last executing test programs: 6.62593712s ago: executing program 1 (id=143): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffc, 0x6, 0x4, @buffer={0x0, 0x1000, &(0x7f0000001d80)=""/4096}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x0, 0x30, 0x0, 0x0}) r2 = io_uring_setup(0x1592, &(0x7f0000000140)={0x0, 0xd127, 0x1, 0x0, 0x23}) io_uring_enter(r2, 0x7240, 0xb49e, 0x45, &(0x7f0000000100)={[0x1]}, 0x8) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) 6.564542699s ago: executing program 1 (id=144): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x70bd29, 0x0, {0x1c}}, 0x1c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x79, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6.315941007s ago: executing program 1 (id=147): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) (async) r1 = getpgrp(0x0) r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0xb, &(0x7f00000007c0)={0x83b, 0x8000006, 0x3}) (async, rerun: 64) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) (rerun: 64) read$FUSE(r3, &(0x7f0000002bc0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) (async, rerun: 32) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 32) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x21, &(0x7f00000007c0)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x31]}}]}) (async) bind$ax25(r0, &(0x7f0000000540)={{0x3, @null, 0x2}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x48) 6.315654687s ago: executing program 1 (id=148): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket(0x10, 0x3, 0x0) shutdown(r1, 0x1) r2 = fcntl$dupfd(r0, 0x0, r0) socket$unix(0x1, 0x2, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x5421, &(0x7f0000000240)=@attr_arm64={0x0, 0x7, 0x1, 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETGROUP(r6, 0x400454ce, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_extract_tcp_res(0x0, 0x6, 0x51) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x13732000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, 0x0) 5.235549723s ago: executing program 1 (id=157): r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'lblcr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x0, 0x3, 0x0, {0x20, 0x1}, {0x45, 0x2}, @const={0x4, {0xff7c, 0xff, 0xffff, 0x7}}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x9e1981) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) bind$tipc(r3, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0xb, @vbi={0x38305542, 0x800e8, 0x0, 0x3136564e, [0xfffffffb], [0x6], 0x1}}) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000140)=0x4) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f0000000080)) 3.944242895s ago: executing program 0 (id=170): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r4], 0xfdef) read$FUSE(r2, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xf9, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0x5, 0x0, 0x0, 0x0}) write$tun(r2, &(0x7f0000000400)=ANY=[], 0xa2) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008001400", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 3.755823546s ago: executing program 0 (id=175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x883e}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6007}]}, 0x24}}, 0x4000005) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x4800) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 3.619748929s ago: executing program 0 (id=180): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x70bd29, 0x0, {0x1c}}, 0x1c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.295778493s ago: executing program 0 (id=181): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x103000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000180)={0x13, 0x0, 0xd}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) (async) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000)='jfs\x00', 0x8080, &(0x7f00000001c0)='discard') (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0e808809bbbbbbbbbbbbaaaaaaaaaabb0800450000240065000000049078e0000002000000004e23000000109078000400010000008b"], 0x36) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100002000) 3.075164387s ago: executing program 0 (id=182): r0 = fanotify_init(0x1a, 0x800) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r0, 0x441, 0x4800001a, r1, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x7a, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff000000008500"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) close(0x3) 2.195902571s ago: executing program 1 (id=189): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x70bd29, 0x0, {0x1c}}, 0x1c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x79, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.93552138s ago: executing program 2 (id=192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x34, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4020010) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x20) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r4, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r5, r4}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000d000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098e00000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r10, r9, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9a53}, 0x8) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706599a0000008f18608a7f3d76da000000000000000000"], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r6, @ANYRES16=r1, @ANYBLOB="010000000000000000000f000000050030000000000005002f000300000008000300", @ANYRES16=r1, @ANYRES16=r4, @ANYRESHEX=r5], 0x2c}}, 0x200408c1) 1.815510117s ago: executing program 2 (id=193): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_io_uring_setup(0x61ac, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)={[{@nr_blocks={'nr_blocks', 0x3d, [0x38]}}]}) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)={[{@nr_blocks={'nr_blocks', 0x3d, [0x38]}}]}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1010"], 0x1010}, 0x0, 0xe3d08660d3cd4684}) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af7ed3c}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROTECT={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4050) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af7ed3c}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROTECT={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4050) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x42) io_uring_enter(r0, 0x92, 0x2, 0x9, 0x0, 0x0) 1.635433274s ago: executing program 2 (id=194): r0 = socket$packet(0x11, 0xa, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000001c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000600)="ea289ff7b0be2494d1efdaa80d97e0f133ea2b20b9650613c8935fc64947afbec4cbce4ce315bf2d94deca59691fa91442e3681a83311d54ca8323fe1cb81dece430ee3376944fb54d076bb94fc59e16560764d1e091b65e7be836dc9581ac5605b66e056bb16a00e2817583166b6186efb0e1bff32ffb5135ae0fe3329fe95cf0f23dcb156622385f614afc6d8b0759018a0925541c1359725a41a456c453155661fdccf3d0e094a5", 0xa9}, {&(0x7f00000006c0)="d8be7a9eb7cdf58341df4062bd8db4513cd9f71bf7983be17af4bcb6161478e207d8305f257a6f1ea315692f9d95c5cf7fa1b06fe31df8a0977365b0c6d84f4574b154b085d88129730c7915feb56f026bd433ae31f969f6d79ccc6867dedd5cd8e8751fa0795d08328fb8a2c1aa6e8f48c989764a997d3132805e9e710c497332f39c61bd6439ba4c996451ea9af926b5b3ea543af018a95b", 0x99}, {&(0x7f0000000280)="07fde096153aa24d2dfa55621bcbf0af6aa1a13a0f5942120a4f434d3f698fa1f6dbe87363ab7b640dfd753fefb60e2266", 0x31}, {&(0x7f0000000780)="747c2aa6327439de1d6827b98d134f16423d7b4c749a9d6b5ed76088b395b9869eb9d379fe6ab1025f839f163780160c4a9d6e70238288c67cc5d617edaabf89772bad2e9d578f10eb96c94420b940da099ed9a06fad0ec36106020139d21a89b8139d910f2eaa2b0ea190539b24f968b6eeb821fed1440443aa1c884e38f1dd7a8c8cd08e9a794565a4b46035402901f931bc0cb4639924e4699c80177fcafc9047d9e73ea0c2ef28e83a7641a077e417b9137fd20bdc63d3dc55028c0ba00aae64856734f163152c58bedd90e45e9b24932bdef7ad8083530077f24006fafecd2ce38d76cdf105213f5fc29f4449afd2f04a76fd356ffcb3457c583556a1", 0xff}, {&(0x7f00000002c0)="694030dc495855afe3a200308ad01e1e916d", 0x12}, {&(0x7f0000000340)}], 0x6}, 0x8000) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1a004e0078768000", 0x4, 0x2}) (async, rerun: 64) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) (rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) (async, rerun: 32) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xf9) (async, rerun: 32) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x3) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0xb) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)=0x7) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x7f) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x30, 0x5}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000100)='fusectl\x00', 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000043000701fefffffffcdb4600017c00af17eb1e33"], 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) (async, rerun: 64) r6 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) (rerun: 64) ftruncate(r6, 0x80079a0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r7, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r7, r6, 0x0, 0x1) 1.375076109s ago: executing program 2 (id=196): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) (async) ioctl(r2, 0x8b33, &(0x7f0000000040)) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x7) (async, rerun: 64) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 64) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f0000000100)=0x4, 0x4) (async, rerun: 32) bind$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) (async, rerun: 32) sendto$inet(r7, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) (async) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r7, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000004f0001"], 0x14}}, 0x800) getpeername$inet(r1, 0x0, &(0x7f00000003c0)) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x20101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1800e7ff34000900fffffffffedbdf250200040008000000"], 0x18}}, 0x804) (async, rerun: 32) prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) (async, rerun: 32) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000200)=0x1000000) sched_setattr(0x0, &(0x7f0000000000)={0x63}, 0x0) 1.285779654s ago: executing program 2 (id=197): r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'lblcr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x0, 0x3, 0x0, {0x20, 0x1}, {0x45, 0x2}, @const={0x4, {0xff7c, 0xff, 0xffff, 0x7}}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x9e1981) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, &(0x7f00007d0000)) bind$tipc(r3, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0xb, @vbi={0x38305542, 0x800e8, 0x0, 0x3136564e, [0xfffffffb], [0x6], 0x1}}) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000140)=0x4) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f0000000080)) 505.657196ms ago: executing program 0 (id=206): r0 = gettid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)={0x1c, 0x33, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid=r0}]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r3, &(0x7f0000000340)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 504.274639ms ago: executing program 3 (id=207): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000001d40)={0x6, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000001dc0)={0x0, r2}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x0, [0xd7, 0x4, 0x0, 0x6, 0xe, 0x1], 0x2, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000640)={0x1, 0x1, 0x8, 0x9, 0x152, &(0x7f0000000240)}) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000680)={{0x1, @multicast2, 0x4e23, 0x2, 'dh\x00', 0x0, 0x8, 0x71}, {@local, 0x4e23, 0x2000, 0x3, 0x7a348ca9, 0x70000000}}, 0x44) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000700), &(0x7f0000000740)=0x4) preadv(r0, &(0x7f0000000840)=[{&(0x7f0000000780)=""/169, 0xa9}], 0x1, 0x8, 0xff7) r6 = fsmount(r3, 0x1, 0x85) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f00000009c0)={0x0, 0x1}) sendmsg$sock(r5, &(0x7f0000001ac0)={&(0x7f0000000a00)=@generic={0xa, "cb2f4e0c0b4febe0ad021cc051ad3492b2358c21a4f8080867abef9375bb3846536831aa28ea9573a312b1d498e6303de80e6dfb976e7ed22f017c97ec3225bc5281f2e8e27331ecee4c1ef1d8fbabc4120ab0fb24e8c4f56eb7c906bf187d90c769518ca3474c92aca5f1cd8e45b6637ce852252df7d4f0b11cb02e98f0"}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000a80)="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", 0x1000}], 0x1}, 0x10) write$P9_RATTACH(r6, &(0x7f0000001b00)={0x14, 0x69, 0x2, {0x80, 0x1, 0x2}}, 0x14) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000001b40)={0x0, 0xb04000}, &(0x7f0000001b80)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000001bc0)={r7, 0x3, 0x0, 0x4, 0xd, 0x0, 0x4, 0x7, {0x0, @in6={{0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xdb3}}, 0xffff, 0x8001, 0x0, 0x1, 0x1}}, &(0x7f0000001c80)=0xb0) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000001cc0)={0x6, 0x7, 0x7}) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000001d00)={r8, 0x6}, 0x8) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000001e00), &(0x7f0000001e40)=0x4) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000040)={@empty, @dev, 0x0}, &(0x7f0000000080)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl0\x00', r10, 0x29, 0x4, 0x9, 0x200, 0x50, @remote, @loopback, 0x700, 0x10, 0xb6, 0x6}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001d80)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r11, 0xc01064b5, &(0x7f0000000980)={&(0x7f0000000940)=[0x0], 0x1}) 415.797412ms ago: executing program 3 (id=208): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRES8]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0xbddc, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x4010, 0xffffffffffffffff, 0xa3b36000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'/20, @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8c0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000000)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008380), 0x0, 0x4008890) chdir(&(0x7f0000000080)='./file1\x00') r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000280)='./file1\x00', 0x190) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x288203, 0x0) 305.785591ms ago: executing program 3 (id=209): add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x201000, 0x1000}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='cubic', 0x6) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000000580)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x5c, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer={0x40086303, r6}, @enter_looper, @increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffc, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000001c80)={0x0, &(0x7f0000001bc0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000640)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000001cc0)={0x0, 0x0, r8, r9, 0x37, 0x7, 0x8, 0x1ff, {0x1, 0x870, 0x7ff, 0xd918, 0x1, 0xa14, 0x4, 0x400, 0x3, 0x9, 0xb004, 0x5, 0x1, 0x800, "4896fcb6c55ac45cea84d38f3656cfeab00100010048a881a711450ea4fa58ff"}}) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0x7fff, 0x0, 0xfffffffd, 0x1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000600)={0x2, &(0x7f00000005c0)=[{0xfff8, 0x94, 0x8}, {0x8c4, 0x5, 0x3a, 0x73e4}]}, 0x10) write(r10, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000010000000008001c0001000000", 0x24) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e21, @private=0xa010101}}, 0x9, 0x3, 0xbdb, 0x2799df21, 0x3}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000280)={r11, 0x3, 0x9, 0xd48f}, &(0x7f0000000300)=0x10) 205.86895ms ago: executing program 3 (id=210): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x8, @pix_mp={0x10001, 0x2, 0x32315258, 0x1, 0x3, [{0x8, 0x6}, {0x7fff, 0x8}, {0x2, 0x4}, {0x2, 0xffff}, {0x9, 0x3}, {0x1000, 0x3ff}, {0x4, 0x3}, {0x6, 0x9}], 0x81, 0x3, 0x6, 0x0, 0x7}}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000041c0)=0xe, 0x4) 195.07061ms ago: executing program 3 (id=211): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) epoll_create(0xff9) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x40000, 0x30002, 0x80, 0x0, 0x0, 0x3}}, 0x50) read$FUSE(r1, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r4, r1, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x2ff, 0x400000000000300, 0x0, 0x0, 0x0, 0x379e}, 0x0, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x110a, 0x80001}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000002280)={0xffffffffffffffd2, 0x0, 0x0, 0x4, 0x0, &(0x7f00000022c0)="c9e63a4c"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 273.206µs ago: executing program 2 (id=212): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r2 = dup(r1) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000040)=0x10000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x2c93a000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)={0x14, 0x3a, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 0s ago: executing program 3 (id=213): r0 = msgget$private(0x0, 0x200) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/187) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x1, 0x8000, 0xffffffff, 0x1, {{0x1a, 0x4, 0x2, 0xa, 0x68, 0x64, 0x8, 0xe, 0x2f, 0x0, @multicast1, @multicast2, {[@generic={0x44, 0xa, "aaec633fce6571cc"}, @timestamp_prespec={0x44, 0x3c, 0xcf, 0x3, 0x5, [{@remote, 0xffff}, {@private=0xa010102, 0x5}, {@loopback, 0x6}, {@broadcast, 0x165e3682}, {@local, 0xa0}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x7}]}, @ssrr={0x89, 0xb, 0xbb, [@multicast1, @broadcast]}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x1000001, {0x0, 0x0, 0x0, r4, {0xfff1, 0xa}}}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x5, 0xdd, 0xfffffffa, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7800, 0x700, 0xfffffc00, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000500)=@newtaction={0x18c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x178, 0x1, [@m_mirred={0x144, 0x0, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xb0, 0x20000000, 0xc0, 0x9}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x5, 0x5, 0xad600, 0x6}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff2, 0x6, 0xffffffffffffffff, 0x3df, 0x9}, 0x0, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x6, 0x4542f65128ef3908, 0x9, 0x5}, 0x3, r8}}]}, {0x96, 0x6, "84057404ad726141de68c2ae367bea0461897bcb2f5734848738c5d8a4505430fd5fa8a697a6347fdcd4df7b1d4573113b275b14c265bf846c541ef39bcc80e2216ada3285a5ffa5b145b800c539e6d0c6dfa62b3dc0e39e3150f21d22dacf9280000fe2dc27c26077dfdc5eb3f51bf556a1aa1e1a2f6ed2b4cd5d7ce17c6619a6480a43e3f4a213c84d09b816475ea29b10"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x18c}}, 0x0) kernel console output (not intermixed with test programs): [ 53.084455][ T40] audit: type=1400 audit(1769293633.436:61): avc: denied { siginh } for pid=5912 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:47867' (ED25519) to the list of known hosts. [ 55.104985][ T40] audit: type=1400 audit(1769293635.476:62): avc: denied { name_bind } for pid=5919 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.143164][ T40] audit: type=1400 audit(1769293635.516:63): avc: denied { execute } for pid=5920 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 55.151591][ T40] audit: type=1400 audit(1769293635.516:64): avc: denied { execute_no_trans } for pid=5920 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 57.343751][ T40] audit: type=1400 audit(1769293637.716:65): avc: denied { mounton } for pid=5920 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.352254][ T40] audit: type=1400 audit(1769293637.726:66): avc: denied { mount } for pid=5920 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.353989][ T5920] cgroup: Unknown subsys name 'net' [ 57.484364][ T5920] cgroup: Unknown subsys name 'cpuset' [ 57.489648][ T5920] cgroup: Unknown subsys name 'rlimit' [ 57.716476][ T5925] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.397795][ T5920] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.349802][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 61.352879][ T40] audit: type=1400 audit(1769293641.706:82): avc: denied { execmem } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 61.514640][ T40] audit: type=1400 audit(1769293641.886:83): avc: denied { create } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.527977][ T40] audit: type=1400 audit(1769293641.886:84): avc: denied { read write } for pid=5933 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.536060][ T5942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.538838][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.542083][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.544724][ T5937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.544809][ T5946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.547565][ T5948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.550057][ T40] audit: type=1400 audit(1769293641.886:85): avc: denied { open } for pid=5933 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.552315][ T5937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.559124][ T40] audit: type=1400 audit(1769293641.886:86): avc: denied { ioctl } for pid=5933 comm="syz-executor" path="socket:[6736]" dev="sockfs" ino=6736 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.561860][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.567342][ T5945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.574986][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.575729][ T5951] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.577949][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.580648][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.582407][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.588748][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.591827][ T5295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.591883][ T5949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.593223][ T40] audit: type=1400 audit(1769293641.966:87): avc: denied { read } for pid=5935 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.593709][ T40] audit: type=1400 audit(1769293641.966:88): avc: denied { open } for pid=5935 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.595228][ T40] audit: type=1400 audit(1769293641.966:89): avc: denied { mounton } for pid=5935 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 61.597090][ T5948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.604791][ T5295] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.632768][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.797641][ T40] audit: type=1400 audit(1769293642.166:90): avc: denied { module_request } for pid=5935 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 61.822464][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 61.844473][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 61.960009][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.963269][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.966016][ T5935] bridge_slave_0: entered allmulticast mode [ 61.969276][ T5935] bridge_slave_0: entered promiscuous mode [ 61.989238][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.991887][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.994325][ T5939] bridge_slave_0: entered allmulticast mode [ 61.997202][ T5939] bridge_slave_0: entered promiscuous mode [ 62.000137][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.002451][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.004908][ T5935] bridge_slave_1: entered allmulticast mode [ 62.007642][ T5935] bridge_slave_1: entered promiscuous mode [ 62.028132][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.030622][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.033085][ T5939] bridge_slave_1: entered allmulticast mode [ 62.035717][ T5939] bridge_slave_1: entered promiscuous mode [ 62.046423][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.055830][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.084280][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.087381][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 62.094979][ T5935] team0: Port device team_slave_0 added [ 62.098118][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.105757][ T5935] team0: Port device team_slave_1 added [ 62.136724][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.138923][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.147667][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.157228][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.159404][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.168953][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.184153][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 62.193119][ T5939] team0: Port device team_slave_0 added [ 62.222527][ T5939] team0: Port device team_slave_1 added [ 62.265151][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.267515][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.275685][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.305287][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.307590][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.315784][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.343070][ T5935] hsr_slave_0: entered promiscuous mode [ 62.345407][ T5935] hsr_slave_1: entered promiscuous mode [ 62.353608][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.355936][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.358266][ T5933] bridge_slave_0: entered allmulticast mode [ 62.361200][ T5933] bridge_slave_0: entered promiscuous mode [ 62.371577][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.374511][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.376903][ T5933] bridge_slave_1: entered allmulticast mode [ 62.379513][ T5933] bridge_slave_1: entered promiscuous mode [ 62.389085][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.391820][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.394122][ T5947] bridge_slave_0: entered allmulticast mode [ 62.396866][ T5947] bridge_slave_0: entered promiscuous mode [ 62.416445][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.419187][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.421846][ T5947] bridge_slave_1: entered allmulticast mode [ 62.424510][ T5947] bridge_slave_1: entered promiscuous mode [ 62.439229][ T5939] hsr_slave_0: entered promiscuous mode [ 62.441953][ T5939] hsr_slave_1: entered promiscuous mode [ 62.444170][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 62.446052][ T5939] Cannot create hsr debugfs directory [ 62.461343][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.483780][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.488533][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.500791][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.543678][ T5933] team0: Port device team_slave_0 added [ 62.553907][ T5947] team0: Port device team_slave_0 added [ 62.556770][ T5933] team0: Port device team_slave_1 added [ 62.566948][ T5947] team0: Port device team_slave_1 added [ 62.608705][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.610963][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.619047][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.632024][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.635046][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.645915][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.651238][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.653477][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.661699][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.676563][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.679511][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.690383][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.773852][ T5933] hsr_slave_0: entered promiscuous mode [ 62.776169][ T5933] hsr_slave_1: entered promiscuous mode [ 62.778284][ T5933] debugfs: 'hsr0' already exists in 'hsr' [ 62.780314][ T5933] Cannot create hsr debugfs directory [ 62.813187][ T5947] hsr_slave_0: entered promiscuous mode [ 62.815601][ T5947] hsr_slave_1: entered promiscuous mode [ 62.818039][ T5947] debugfs: 'hsr0' already exists in 'hsr' [ 62.819973][ T5947] Cannot create hsr debugfs directory [ 62.877165][ T5935] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.883812][ T5935] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.895685][ T5935] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.914160][ T5935] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.002952][ T5939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.013026][ T5939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.026902][ T5939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.031964][ T5939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.090997][ T5933] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.097619][ T5933] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.113984][ T5933] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.121931][ T5933] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.172248][ T5947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.181519][ T5947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.186120][ T5947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.190921][ T5947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.199045][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.234714][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.255008][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.258087][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.269140][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.276277][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.278603][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.299059][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.316401][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.326290][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.329554][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.346137][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.352462][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.355567][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.374553][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.376876][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.387338][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.389651][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.406131][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.444777][ T40] audit: type=1400 audit(1769293643.816:91): avc: denied { sys_module } for pid=5935 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.461204][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.490746][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.493109][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.499884][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.502268][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.545069][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.584739][ T5935] veth0_vlan: entered promiscuous mode [ 63.589779][ T5935] veth1_vlan: entered promiscuous mode [ 63.614997][ T5935] veth0_macvtap: entered promiscuous mode [ 63.619607][ T5935] veth1_macvtap: entered promiscuous mode [ 63.631694][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.636307][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.644133][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.653096][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.659575][ T1149] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.663713][ T1149] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.668750][ T1149] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.673061][ T1149] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.680440][ T5946] Bluetooth: hci3: command tx timeout [ 63.681740][ T64] Bluetooth: hci2: command tx timeout [ 63.681779][ T5951] Bluetooth: hci1: command tx timeout [ 63.682010][ T5295] Bluetooth: hci0: command tx timeout [ 63.706715][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.736105][ T5939] veth0_vlan: entered promiscuous mode [ 63.759166][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.763592][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.766549][ T5939] veth1_vlan: entered promiscuous mode [ 63.778075][ T5933] veth0_vlan: entered promiscuous mode [ 63.802106][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.805066][ T5933] veth1_vlan: entered promiscuous mode [ 63.805116][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.812390][ T5947] veth0_vlan: entered promiscuous mode [ 63.831655][ T5939] veth0_macvtap: entered promiscuous mode [ 63.835495][ T5947] veth1_vlan: entered promiscuous mode [ 63.844200][ T5935] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 63.846113][ T5939] veth1_macvtap: entered promiscuous mode [ 63.859066][ T5933] veth0_macvtap: entered promiscuous mode [ 63.865940][ T5933] veth1_macvtap: entered promiscuous mode [ 63.885493][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.898049][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.914629][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.925539][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.939651][ T5947] veth0_macvtap: entered promiscuous mode [ 63.943227][ T1149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.954027][ T1239] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.966215][ T1239] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.970835][ T1239] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.974679][ T5947] veth1_macvtap: entered promiscuous mode [ 63.978485][ T1239] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.982210][ T1239] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.993738][ T1239] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.997353][ T1239] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.042007][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.045209][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.053883][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.066936][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.069469][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.072472][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.082816][ T1239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.086398][ T1239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.098410][ T1239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.102117][ T1239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.121135][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.124439][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.173807][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.176586][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.190742][ T29] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 64.225354][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.227914][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.267021][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.279895][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.362052][ T29] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 64.366015][ T29] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 64.368632][ T29] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 64.373815][ T6039] process 'syz.0.1' launched './file0' with NULL argv: empty string added [ 64.377314][ T29] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 64.382350][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 64.386308][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 64.390567][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 64.398036][ T29] usb 8-1: string descriptor 0 read error: -22 [ 64.400684][ T29] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 64.403504][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.408643][ T29] usb 8-1: config 0 descriptor?? [ 64.420998][ T29] hub 8-1:0.0: bad descriptor, ignoring hub [ 64.423973][ T29] hub 8-1:0.0: probe with driver hub failed with error -5 [ 64.432776][ T29] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input5 [ 64.436474][ T6043] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.509107][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 64.513180][ T6043] bridge_slave_1: left allmulticast mode [ 64.515708][ T6043] bridge_slave_1: left promiscuous mode [ 64.519062][ T6043] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.528020][ T6043] bridge_slave_0: left allmulticast mode [ 64.531501][ T6043] bridge_slave_0: left promiscuous mode [ 64.533831][ T6043] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.667138][ T56] IPVS: starting estimator thread 0... [ 64.727554][ T29] usb 8-1: USB disconnect, device number 2 [ 64.760609][ T6048] IPVS: using max 42 ests per chain, 100800 per kthread [ 64.833105][ T6056] netlink: 'syz.1.9': attribute type 4 has an invalid length. [ 64.842039][ T6056] netlink: 'syz.1.9': attribute type 4 has an invalid length. [ 64.927975][ T6062] Zero length message leads to an empty skb [ 64.930099][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 65.015707][ T6072] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.13'. [ 65.016921][ T6071] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.484642][ T6089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20'. [ 65.750531][ T64] Bluetooth: hci3: command tx timeout [ 65.750575][ T5946] Bluetooth: hci0: command tx timeout [ 65.750610][ T5951] Bluetooth: hci1: command tx timeout [ 65.750660][ T5295] Bluetooth: hci2: command tx timeout [ 65.763432][ T53] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 65.911697][ T53] usb 5-1: unable to get BOS descriptor or descriptor too short [ 65.914973][ T53] usb 5-1: not running at top speed; connect to a high speed hub [ 65.918569][ T53] usb 5-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.923116][ T53] usb 5-1: config 1 interface 0 has no altsetting 0 [ 65.928127][ T53] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.931579][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.934404][ T53] usb 5-1: Product: syz [ 65.935903][ T53] usb 5-1: Manufacturer: syz [ 65.937581][ T53] usb 5-1: SerialNumber: syz [ 66.154506][ T53] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 66.172432][ T53] usb 5-1: USB disconnect, device number 2 [ 66.240056][ T29] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 66.287934][ T6114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'. [ 66.292042][ T6114] bridge_slave_1: left allmulticast mode [ 66.294621][ T6114] bridge_slave_1: left promiscuous mode [ 66.297197][ T6114] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.304173][ T6114] bridge_slave_0: left allmulticast mode [ 66.306644][ T6114] bridge_slave_0: left promiscuous mode [ 66.309700][ T6114] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.395687][ T6124] xt_l2tp: v2 doesn't support IP mode [ 66.404787][ T29] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 66.412828][ T29] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 66.416685][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 66.421287][ T29] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 66.426227][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 66.430906][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 66.435370][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 66.444712][ T29] usb 6-1: string descriptor 0 read error: -22 [ 66.447754][ T29] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 66.452569][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.458594][ T29] usb 6-1: config 0 descriptor?? [ 66.464171][ T29] hub 6-1:0.0: bad descriptor, ignoring hub [ 66.467279][ T29] hub 6-1:0.0: probe with driver hub failed with error -5 [ 66.476733][ T29] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input6 [ 66.603690][ T40] kauditd_printk_skb: 93 callbacks suppressed [ 66.603708][ T40] audit: type=1400 audit(1769293646.976:185): avc: denied { create } for pid=6128 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 66.616059][ T40] audit: type=1400 audit(1769293646.976:186): avc: denied { write } for pid=6128 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 66.625129][ T40] audit: type=1400 audit(1769293646.976:187): avc: denied { open } for pid=6128 comm="syz.3.34" path="/dev/ptyqa" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 66.636812][ T40] audit: type=1400 audit(1769293646.976:188): avc: denied { ioctl } for pid=6128 comm="syz.3.34" path="/dev/ptyqa" dev="devtmpfs" ino=137 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 66.648235][ T40] audit: type=1400 audit(1769293646.986:189): avc: denied { read write } for pid=6128 comm="syz.3.34" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 66.663441][ T40] audit: type=1400 audit(1769293646.986:190): avc: denied { open } for pid=6128 comm="syz.3.34" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 66.713811][ T40] audit: type=1400 audit(1769293647.086:191): avc: denied { watch } for pid=6131 comm="syz.0.35" path="/4" dev="tmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.724252][ T40] audit: type=1400 audit(1769293647.086:192): avc: denied { setopt } for pid=6101 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.724352][ T854] IPVS: starting estimator thread 0... [ 66.804098][ T5988] usb 6-1: USB disconnect, device number 2 [ 66.830056][ T6138] IPVS: using max 43 ests per chain, 103200 per kthread [ 66.832389][ T40] audit: type=1400 audit(1769293647.206:193): avc: denied { write } for pid=6144 comm="syz.0.38" name="ip_tables_names" dev="proc" ino=4026533266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 67.017523][ T40] audit: type=1400 audit(1769293647.386:194): avc: denied { setopt } for pid=6148 comm="syz.0.39" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.343109][ T6161] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 67.517584][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.48'. [ 67.628578][ T6183] netlink: 'syz.1.51': attribute type 5 has an invalid length. [ 67.718948][ T6194] dvmrp8: entered allmulticast mode [ 67.830188][ T5946] Bluetooth: hci3: command tx timeout [ 67.840205][ T5946] Bluetooth: hci2: command tx timeout [ 67.840352][ T5295] Bluetooth: hci0: command tx timeout [ 67.844276][ T64] Bluetooth: hci1: command tx timeout [ 67.889746][ T6207] netlink: 32 bytes leftover after parsing attributes in process `syz.2.55'. [ 67.892799][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55'. [ 67.900057][ T53] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 67.959664][ T6210] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6210 comm=syz.2.56 [ 68.044093][ T6217] 9pnet_virtio: no channels available for device ./file1 [ 68.050078][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.057172][ T53] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 68.062287][ T53] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 68.065440][ T53] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 68.069038][ T53] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 68.076476][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 68.082125][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 68.086099][ T53] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 68.094137][ T53] usb 8-1: string descriptor 0 read error: -22 [ 68.096372][ T53] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 68.100462][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.106807][ T53] usb 8-1: config 0 descriptor?? [ 68.110363][ T53] hub 8-1:0.0: bad descriptor, ignoring hub [ 68.113354][ T53] hub 8-1:0.0: probe with driver hub failed with error -5 [ 68.121050][ T53] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input7 [ 68.209893][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 68.213270][ T29] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 68.216319][ T29] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 68.223261][ T29] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 68.227410][ T29] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.232394][ T29] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 68.237072][ T29] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 68.241934][ T29] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 68.246920][ T29] usb 5-1: config 168 interface 0 has no altsetting 0 [ 68.250850][ T29] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 68.253889][ T29] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 68.258387][ T29] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 68.262734][ T29] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.267472][ T29] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 68.272156][ T29] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 68.278661][ T29] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 68.284168][ T29] usb 5-1: config 168 interface 0 has no altsetting 0 [ 68.287891][ T29] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 68.291257][ T29] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 68.295753][ T29] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 68.301256][ T29] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.305836][ T29] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 68.310592][ T29] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 68.314854][ T29] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 68.322376][ T29] usb 5-1: config 168 interface 0 has no altsetting 0 [ 68.328241][ T29] usb 5-1: string descriptor 0 read error: -22 [ 68.331120][ T29] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 68.334552][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.355299][ T29] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 68.416097][ T29] usb 8-1: USB disconnect, device number 3 [ 68.550257][ T6245] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 68.557042][ T6245] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 68.628413][ T10] usb 5-1: USB disconnect, device number 3 [ 68.811960][ T6254] syz.1.61 uses obsolete (PF_INET,SOCK_PACKET) [ 68.824218][ T6257] overlayfs: failed to resolve './file0': -2 [ 69.133877][ T6272] vlan2: entered allmulticast mode [ 69.136103][ T6272] veth0_to_bond: entered allmulticast mode [ 69.363501][ T6304] warning: `syz.0.73' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 69.529306][ T6314] netlink: 'syz.1.77': attribute type 1 has an invalid length. [ 69.534115][ T6314] netlink: 'syz.1.77': attribute type 2 has an invalid length. [ 69.538461][ T6316] netlink: 'syz.1.77': attribute type 1 has an invalid length. [ 69.543147][ T6316] netlink: 'syz.1.77': attribute type 2 has an invalid length. [ 69.583662][ T6320] netlink: 'syz.0.79': attribute type 4 has an invalid length. [ 69.600142][ T29] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 69.669665][ T6327] 9p: Bad value for 'rfdno' [ 69.733798][ T6333] fuse: Bad value for 'fd' [ 69.769587][ T29] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 69.772424][ T29] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 69.775188][ T29] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 69.778133][ T29] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 69.781684][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 69.784940][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 69.788136][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 69.796120][ T29] usb 8-1: string descriptor 0 read error: -22 [ 69.799034][ T29] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 69.805310][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.809533][ T29] usb 8-1: config 0 descriptor?? [ 69.817119][ T29] hub 8-1:0.0: bad descriptor, ignoring hub [ 69.820785][ T29] hub 8-1:0.0: probe with driver hub failed with error -5 [ 69.825481][ T29] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input8 [ 69.920352][ T5295] Bluetooth: hci1: command tx timeout [ 69.920620][ T64] Bluetooth: hci2: command tx timeout [ 69.921029][ T5946] Bluetooth: hci3: command tx timeout [ 70.113185][ T842] usb 8-1: USB disconnect, device number 4 [ 70.456560][ T6324] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 70.459365][ T6324] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 70.465263][ T6324] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 70.468883][ T6324] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 70.471009][ T6324] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.474659][ T6324] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.478139][ T6324] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 70.480283][ T6324] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 70.486515][ T6324] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 70.493236][ T6324] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 70.500350][ T6324] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 70.510043][ T6324] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 70.591218][ T6352] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 70.617703][ T64] Bluetooth: hci2: unexpected event for opcode 0x2019 [ 70.642758][ T6359] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 70.699961][ T6362] delete_channel: no stack [ 70.755424][ T6367] netlink: 100 bytes leftover after parsing attributes in process `syz.1.92'. [ 70.765867][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 70.768820][ T6367] netlink: 'syz.1.92': attribute type 21 has an invalid length. [ 70.780967][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 70.921493][ T6375] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 70.947157][ T6375] XFS (nbd1): SB validate failed with error -5. [ 71.054275][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.99'. [ 71.060559][ T6395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.100'. [ 71.074037][ T6395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.100'. [ 71.078625][ T6395] vlan0: entered promiscuous mode [ 71.084393][ T6395] team0: Port device vlan0 added [ 71.230301][ T5940] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 71.392203][ T5940] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 71.394912][ T5940] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 71.397591][ T5940] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 71.400614][ T5940] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 71.403957][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 71.407134][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 71.410381][ T5940] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 71.418394][ T5940] usb 5-1: string descriptor 0 read error: -22 [ 71.420566][ T5940] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 71.423432][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.427879][ T5940] usb 5-1: config 0 descriptor?? [ 71.435481][ T5940] hub 5-1:0.0: bad descriptor, ignoring hub [ 71.437548][ T5940] hub 5-1:0.0: probe with driver hub failed with error -5 [ 71.452369][ T5940] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input9 [ 71.667721][ T6429] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 71.691909][ T56] IPVS: starting estimator thread 0... [ 71.734671][ T40] kauditd_printk_skb: 77 callbacks suppressed [ 71.734688][ T40] audit: type=1400 audit(1769293652.106:272): avc: denied { create } for pid=6390 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.746022][ T40] audit: type=1400 audit(1769293652.106:273): avc: denied { setopt } for pid=6390 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.754039][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 71.757771][ T5940] usb 5-1: USB disconnect, device number 4 [ 71.763557][ T40] audit: type=1400 audit(1769293652.106:274): avc: denied { bind } for pid=6390 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.774079][ T40] audit: type=1400 audit(1769293652.106:275): avc: denied { ioctl } for pid=6390 comm="syz.0.98" path="socket:[13365]" dev="sockfs" ino=13365 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.784905][ T6432] IPVS: using max 25 ests per chain, 60000 per kthread [ 71.854853][ T40] audit: type=1400 audit(1769293652.226:276): avc: denied { create } for pid=6435 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.866987][ T40] audit: type=1400 audit(1769293652.226:277): avc: denied { write } for pid=6435 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.875488][ T40] audit: type=1400 audit(1769293652.226:278): avc: denied { nlmsg_write } for pid=6435 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.915692][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'. [ 71.972277][ T6449] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 71.982051][ T6451] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 72.040330][ T40] audit: type=1400 audit(1769293652.406:279): avc: denied { mount } for pid=6454 comm="syz.2.115" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 72.078256][ T40] audit: type=1400 audit(1769293652.446:280): avc: denied { read } for pid=6454 comm="syz.2.115" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 72.085914][ T40] audit: type=1400 audit(1769293652.456:281): avc: denied { open } for pid=6454 comm="syz.2.115" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 72.197839][ T6460] x_tables: ip_tables: osf match: only valid for protocol 6 [ 72.251068][ T56] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 72.310137][ T842] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 72.404618][ T56] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 72.410047][ T56] usb 8-1: can't read configurations, error -61 [ 72.461287][ T842] usb 6-1: Using ep0 maxpacket: 8 [ 72.464423][ T842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 72.467882][ T842] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 72.471817][ T842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.477496][ T842] usb 6-1: config 0 descriptor?? [ 72.480358][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 72.550065][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 72.553114][ T56] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 72.560327][ T6477] use of bytesused == 0 is deprecated and will be removed in the future, [ 72.563255][ T6477] use the actual size instead. [ 72.690952][ T842] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 72.703093][ T56] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 72.706634][ T56] usb 8-1: can't read configurations, error -61 [ 72.710627][ T56] usb usb8-port1: attempt power cycle [ 72.766055][ T6484] comedi comedi0: s526: a I/O base address must be specified [ 72.857570][ T6486] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.889013][ T6458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.116'. [ 72.893634][ T6458] netlink: 31 bytes leftover after parsing attributes in process `syz.1.116'. [ 72.896538][ T6458] netlink: 'syz.1.116': attribute type 3 has an invalid length. [ 72.899038][ T6458] netlink: 'syz.1.116': attribute type 2 has an invalid length. [ 72.901639][ T6458] netlink: 31 bytes leftover after parsing attributes in process `syz.1.116'. [ 72.907299][ T29] usb 6-1: USB disconnect, device number 3 [ 73.050046][ T56] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 73.071952][ T56] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 73.074372][ T56] usb 8-1: can't read configurations, error -61 [ 73.199989][ T56] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 73.221820][ T56] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 73.224464][ T56] usb 8-1: can't read configurations, error -61 [ 73.226623][ T56] usb usb8-port1: unable to enumerate USB device [ 73.669926][ T6003] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 73.769219][ T6505] ======================================================= [ 73.769219][ T6505] WARNING: The mand mount option has been deprecated and [ 73.769219][ T6505] and is ignored by this kernel. Remove the mand [ 73.769219][ T6505] option from the mount to silence this warning. [ 73.769219][ T6505] ======================================================= [ 73.779937][ T6505] cgroup: Unknown subsys name 'fsname' [ 73.829979][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 73.844232][ T6003] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 73.846972][ T6003] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 73.854748][ T6003] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 73.857594][ T6003] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 73.861142][ T6003] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 73.864686][ T6003] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 73.868544][ T6003] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 73.877406][ T6003] usb 5-1: string descriptor 0 read error: -22 [ 73.879947][ T6003] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 73.882758][ T6003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.887144][ T6003] usb 5-1: config 0 descriptor?? [ 73.891707][ T6003] hub 5-1:0.0: bad descriptor, ignoring hub [ 73.893619][ T6003] hub 5-1:0.0: probe with driver hub failed with error -5 [ 73.898086][ T6003] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input10 [ 74.080338][ T6516] ata1.00: invalid cdb length 6 [ 74.144060][ T6518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 74.188587][ T6531] netlink: 'syz.2.141': attribute type 29 has an invalid length. [ 74.192694][ T6531] netlink: 'syz.2.141': attribute type 29 has an invalid length. [ 74.204613][ T29] usb 5-1: USB disconnect, device number 5 [ 74.275351][ T6538] Can't find a SQUASHFS superblock on nullb0 [ 74.438365][ T6543] netlink: 'syz.2.145': attribute type 10 has an invalid length. [ 74.450833][ T6543] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 74.550027][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 74.557098][ T6550] devtmpfs: Cannot change global quota limit on remount [ 74.629964][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 74.631075][ T5295] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 74.634686][ T5295] Bluetooth: hci2: Injecting HCI hardware error event [ 74.637399][ T5295] Bluetooth: hci2: hardware error 0x00 [ 74.729959][ T56] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 74.899941][ T56] usb 7-1: Using ep0 maxpacket: 32 [ 74.903099][ T56] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 74.907945][ T56] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 74.911063][ T56] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 74.913888][ T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 74.916907][ T56] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 74.919960][ T56] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 74.923947][ T56] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 74.926751][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.930818][ T56] usb 7-1: config 0 descriptor?? [ 75.076043][ T6564] netlink: 'syz.3.152': attribute type 1 has an invalid length. [ 75.135952][ T56] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 75.142256][ T56] usb 7-1: USB disconnect, device number 2 [ 75.151837][ T56] usblp0: removed [ 75.589913][ T6003] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 75.664605][ T6578] syzkaller0: entered promiscuous mode [ 75.666384][ T6578] syzkaller0: entered allmulticast mode [ 75.739880][ T6003] usb 7-1: Using ep0 maxpacket: 32 [ 75.744562][ T6003] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 75.747201][ T6003] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 75.750577][ T6003] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 75.753693][ T6003] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 75.756688][ T6003] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 75.759731][ T6003] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 75.764183][ T6003] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 75.767004][ T6003] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.775784][ T6003] usb 7-1: config 0 descriptor?? [ 75.909919][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 75.984388][ T6003] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 76.189507][ C2] usblp0: nonzero read bulk status received: -71 [ 76.199165][ T6003] usb 7-1: USB disconnect, device number 3 [ 76.396453][ T6545] usblp0: removed [ 76.405815][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.407943][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.445955][ T6591] IPVS: length: 18 != 66568 [ 76.630625][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 76.720339][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 76.723587][ T5295] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 76.768416][ T6603] __nla_validate_parse: 2 callbacks suppressed [ 76.768427][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.166'. [ 76.776438][ T6603] overlay: Unknown parameter 'subj_role' [ 76.804065][ T6605] loop4: detected capacity change from 0 to 7 [ 76.813776][ T6051] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 76.815569][ T6051] loop4: partition table partially beyond EOD, truncated [ 76.818993][ T6051] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 76.839486][ T6605] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 76.841532][ T6605] loop4: partition table partially beyond EOD, truncated [ 76.844710][ T6605] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 76.881967][ T6051] udevd[6051]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 76.886306][ T6608] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 76.890678][ T6608] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 76.893545][ T6051] udevd[6051]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 76.945243][ T6611] netlink: 256 bytes leftover after parsing attributes in process `syz.2.169'. [ 77.077837][ T40] kauditd_printk_skb: 55 callbacks suppressed [ 77.077848][ T40] audit: type=1400 audit(1769293657.446:337): avc: denied { mount } for pid=6615 comm="syz.3.172" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 77.105911][ T40] audit: type=1400 audit(1769293657.476:338): avc: denied { create } for pid=6621 comm="syz.3.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 77.113541][ T40] audit: type=1400 audit(1769293657.486:339): avc: denied { allowed } for pid=6621 comm="syz.3.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 77.125617][ T6623] tmpfs: Unknown parameter 'œÔüžÌWÐîÿÿÿ6àæZ~Ò}u&ü [ 77.125617][ T6623] Ûž†pò°¹h~ÒvÖú濃#G*j­'¼’”Ì#_p\ÞlÐ7Å”H€1‚øî{Ðg¹'ŠB÷°bøÒ~µ' [ 77.140268][ T6622] tmpfs: Unknown parameter 'œÔüžÌWÐîÿÿÿ6àæZ~Ò}u&ü [ 77.140268][ T6622] Ûž†pò°¹h~ÒvÖú濃#G*j­'¼’”Ì#_p\ÞlÐ7Å”H€1‚øî{Ðg¹'ŠB÷°bøÒ~µ' [ 77.170450][ T6626] netlink: 100 bytes leftover after parsing attributes in process `syz.2.174'. [ 77.256578][ T40] audit: type=1400 audit(1769293657.626:340): avc: denied { write } for pid=6636 comm="syz.3.178" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.263480][ T40] audit: type=1400 audit(1769293657.636:341): avc: denied { remount } for pid=6636 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 77.269503][ T40] audit: type=1400 audit(1769293657.636:342): avc: denied { getopt } for pid=6636 comm="syz.3.178" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.277508][ T40] audit: type=1400 audit(1769293657.646:343): avc: denied { ioctl } for pid=6638 comm="syz.2.179" path="socket:[12908]" dev="sockfs" ino=12908 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.286006][ T40] audit: type=1400 audit(1769293657.646:344): avc: denied { bind } for pid=6638 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.292564][ T40] audit: type=1400 audit(1769293657.646:345): avc: denied { read } for pid=6638 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.371558][ T40] audit: type=1400 audit(1769293657.746:346): avc: denied { bind } for pid=6638 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 77.606826][ T6651] JFS: discard option not supported on device [ 77.613621][ T6651] Mount JFS Failure: -5 [ 77.943179][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'. [ 78.527581][ T6665] netlink: 64 bytes leftover after parsing attributes in process `syz.3.185'. [ 78.964044][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 79.537266][ T6704] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 79.540930][ T6704] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 79.544510][ T6704] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 79.546407][ T6704] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 79.553133][ T6704] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 79.555082][ T6704] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 79.702794][ T6726] netlink: 'syz.3.198': attribute type 1 has an invalid length. [ 79.726899][ T6726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.751209][ T6726] bond1: (slave veth3): Enslaving as an active interface with a down link [ 79.762770][ T6722] vlan2: entered allmulticast mode [ 79.764493][ T6722] bond1: entered allmulticast mode [ 79.767072][ T6722] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 79.829977][ T5940] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 79.830903][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 79.832522][ T5295] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 79.887763][ T6737] usb usb8: usbfs: process 6737 (syz.3.199) did not claim interface 0 before use [ 79.983418][ T5940] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 79.987033][ T5940] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 79.994717][ T5940] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 80.000070][ T5940] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 80.004289][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 80.007655][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 80.010879][ T5940] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 80.017891][ T5940] usb 7-1: string descriptor 0 read error: -22 [ 80.019978][ T5940] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 80.022823][ T5940] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.027198][ T5940] usb 7-1: config 0 descriptor?? [ 80.030387][ T5940] hub 7-1:0.0: bad descriptor, ignoring hub [ 80.032357][ T5940] hub 7-1:0.0: probe with driver hub failed with error -5 [ 80.036700][ T5940] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input11 [ 80.086588][ T6754] xt_hashlimit: size too large, truncated to 1048576 [ 80.285745][ T5940] IPVS: starting estimator thread 0... [ 80.334024][ T56] usb 7-1: USB disconnect, device number 4 [ 80.380024][ T6768] IPVS: using max 43 ests per chain, 103200 per kthread [ 80.424568][ T6774] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20003 [ 80.462570][ T6777] autofs: Bad value for 'fd' [ 80.604833][ T6780] capability: warning: `syz.3.209' uses deprecated v2 capabilities in a way that may be insecure [ 80.612655][ T6780] binder: 6779:6780 ioctl 80049367 200000000580 returned -22 [ 80.615412][ T6780] binder_alloc: 6779: binder_alloc_buf, no vma [ 80.619601][ T6780] netlink: 'syz.3.209': attribute type 28 has an invalid length. [ 80.752572][ T6784] binder: 6783:6784 ioctl c0306201 200000002280 returned -14 [ 80.866296][ T6788] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88803d559e00 pfn:0x3d558 [ 80.869628][ T6788] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 80.872654][ T6788] memcg:ffff8880559c0000 [ 80.874004][ T6788] flags: 0xfff00000000041(locked|head|node=0|zone=1|lastcpupid=0x7ff) [ 80.876545][ T6788] raw: 00fff00000000041 0000000000000000 dead000000000122 0000000000000000 [ 80.879228][ T6788] raw: ffff88803d559e00 0000000000000000 00000001ffffffff ffff8880559c0000 [ 80.882199][ T6788] head: 00fff00000000041 0000000000000000 dead000000000122 0000000000000000 [ 80.884926][ T6788] head: ffff88803d559e00 0000000000000000 00000001ffffffff ffff8880559c0000 [ 80.887618][ T6788] head: 00fff00000000202 ffffea0000f55601 00000000ffffffff 00000000ffffffff [ 80.890704][ T6788] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 80.893479][ T6788] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 80.896643][ T6788] page_owner tracks the page as allocated [ 80.898502][ T6788] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6788, tgid 6786 (syz.2.212), ts 80866270969, free_ts 79350608226 [ 80.907937][ T6788] post_alloc_hook+0x1e1/0x250 [ 80.909513][ T6788] get_page_from_freelist+0xe3d/0x2e10 [ 80.911843][ T6788] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 80.913676][ T6788] alloc_pages_mpol+0x1fb/0x550 [ 80.915239][ T6788] folio_alloc_noprof+0x22/0x330 [ 80.916867][ T6788] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 80.918820][ T6788] filemap_alloc_folio_noprof+0x5e/0x80 [ 80.920873][ T6788] page_cache_ra_order+0x54b/0xfe0 [ 80.922474][ T6788] page_cache_async_ra+0x7bb/0xce0 [ 80.924095][ T6788] filemap_fault+0xfa6/0x37c0 [ 80.925593][ T6788] __do_fault+0x10d/0x550 [ 80.926971][ T6788] do_fault+0xaf9/0x1990 [ 80.928313][ T6788] __handle_mm_fault+0x1807/0x2b50 [ 80.930009][ T6788] handle_mm_fault+0x36d/0xa20 [ 80.931505][ T6788] __get_user_pages+0xf9c/0x34d0 [ 80.933101][ T6788] populate_vma_page_range+0x267/0x3f0 [ 80.934799][ T6788] page last free pid 6694 tgid 6691 stack trace: [ 80.936732][ T6788] __free_frozen_pages+0x822/0x1130 [ 80.938402][ T6788] vfree.part.0+0x12b/0x9d0 [ 80.940002][ T6788] vfree+0x55/0x80 [ 80.941224][ T6788] n_tty_close+0xcd/0x170 [ 80.942627][ T6788] tty_ldisc_close+0x114/0x1a0 [ 80.944204][ T6788] tty_ldisc_kill+0x8e/0x150 [ 80.945687][ T6788] tty_ldisc_release+0x107/0x2f0 [ 80.947308][ T6788] tty_release_struct+0x23/0xe0 [ 80.948885][ T6788] tty_release+0xd7a/0x1300 [ 80.950518][ T6788] __fput+0x3ff/0xb40 [ 80.951852][ T6788] task_work_run+0x150/0x240 [ 80.953341][ T6788] do_exit+0x829/0x2a30 [ 80.954680][ T6788] do_group_exit+0xd5/0x2a0 [ 80.956158][ T6788] get_signal+0x1ec7/0x21e0 [ 80.957653][ T6788] arch_do_signal_or_restart+0x91/0x7a0 [ 80.959434][ T6788] exit_to_user_mode_loop+0x86/0x4b0 [ 80.962422][ T6788] ------------[ cut here ]------------ [ 80.964193][ T6788] kernel BUG at mm/filemap.c:858! [ 80.965818][ T6788] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 80.968788][ T6788] CPU: 2 UID: 0 PID: 6788 Comm: syz.2.212 Not tainted syzkaller #0 PREEMPT(full) [ 80.972424][ T6788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.975604][ T6788] RIP: 0010:__filemap_add_folio+0xf7f/0x1220 [ 80.977481][ T6788] Code: cb c6 ff 48 c7 c6 20 19 9d 8b 4c 89 ef e8 a9 0b 12 00 90 0f 0b e8 61 cb c6 ff 48 c7 c6 80 19 9d 8b 4c 89 ef e8 92 0b 12 00 90 <0f> 0b e8 4a cb c6 ff 90 0f 0b 90 e9 9b fe ff ff e8 3c cb c6 ff 90 [ 80.983392][ T6788] RSP: 0018:ffffc9000f8973f0 EFLAGS: 00010293 [ 80.985334][ T6788] RAX: 0000000000000000 RBX: 0000000000112cc0 RCX: 0000000000000000 [ 80.987791][ T6788] RDX: ffff88802a43c980 RSI: ffffffff825240c8 RDI: ffff88802a43ce04 [ 80.990304][ T6788] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000000000 [ 80.992783][ T6788] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000004 [ 80.995479][ T6788] R13: ffffea0000f55600 R14: 0000000000000002 R15: 000000000000b250 [ 80.998094][ T6788] FS: 00007febd48766c0(0000) GS:ffff8880d67dc000(0000) knlGS:0000000000000000 [ 81.000849][ T6788] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.002944][ T6788] CR2: 000055555744aa28 CR3: 0000000055189000 CR4: 0000000000352ef0 [ 81.005451][ T6788] Call Trace: [ 81.006513][ T6788] [ 81.007457][ T6788] ? __pfx___filemap_add_folio+0x10/0x10 [ 81.009217][ T6788] filemap_add_folio+0x1d8/0x690 [ 81.010769][ T6788] ? find_held_lock+0x2b/0x80 [ 81.012294][ T6788] ? __pfx_filemap_add_folio+0x10/0x10 [ 81.014032][ T6788] ? filemap_get_entry+0x1a7/0x3b0 [ 81.015613][ T6788] page_cache_ra_order+0x614/0xfe0 [ 81.017239][ T6788] page_cache_async_ra+0x7bb/0xce0 [ 81.018818][ T6788] filemap_fault+0xfa6/0x37c0 [ 81.020280][ T6788] ? __pfx_filemap_fault+0x10/0x10 [ 81.021853][ T6788] ? __pfx_filemap_map_pages+0x10/0x10 [ 81.023594][ T6788] __do_fault+0x10d/0x550 [ 81.024981][ T6788] do_fault+0xaf9/0x1990 [ 81.026374][ T6788] __handle_mm_fault+0x1807/0x2b50 [ 81.028019][ T6788] ? __pfx___handle_mm_fault+0x10/0x10 [ 81.029713][ T6788] ? __pte_offset_map_lock+0x174/0x320 [ 81.031388][ T6788] ? find_held_lock+0x2b/0x80 [ 81.032914][ T6788] ? follow_page_pte+0x5b4/0x1410 [ 81.034524][ T6788] handle_mm_fault+0x36d/0xa20 [ 81.036072][ T6788] __get_user_pages+0xf9c/0x34d0 [ 81.037691][ T6788] ? __pfx___get_user_pages+0x10/0x10 [ 81.039391][ T6788] populate_vma_page_range+0x267/0x3f0 [ 81.041126][ T6788] ? __pfx_populate_vma_page_range+0x10/0x10 [ 81.043023][ T6788] ? __pfx_find_vma_intersection+0x10/0x10 [ 81.044885][ T6788] ? do_mmap+0x93f/0x12f0 [ 81.046266][ T6788] __mm_populate+0x107/0x3a0 [ 81.047766][ T6788] ? __pfx___mm_populate+0x10/0x10 [ 81.049406][ T6788] ? up_write+0x290/0x4f0 [ 81.050803][ T6788] vm_mmap_pgoff+0x37f/0x470 [ 81.052317][ T6788] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 81.053955][ T6788] ? __fget_files+0x215/0x3d0 [ 81.055466][ T6788] ? __fget_files+0x21f/0x3d0 [ 81.057006][ T6788] ksys_mmap_pgoff+0x328/0x5b0 [ 81.058553][ T6788] __x64_sys_mmap+0x125/0x190 [ 81.060088][ T6788] do_syscall_64+0xc9/0xf80 [ 81.061553][ T6788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.063428][ T6788] RIP: 0033:0x7febd399acb9 [ 81.064866][ T6788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.070810][ T6788] RSP: 002b:00007febd4876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 81.073356][ T6788] RAX: ffffffffffffffda RBX: 00007febd3c16090 RCX: 00007febd399acb9 [ 81.075770][ T6788] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 81.078230][ T6788] RBP: 00007febd3a08bf7 R08: 0000000000000005 R09: 000000002c93a000 [ 81.080671][ T6788] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 81.083163][ T6788] R13: 00007febd3c16128 R14: 00007febd3c16090 R15: 00007ffdd030ed28 [ 81.085666][ T6788] [ 81.086707][ T6788] Modules linked in: [ 81.088184][ T6788] ---[ end trace 0000000000000000 ]--- [ 81.090019][ T6788] RIP: 0010:__filemap_add_folio+0xf7f/0x1220 [ 81.091985][ T6788] Code: cb c6 ff 48 c7 c6 20 19 9d 8b 4c 89 ef e8 a9 0b 12 00 90 0f 0b e8 61 cb c6 ff 48 c7 c6 80 19 9d 8b 4c 89 ef e8 92 0b 12 00 90 <0f> 0b e8 4a cb c6 ff 90 0f 0b 90 e9 9b fe ff ff e8 3c cb c6 ff 90 [ 81.098046][ T6788] RSP: 0018:ffffc9000f8973f0 EFLAGS: 00010293 [ 81.100228][ T6788] RAX: 0000000000000000 RBX: 0000000000112cc0 RCX: 0000000000000000 [ 81.102713][ T6788] RDX: ffff88802a43c980 RSI: ffffffff825240c8 RDI: ffff88802a43ce04 [ 81.105208][ T6788] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000000000 [ 81.107732][ T6788] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000004 [ 81.110297][ T6788] R13: ffffea0000f55600 R14: 0000000000000002 R15: 000000000000b250 [ 81.112808][ T6788] FS: 00007febd48766c0(0000) GS:ffff8880d67dc000(0000) knlGS:0000000000000000 [ 81.115610][ T6788] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.117727][ T6788] CR2: 000055555744aa28 CR3: 0000000055189000 CR4: 0000000000352ef0 [ 81.120297][ T6788] Kernel panic - not syncing: Fatal exception [ 81.122817][ T6788] Kernel Offset: disabled [ 81.124207][ T6788] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:27:41 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffea000144e980 RCX=ffffffff8267f9f8 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff8880280224c0 RBP=dffffc0000000000 RSP=ffffc9000efcf500 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=000000000000c729 R12=00000000000001a1 R13=ffff88803d650d18 R14=ffffea000144e980 R15=0000000000000000 RIP=ffffffff8267f9f8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d65dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000007900 CR3=000000002d9fc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7570637265705f65 676173752e746363 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe93b8c996 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe93b8c996 00007ffe93b8c99c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60d12086dc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60d1208728 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60d120869c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60d120871a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000525ac RBX=ffff88801ded24c0 RCX=ffffffff8b76b4b5 RDX=0000000000000001 RSI=ffffffff8bfa3520 RDI=ffffffff81dccfdb RBP=0000000000000001 RSP=ffffc90000177df0 R8 =0000000000000000 R9 =ffffed100d4a673d R10=ffff88806a5339eb R11=0000000000000001 R12=ffffed1003bda498 R13=0000000000000001 R14=ffffffff90b737d0 R15=0000000000000000 RIP=ffffffff8b769e1f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3c3656 CR3=0000000035568000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555568bcfa84 0000555568bcfa80 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b27be4d20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b27be4d20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555568bd9bd8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000316c6e747a 797301ffffffffff ffffffdf08078003 0008000610002010 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1402005aa0030008 005a98030008005a 900308d204005a8c 037404005a880328 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d00300100001c003 02100001b0032810 000490030004005a a4030002005aa203 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100001800401 0000000806060168 f000080001e00300 100001d003001000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01c00302100001b0 0328100004900300 04005aa403000200 5aa2031402005aa0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030008005a980300 08005a900308d204 005a8c037404005a 88032808005a8003 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5a80040480030480 0401a00300080001 90030fffffffffff ff04018003121000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85699fa5 RDI=ffffffff9b206c00 RBP=ffffffff9b206bc0 RSP=ffffc9000f896cd8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552032203a555043 R12=0000000000000000 R13=000000000000005b R14=0000000000000010 R15=ffffffff85699f40 RIP=ffffffff85699fcf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007febd48766c0 ffffffff 00c00000 GS =0000 ffff8880d67dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055555744aa28 CR3=0000000055189000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000004000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffefffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf23b0f3b 00007ffdf23b0f3b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf23b1440 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf23b1440 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6574617267696d20 2c3220726564726f 2061697620646574 61636f6c6c612000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6574617267636720 2632207265647265 2061637620646574 6163656666612000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636f6c6c615f7061 6d656c696620205d 3838373654205b5d 3736383631392e30 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3632323830363035 3339372073745f65 657266202c393639 3037323636383038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 207374202c293231 322e322e7a797328 2036383736206469 6774202c38383736 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20646970202c294c 4c4157445241485f 5046475f5f7c504d 4f435f5046475f5f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c59525445524f4e 5f5046475f5f7c4e 5241574f4e5f5046 475f5f7c53464f4e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33393878303d646d 636c74636f692038 303932313d6f6e69 202273666b636f73 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000004e8ac RBX=ffff88801e2b8000 RCX=ffffffff8b76b4b5 RDX=0000000000000001 RSI=ffffffff8bfa3520 RDI=ffffffff81dccfdb RBP=0000000000000003 RSP=ffffc90000197df0 R8 =0000000000000000 R9 =ffffed100d4e673d R10=ffff88806a7339eb R11=0000000000000002 R12=ffffed1003c57000 R13=0000000000000003 R14=ffffffff90b737d0 R15=0000000000000000 RIP=ffffffff8b769e1f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000040 CR3=0000000029896000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 02000800007c0100 0000010070bd2801 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe93b8c996 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe93b8c996 00007ffe93b8c99c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60d12086dc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60d1208728 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60d120869c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60d120871a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60d13e44a0 00007f60d13e4480 00007f60d13e4488 00007f60d13e44b8 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60d13e4498 00007f60d13e4468 00007f60d13e44a0 00007f60d13e4480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000