a8af24f569153b3d1dfbe5bfcf14a9d59ecf4d29c6a60b663c4a2949494d62a2f58cb5b452f65e810cc556c38fb8a0981949499ff630ba8be0b683a4e96a657e04d4a4e35b4d48b928ee77f4a49d25c9b541f3d6c48bdf5193842480f79e1b8e7093eaa5e6ff1c8f7bcac3c69b34243afae7b0b2259ac446ae4408e2f84bf091a3a902a0cf9eac6951b7190093dd298a59238607f4de6dffb8755d494c5f91027fd1d46bb2f39360621fe1401cd5dac95e0a190d3122cfa3f5f40f6ee22e4b096dee81815a2a2620f3df8507703b8502a81e6fdcadd46a8c36963530b7"}, {0x0, 0x0, 0x3, "da9a292c387b1649840c07e56639e31b1cda1dd2cd1e7a596dc479e066ebd7e0307657c56d9d3f18248ee47f022ed5f9217780079835e187a4f887fdabf4ebb010668a09ea558046c4d4be0e78f15d49fd8d7a99dae0d8af920f3ce9bc417fc36a201676518c30fa5ea95d60a0e91f179036babe22bef8f0bf344156024e27b686688b8d2a56f5735ee29d4cb1ac2d16d7d8217b76a051814a63060e00ded4a2deb097cad5441e66b9feaced886306cc"}]}}, {{&(0x7f0000001000)=@pppoe={0x18, 0x0, {0x2, @multicast, 'veth1_to_team\x00'}}, 0x0, &(0x7f0000001480)=[{&(0x7f0000001080)="bb0471581b2a66cc64480a467d6e848883a99d2d03c7b314e451d6ddf10c8d61485fb52da5e200e60b89da7c75e710c890b87302e542ac7b32666e1b3ea3b163c168bc4647a3f73a6313db6dca88bc1f9e7962dc3173f83d936a9968842e7a550b"}, {&(0x7f0000001100)="58ce79679c3fb763c9203b438164833fe71134f83770b0747a7b953ec685c78668a9b4029683c53127a6b5edb1a385c6aa9931184328409e0a1a07884591ff16bc016df8afb31abda41d575fd10792612d1f38a20dcd53cab6255c358b1b7a8e3668ce8f8e826b1da9598ef3d092d5d678b99868ea98519fa70aaf229d2ee50b2e41ea9a94aca6053098608295343cb440aa9d6b8ea38f48d6abc0f45cc79edd4d7c3a1d15f912d318363d96e5df8468f737b9d6604eeef0469afeff52476f39612702aefb9403fc77b6523ca55141ad789674a38f0d29aa1b22506280aab907e00ecd069eb86e63f9aba26ad91fb208a5d9a6770c377e8e61"}, {&(0x7f0000001200)="3f80b97fb10b3c5647ac77cb8b53d270491a474327a3d8e6561dc1128df041"}, {&(0x7f0000001240)="6bf47b6d14dd"}, {&(0x7f0000001280)="5d49e507cbd4fbb57f594c0d54148beda35cd7805017dddc01ddf41e3d1f288e79812637e1a6175e1e90156e3271901a0694854dceb6977430a14643c6878dd0829faf46d3b693b4af6fbd0c"}, {&(0x7f0000001300)="2e5f08596af47eda7c2b56be7e6c27f91043fcf1083d9d3609c6e3ded3f9d77e69e785f40380980b85c8e53a0846c8ef447967ed3bf6af1ae95dd63e3b6f5f6cfc60facfbda5217209db5e6b959b74ac009a1e5c72d621cebd108ae37265b40a95e1d11a9503d3702686ccdf5073507c958cb1e790a00cb95a107847e3d342ad44c54efb0c5d6f4a78ce330c"}, {&(0x7f00000013c0)="167efcfce6e66dc8dcadbd46641f20a81e8a69d718b41acffe48ec25288ae370319a36f99db8d1e79709503727e8474385c18a00fb48c8339141fd2251867168eff9b82c19f71fc97ab90d74d632b1a7b99113a8fc7b42bb0611b7ed097d0b7129f4e327d0c9cf323ad65c41d63e7a3737024bfd34ee0c597d191d5924c0a349dcbd5505be471b9704a127c488d6c19568971b5d047a4dce9d4cc5c850d683acf23b0e05dd53d5882b6db3e71edd16141cb9fa9ec423c71229a81fc5a4cecaf2"}], 0x0, &(0x7f0000001500)=[{0x0, 0x1, 0x5, "d48033c64ca8a4ce7f0f0506d9ec51757e06125a10c67a319c2a3710256630694ade16dfc56c3771dcec68aa97a78cb265f9cd54805cfc8b92f23df4b36f05ece30559ae07c496fae539b438150ee448131bb5ab1b02202a555a6b10acc0839acc19f099dbb6594a00397ba19ee95f052e86ffb1e9bb36a36522e8e69ae7d6c9c893a9e67d5b161639369f83f96b19b02d7a5e1f851d667a6cc45d0249395ac5f0d429323b82d368ffecd69e2f51c956b3552183954b300400c3080ffc72696779d42e37801a2d860e5ff873057f1be3c5f6ea24e2194195e620652dbbdddb37824813c6f8d09352ab096dfd5b0ef92be564a3e59e59aa"}, {0x0, 0x104, 0x3, "202a91ff247d4168b422a0401264fb7944094899ad0b1c450eccbdca246e56847c4295ba7db23536bdd80aa138b013cd5a592d5973678b0751086de6c822c465c9b47b2bba31b46447cf11da9b8758b25a48252108d1"}]}}], 0x1, 0x4004895) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@migrate={0x5c, 0x21, 0x4, 0x70bd2a, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@empty, 0x4e24, 0x5, 0x4e24, 0xa, 0x2, 0x5a3434fcb245964, 0x40, 0x0, 0x0, r5}, 0x0, 0x1}, [@lastused={0xc, 0xf, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44040080}, 0x4000000) 1.455558586s ago: executing program 0 (id=204): getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000380)=""/132, &(0x7f0000000440)=0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2000}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/3112], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b076859268cb89e14f088a847", 0x0, 0xf00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) write$P9_RLERRORu(r3, 0x0, 0xd) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100)={0x0, 0xd}, &(0x7f0000000140)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0xfffe, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) personality(0x400000d) syz_io_uring_setup(0x40c4, &(0x7f0000000140)={0x0, 0xddf9, 0x40, 0x2, 0x15d, 0x0, r3}, &(0x7f00000002c0), &(0x7f0000000300)) syz_open_procfs$pagemap(r6, &(0x7f0000000080)) 1.209998452s ago: executing program 2 (id=213): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000040)="1f080030f9b93612d66a008546373f0753d917ab1dee5fec26525c36e2a38c6ce591320c61570bfb20d4da77c1e935958e9bc5955cab20cc0e3171afcd104c8ece933c599e292dc2bad373db1b0631d6f37e1f9c0910937da1bb469787aa377bd9dbfae3", 0x64, 0x0, &(0x7f0000030ff0)={0x2, 0x4e24, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000140)=0xff, 0x4) r1 = signalfd(r0, &(0x7f0000000000)={[0x1]}, 0x8) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000100)=0xdddd0000) r2 = io_uring_setup(0x6023, &(0x7f0000000280)={0x0, 0x2800006, 0x2000, 0x1, 0x14a}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0xff09) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r5, 0xc01064c1, &(0x7f0000000100)={r6}) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@loopback, @rand_addr=0x64010100, 0xffffffffffffffff, "372a25b1fc4e7d6d9417424aa5966310d2d363c46ff441a3adc8d8bee5dee3fa", 0x6, 0x10000, 0x40, 0xffffffff}, 0x3c) 1.209784624s ago: executing program 0 (id=214): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000003ef881bd83ef2b920000000061124c00000000b728338fb2e5d800"], &(0x7f0000000080)='GPL\x00'}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000f40), 0xa42, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f0000001000)={0x20, 0x0, 0x0, 0x0, 0x0}) fspick(r2, &(0x7f0000000000)='.\x00', 0x0) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="000000000000000088"]) setresgid(0xee00, 0xee01, 0x0) setresgid(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x2, &(0x7f0000000400)=[{0x800, 0xb, 0xfd, 0x6}, {0xb1b, 0x8, 0xf7}]}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000002c0)=@multiplanar_overlay={0x4, 0x9, 0x4, 0x100, 0x5, {r5, r6/1000+60000}, {0x4, 0x0, 0x6, 0x1, 0x7, 0x6, "513c6013"}, 0x5, 0x3, {&(0x7f0000000240)=[{0xfffffffe, 0x3, {0xa}}, {0x7fff, 0x6, {0x3}, 0x1}]}, 0x3}) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r8 = creat(&(0x7f0000000180)='./file0\x00', 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400000010000200"/20, @ANYRES32=0x0, @ANYBLOB="0003400000009000340012800e0001006970366772657461700000002000028014000600fc020000000000ff00000000e3ffffff07000c0003000000"], 0x54}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) r9 = request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='key_or_keyring:', r1) keyctl$link(0x8, r1, r9) 1.209368664s ago: executing program 2 (id=215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002301020007006000000002"]) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000002c0), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x1fffff, 0x10}, 0xc) sendmsg$inet6(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0xf, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x4, 0x1, 0x0, 0x8, 0x5, 0x4, 0x5, 0x7, 0xfa, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000140)={0x8, 'ip6_vti0\x00', {'veth1_to_team\x00'}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) (async) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002301020007006000000002"]) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r4, &(0x7f00000002c0), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2, 0xe}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x1fffff, 0x10}, 0xc) (async) sendmsg$inet6(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0xf, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x4, 0x1, 0x0, 0x8, 0x5, 0x4, 0x5, 0x7, 0xfa, '\x00', 0x3}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000140)={0x8, 'ip6_vti0\x00', {'veth1_to_team\x00'}}) (async) 1.129716595s ago: executing program 0 (id=216): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (rerun: 64) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000040)={0x9}) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000800)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="a1ab01000000fcffffff32000000080001001600000008000300", @ANYRES32=r8, @ANYBLOB="5b8de641eb13a8f2d231ae9b281847d2aed0874625b9f54c426feb1a3bfdbb32c0556fa22df92dfbaf7b28c3a9354162e2c8a0ad2cb42d1eee1b4395887351fe9d6556e3228632f3e0fa7d5ad0ee8e6286fd2198a7843a92dbeb387d03b3d56ab222c52ae8959ffecbd9c3193be2"], 0x24}}, 0x4000800) (async, rerun: 64) read(r4, &(0x7f0000000140)=""/73, 0x49) (async, rerun: 64) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) write(r9, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1fffffffffffff8a, &(0x7f0000000700)=[{0x22, 0x4, 0x0, 0xffefffff}, {0x6, 0xf, 0x0, 0x8}]}, 0x10) (async, rerun: 64) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) (async, rerun: 64) socket(0x2c, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0c0000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB="0000068e976eb4402dc8c20000000000000000000000000000000000357bdfeacb99359be534524d728c15286773e1674823550602d574207b9f4308ae3ba93c7c461ba5b31967f4425f54001bfc86fa4fe72b98ff7a76ae46417cd9b52ba2e433009e4f74f44d7f4f63b2c1bdb48f954f1d0d52cca4651287982377757c1b5761c5a2493bb8ffe629f95b884c75ef29b5f7fd5e5835e89bf268bb3785d5212ce70c84c3d8f6b137307f2e0d379a3c65ebda91139b573258dbe001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close_range(r10, 0xffffffffffffffff, 0x0) (async) r11 = syz_clone(0x1001d2100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) (async) ptrace(0x4210, r11) (async) sendmmsg$unix(r2, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="87ab17c6932bb2cd63893737bda4726928b727ebcf077aa211b3206b9e93e5b5a96d6e99263cd08c1c84b6f0b95d877191628ddea0c72d0b7451387e570fc71b4238f62d2844cb07e74d19284362918e31fc65b25a59760dc63b8a83c43874553a380f669b", 0x65}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYBLOB="00000000000000000000000000003801a46dc50ef1ac1149471f0ef183f2e62357e4e885f6fbccb72e84d17bee344ac38e450eec0a7e4731f9f24b53b361f481d03fb92bcb4a251278641f79f9bb8bf3722642a43eafaf"], 0x28, 0x40000}}, {{&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000280)="bc203cb63980d7e312225dc47aa9f3515d89485f54836b03cf17d5b4e587e9bca4e8d785f94ad8cc047664e00dbd907c54019a7ca8260d0cf1c4b4ad1e7aeca4019f8459631bc7834900f68f0470ed8d8fe232f55d7eae5964bac3bef14364dcc630aa4d276425a8505f89d98ec4fdadfd7b16d03cc2598f937366457ede9f93516223bd40c1ef91b4b8b28b85e9b5f297724bfdd8fb4b76e5589cf0bed70161b13ca72446376dff90432b", 0xab}, {&(0x7f0000000340)="0d2318ee1dd8cc310594db07491912afe91078b3e29326fdb42406994f91c2c9f99e5c0042bd9e13b1f8acb1224a22cff2ef7f85ff347757fd93ed86c51ed7474cb7611a11a9365fdb353f7f08d8192eb890f74782efd75586fbb6875786876b3fc104256520e062bcfefca92bf510a034b8da2ef77b4d6907e15900892d227b6cb516405dbffcbaea70daa9455772ef66c62fa8f425616bf30e2b4134b277deb3c9", 0xa2}, {&(0x7f0000000400)="90ce855539454e5c98d0f0cce002f58ab06ba31688f6842757d61c446f607cab23ec41ec36ad6839627e752ff14ca6afbdda78053718090f0ae4d6ed95c5692b295669c07d51a1f5825ec5237ec18c73c00bd1678f62548720ba9d338be1a54bc11dfbed4f25f7d28676744c549d8ae904d68157c37a887a7425aab49f4bf152471ad1147ab8314b1cf54c00315c0173ace5563a9cc8b42cc55bd6f05d8d126ab5dde5c597b92a57523b5cfe3c70bea1833a98edbad6", 0xb6}], 0x3, 0x0, 0x0, 0x4000450}}], 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 1.054732206s ago: executing program 0 (id=220): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000006c0), 0x2a00, 0x0) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000040)={@msf={0x2, 0xfa, 0x40}, 0x1e}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000280)={0x81, 0x0, 0x1}) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000080)={0x10000, 0xeeee8000, 0x6, 0x1, 0x3}) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) sendfile(r3, r3, 0x0, 0x24002de8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xa}, 0x1c) 989.714117ms ago: executing program 2 (id=223): r0 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setfsgid(0xee00) r2 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_open_procfs(r2, &(0x7f0000000040)='stat\x00') pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0xf0cb2f4a0c2cfc5d, 0x0) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000001200)={0x50, 0x0, r6, {0x7, 0x2b, 0x3, 0x200c0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) read$FUSE(r5, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r7}, 0x10) setns(r1, 0x20000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f0000000140)) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x104c3, 0xc0) 949.137043ms ago: executing program 3 (id=224): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 789.958573ms ago: executing program 3 (id=226): socket(0xa, 0x3, 0x3a) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) getresuid(&(0x7f0000000280)=0x0, &(0x7f0000000340), &(0x7f0000000300)) setreuid(0x0, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000001d40), 0xffffffffffffffff) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100, 0x3, 0x16a}, &(0x7f0000002000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x22}) io_uring_enter(r5, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private=0x3}, "000088beffff0000"}}}}}, 0x0) 789.477773ms ago: executing program 1 (id=227): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) read(r0, &(0x7f0000000140)=""/73, 0x49) mmap(&(0x7f00004f7000/0x3000)=nil, 0x3000, 0x3000004, 0x13, r0, 0x5ff95000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 789.080031ms ago: executing program 2 (id=228): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e1e, @broadcast}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000080)=0x86, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0xd, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xeefa8cdcb0fd2e21}}}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 669.133971ms ago: executing program 3 (id=229): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) symlink(&(0x7f0000001480)='./bus\x00', &(0x7f0000002480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 619.914138ms ago: executing program 2 (id=230): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8}]}}}]}, 0x3c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r3 = dup(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x4c, 0x3c, 0x107, 0x0, 0x4000, {0x3, 0x7c}, [@nested={0x10, 0xfc, 0x0, 0x1, [@typed={0xc, 0x5, 0x0, 0x0, @u64=0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @typed={0x8, 0x4b, 0x0, 0x0, @fd=r2}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000400)={0xaa, 0xa1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000380)=r1, 0x4) read$FUSE(r3, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = syz_open_procfs(r8, &(0x7f0000000140)='attr/current\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) r10 = fcntl$getown(r9, 0x9) sendmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="1dba981de5d607eaf1ab66a3c10170fc46421a90ddbf9576d20b8bade91f61962f79ddd777fc8b2ec8cc119104bbee5f88709119d996f0f8b90df5aa8887a77cd7f48f95cf8657b490339795f0cb8e238a09fc96cc202c4401a6e7fd7910e2fdb41b669c44d2f4205da624904e41df9ee7a87dff680d6a438ee45ee1e8ece7946978", 0x82}], 0x1, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {r10, r6, r7}}}], 0x20, 0x54004}, 0x80) r11 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r11, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) 489.369122ms ago: executing program 3 (id=231): r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = syz_io_uring_setup(0x6f63, &(0x7f0000000380)={0x0, 0x81c7, 0x2, 0x1, 0x1c0}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x6, &(0x7f0000000300)=[{&(0x7f0000000280)="118e5433b23c743e457ae8cd6e0a226d411f9382cabed3911b947959a5757b15e9dc23c24f1ac673a6201ab22bf79470529bd651ba577567", 0x38}, {&(0x7f00000029c0)="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", 0xfc9}], 0x2, 0x4, 0x0, {0x3}}) io_uring_enter(r1, 0x47f6, 0xbacc, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e22, 0x3}}, 0x80, 0x0}, 0x4000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = syz_io_uring_setup(0x2b89, &(0x7f0000007640)={0x0, 0x0, 0x224, 0x0, 0xfffffffe, 0x0, r1}, &(0x7f0000000200), &(0x7f0000007700)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) ftruncate(r7, 0x5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079190000000000007a0000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r8, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000b80)="7ea5e16750d1754d6d57a04d7f7211dc0d5243a08dcf6ccafd491af02aafeb8320fdaf4c70cec01934561a2ae2fd399fcbd63ebc7f80441d8935d07cbb27aef27e2699c2cf480fac493eaaf24462189ae6a2c048d1ba47e09a7a07f0d7cd57c01a81dfc3032c6e2430d61eb0b1b9d90fda3e0550e1dfd9fb858c30e411423d3e38e4e2d7b1e7d7225a", 0x89}, {&(0x7f0000000500)="abd176cffe106488a54678f736a4fe890006242c3d9bb8cc1020f08cdec2daf15c45fd6ab7b37bcb7c031f68d931071c9b95573d7d19766f428015b000bbe3eeafa809076660fec7edf037b9993e842ee56360a8c5bb886d687df4a90a65fe380265dc0ed02082a1c822fb36531d63971c47d170d0533e6714141394025a3d1dcb22afc62368d3702b3cf8fcb44ffa9e1c281c506d933da94c1b105c9b0e1a6f6368e42495f4ceb9b14a0d806ed11d12e4d3200204", 0xb5}, {&(0x7f00000006c0)="22c3219c0608f2cce9f2970412a24fb6140c6e3253317b7e6b02a0280ecd9cbcd4cd29a22ae5f55aa4b2564c42556f5c13f450e2ee66cbcabeb5baef6f3b91791dbbc27941f413641085a0a553e180e95120ffc440eafb973fb0b16fe91ddc86459780ebcae3a05404e6c7", 0x6b}, {&(0x7f0000000440)="4ce42b57dbcd46c7389908dcd8e75f992f13b24b47db38a6cce6d502eab7cf4493922a52cfbaef658e1f2298a1cd2e8dd39a50fd49815a7ffa713fe72f10b11ee33d4795725f09e019920f7f2a9d43198216070ba2cf1c11a852fd5721581b4359ed862afb8e4504694394f464e5020643ea8a584e6bd198f6d716c4d5c0260d17c914d8126c00"/146, 0x92}, {&(0x7f0000000980)="674ed26b9a76136e6653f1a50daf0360694d726df3560b4a77cd848fcef31b0bac2a237b15a9f30a9f88895adb8af37efaf07cdead7b526d2a8c419727eb44d520098f367649f1a2df2bd40d84390890adc7f75486c6aef711f961d94bae1270ce8cbf781ecbeda44f3261cc4903ebdc3ff9584a9812aa66ad408c781a66d1d478215ba7e18d474950119a7c0ca46577e956e1ebb22565e911f38b46cc67688bde29126f58326a05ea37da0d12f2cf493efbc99fb800c917c569109904d3ecfe9b572276bff638c6815f488048f32ad88b550ce9e151bfe4fe1927737c00242d44e755949f7292b39c6d9cdbfc4a29f318ec9efbca4601", 0xf7}], 0x5}}], 0x2, 0x40004) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x48, 0x0, 0x0, 0x6, &(0x7f00000000c0)={0x77359400}, 0x1, 0x8, 0x0, {0x0, r6}}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x4000003) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="04010000160001040000000000000000ac1414aa000000000000000000000000ff01000000000000000000000000000100000fd100040002020000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc02000000000000000000000000000000000000330000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000080010000800000000000000000f3000000000000000000000000010100000000000000000000000000000000000000000000000800000000000004000000060000000004000000000000000000000a0000009400000000000000f5"], 0x104}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) 326.357764ms ago: executing program 3 (id=232): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0xff, 0x53f}]}) 312.238188ms ago: executing program 2 (id=233): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x200) read(r2, &(0x7f0000000180)=""/39, 0x27) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x98) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x25, &(0x7f00000000c0)=0x101, 0x4) 209.890412ms ago: executing program 1 (id=234): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) listen(r0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) close_range(r2, r1, 0x2) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r4, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02000400000000feff0000000000000000"], 0x11) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r5, 0x5409, 0x0) socket$tipc(0x1e, 0x5, 0x0) (async) socket(0x10, 0x3, 0x0) (async) listen(r0, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async) dup(r2) (async) close_range(r2, r1, 0x2) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) bind$rose(r4, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02000400000000feff0000000000000000"], 0x11) (async) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TCSBRK(r5, 0x5409, 0x0) (async) 209.319185ms ago: executing program 3 (id=235): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdc03, {0x2, 0x18, 0x50, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000002240)=@gcm_256={{0x303}, "d0baa78683365c21", "90f2142e57f2f9752576d07d748df62221e924e7b42ecaea34669533a35ab169", "7aebc923", "14b6429e3a851d78"}, 0x38) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0xfdef) sendto$inet6(r0, &(0x7f00000000c0)="c62ee5d6a89f2387cb4093532f7c0a22", 0x10, 0x8040, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$binfmt_elf64(r0, 0x0, 0x78) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x62) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x1048c, &(0x7f0000000580)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 149.795419ms ago: executing program 1 (id=236): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x40804}, 0x4064040) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x282840, 0x180) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0f017a000f32f466b80e008ee8c4e2f924fbaa0f01cb9a33fe0000b5000f01c3b92d080000b800000080ba000000000f30", 0x31}], 0x1, 0x2, &(0x7f0000000100), 0x0) 55.678957ms ago: executing program 1 (id=237): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) copy_file_range(r0, 0x0, r1, &(0x7f0000000240)=0xfffffffffffffffe, 0x20000009, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x40040, 0x0) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/95, 0x5f}], 0x1) socket$nl_route(0x10, 0x3, 0x0) 55.248228ms ago: executing program 1 (id=238): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) capget(&(0x7f0000000100)={0x20080522}, &(0x7f0000000240)={0x3, 0x667, 0xbdc, 0x4, 0x0, 0x5}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="011b26b67000fddbdf2507"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='source', &(0x7f0000000500)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xc1\t\xb7b\x12A\x1d`\x16\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\xb7\x8a\":\xc1I;\x03\xe2<\xdf;\xce\x93\xd3\xd2\x19\x964\xeb\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1H\x9a_\xe3*\xc6\xca>\xe0\xb9\x1e\xe1\xf4\x90\xe2\x12]\x01v\xbd\x0e\x0f J\x1d\xcb\xd9:\xa6U\f|\xce\b\x00\x00\x00$\xa5&\x1fu\x1b\x15v\xd0\xd8\x9fH54\xaa\xf2t.I\x96\x1c\t\xe42\x02\x85\xa0\xc2T\x02\x99\"K\f\x03i\xba', 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (async) capget(&(0x7f0000000100)={0x20080522}, &(0x7f0000000240)={0x3, 0x667, 0xbdc, 0x4, 0x0, 0x5}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="011b26b67000fddbdf2507"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='source', &(0x7f0000000500)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xc1\t\xb7b\x12A\x1d`\x16\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\xb7\x8a\":\xc1I;\x03\xe2<\xdf;\xce\x93\xd3\xd2\x19\x964\xeb\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1H\x9a_\xe3*\xc6\xca>\xe0\xb9\x1e\xe1\xf4\x90\xe2\x12]\x01v\xbd\x0e\x0f J\x1d\xcb\xd9:\xa6U\f|\xce\b\x00\x00\x00$\xa5&\x1fu\x1b\x15v\xd0\xd8\x9fH54\xaa\xf2t.I\x96\x1c\t\xe42\x02\x85\xa0\xc2T\x02\x99\"K\f\x03i\xba', 0x0) (async) 0s ago: executing program 1 (id=239): syz_open_dev$usbmon(&(0x7f00000021c0), 0x8000000000000000, 0x100) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYRES16=r3], 0x10) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="12120000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r5, &(0x7f00000004c0), &(0x7f0000000340)=@udp6=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r5, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000825bd7000fbdbd825010000000000000001410000001800170000001300000030404dbc3a73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x48800) syz_usb_disconnect(0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) 0s ago: executing program 3 (id=240): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @bcast, @default]}, 0x40) kernel console output (not intermixed with test programs): [ 44.062088][ T40] audit: type=1400 audit(1751003162.883:60): avc: denied { rlimitinh } for pid=5888 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.068641][ T40] audit: type=1400 audit(1751003162.893:61): avc: denied { siginh } for pid=5888 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:6439' (ED25519) to the list of known hosts. [ 44.978666][ T40] audit: type=1400 audit(1751003163.823:62): avc: denied { name_bind } for pid=5915 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.001639][ T40] audit: type=1400 audit(1751003163.843:63): avc: denied { write } for pid=5916 comm="sh" path="pipe:[1756]" dev="pipefs" ino=1756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.013376][ T40] audit: type=1400 audit(1751003163.863:64): avc: denied { execute } for pid=5916 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.019990][ T40] audit: type=1400 audit(1751003163.863:65): avc: denied { execute_no_trans } for pid=5916 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.900699][ T40] audit: type=1400 audit(1751003165.743:66): avc: denied { mounton } for pid=5916 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 46.903503][ T5916] cgroup: Unknown subsys name 'net' [ 47.095324][ T5916] cgroup: Unknown subsys name 'cpuset' [ 47.099375][ T5916] cgroup: Unknown subsys name 'rlimit' [ 47.362461][ T5923] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.046769][ T5916] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.062506][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 51.062522][ T40] audit: type=1400 audit(1751003169.903:80): avc: denied { execmem } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.271836][ T40] audit: type=1400 audit(1751003170.113:81): avc: denied { create } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.279459][ T40] audit: type=1400 audit(1751003170.113:82): avc: denied { read write } for pid=5931 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.287762][ T40] audit: type=1400 audit(1751003170.113:83): avc: denied { open } for pid=5931 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.295903][ T40] audit: type=1400 audit(1751003170.123:84): avc: denied { ioctl } for pid=5931 comm="syz-executor" path="socket:[6356]" dev="sockfs" ino=6356 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.332587][ T5935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.335634][ T5935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.338163][ T5935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.340716][ T5935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.343327][ T5935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.344316][ T5945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.344501][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.345126][ T5946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.345331][ T5946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.345850][ T5946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.351251][ T5935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.352700][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.352975][ T40] audit: type=1400 audit(1751003170.193:85): avc: denied { read } for pid=5931 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.353003][ T40] audit: type=1400 audit(1751003170.193:86): avc: denied { open } for pid=5931 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.353024][ T40] audit: type=1400 audit(1751003170.193:87): avc: denied { mounton } for pid=5931 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.353533][ T5946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.354878][ T5935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.357445][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.359532][ T5935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.361260][ T5947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.367575][ T5935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.375502][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.397168][ T5947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.581305][ T40] audit: type=1400 audit(1751003170.423:88): avc: denied { module_request } for pid=5931 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 51.617506][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 51.717966][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 51.811985][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.818079][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.821047][ T5931] bridge_slave_0: entered allmulticast mode [ 51.824945][ T5931] bridge_slave_0: entered promiscuous mode [ 51.834266][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 51.841975][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 51.849327][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.852301][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.855699][ T5931] bridge_slave_1: entered allmulticast mode [ 51.858940][ T5931] bridge_slave_1: entered promiscuous mode [ 51.958626][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.960993][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.964001][ T5932] bridge_slave_0: entered allmulticast mode [ 51.967856][ T5932] bridge_slave_0: entered promiscuous mode [ 51.972462][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.975401][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.977838][ T5932] bridge_slave_1: entered allmulticast mode [ 51.981263][ T5932] bridge_slave_1: entered promiscuous mode [ 52.013276][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.017820][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.112059][ T5931] team0: Port device team_slave_0 added [ 52.121258][ T5931] team0: Port device team_slave_1 added [ 52.126332][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.208511][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.214789][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.217213][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.219487][ T5942] bridge_slave_0: entered allmulticast mode [ 52.223470][ T5942] bridge_slave_0: entered promiscuous mode [ 52.227729][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.230337][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.241175][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.299654][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.302383][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.305361][ T5942] bridge_slave_1: entered allmulticast mode [ 52.309401][ T5942] bridge_slave_1: entered promiscuous mode [ 52.332432][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.334728][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.343019][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.349746][ T5932] team0: Port device team_slave_0 added [ 52.395859][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.401077][ T5932] team0: Port device team_slave_1 added [ 52.403984][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.406259][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.408577][ T5933] bridge_slave_0: entered allmulticast mode [ 52.411150][ T5933] bridge_slave_0: entered promiscuous mode [ 52.414357][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.416597][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.418864][ T5933] bridge_slave_1: entered allmulticast mode [ 52.421461][ T5933] bridge_slave_1: entered promiscuous mode [ 52.438104][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.493560][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.496405][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.508298][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.579135][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.581380][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.589634][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.598341][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.602928][ T5942] team0: Port device team_slave_0 added [ 52.629504][ T5931] hsr_slave_0: entered promiscuous mode [ 52.632515][ T5931] hsr_slave_1: entered promiscuous mode [ 52.637789][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.643380][ T5942] team0: Port device team_slave_1 added [ 52.802061][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.806830][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.817316][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.826612][ T5932] hsr_slave_0: entered promiscuous mode [ 52.829887][ T5932] hsr_slave_1: entered promiscuous mode [ 52.832639][ T5932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.837634][ T5932] Cannot create hsr debugfs directory [ 52.845671][ T5933] team0: Port device team_slave_0 added [ 52.848449][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.850985][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.861316][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.894210][ T5933] team0: Port device team_slave_1 added [ 53.001953][ T5942] hsr_slave_0: entered promiscuous mode [ 53.004231][ T5942] hsr_slave_1: entered promiscuous mode [ 53.006335][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.008692][ T5942] Cannot create hsr debugfs directory [ 53.010785][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.012913][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.019898][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.042044][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.045048][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.052163][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.192956][ T5933] hsr_slave_0: entered promiscuous mode [ 53.195302][ T5933] hsr_slave_1: entered promiscuous mode [ 53.197345][ T5933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.199686][ T5933] Cannot create hsr debugfs directory [ 53.354917][ T5931] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.378644][ T5931] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.387024][ T5931] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.397786][ T5931] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.413534][ T5943] Bluetooth: hci2: command tx timeout [ 53.413789][ T5947] Bluetooth: hci3: command tx timeout [ 53.413818][ T5935] Bluetooth: hci0: command tx timeout [ 53.413992][ T5939] Bluetooth: hci1: command tx timeout [ 53.433304][ T5932] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.441344][ T5932] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.451321][ T5932] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.471600][ T5932] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.495613][ T5942] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.505435][ T5942] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.513475][ T5942] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.524898][ T5942] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.593339][ T5933] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.603600][ T5933] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.614127][ T5933] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.620724][ T5933] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.641801][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.688556][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.693232][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.704325][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.707394][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.725675][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.727962][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.733744][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.751532][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.763005][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.765254][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.778939][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.781216][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.792030][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.800591][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.802922][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.812694][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.830583][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.832865][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.856453][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.856673][ T40] audit: type=1400 audit(1751003172.703:89): avc: denied { sys_module } for pid=5931 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.867489][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.869732][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.873136][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.875474][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.944385][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.975218][ T5931] veth0_vlan: entered promiscuous mode [ 53.980983][ T5931] veth1_vlan: entered promiscuous mode [ 53.994631][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.002428][ T5931] veth0_macvtap: entered promiscuous mode [ 54.008580][ T5931] veth1_macvtap: entered promiscuous mode [ 54.032094][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.037736][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.041853][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.055940][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.065056][ T5931] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.068528][ T5931] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.071953][ T5931] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.075790][ T5931] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.090432][ T5932] veth0_vlan: entered promiscuous mode [ 54.120710][ T5932] veth1_vlan: entered promiscuous mode [ 54.123632][ T5942] veth0_vlan: entered promiscuous mode [ 54.152664][ T5933] veth0_vlan: entered promiscuous mode [ 54.156895][ T5942] veth1_vlan: entered promiscuous mode [ 54.167488][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.170860][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.176411][ T5933] veth1_vlan: entered promiscuous mode [ 54.201716][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.204671][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.211583][ T5932] veth0_macvtap: entered promiscuous mode [ 54.216484][ T5942] veth0_macvtap: entered promiscuous mode [ 54.226101][ T5932] veth1_macvtap: entered promiscuous mode [ 54.229185][ T5942] veth1_macvtap: entered promiscuous mode [ 54.238067][ T5931] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.240790][ T5933] veth0_macvtap: entered promiscuous mode [ 54.247418][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.252694][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.256833][ T5933] veth1_macvtap: entered promiscuous mode [ 54.266757][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.272161][ T5942] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.275118][ T5942] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.278707][ T5942] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.281452][ T5942] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.293400][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.300559][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.304850][ T5932] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.307760][ T5932] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.310536][ T5932] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.313819][ T5932] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.328800][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.343734][ T5933] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.346534][ T5933] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.349287][ T5933] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.352002][ T5933] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.384002][ T1259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.386946][ T1259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.409662][ T1259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.412703][ T1259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.426477][ T1259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.429684][ T1259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.467108][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.470558][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.499651][ T216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.503218][ T216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.556207][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.560549][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.646938][ T6026] netlink: 'syz.0.1': attribute type 9 has an invalid length. [ 54.648770][ T6034] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 54.677667][ T6029] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 55.052972][ T836] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 55.208075][ T836] usb 6-1: config 1 has an invalid interface descriptor of length 3, skipping [ 55.211799][ T836] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 0 [ 55.216715][ T836] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 55.221066][ T836] usb 6-1: config 1 interface 1 has no altsetting 0 [ 55.486365][ T6049] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 55.489481][ T6049] cramfs: wrong magic [ 55.493529][ T5947] Bluetooth: hci3: command tx timeout [ 55.493564][ T5943] Bluetooth: hci2: command tx timeout [ 55.495411][ T5935] Bluetooth: hci0: command tx timeout [ 55.495460][ T5939] Bluetooth: hci1: command tx timeout [ 55.610583][ T6057] netlink: 72 bytes leftover after parsing attributes in process `syz.0.14'. [ 55.684299][ T6060] No control pipe specified [ 55.687636][ T6060] xt_HMARK: spi-set and port-set can't be combined [ 55.726586][ T6063] syz.0.16 uses obsolete (PF_INET,SOCK_PACKET) [ 55.731386][ T6063] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28187 sclass=netlink_xfrm_socket pid=6063 comm=syz.0.16 [ 55.841101][ T6076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 55.888336][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22'. [ 56.018214][ T6096] random: crng reseeded on system resumption [ 56.025361][ T6096] Restarting kernel threads ... [ 56.027624][ T6096] Done restarting kernel threads. [ 56.764327][ T40] kauditd_printk_skb: 101 callbacks suppressed [ 56.764343][ T40] audit: type=1400 audit(1751003175.613:191): avc: denied { name_bind } for pid=6104 comm="syz.2.30" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 56.773494][ T40] audit: type=1400 audit(1751003175.613:192): avc: denied { node_bind } for pid=6104 comm="syz.2.30" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 56.780752][ T40] audit: type=1400 audit(1751003175.623:193): avc: denied { getopt } for pid=6104 comm="syz.2.30" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.816737][ T6109] loop6: detected capacity change from 0 to 524287999 [ 56.820568][ T5938] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.829544][ T5938] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.831808][ T5938] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.834480][ T5938] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.837193][ T5938] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.839882][ T5938] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.843936][ T5938] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.847409][ T5938] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.850701][ T6107] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 56.850974][ T5938] ldm_validate_partition_table(): Disk read failed. [ 56.859369][ T5938] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.862005][ T5938] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.866652][ T5938] Dev loop6: unable to read RDB block 0 [ 56.868778][ T5938] loop6: unable to read partition table [ 56.925090][ T6109] ldm_validate_partition_table(): Disk read failed. [ 56.926540][ T40] audit: type=1400 audit(1751003175.773:194): avc: denied { create } for pid=6108 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.927649][ T6109] Dev loop6: unable to read RDB block 0 [ 56.932232][ T6113] xt_hashlimit: size too large, truncated to 1048576 [ 56.939934][ T6109] loop6: unable to read partition table [ 56.941983][ T6109] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 56.950043][ T6110] ldm_validate_partition_table(): Disk read failed. [ 56.952226][ T6110] Dev loop6: unable to read RDB block 0 [ 56.954231][ T6110] loop6: unable to read partition table [ 56.955811][ T6114] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 56.956650][ T6110] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 56.989737][ T40] audit: type=1400 audit(1751003175.833:195): avc: denied { ioctl } for pid=6108 comm="syz.2.31" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 57.011275][ T5344] ldm_validate_partition_table(): Disk read failed. [ 57.014417][ T5344] Dev loop6: unable to read RDB block 0 [ 57.017517][ T5344] loop6: unable to read partition table [ 57.047445][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33'. [ 57.050233][ T6122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.33'. [ 57.053291][ T6122] netlink: 'syz.3.33': attribute type 12 has an invalid length. [ 57.210939][ T40] audit: type=1400 audit(1751003176.053:196): avc: denied { write } for pid=6128 comm="syz.2.36" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 57.296729][ T40] audit: type=1400 audit(1751003176.143:197): avc: denied { sys_module } for pid=6133 comm="syz.0.37" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 57.314361][ T40] audit: type=1400 audit(1751003176.163:198): avc: denied { create } for pid=6133 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.315498][ T6134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6134 comm=syz.0.37 [ 57.320428][ T40] audit: type=1400 audit(1751003176.163:199): avc: denied { write } for pid=6133 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.360624][ T40] audit: type=1400 audit(1751003176.203:200): avc: denied { ioctl } for pid=6141 comm="syz.0.39" path="socket:[8953]" dev="sockfs" ino=8953 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.448972][ T6149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.479435][ T6149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.573874][ T5943] Bluetooth: hci2: command tx timeout [ 57.573938][ T5947] Bluetooth: hci1: command tx timeout [ 57.574015][ T5935] Bluetooth: hci0: command tx timeout [ 57.574094][ T5939] Bluetooth: hci3: command tx timeout [ 57.760463][ T836] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 57.764400][ T836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.766861][ T836] usb 6-1: Product: 㹹疭╺ｑ檟軲幱⃷攤玫犉ﾄ짌僳魳㞻㛤뗱픻銔轿氅葆寺३뭁畂斏솢朗╃ᖉꮏ頁셰ꅎ拔Ԡꪁ྾뽀勓삏习ᄽჍ컙ఔꏺꝳÙ⠑淓▖ﳨ璾쓇䶛滴 [ 57.773201][ T836] usb 6-1: Manufacturer: ꀆᎾ⽿㸀ᆎ襬␔勵蕈䮠Ɒ瓁懽흆錐赸⽯髑휥Ғ斑푖蚔䪾阩糛縰䯕ౘ孅똣襹╒พ援⹋ꢸ棣괤똋䗆눇⢂憲ꠀ帠￲갱竍 [ 57.804027][ T836] usb 6-1: can't set config #1, error -71 [ 57.808120][ T836] usb 6-1: USB disconnect, device number 2 [ 57.930592][ T6170] tmpfs: Unknown parameter 'inoe_hardlim%V' [ 57.967953][ T6174] ======================================================= [ 57.967953][ T6174] WARNING: The mand mount option has been deprecated and [ 57.967953][ T6174] and is ignored by this kernel. Remove the mand [ 57.967953][ T6174] option from the mount to silence this warning. [ 57.967953][ T6174] ======================================================= [ 58.095837][ T6182] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 58.218764][ T6237] netlink: 'syz.2.52': attribute type 2 has an invalid length. [ 58.222455][ T6237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 58.249012][ T6239] random: crng reseeded on system resumption [ 58.257357][ T6239] netlink: 28 bytes leftover after parsing attributes in process `syz.0.55'. [ 58.271956][ T6239] bond1 (unregistering): Released all slaves [ 58.321484][ T6242] input: syz0 as /devices/virtual/input/input6 [ 58.350817][ T6242] netlink: 32 bytes leftover after parsing attributes in process `syz.1.56'. [ 58.355040][ T6242] netem: unknown loss type 13 [ 58.357179][ T6242] netem: change failed [ 58.415574][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'. [ 58.419388][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.58'. [ 58.454213][ T6261] IPv6: NLM_F_CREATE should be specified when creating new route [ 58.962034][ T6301] program syz.2.66 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.981573][ T6300] netlink: 56 bytes leftover after parsing attributes in process `syz.3.67'. [ 59.329575][ T6320] xt_l2tp: missing protocol rule (udp|l2tpip) [ 59.449533][ T6329] fuse: Unknown parameter 'rotmode' [ 59.501916][ T6333] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 59.506655][ T6333] VFS: Can't find a romfs filesystem on dev nullb0. [ 59.506655][ T6333] [ 59.551126][ T6338] syz.0.78: attempt to access beyond end of device [ 59.551126][ T6338] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 59.556199][ T6331] netlink: 'syz.1.76': attribute type 9 has an invalid length. [ 59.559175][ T6338] exFAT-fs (nbd0): unable to read boot sector [ 59.561798][ T6338] exFAT-fs (nbd0): failed to read boot sector [ 59.563844][ T6338] exFAT-fs (nbd0): failed to recognize exfat type [ 59.655257][ T5947] Bluetooth: hci3: command tx timeout [ 59.655303][ T5943] Bluetooth: hci0: command tx timeout [ 59.657555][ T5947] Bluetooth: hci2: command tx timeout [ 59.662846][ T5947] Bluetooth: hci1: command tx timeout [ 59.729961][ T6346] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6346 comm=syz.0.80 [ 59.788044][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 59.838078][ T5942] cgroup: fork rejected by pids controller in /syz0 [ 60.373888][ T5976] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 60.382807][ T5976] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 60.796622][ T6367] Zero length message leads to an empty skb [ 62.452888][ T5947] Bluetooth: hci1: command 0x0c1a tx timeout [ 62.454936][ T5976] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 62.457352][ T5976] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 62.587799][ T40] kauditd_printk_skb: 87 callbacks suppressed [ 62.587815][ T40] audit: type=1400 audit(1751003181.433:288): avc: denied { mount } for pid=6371 comm="syz.3.88" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.599357][ T40] audit: type=1400 audit(1751003181.433:289): avc: denied { unmount } for pid=6371 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.532963][ T5947] Bluetooth: hci2: command 0x0c1a tx timeout [ 64.535955][ T5976] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 64.538387][ T5976] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 64.719047][ T40] audit: type=1400 audit(1751003183.563:290): avc: denied { write } for pid=6387 comm="syz.3.93" path="socket:[10192]" dev="sockfs" ino=10192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.727065][ T40] audit: type=1400 audit(1751003183.573:291): avc: denied { create } for pid=6387 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 64.790524][ T6394] capability: warning: `syz.1.102' uses 32-bit capabilities (legacy support in use) [ 64.802652][ T40] audit: type=1400 audit(1751003183.643:292): avc: denied { map } for pid=6393 comm="syz.1.102" path="socket:[11266]" dev="sockfs" ino=11266 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 64.817824][ T6203] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.834608][ T6391] netlink: 'syz.3.94': attribute type 9 has an invalid length. [ 64.886012][ T40] audit: type=1400 audit(1751003183.733:293): avc: denied { create } for pid=6400 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.900413][ T40] audit: type=1400 audit(1751003183.733:294): avc: denied { write } for pid=6400 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.900850][ T6203] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.910169][ T40] audit: type=1400 audit(1751003183.733:295): avc: denied { connect } for pid=6400 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.919675][ T40] audit: type=1400 audit(1751003183.733:296): avc: denied { name_connect } for pid=6400 comm="syz.2.97" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 64.933608][ T6407] netlink: 'syz.2.98': attribute type 21 has an invalid length. [ 64.936672][ T6407] __nla_validate_parse: 1 callbacks suppressed [ 64.936680][ T6407] netlink: 156 bytes leftover after parsing attributes in process `syz.2.98'. [ 65.046619][ T6203] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.088110][ T6418] overlay: Unknown parameter 'uid' [ 65.128001][ T6203] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.141466][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.147425][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.151382][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.156198][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.159828][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.161584][ T40] audit: type=1400 audit(1751003184.003:297): avc: denied { setopt } for pid=6423 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.162064][ T6424] sctp: [Deprecated]: syz.2.106 (pid 6424) Use of struct sctp_assoc_value in delayed_ack socket option. [ 65.162064][ T6424] Use struct sctp_sack_info instead [ 65.168430][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.181148][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.185187][ T5947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.189708][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.195057][ T5947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.280939][ T6203] bridge_slave_1: left allmulticast mode [ 65.283011][ T6203] bridge_slave_1: left promiscuous mode [ 65.285731][ T6203] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.291407][ T6203] bridge_slave_0: left allmulticast mode [ 65.294391][ T6203] bridge_slave_0: left promiscuous mode [ 65.296145][ T6203] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.578063][ T6203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.582729][ T6203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.586358][ T6203] bond0 (unregistering): Released all slaves [ 65.701488][ T6421] chnl_net:caif_netlink_parms(): no params data found [ 65.741488][ T6445] binder: 6444:6445 ioctl c0306201 2000000003c0 returned -14 [ 65.790914][ T6421] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.793433][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.795902][ T6421] bridge_slave_0: entered allmulticast mode [ 65.798577][ T6421] bridge_slave_0: entered promiscuous mode [ 65.815760][ T6421] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.818129][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.820392][ T6421] bridge_slave_1: entered allmulticast mode [ 65.823868][ T6421] bridge_slave_1: entered promiscuous mode [ 65.871456][ T6421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.880923][ T6203] hsr_slave_0: left promiscuous mode [ 65.887396][ T6203] hsr_slave_1: left promiscuous mode [ 65.889563][ T6203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.891864][ T6203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.909340][ T6203] veth1_macvtap: left promiscuous mode [ 65.911212][ T6203] veth0_macvtap: left promiscuous mode [ 65.913418][ T6203] veth1_vlan: left promiscuous mode [ 65.915767][ T6203] veth0_vlan: left promiscuous mode [ 65.969619][ T6460] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 66.285318][ T6470] syz.2.116 uses old SIOCAX25GETINFO [ 66.289881][ T6471] openvswitch: netlink: VXLAN extension message has 9 unknown bytes. [ 66.289893][ T6470] openvswitch: netlink: VXLAN extension message has 9 unknown bytes. [ 66.463835][ T6203] team0 (unregistering): Port device team_slave_1 removed [ 66.517153][ T6203] team0 (unregistering): Port device team_slave_0 removed [ 66.892973][ T6421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.899593][ T6460] gretap1: entered allmulticast mode [ 66.902452][ T6460] bridge0: port 3(gretap1) entered blocking state [ 66.904843][ T6460] bridge0: port 3(gretap1) entered disabled state [ 66.907652][ T6460] gretap1: entered promiscuous mode [ 66.909708][ T6460] bridge0: port 3(gretap1) entered blocking state [ 66.911922][ T6460] bridge0: port 3(gretap1) entered forwarding state [ 66.989698][ T6421] team0: Port device team_slave_0 added [ 67.004117][ T6421] team0: Port device team_slave_1 added [ 67.036110][ T6501] /dev/sg0: Can't lookup blockdev [ 67.050187][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'. [ 67.054970][ T6500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.122'. [ 67.067598][ T6421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.070134][ T6421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.080593][ T6421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.086543][ T6421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.089351][ T6421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.103860][ T6421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.142398][ T6509] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6509 comm=syz.1.125 [ 67.225938][ T6421] hsr_slave_0: entered promiscuous mode [ 67.228853][ T6421] hsr_slave_1: entered promiscuous mode [ 67.230888][ T6421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.234012][ T6421] Cannot create hsr debugfs directory [ 67.254241][ T5947] Bluetooth: hci3: command tx timeout [ 67.267243][ T6521] capability: warning: `syz.2.128' uses deprecated v2 capabilities in a way that may be insecure [ 67.350099][ T6532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.356652][ T6532] bond0: (slave rose0): Enslaving as an active interface with an up link [ 67.495812][ T6549] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.852021][ T6571] batadv_slave_1: entered promiscuous mode [ 67.853553][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 67.853565][ T40] audit: type=1400 audit(1751003186.703:327): avc: denied { create } for pid=6570 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.855061][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.137'. [ 67.856790][ T40] audit: type=1400 audit(1751003186.703:328): avc: denied { write } for pid=6570 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.934442][ T40] audit: type=1400 audit(1751003186.783:329): avc: denied { create } for pid=6578 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.940927][ T40] audit: type=1400 audit(1751003186.783:330): avc: denied { connect } for pid=6578 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.947420][ T40] audit: type=1400 audit(1751003186.783:331): avc: denied { write } for pid=6578 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.974387][ T6571] team0 (unregistering): Port device team_slave_0 removed [ 67.985741][ T6571] team0 (unregistering): Port device team_slave_1 removed [ 68.013619][ T6421] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.022187][ T6421] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.035879][ T6421] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.049135][ T6570] batadv_slave_1: left promiscuous mode [ 68.052123][ T6421] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.095065][ T6595] sockfs: Unknown parameter 'Z' [ 68.127601][ T6595] cgroup: release_agent respecified [ 68.144573][ T6421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.155545][ T6421] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.161133][ T6205] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.164121][ T6205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.174684][ T6600] netlink: 180 bytes leftover after parsing attributes in process `syz.2.141'. [ 68.176522][ T6214] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.177780][ T6600] netlink: 180 bytes leftover after parsing attributes in process `syz.2.141'. [ 68.180620][ T6214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.237425][ T6606] netlink: 'syz.2.142': attribute type 10 has an invalid length. [ 68.241894][ T6606] bond0: (slave bond_slave_0): Releasing backup interface [ 68.284919][ T6611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.143'. [ 68.316936][ T6421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.346666][ T6421] veth0_vlan: entered promiscuous mode [ 68.353319][ T6421] veth1_vlan: entered promiscuous mode [ 68.374652][ T6421] veth0_macvtap: entered promiscuous mode [ 68.378622][ T6421] veth1_macvtap: entered promiscuous mode [ 68.398504][ T6421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.407840][ T6421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.414684][ T6622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.146'. [ 68.416886][ T6421] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.421007][ T6421] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.424386][ T6421] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.427211][ T6421] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.435788][ T6622] team0: entered promiscuous mode [ 68.437926][ T6622] team_slave_0: entered promiscuous mode [ 68.439993][ T6622] team_slave_1: entered promiscuous mode [ 68.443409][ T6622] batadv_slave_1: entered promiscuous mode [ 68.486606][ T6630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.490015][ T6630] batadv_slave_0: entered promiscuous mode [ 68.491788][ T6630] batadv_slave_0: entered allmulticast mode [ 68.498604][ T6203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.501149][ T6203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.531019][ T40] audit: type=1400 audit(1751003187.373:332): avc: denied { create } for pid=6633 comm="syz.1.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 68.531767][ T6203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.543148][ T6203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.550416][ T40] audit: type=1400 audit(1751003187.393:333): avc: denied { mounton } for pid=6421 comm="syz-executor" path="/syzkaller.gHGPHY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.651710][ T40] audit: type=1400 audit(1751003187.493:334): avc: denied { getopt } for pid=6633 comm="syz.1.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 68.696874][ T40] audit: type=1400 audit(1751003187.543:335): avc: denied { ioctl } for pid=6648 comm="syz.2.153" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 68.708367][ T40] audit: type=1400 audit(1751003187.553:336): avc: denied { append } for pid=6650 comm="syz.0.154" name="v4l-subdev0" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.945824][ T6670] tmpfs: Bad value for 'mpol' [ 68.991360][ T6680] mmap: syz.3.164 (6680) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 69.148488][ T6703] netlink: 'syz.1.172': attribute type 5 has an invalid length. [ 69.151101][ T6703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=6703 comm=syz.1.172 [ 69.227561][ T6708] overlayfs: statfs failed on './file0' [ 69.333470][ T5947] Bluetooth: hci3: command tx timeout [ 69.401205][ T6712] netlink: 'syz.1.176': attribute type 1 has an invalid length. [ 69.423602][ T6718] binder: 6717:6718 ioctl c0306201 2000000003c0 returned -14 [ 69.443386][ T6725] binder: 6719:6725 ioctl c0306201 2000000003c0 returned -14 [ 69.446483][ T6725] binder: 6719:6725 ioctl c0306201 2000000001c0 returned -14 [ 69.449551][ T6725] binder: 6719:6725 ioctl c0306201 200000000680 returned -14 [ 69.638812][ T6732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.182'. [ 70.441302][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'. [ 70.449505][ T6767] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.452937][ T6767] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.496059][ T6769] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 70.501771][ T6769] overlayfs: missing 'lowerdir' [ 70.513019][ T6769] netlink: 'syz.2.194': attribute type 10 has an invalid length. [ 70.516781][ T6769] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.519149][ T6769] bridge0: port 2(bridge_slave_1) entered listening state [ 70.522114][ T6769] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.524342][ T6769] bridge0: port 1(bridge_slave_0) entered listening state [ 70.529646][ T6769] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 70.684276][ T6000] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 70.739298][ T6791] netlink: 32 bytes leftover after parsing attributes in process `syz.3.200'. [ 70.746120][ T6791] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 70.748311][ T6791] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 70.751456][ T6791] vhci_hcd vhci_hcd.0: Device attached [ 70.760073][ T6792] vhci_hcd: connection closed [ 70.761573][ T6204] vhci_hcd: stop threads [ 70.766927][ T6204] vhci_hcd: release socket [ 70.768686][ T6204] vhci_hcd: disconnect device [ 70.862850][ T1467] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 71.015058][ T1467] usb 7-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 71.018671][ T1467] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 71.026684][ T1467] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 71.030612][ T1467] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.034073][ T1467] usb 7-1: Product: syz [ 71.035889][ T1467] usb 7-1: Manufacturer: syz [ 71.037987][ T1467] usb 7-1: SerialNumber: syz [ 71.041761][ T1467] usb 7-1: config 0 descriptor?? [ 71.106456][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.108633][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.274778][ T6782] netlink: 'syz.2.199': attribute type 6 has an invalid length. [ 71.278056][ T6782] netlink: 32 bytes leftover after parsing attributes in process `syz.2.199'. [ 71.286873][ T1467] usb 7-1: USB disconnect, device number 2 [ 71.422910][ T5947] Bluetooth: hci3: command tx timeout [ 71.679160][ T6807] cgroup: noprefix used incorrectly [ 71.761586][ T6820] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 71.928358][ T6835] program syz.0.214 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.481733][ T6887] netlink: 'syz.2.230': attribute type 5 has an invalid length. [ 72.484291][ T6887] netlink: 'syz.2.230': attribute type 7 has an invalid length. [ 72.614146][ T6891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.231'. [ 72.821896][ T6899] TCP: TCP_TX_DELAY enabled [ 72.878022][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 72.878033][ T40] audit: type=1400 audit(1751003191.723:366): avc: denied { bind } for pid=6901 comm="syz.1.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 72.899707][ T6904] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 72.905017][ T6904] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 72.907274][ T6904] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 72.909561][ T6904] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 72.911905][ T6904] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 72.914389][ T6904] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 72.916703][ T6904] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 72.919207][ T6904] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 72.921784][ T6904] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 72.924126][ T6904] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 72.955445][ T6910] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 73.032323][ T40] audit: type=1400 audit(1751003191.873:367): avc: denied { read } for pid=6911 comm="syz.1.237" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 73.040050][ T40] audit: type=1400 audit(1751003191.883:368): avc: denied { open } for pid=6911 comm="syz.1.237" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 73.060670][ T40] audit: type=1400 audit(1751003191.903:369): avc: denied { setopt } for pid=6913 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.095169][ T40] audit: type=1400 audit(1751003191.943:370): avc: denied { read } for pid=6918 comm="syz.1.239" name="usbmon8" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 73.103272][ T40] audit: type=1400 audit(1751003191.943:371): avc: denied { open } for pid=6918 comm="syz.1.239" path="/dev/usbmon8" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 73.110619][ T40] audit: type=1400 audit(1751003191.953:372): avc: denied { name_bind } for pid=6918 comm="syz.1.239" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 73.200331][ T6921] ================================================================== [ 73.202891][ T6921] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x549/0x640 [ 73.205277][ T6921] Read of size 1 at addr ffff888054f47c30 by task syz.3.240/6921 [ 73.208760][ T6921] [ 73.209820][ T6921] CPU: 1 UID: 0 PID: 6921 Comm: syz.3.240 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 73.209836][ T6921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.209844][ T6921] Call Trace: [ 73.209849][ T6921] [ 73.209853][ T6921] dump_stack_lvl+0x116/0x1f0 [ 73.209871][ T6921] print_report+0xcd/0x680 [ 73.209888][ T6921] ? __virt_addr_valid+0x81/0x610 [ 73.209901][ T6921] ? __phys_addr+0xe8/0x180 [ 73.209913][ T6921] ? rose_get_neigh+0x549/0x640 [ 73.209929][ T6921] kasan_report+0xe0/0x110 [ 73.209944][ T6921] ? rose_get_neigh+0x549/0x640 [ 73.209957][ T6921] rose_get_neigh+0x549/0x640 [ 73.209973][ T6921] rose_connect+0x2d4/0x1540 [ 73.209985][ T6921] ? __pfx_rose_connect+0x10/0x10 [ 73.209995][ T6921] ? selinux_netlbl_socket_connect+0x30/0x40 [ 73.210011][ T6921] ? rcu_is_watching+0x12/0xc0 [ 73.210026][ T6921] ? __local_bh_enable_ip+0xa4/0x120 [ 73.210040][ T6921] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.210055][ T6921] ? selinux_netlbl_socket_connect+0x30/0x40 [ 73.210069][ T6921] ? __local_bh_enable_ip+0xa4/0x120 [ 73.210082][ T6921] ? selinux_netlbl_socket_connect+0x30/0x40 [ 73.210097][ T6921] ? selinux_socket_connect+0x6b/0x80 [ 73.210111][ T6921] ? __pfx_rose_connect+0x10/0x10 [ 73.210121][ T6921] __sys_connect_file+0x13e/0x1a0 [ 73.210136][ T6921] __sys_connect+0x13b/0x160 [ 73.210149][ T6921] ? __pfx___sys_connect+0x10/0x10 [ 73.210164][ T6921] ? xfd_validate_state+0x61/0x180 [ 73.210181][ T6921] __x64_sys_connect+0x72/0xb0 [ 73.210194][ T6921] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.210208][ T6921] do_syscall_64+0xcd/0x4c0 [ 73.210224][ T6921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.210235][ T6921] RIP: 0033:0x7f509af8e929 [ 73.210244][ T6921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.210254][ T6921] RSP: 002b:00007f509be3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 73.210265][ T6921] RAX: ffffffffffffffda RBX: 00007f509b1b5fa0 RCX: 00007f509af8e929 [ 73.210272][ T6921] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000004 [ 73.210278][ T6921] RBP: 00007f509b010b39 R08: 0000000000000000 R09: 0000000000000000 [ 73.210284][ T6921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.210290][ T6921] R13: 0000000000000000 R14: 00007f509b1b5fa0 R15: 00007ffc69f2c368 [ 73.210300][ T6921] [ 73.210304][ T6921] [ 73.286104][ T6921] Allocated by task 5344: [ 73.287469][ T6921] kasan_save_stack+0x33/0x60 [ 73.288957][ T6921] kasan_save_track+0x14/0x30 [ 73.290494][ T6921] __kasan_kmalloc+0xaa/0xb0 [ 73.291944][ T6921] kernfs_fop_open+0x244/0xda0 [ 73.293447][ T6921] do_dentry_open+0x744/0x1c10 [ 73.294963][ T6921] vfs_open+0x82/0x3f0 [ 73.296247][ T6921] path_openat+0x1de4/0x2cb0 [ 73.297829][ T6921] do_filp_open+0x20b/0x470 [ 73.299275][ T6921] do_sys_openat2+0x11b/0x1d0 [ 73.300780][ T6921] __x64_sys_openat+0x174/0x210 [ 73.302301][ T6921] do_syscall_64+0xcd/0x4c0 [ 73.303858][ T6921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.305720][ T6921] [ 73.306488][ T6921] Freed by task 5344: [ 73.307795][ T6921] kasan_save_stack+0x33/0x60 [ 73.309536][ T6921] kasan_save_track+0x14/0x30 [ 73.311029][ T6921] kasan_save_free_info+0x3b/0x60 [ 73.312618][ T6921] __kasan_slab_free+0x51/0x70 [ 73.314138][ T6921] kfree+0x2b4/0x4d0 [ 73.315371][ T6921] kernfs_fop_release+0x12c/0x1e0 [ 73.316928][ T6921] __fput+0x3ff/0xb70 [ 73.318181][ T6921] fput_close_sync+0x118/0x260 [ 73.319749][ T6921] __x64_sys_close+0x8b/0x120 [ 73.321242][ T6921] do_syscall_64+0xcd/0x4c0 [ 73.322675][ T6921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.324524][ T6921] [ 73.325295][ T6921] The buggy address belongs to the object at ffff888054f47c00 [ 73.325295][ T6921] which belongs to the cache kmalloc-512 of size 512 [ 73.329797][ T6921] The buggy address is located 48 bytes inside of [ 73.329797][ T6921] freed 512-byte region [ffff888054f47c00, ffff888054f47e00) [ 73.333903][ T6921] [ 73.334670][ T6921] The buggy address belongs to the physical page: [ 73.336659][ T6921] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888054f47c00 pfn:0x54f44 [ 73.339824][ T6921] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 73.342337][ T6921] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 73.344889][ T6921] page_type: f5(slab) [ 73.346116][ T6921] raw: 00fff00000000240 ffff88801b842c80 ffffea0000b86210 ffffea0000adfd10 [ 73.348851][ T6921] raw: ffff888054f47c00 000000000010000e 00000000f5000000 0000000000000000 [ 73.351603][ T6921] head: 00fff00000000240 ffff88801b842c80 ffffea0000b86210 ffffea0000adfd10 [ 73.354371][ T6921] head: ffff888054f47c00 000000000010000e 00000000f5000000 0000000000000000 [ 73.357141][ T6921] head: 00fff00000000002 ffffea000153d101 00000000ffffffff 00000000ffffffff [ 73.359920][ T6921] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 73.362699][ T6921] page dumped because: kasan: bad access detected [ 73.364773][ T6921] page_owner tracks the page as allocated [ 73.366566][ T6921] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5933, tgid 5933 (syz-executor), ts 54586685060, free_ts 54581863016 [ 73.373404][ T6921] post_alloc_hook+0x1c0/0x230 [ 73.374989][ T6921] get_page_from_freelist+0x1321/0x3890 [ 73.376765][ T6921] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 73.378759][ T6921] alloc_pages_mpol+0x1fb/0x550 [ 73.380357][ T6921] new_slab+0x23b/0x330 [ 73.381725][ T6921] ___slab_alloc+0xd9c/0x1940 [ 73.383224][ T6921] __slab_alloc.constprop.0+0x56/0xb0 [ 73.384954][ T6921] __kmalloc_cache_noprof+0xfb/0x3e0 [ 73.386599][ T6921] freezer_css_alloc+0x3b/0x70 [ 73.388188][ T6921] cgroup_apply_control_enable+0x4b0/0xbb0 [ 73.390060][ T6921] cgroup_mkdir+0x5e7/0x11f0 [ 73.391542][ T6921] kernfs_iop_mkdir+0x111/0x190 [ 73.393110][ T6921] vfs_mkdir+0x593/0x8c0 [ 73.394473][ T6921] do_mkdirat+0x304/0x3e0 [ 73.395836][ T6921] __x64_sys_mkdirat+0x83/0xb0 [ 73.397412][ T6921] do_syscall_64+0xcd/0x4c0 [ 73.398902][ T6921] page last free pid 5933 tgid 5933 stack trace: [ 73.400933][ T6921] __free_frozen_pages+0x7fe/0x1180 [ 73.402611][ T6921] stack_depot_save_flags+0x354/0xa40 [ 73.404331][ T6921] kasan_save_stack+0x42/0x60 [ 73.405859][ T6921] kasan_save_track+0x14/0x30 [ 73.407396][ T6921] __kasan_kmalloc+0xaa/0xb0 [ 73.409101][ T6921] __kmalloc_node_noprof+0x21e/0x500 [ 73.410941][ T6921] alloc_slab_obj_exts+0x41/0xa0 [ 73.412509][ T6921] new_slab+0x283/0x330 [ 73.413842][ T6921] ___slab_alloc+0xd9c/0x1940 [ 73.415322][ T6921] __slab_alloc.constprop.0+0x56/0xb0 [ 73.417012][ T6921] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 73.418973][ T6921] alloc_inode+0xc3/0x240 [ 73.420405][ T6921] iget_locked+0x2e4/0x830 [ 73.421826][ T6921] kernfs_get_inode+0x48/0x460 [ 73.423315][ T6921] kernfs_iop_lookup+0x1a7/0x2d0 [ 73.424842][ T6921] lookup_open.isra.0+0x4da/0x1580 [ 73.426431][ T6921] [ 73.427175][ T6921] Memory state around the buggy address: [ 73.429048][ T6921] ffff888054f47b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 73.431467][ T6921] ffff888054f47b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 73.433967][ T6921] >ffff888054f47c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 73.436448][ T6921] ^ [ 73.438192][ T6921] ffff888054f47c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 73.440646][ T6921] ffff888054f47d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 73.443119][ T6921] ================================================================== [ 73.446576][ C1] hpet: Lost 15 RTC interrupts [ 73.448455][ T6921] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 73.450699][ T6921] CPU: 1 UID: 0 PID: 6921 Comm: syz.3.240 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 73.454325][ T6921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.457691][ T6921] Call Trace: [ 73.458761][ T6921] [ 73.459698][ T6921] dump_stack_lvl+0x3d/0x1f0 [ 73.461120][ T6921] panic+0x71c/0x800 [ 73.462354][ T6921] ? __pfx_panic+0x10/0x10 [ 73.463707][ T6921] ? irqentry_exit+0x3b/0x90 [ 73.465178][ T6921] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.466816][ T6921] ? rose_get_neigh+0x549/0x640 [ 73.468375][ T6921] ? rose_get_neigh+0x549/0x640 [ 73.469930][ T6921] check_panic_on_warn+0xab/0xb0 [ 73.471646][ T6921] end_report+0x107/0x170 [ 73.472993][ T6921] kasan_report+0xee/0x110 [ 73.474360][ T6921] ? rose_get_neigh+0x549/0x640 [ 73.475828][ T6921] rose_get_neigh+0x549/0x640 [ 73.477243][ T6921] rose_connect+0x2d4/0x1540 [ 73.478726][ T6921] ? __pfx_rose_connect+0x10/0x10 [ 73.480254][ T6921] ? selinux_netlbl_socket_connect+0x30/0x40 [ 73.482056][ T6921] ? rcu_is_watching+0x12/0xc0 [ 73.483547][ T6921] ? __local_bh_enable_ip+0xa4/0x120 [ 73.485167][ T6921] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.486762][ T6921] ? selinux_netlbl_socket_connect+0x30/0x40 [ 73.488628][ T6921] ? __local_bh_enable_ip+0xa4/0x120 [ 73.490272][ T6921] ? selinux_netlbl_socket_connect+0x30/0x40 [ 73.492171][ T6921] ? selinux_socket_connect+0x6b/0x80 [ 73.493877][ T6921] ? __pfx_rose_connect+0x10/0x10 [ 73.495449][ T6921] __sys_connect_file+0x13e/0x1a0 [ 73.497016][ T6921] __sys_connect+0x13b/0x160 [ 73.498494][ T6921] ? __pfx___sys_connect+0x10/0x10 [ 73.500100][ T6921] ? xfd_validate_state+0x61/0x180 [ 73.501731][ T6921] __x64_sys_connect+0x72/0xb0 [ 73.503238][ T6921] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.504875][ T6921] do_syscall_64+0xcd/0x4c0 [ 73.506306][ T6921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.508142][ T6921] RIP: 0033:0x7f509af8e929 [ 73.509524][ T6921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.515232][ T6921] RSP: 002b:00007f509be3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 73.517828][ T6921] RAX: ffffffffffffffda RBX: 00007f509b1b5fa0 RCX: 00007f509af8e929 [ 73.520269][ T6921] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000004 [ 73.522685][ T6921] RBP: 00007f509b010b39 R08: 0000000000000000 R09: 0000000000000000 [ 73.525072][ T6921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.527618][ T6921] R13: 0000000000000000 R14: 00007f509b1b5fa0 R15: 00007ffc69f2c368 [ 73.530168][ T6921] [ 73.531814][ T6921] Kernel Offset: disabled [ 73.533216][ T6921] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:46:32 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffffff93ce1228 RCX=ffffc90000128001 RDX=1ffffffff1be4db4 RSI=ffffffff8c157b20 RDI=ffffffff8df26da0 RBP=0000000000000000 RSP=ffffc90000127630 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=00000000000061e3 R12=ffffc90000127758 R13=ffffc90000127708 R14=ffffc900001277a8 R15=ffffc9000012773c RIP=ffffffff81a15d31 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6752000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f509b183338 CR3=000000005700e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad3f211b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad3f211b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad3f211b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad3f211b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad3f211bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad3f211c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007265746c6966 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad3feed100 00007fad3f384440 00007fad3f384458 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad3f384498 00007fad3f384490 00007fad3f384488 00007fad3f384480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bb115 RDI=ffffffff9b088320 RBP=ffffffff9b0882e0 RSP=ffffc90003a2f688 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b0882e0 R15=ffffffff855bb0b0 RIP=ffffffff855bb13f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f509be3f6c0 ffffffff 00c00000 GS =0000 ffff8880d6852000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000100 CR3=000000004dad9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f509b011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f509b011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f509b011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f509b011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f509b011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f509b011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f509b184488 00007f509b184480 00007f509b184478 00007f509b184450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f509bced100 00007f509b184440 00007f509b184458 00007f509b1844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f509b184498 00007f509b184490 00007f509b184488 00007f509b184480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffffea00011bc440 RCX=ffffffff81f7d5d4 RDX=1ffffd4000237888 RSI=0000000000000008 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc9000432f4a8 R8 =0000000000000000 R9 =fffff94000237888 R10=ffffea00011bc447 R11=0000000000000001 R12=ffff88801ce88048 R13=dffffc0000000000 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff81f7d5fc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f64ef192880 ffffffff 00c00000 GS =0000 ffff8880d6952000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdf1277e2d8 CR3=0000000050ff6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002012492 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000c0c0fc02 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564416d60c50 0000564416d60c50 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 0000564416b62760 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64eebf1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d43e942c1ab908c 2f2f796e5dd84c2f ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2ffe 2f2f2f2f2f2f2f1f ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6c6174735f7563 725f78616d006c74 6373797300313d65 6c62616e00300030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7766732c342c332c 322c312c306c6d61 722c32432c31432c 30432c46422c4542 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c44422c43422c42 422c41422c39422c 38422c37422c3242 2c31422c30422c44 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 412c36412c35412c 34412c33412c3141 2c46392c45392c38 392c36392c45382c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 43382c41382c3938 2c38382c37382c36 382c35382c34382c 33382c32382c3138 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000010 0000000000000030 00003a4416425153 0000312f71651b00 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88806a5420a0 RCX=ffffffff81b001cd RDX=ffff8880250b0000 RSI=ffffffff81b001a9 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc90006657690 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed100d4a8415 R15=ffff88806a73b580 RIP=ffffffff81b001ab RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055556f74b500 ffffffff 00c00000 GS =0000 ffff8880d6a52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdf132e56c0 CR3=00000000484d9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff0c27b930 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf12611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf12611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf12611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf12611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf12611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf12611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000d0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000d0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000