last executing test programs: 1.882297414s ago: executing program 1 (id=588): r0 = socket$inet_udp(0x2, 0x2, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.nlink\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x4}, 0x1c) poll(&(0x7f00000016c0)=[{r2, 0x440}], 0x1, 0xffffffff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x21ee, 0xffe2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) recvfrom$packet(r5, &(0x7f00000002c0)=""/244, 0xf4, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f0000000200)=""/131, 0x83, 0x2022, 0x0, 0x0) 1.739544905s ago: executing program 1 (id=593): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000580)={{r3, r4/1000+60000}, {0x0, 0x2710}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, 0x0) r6 = getpgid(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r5, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbc, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000540), &(0x7f00000005c0), 0x8, 0x6d, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x120, 0x31, 0x200, 0x70bd2b, 0x25dfdbfc, {0x5}, [@typed={0x8, 0x60, 0x0, 0x0, @pid=r6}, @generic="f0cc005de4b4fa4424a8266fed3393f7460d1b76c2fe430b031ced2438acf86bf0a891b47fca2693c29ece84a5ae7952c83ddf88b86b14fad12557fb63c316c73cddd99edef8ca3dc9c9cf3ea9f8276a16ff9503a3ffbfff907f19d3af2cf93060a13d08781c4ea7e3016936b09ad0ddabc829dc8c33a462a3ddea9ffaa5efb7e4578391964d8099c24e25a9e19f0a32a93455b3341851b6898332baaa8c68ebd125a3501958c03af4fc2648bc88f9c56f2f0a5212edbf0c3f7370e700c0dc20594eea075d17ccb049b645fbe90f9862e6e2470c5c372295e3dd02b6cb5066b78e473a5b4d", @nested={0x8, 0xee, 0x0, 0x1, [@nested={0x4, 0xba}]}, @typed={0x14, 0x2b, 0x0, 0x0, @ipv6=@empty}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000880}, 0x400d1) 1.450448644s ago: executing program 0 (id=603): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f0000000140)='./file1\x00') (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x90, 0x0, 0x0, {0x0, 0x1, 0x0, 0x5, 0xc, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x400, 0x200000000000, 0x2, 0x4, 0x0, 0x4000, 0x4, r2, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) (async) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000240)=@filename='./file0/../file0/file0\x00', r2, &(0x7f0000000280)='./file0/../file0/file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x2) (async) r4 = getuid() mount$9p_xen(&(0x7f0000000200), &(0x7f00000002c0)='./file1\x00', &(0x7f0000000340), 0x108000a, &(0x7f0000000380)={'trans=xen,', {[{@version_L}, {@uname={'uname', 0x3d, 'tmpfs\x00'}}], [{@measure}, {@subj_type={'subj_type', 0x3d, '\t'}}, {@measure}, {@seclabel}, {@obj_role}, {@fowner_lt={'fowner<', r4}}, {@fowner_lt={'fowner<', r2}}, {@subj_type={'subj_type', 0x3d, '%+:&-$+{'}}]}}) (async) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, r2, &(0x7f00000000c0)={0x8000000000000000, 0x1a4, 0x2, 0x1, 0x6, 0x9, 0x0, 0x5, 0xde}) 1.448261449s ago: executing program 0 (id=605): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000006c0)={0x40, 0x0, 0x2}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r4, 0x2004, 0x1) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000080)={0x20002004}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f00000000c0)={0x20000015}) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x400) close_range(r1, 0xffffffffffffffff, 0x2) 860.120849ms ago: executing program 1 (id=606): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r2, 0x0, 0x0, 0x4}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) splice(r0, &(0x7f0000000000)=0x7fff, r0, &(0x7f0000000040)=0x3, 0xffffffffffffffff, 0x0) 859.887597ms ago: executing program 1 (id=607): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e26, @rand_addr=0xdffffc13}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x100ed94, 0x3401, 0x0, 0x60b}, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 809.991409ms ago: executing program 1 (id=608): r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r4}, 0x40) syz_emit_ethernet(0x3a, &(0x7f0000000400)={@random="84cb14818810", @link_local, @val={@void, {0x8100, 0x4, 0x1, 0x2}}, {@mpls_mc={0x8848, {[], @ipv4=@tcp={{0x5, 0x4, 0x2, 0x31, 0x28, 0x64, 0x0, 0x8, 0x6, 0x0, @loopback, @empty}, {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0x6, 0x0, 0x790}}}}}}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, 'ubifs\x00'}, {0x20, 'ubifs\x00'}], 0xa, "47077c85c97c3416a288143880dcd81202c67bbb"}, 0x2d) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000040b7030000000000008500000006000000870000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0xd2, &(0x7f0000000140)=""/210, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='.\x00', &(0x7f0000000000)='gadgetfs\x00', 0x2899404, 0x0) 809.136214ms ago: executing program 1 (id=610): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0xffffffdd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 709.798038ms ago: executing program 2 (id=612): setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000040)=0x3, 0x4) r0 = socket(0x2c, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x8000, 0x0, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast1, @private=0xa010101}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f00000000c0)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', 0x0}) 640.407595ms ago: executing program 2 (id=613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="78224fc427ed619f319b73733d616e792c63616368653d66736361636865"]) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, {0x40, 0x4, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0285628, &(0x7f0000000240)={0x1, @win={{}, 0x1, 0x0, 0x0, 0x0, 0x0}}) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x24, r2, {0x7, 0x29, 0x0, 0x14c0348, 0x3, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000002}}, 0xfffffffffffffe74) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) sendfile(r1, r1, 0x0, 0x3) ioctl$TIOCGPTPEER(r4, 0x929, 0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x4) setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x48}}, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x4000) r10 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r10, 0x0) 528.055446ms ago: executing program 0 (id=616): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', 0x0}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000040000000400000008"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000000540)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000500)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f0000001b40)}, 0x20) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 527.003675ms ago: executing program 3 (id=617): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0x385000, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a3100000000110003006861"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) (async) sendmmsg(r0, &(0x7f0000002100)=[{{&(0x7f0000000280)=@pptp={0x18, 0x2, {0x1, @rand_addr=0x64010101}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000000)="422c7f8f9f8a3383c8748fc9562e6342a3cbb64d7b6e1f180cf9d063dc7e71246bf8f02364f2ff098dee3804be3f4af3c354e1b9d47234e4659946fd6002c7", 0x3f}, {&(0x7f0000000300)="5216355e6857da1cc12cff8578985dd045cbe88c8931fe09cfdfc39b091a6f6eb3f9ebe951520cee32805d4481e065969f0a54c7f5dbd29222752402b88b635afb90f1c65f8fe4fae69d", 0x4a}, {&(0x7f0000000380)="359bbdaaf133f881beaaf6486b968c855e3a91a7effdaae5f4ba675390dafe28cebac83af32759b5c0c0855f2a0f5030eb99ec5c9069a1be23dfa71cc4f3547b833435ad27e05d42b9783a8293fba6ed0d6e88fc99203eb07fa79c8d4573fa3593bf56a6e3e6ce92b1f0756a2b3ce6569bbf397528be8a7b5f03652c733eed0327064673b6053a08c23d0b000d210037ae6ce8cabf85ec490dbfe0fa237d4dd40a2f5e1f20552388daec68d7c8580592ac35c1dbfe86beb464", 0xb9}, {&(0x7f0000000440)="d6ac84e2049bca6a2087da3faa066204b465dabea2ac80bde60c058bda147430935848864d8604fe9375d42845131aa1c66150217252cc23631e65c6cbf8ee4fdf13cb5bce5f1f116e9aab3dccde15646a6969201af74b666c0316b96a599e4b511938e14d5da9aad0f143006cad936433cbb39e31d3effdba6bc35f863f0871134ed167a47dcd2e4258e222e0cdc98e88ce72f3d1729f174b4e10b6bf5a83b7c96cb803e9b967183b93a72c0cbf", 0xae}, {&(0x7f0000000500)="8dcbe5518ad1ca1e51f5fb53bdf90a9afc0f7f69c9bcfd0b8e8d2c4cac39fec244688e4c552ff1a4cfe4d76b4779afc6d7dece179ea15b5c49db8bb941058b1ef5cde4a273342abae90b95aaf29ad1bdb3cb6a3b8f54aa20418f41ef48b66fcfa769c325301a5a0aabba5d081e952c5be2c91c626e62ce38552b1d98d3e4d80c12c96cf1457627628674ddb6344b1e5f06ab44e5c73385f7d5534a2b653eecb0e1dafaa318b13647cc030318e8a04163efe2017deb3d", 0xb6}, {&(0x7f0000000640)="8c48b773287d0fed225250bb10a296b943950c5be013c2784d9304c873f95281609e3119627e9615065dcbfe785e1f08b87106dab36795b287a78f8e1c914b43cfce60b5a3ef4d56f2163e7b605716e6789ce674135e47b4b69a9f1ac4c4f27706b6bcd91d2319ea2dfb1856264c67ac4db10cf4c9fef117bfecc2820356d102129d50a5c90caa6cc5ec3da09b3b7b9af95b3255ce4aff192b60a4f9191810897bbd85205cc50ea40a662a74047d69abbdef4554742aadbdab91ca6ba4d05f45b37d9b131fa34d5c1a77884b382253259e39dd78ce08565ae6d49c4f65977c850e4fc91f0b147765985879a7a3320bb689b710b813159835", 0xf8}, {&(0x7f0000000740)="6e83d2bd210bae097aed54a73dae85adfea823245484675c2ba4bcd657736fd855b9a4186ae288a927fca775129ac0e6d0ebd618b8472c96206841916171d4bceb10e6f8cb4684501b3f1ed1ffd3a29fdaf5899561fc3928fe01f50885373f74e726304859e6e5497ad9472afa53e76d8e187f30b5d68df6c44a3071eb52d178e68568a549ce2d7ed58252cc640a905e629a4ea4e1b8", 0x96}, {&(0x7f0000000800)="5c93796370afa5a4b8d7ce23c6061b00c285d8cafe7cea76c438690584ce7b7f2af6c11d237330e672100bf6d70a9c7f53376e154cf7e6fa5c48a0431c1ec414c2e57b2c2a31162aa7946b2fb1577ae204ecfd233e8947d1792080881ab94163f0c9c742d0d4e8ce51c3749bf778ffc727e3bd02f8e810b0c88d7d777f13cd9fa74837715911f30fcde17850721c3b4104b1cfa0c464b54f7c1c2a8c4898bcf4455cad20567f881a56e2ab6b037292d50c19226b5c15ed6e2257b3fcce5e6df05da20eb400518dddf2448121a9b3ad517c10e2", 0xd3}], 0x8}}, {{&(0x7f0000000980)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e20, 0x4}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000a00)="5842e04678481ed0f144a5715dbad408323d1804540c9a1f7bf4e59174b018889bc3aae96b7aae2a05fbcebd46c0ac7b2e5f0a3a8e649d96af3ab6af70bc40a798a243e1ef193bca5733dabc59a8e3fe667d444e2e010e7ae9502e4bb3e16dc48d216d52401867d1b165232e658ae4ad482d03062884e38361e98aa9fc46a0d99d29fe6dd2a9fa49ed4cba6f328b3dcd74f1d5a16893c354b48127d231f51a27ec43f4a551e8", 0xa6}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000000140)="c63ebe0a57a024fd966700bd42dadea129492186232ebf11731b066a15a4a207f41abb070394a708", 0x28}], 0x3, &(0x7f0000001b00)=[{0x110, 0x0, 0x4, "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"}, {0xb8, 0x116, 0x47, "ef62b0c20702e540de363ca637b1f3d549fc6584a39cbe0eda9b45ae833f71a2df1d6ca53b7b04ee1d105e816647908dba68faa1da02b062bd15ad1dc58a50148a2411549594b22160f73acc69589fefacc645a206b2ceededf5043264852a3f5c16c7d709e4560e4f8956acf73225b038bbf8519ec2bb130837d24837afb59a51a027b3cffb2748669f0aab5d72dd15099b4bbb67d530950c9ffbae82a40085df5c7de821b3d101"}, {0xd0, 0x102, 0x9, "5153dfe6e65869aa7b6d9af69ca41e33dc312ff98220753441e12d8968c6b02d7bc2303b12884c7c168c9a5c634f784cc5b89e7a7a3c694834c481f3e9daf6970914b71630713b632570f2bbc8e9c77ffe0ae99eb0c040708421b336d38b9bc0f1f46fe797a2e6102a3ee3685fa6c85bb78d4be25bc9657abf4244ea402ee4bafc0ece859c8b114bd070f5824efba35e0a0196f5bdb76552bdb68a7cbdd939b3edeb0b4391e16ab2b730d718c1fb2394990ddbd2517cd3d5536c"}, {0xd8, 0x10b, 0xff, "1e293c9f1c2f2084f1cc7b1c1fff8a64d2d8a8cf4932dd9744009f3b3dece6e366ffb43066f025e163b151ea73cb924e3540e1f5aa5370c58925abd400677d651c6885c46bf728afcb5e0df1648c6b879d17fc62a7c0af4f3388e5fefb094d9243fc0da9f58387ab356145c2a80f3399208c0c63239aecc7a6a2c35d2a2ca6cba7d40966e3adc857b0615423d346d8477063b32b8db8bf54abd180ad5422d6c2dbcea76616e99c7379435b9a74feea7af0b22e8c07bc5a3394d45fe69744d028ee84"}, {0xe0, 0x103, 0x3a, "303e696ba0384d831cd8e3cf1d3e529bfc2cf46d1481ed9825ac3ce975f4eef0846f18a658efe1cbed0af888183da99ae12b171884d6ac0c35ad226e9520a489d979d27daba3e7adbcdaedeb6e551ed061477a80f56d59994767bc555534cff00d47dba1cb1d8905e0d2a7a954589c42b980443a73467bd593ccdb51fdb5b95676ccee72157cf791a8606bc4b0abb31fa073bf6f6034115c5a00f05a3bb5f92351b3324da76a1bd3999046801dac97d9a43f391c3b8e082320cb23248be411fc2d9f72bf466fb16a52141101"}, {0x60, 0x10b, 0x6, "22295dde878702afa7d7424cf71cb0d4f07faf4da1f4068cd6868637f6063fc9e86b0cd280598dfe6111813971234878c0308f84fd6469d8cc043e6ba18fdc92f4156ce458e1da06dd035b3d9d"}, {0xf0, 0x1, 0x3, "e5dc85936b8042e53b574172b666b016631f056446a5d75bc9c0ed3b1a671e7d64a54114ebc4a2eda02635a85f38f7ed054bdb87c79a37367fea1673801ba941607861d177f992d1a3354b01046641b7302aedbe8c5597a60dd948d994bdc07a81a0151995f62b1232ac1716992de6e0d0ab3d84724b683faa66eef49e018f9679a2e007b8b3e67e0e5b41b4fd42986a91772a28d9801a12e6e178e8a9f1cff98b4c8f614a08f884b266d91a1e731ef219c074423b5aef4d780ed17990666d86fdb9f46a854804c6a658772ae4aee6b7af9b0920a7c402696263d533b275"}, {0x38, 0x107, 0x100, "888840e552883d1fa44caecf54bb694ab46a18b5d88f2f28b3c5370b44e0a5b153359d03c8"}], 0x5d8}}], 0x2, 0x8001) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08000d000400000020005a801c0001313b6e80c47fd91b0005000600ff000000050006000200000008000d00030010001400238005001e"], 0x60}}, 0x0) 526.524489ms ago: executing program 0 (id=618): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) mount(&(0x7f0000000100)=@md0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='nfs4\x00', 0x20000, &(0x7f00000002c0)='%&-\xc3\x00') bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r1, &(0x7f0000000480)="7eeb99b6f78ca44054798fa8d0e976dfd68e031dff61cd6165767af43f76c7cf0c2d662375a228d0a1c3960340ab33ed785d3deb2bad", 0x36, 0x85, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x14) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x5, [@typedef={0x0, 0x0, 0x0, 0x8, 0x2}, @struct={0x3, 0x1, 0x0, 0x4, 0x1, 0x1, [{0x8, 0x5, 0xfff}]}, @var={0xf, 0x0, 0x0, 0xe, 0x2, 0x2}, @func={0x5, 0x0, 0x0, 0xc, 0x3}, @enum={0xe, 0x3, 0x0, 0x6, 0x4, [{0xa, 0x12a26ddf}, {0xc, 0x6}, {0x5, 0x5}]}, @float={0xe, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x61, 0x5e, 0x0]}}, &(0x7f00000003c0)=""/7, 0x8d, 0x7, 0x1, 0xd6, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1f, 0xe0, 0xde, 0x7, 0xc28, r0, 0x8, '\x00', r4, r5, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x101, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x4}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r6, 0x6, 0x6, 0x0, &(0x7f0000000080)) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000009"], 0x44}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) writev(r8, &(0x7f0000001440)=[{&(0x7f0000000940)="03000000000201", 0x7}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) r9 = openat$btrfs_control(0xffffff9c, &(0x7f00000000c0), 0x200, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) 526.250379ms ago: executing program 2 (id=619): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet_tcp_int(r3, 0x6, 0x5, &(0x7f0000000240), 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80100) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000080)=0x9) ftruncate(r4, 0x8) syz_open_dev$vim2m(&(0x7f0000000600), 0x200, 0x2) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) recvmsg$qrtr(r5, &(0x7f00000005c0)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/95, 0x5f}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x2, &(0x7f0000000380)=[{0xc8, 0x0, 0x0, ""/177}, {0xa8, 0x0, 0x0, ""/146}, {0x58, 0x0, 0x0, ""/72}, {0x78, 0x0, 0x0, ""/103}], 0x240}, 0x38, 0x40000000) readv(r2, 0x0, 0x0) 525.848958ms ago: executing program 3 (id=620): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f00000003c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000140)={0x5, r3, 0x3f, {0x9, 0x1}, 0x6}, 0x1) (async) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x84480, 0x0) ioctl$KDDISABIO(r4, 0x4b37) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@ipv4_getroute={0x1c, 0x1a, 0x20, 0x70bd2b, 0x25dfdbff, {0x2, 0x20, 0x14, 0xfb, 0xff, 0x4, 0xff, 0x4, 0x200}, [""]}, 0x1c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f00000001c0)={0x6, 0x4, 0x800, 0x932}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x82, &(0x7f00000000c0)='n\x00\x00\x00\x00\x00\x00\x00', 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 398.863486ms ago: executing program 0 (id=621): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020007000000000000000c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) listen(r0, 0x37b) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x58, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x4000) 398.254218ms ago: executing program 2 (id=622): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f0000000000)={0x1, 0x5, 0x6, 0x3}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000001000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000034eb3794000000000100000000850000006b0000009500000000000000dfad76187700b929cc7286466c2e7674706f0bcad7ad97ced3b86e1d6373324266332292da6b67b0e469f9090fce2d7f9c214aad4b4399b1b9438a3a05618402430f505ef923c5c7c7ad72d10400fe1375cabddc2efe8ca3a5c73e7e21814ed5695de68ee5ad59ff3a1eedea7f1a85c48330c164e379bbe3ceb9a3c2c04f3dbe"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="1a385aa3d49100dc6626c892b6bc436a", 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x18fd9ca9fb75925e}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006500)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0xfff1}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$KVM_HYPERV_EVENTFD(r5, 0x400caed0, &(0x7f0000000400)={0x3, r3, 0xffffffff}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x13, 0xffffffff, 0x10000}}) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000144000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003400000000e140000001100010000000000000000000000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 396.538794ms ago: executing program 0 (id=623): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x420f, r1) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r5, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x14) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r6, 0x0, &(0x7f0000000500)) syz_usb_disconnect(r3) r7 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000cc0)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x250, 0x0, 0x250, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x27}, 0x1000000, 0xff, 'wg1\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'team_slave_0\x00', 'team0\x00', {0xff}, {}, 0x62, 0x3, 0xc}, 0x287, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x3, 0xf4, 'kmp\x00', "377da29a98a85027440fb1647c5950ecfd45c615dfd84bacf537ed92ac620b95fe75775bfa0c1f3636674f1bc9affc23d45f6e27b674720897315a51a5338ca0ac2dd6b5b2d96bd558dc767e923d15aba2f74dff1149e15f5ba483d804234a06e4bc7d462efc9092f876f845199bb88c0f39fec8f07125d04e8375b370fdb68d", 0x5d, 0x2, {0x6}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x0, 0x3, 0x0, 0x4, 0x4], 0x1, 0x3}, {0x4, [0x6, 0x5, 0x6, 0x0, 0x5], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x90}}, 0x0) r9 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)="42f2d226dfbf55c6ebc9d4ba14698c2ec0416b3cb15f0b947b9e046bd3c42dcc8b201664bd37d5e1dcb2f64ec074a225ac13a89be79e2bd5bdcd8cffc5ee0512dfe666423022c73264aee90673292872b9ed8e53787dcf53322f00", 0xfffff, r9) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000380)={&(0x7f00000000c0)=[{0xffff, 0x10, 0x41, &(0x7f0000000040)="071e3cd4474a2adcafbd85fd0ac0b95df200a148b99456d1fa8e9d49352954f04ffe4ee8bf1bc937c58fb3401923ec619eef4320471610bfcc53286abfb0d057e2"}], 0x1}) 297.498564ms ago: executing program 3 (id=624): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f00000002c0)=0x8) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'i'}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'C'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0xa, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f00000001c0)=0xffff, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0xe, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x84) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x101}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x101}]}, 0x38}}, 0x0) getsockopt$inet6_int(r6, 0x29, 0x35, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 297.124264ms ago: executing program 2 (id=625): r0 = gettid() r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000045c0), 0x0, 0x0) fsopen(&(0x7f0000000100)='udf\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x101, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x4}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000009"], 0x44}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000006, 0x12, r1, 0x2e1f0000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2b, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000004000000000000000008"], 0x0, 0x2a6a030c, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="000200000000000007"], 0x20) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) sigaltstack(&(0x7f0000000080)={&(0x7f0000000180)=""/231, 0x0, 0xe7}, &(0x7f00000000c0)={&(0x7f0000000280)=""/211, 0x0, 0xd3}) sigaltstack(&(0x7f0000000900)={&(0x7f0000000a80)=""/45, 0x2, 0x2d}, &(0x7f0000000a40)={&(0x7f0000000ac0)=""/125, 0x0, 0x7d}) r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "38b80355cffb9334b84b18bacebf3d535c30219dcb950bffffffffffffffffa8ed4d5c0d4d9d945dea458da503ff3cb18f5326e1954664fa48745e1c7eef737a"}, 0x48, 0xffffffffffffffff) request_key(&(0x7f00000005c0)='pkcs7_test\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000640)='logon\x00', r6) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r7, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) tkill(r0, 0x7) 200.150063ms ago: executing program 3 (id=626): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) r0 = add_key$user(&(0x7f0000000240), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="1d", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000740)="69bf", 0x2, 0xffffffffffffffff) keyctl$update(0x2, r1, &(0x7f0000000800)="65653c67861f1c2cbd3684e5b7c89a260d576814856e4dfa03fc61b08bf6fc4b229172e042269dbb5a70afe70a317ca9bf55cd3510aabb4631b4c6c3a63a84dae53b15d168d1defd37a3a78d51e353252046647049f532618b270555d417d5ae4fd9ad44ce6aab188712ed244f7e13be9626205596960c8679a855214129ddc76640c8cd46bb44a4876661b6fdd7bbfbfac29f16412e9fc9f57c6579fa16be2e8c900cb907d0a634b38df76c2109cc2693fe9465603b4008a2c418307ee5682b2b38daa75fc31376b3b4cb3990a9b0a3e339a0ee944d49957722ee724f0274689715e97b66ddda039818e589f4f0cb9b218966f94e0ea80688a3a2a339701cd69beffba9a75810ce82954cac35c1a71e6230e139df88132aff539c49f9f5a7ffe9d91e8aba6ddd7c4e690e56ec7d8df04c0afbd8ae83141002df9b27bc06f7107336130b7f2388149d693b52dc324bce03197149207d27fba8f685ac750bf6c29235312ac8b6a5b5c1e9f4079e4f1e7485a9092045ac3b40a53740579d50eb98a66f985d8a4d3c882058fe5daa0b3989a2bb9868f7bdad9cf201a541b55f887131b94a4399bd7ab99dfc6235bf21f803dd11d1bbc810543a47588178d967d8501aa859f8a941d23120d72c9dcf7db9790ddb8d61e726e2b549a02ba1c480c6880ce1296977163a47fab3b37febbd7234e44e85c0466776f03696085e8fcd33bed01392f333a6d1952ad19ccc2a33e1e99a6a39b03a1bc2309d47aa7a0dc590626cb904b6a9f6b3948adda7bae3b63604ab2901426199c02f38507a47e1b079a644049a1e99cd8e3c52bfe043edf0b572b7031e6878c11bf414bfde73a42ad8b1344080f7683daae5312ddb3d7410310319fa4ab79815b1a8b2239a7ffd9b9a4106f7894b47e36895b0551f4a891af9abee74a4a80746946d3ce71ba5972fe51ec5b78c0039d5bae53f9a8ef7240884a9b895299339cb1f05e1a252364d94d047dc8a55a0267329db4c347dd0f6ed266e763afdf08eb6c84bd975f86ec7ac4420b9d6a9d31c2cca6a1caa562978807bc14aabf76b9717df2fc35f2cad96a9ebffc4f0078c91ec9c2a7e2d0229675bf4c6bc6579f22e73ae745942011ab2935f0c21751298744e9275e469803b23be69749b0ca79804f38c2ab6794ff6bd581ecd1a94a468203b9d58481dda6f37ac4c9b2faafde82c42d416e0f46219b409c75061b3adc5c1888f9d8a606b14344c483be215795f807b67a938cd77d4321b101bdc3785042475920011c17a87fd8a8be74c01cf37cf5bf46a754c7ddb50802a6de1027f24cb905a32d67839f7d7e3fee9373601ad7e61d063dbc54604021aca17dee9c0f24ade81e0efd6aaf1856c0855f1e6aa9b4c61b3cf138c8c1a20e186cddd0e98883dcb3ee8a3d8d2a3790036e7dc513fa091cac8bd6bc1ec0b8801f2ad7b94ef902912d17d2c2595ebcf8eadc81096acd09de526e382ffa6dc9040ab0e6f165e233300a4ce4b86dfd1986b0c6de8aed6fabf5604dc15100a45bbe9467555c5751eae3f3a87dd6af93bb32f8c021b9f55ead0962cd3ef507c693d6a6a1cafc19d318ffed8fee77dc18d4d95f361bb9b64e7e183b92ce534da78dac5aeb5f4e6cc23563310f287df885b8b6920bb44de7ae69ee5a5ca518c085b377730cfebe62068055d98462955906bcc05f3e170ff6bf8e6e7856ff1b5ebdd21b0943329b82e69ea28460290b702bb14341ee41229a05808fb8634048a56a78c20ad0f4d7a31f17fb4f7642432d715341a8d744182b7a0ced2387bcfbf7d6ad35f1ffb9e685278754baf0858f9b911140daaaa42a428295c4818b2207e5ce37fa0d589526636d244c7c17317ffd09cc9b7ae22496d06edd9fc4c7e4444f4a67edc8cc6449281f3268ac120876c3982c637ab91214d310d368e6efee70a178fe59f2f51f3232ce7d76cc0ab01f27ae4c43131278228b3cba53d733240e9977320aca214d7cd34d83574f99d95666ffe3743394ac29c7ed016e35ec76cd7d645b3a9363a50e9469a223c3eeee82bfb3f0783126079e9cf4dabd973793b8c6f4474935555951dc52d8175850fcf5cc9202a6aec7648a318aee552d27fcf078b35d6254ffb1b972ec5ce9afc98f57e1153321707f9111cb2014d731f6cb1a20e27965f876f77c1a7823029050ff308b7554dd2495731a016d0d946ae8bcd9efebb2bdf24899402977207de290789ca6fe24f88f6c770fd018334f896d400a31af17e4f848c30e1f544b817e4f05717e86ea7b4c46817833212beee472ce27478c183b9e4262611de5a20070b9a237df5e71d926740e89ff4cacdfe4f43aba7ce0b24703fa13de14be7cc490cbfb820ba2fdf2d198ac2aec7f32f39510eada0ac2be87db88f1038bb2d0f516a3b3165128a7540ab52daa6d417314f0f2d3f649438aa72a0c122171a5e4c83d75bf6fc19bcd967f510f0f904a6b03ba26a43aad5a3e5d820e05c15c66ee2f645595f5862169ef6e094d9967eccaa74644d24fdda48cb63e7f3df3185b75ee5ba49c2410ddb2d8941f76ee3ba8d6ab698f6c4dfe6d906e205730f5f0900f91f483f42cf5913f04ac337b2345b9f6e8e122e92e072fb02fc974341a1ef80382c5dbb07d7b94f0b0bc4c60fe781c416f192b3afd481bccec6b062d169fba85e6ef69f269b858cce2e6327cb4e3a3ba238ba2b197f607587f31cbaa61e7238918e7167427b4397c2d392890e44ce24e319c85004adc7390c6bf35e1c44a1ed7df059d87be6237362930fdadd4145f1bb7e4f514549f5f729a4919e76068dab83f1fb111fb948596adc9923ead6e3c09bbfb518448d703a697b7ccdde24d1391ba9d838d1b3a80ce71f23e27ddbe5dd5240bdb130359d15c0d431317d", 0x801) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r1, r1}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 79.128609ms ago: executing program 2 (id=627): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r2, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data={0x4, 0x1200}}}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 256.195µs ago: executing program 3 (id=628): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async) add_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 0s ago: executing program 3 (id=629): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000400)={{0x0, 0x1}, 0x0, 0xfffffffe}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020642500000000002020207b1af8ff00000000bfa1010000000100070100e200ffffffb782000008000000b703000834120000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 64) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async, rerun: 64) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) r3 = socket(0x10, 0x80003, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000100)={0x0, 0xd}, &(0x7f0000000140)=0x8) (async, rerun: 64) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) (rerun: 64) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'sit0\x00'}) (async, rerun: 64) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async, rerun: 64) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) socket$packet(0x11, 0x3, 0x300) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000240)={0x7, 'vlan0\x00', {0x3}, 0x3}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:21365' (ED25519) to the list of known hosts. [ 39.254539][ T40] audit: type=1400 audit(1750782698.692:62): avc: denied { name_bind } for pid=5847 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.271163][ T40] audit: type=1400 audit(1750782698.712:63): avc: denied { write } for pid=5848 comm="sh" path="pipe:[3837]" dev="pipefs" ino=3837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.283126][ T40] audit: type=1400 audit(1750782698.722:64): avc: denied { execute } for pid=5848 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.290118][ T40] audit: type=1400 audit(1750782698.722:65): avc: denied { execute_no_trans } for pid=5848 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.148962][ T40] audit: type=1400 audit(1750782700.592:66): avc: denied { mounton } for pid=5848 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.151401][ T5848] cgroup: Unknown subsys name 'net' [ 41.268734][ T5848] cgroup: Unknown subsys name 'cpuset' [ 41.274322][ T5848] cgroup: Unknown subsys name 'rlimit' [ 41.429021][ T5877] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.211564][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.143653][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 45.143665][ T40] audit: type=1400 audit(1750782704.582:80): avc: denied { execmem } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.350611][ T40] audit: type=1400 audit(1750782704.792:81): avc: denied { create } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.373150][ T40] audit: type=1400 audit(1750782704.792:82): avc: denied { read write } for pid=5930 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.382834][ T40] audit: type=1400 audit(1750782704.792:83): avc: denied { open } for pid=5930 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.386851][ T5934] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.390656][ T40] audit: type=1400 audit(1750782704.802:84): avc: denied { ioctl } for pid=5930 comm="syz-executor" path="socket:[4895]" dev="sockfs" ino=4895 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.393492][ T5935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.404772][ T5935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.404873][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.407299][ T5935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.410075][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.412638][ T5935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.414244][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.416360][ T5935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.419458][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.422550][ T5945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.424218][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.425303][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.427176][ T40] audit: type=1400 audit(1750782704.872:85): avc: denied { read } for pid=5933 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.428784][ T5945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.428979][ T5945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.429484][ T5945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.429665][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.436486][ T40] audit: type=1400 audit(1750782704.872:86): avc: denied { open } for pid=5933 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.437768][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.438100][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.440239][ T5945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.440302][ T40] audit: type=1400 audit(1750782704.872:87): avc: denied { mounton } for pid=5933 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.629804][ T40] audit: type=1400 audit(1750782705.072:88): avc: denied { module_request } for pid=5933 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.670003][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 45.721862][ T5930] chnl_net:caif_netlink_parms(): no params data found [ 45.771519][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 45.894587][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.897369][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.899728][ T5933] bridge_slave_0: entered allmulticast mode [ 45.902368][ T5933] bridge_slave_0: entered promiscuous mode [ 45.906147][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 45.926977][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.929241][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.931704][ T5933] bridge_slave_1: entered allmulticast mode [ 45.934429][ T5933] bridge_slave_1: entered promiscuous mode [ 45.966621][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.969029][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.971394][ T5942] bridge_slave_0: entered allmulticast mode [ 45.974208][ T5942] bridge_slave_0: entered promiscuous mode [ 45.980827][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.983081][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.985699][ T5942] bridge_slave_1: entered allmulticast mode [ 45.988291][ T5942] bridge_slave_1: entered promiscuous mode [ 46.008239][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.030133][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.032825][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.035401][ T5930] bridge_slave_0: entered allmulticast mode [ 46.038904][ T5930] bridge_slave_0: entered promiscuous mode [ 46.088155][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.091197][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.093332][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.096284][ T5930] bridge_slave_1: entered allmulticast mode [ 46.098848][ T5930] bridge_slave_1: entered promiscuous mode [ 46.192887][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.213285][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.218472][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.222953][ T5933] team0: Port device team_slave_0 added [ 46.226424][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.280483][ T5933] team0: Port device team_slave_1 added [ 46.306067][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.308957][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.311311][ T5938] bridge_slave_0: entered allmulticast mode [ 46.314212][ T5938] bridge_slave_0: entered promiscuous mode [ 46.319286][ T5942] team0: Port device team_slave_0 added [ 46.359667][ T5930] team0: Port device team_slave_0 added [ 46.362438][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.365472][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.368404][ T5938] bridge_slave_1: entered allmulticast mode [ 46.371677][ T5938] bridge_slave_1: entered promiscuous mode [ 46.375706][ T5942] team0: Port device team_slave_1 added [ 46.393708][ T5930] team0: Port device team_slave_1 added [ 46.428808][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.431588][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.441734][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.500525][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.502731][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.512660][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.541536][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.545907][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.548819][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.559339][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.568161][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.571052][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.582238][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.587703][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.590540][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.599559][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.604605][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.637968][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.640147][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.648091][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.693548][ T5938] team0: Port device team_slave_0 added [ 46.729981][ T5933] hsr_slave_0: entered promiscuous mode [ 46.732323][ T5933] hsr_slave_1: entered promiscuous mode [ 46.736002][ T5938] team0: Port device team_slave_1 added [ 46.771725][ T5942] hsr_slave_0: entered promiscuous mode [ 46.775964][ T5942] hsr_slave_1: entered promiscuous mode [ 46.778450][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.781498][ T5942] Cannot create hsr debugfs directory [ 46.810040][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.812747][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.823280][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.828401][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.831100][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.841263][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.895197][ T5930] hsr_slave_0: entered promiscuous mode [ 46.897494][ T5930] hsr_slave_1: entered promiscuous mode [ 46.899686][ T5930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.902069][ T5930] Cannot create hsr debugfs directory [ 46.974741][ T5938] hsr_slave_0: entered promiscuous mode [ 46.977571][ T5938] hsr_slave_1: entered promiscuous mode [ 46.980060][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.982924][ T5938] Cannot create hsr debugfs directory [ 47.250684][ T5942] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.257890][ T5942] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.262143][ T5942] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.271199][ T5942] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.293099][ T5938] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.298135][ T5938] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.311339][ T5938] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.315352][ T5938] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.352014][ T5933] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.356644][ T5933] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.360837][ T5933] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.366538][ T5933] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.422240][ T5930] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.429904][ T5930] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.434013][ T5930] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.441273][ T5930] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.482391][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.486057][ T5945] Bluetooth: hci0: command tx timeout [ 47.486065][ T5934] Bluetooth: hci2: command tx timeout [ 47.486084][ T63] Bluetooth: hci1: command tx timeout [ 47.491404][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.495659][ T5934] Bluetooth: hci3: command tx timeout [ 47.519174][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.527270][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.529587][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.535150][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.542397][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.544713][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.549390][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.551659][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.559887][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.562158][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.579206][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.608114][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.613937][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.629012][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.631305][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.636147][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.638415][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.653080][ T5938] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.656627][ T5938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.676295][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.686638][ T40] audit: type=1400 audit(1750782707.132:89): avc: denied { sys_module } for pid=5938 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.690392][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.695412][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.702941][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.705509][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.733312][ T5930] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.738595][ T5930] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.757646][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.780910][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.786831][ T5938] veth0_vlan: entered promiscuous mode [ 47.802363][ T5938] veth1_vlan: entered promiscuous mode [ 47.819616][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.840515][ T5938] veth0_macvtap: entered promiscuous mode [ 47.846507][ T5938] veth1_macvtap: entered promiscuous mode [ 47.850087][ T5942] veth0_vlan: entered promiscuous mode [ 47.863237][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.869947][ T5942] veth1_vlan: entered promiscuous mode [ 47.878812][ T5933] veth0_vlan: entered promiscuous mode [ 47.882346][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.892102][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.896876][ T5933] veth1_vlan: entered promiscuous mode [ 47.901282][ T5938] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.904050][ T5938] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.906974][ T5938] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.909630][ T5938] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.932611][ T5942] veth0_macvtap: entered promiscuous mode [ 47.946877][ T5942] veth1_macvtap: entered promiscuous mode [ 47.962854][ T5933] veth0_macvtap: entered promiscuous mode [ 47.970477][ T5930] veth0_vlan: entered promiscuous mode [ 47.975137][ T5933] veth1_macvtap: entered promiscuous mode [ 47.997629][ T5930] veth1_vlan: entered promiscuous mode [ 48.002391][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.003966][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.005686][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.008770][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.025207][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.028286][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.039174][ T5933] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.041937][ T5933] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.044958][ T5933] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.048611][ T5933] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.058821][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.059538][ T5942] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.061419][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.064329][ T5942] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.069611][ T5942] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.072280][ T5942] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.101209][ T5930] veth0_macvtap: entered promiscuous mode [ 48.106237][ T5930] veth1_macvtap: entered promiscuous mode [ 48.123236][ T5938] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.137578][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.140678][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.146305][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.166710][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.177388][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.177640][ T5930] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.180486][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.186612][ T5930] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.189455][ T5930] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.194689][ T5930] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.209163][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.212424][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.228899][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.231443][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.269389][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.271896][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.302116][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.304910][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.571619][ T6056] dlm: no local IP address has been set [ 48.573665][ T6056] dlm: cannot start dlm midcomms -107 [ 48.640789][ T6064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13'. [ 48.643737][ T6064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13'. [ 48.654955][ T6064] erspan0: entered promiscuous mode [ 48.658279][ T6064] batadv_slave_1: entered promiscuous mode [ 48.663709][ T6064] ======================================================= [ 48.663709][ T6064] WARNING: The mand mount option has been deprecated and [ 48.663709][ T6064] and is ignored by this kernel. Remove the mand [ 48.663709][ T6064] option from the mount to silence this warning. [ 48.663709][ T6064] ======================================================= [ 48.663712][ T6066] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=6066 comm=syz.3.14 [ 48.663825][ T6066] Zero length message leads to an empty skb [ 48.750825][ T6068] fuse: Bad value for 'rootmode' [ 48.887541][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19'. [ 48.934718][ T5981] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.095572][ T6091] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22'. [ 49.104784][ T5981] usb 5-1: Using ep0 maxpacket: 32 [ 49.108599][ T5981] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 49.113480][ T5981] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 49.118421][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 49.121397][ T5981] usb 5-1: Product: syz [ 49.123048][ T5981] usb 5-1: Manufacturer: syz [ 49.124684][ T5981] usb 5-1: SerialNumber: syz [ 49.129051][ T5981] usb 5-1: config 0 descriptor?? [ 49.132465][ T6064] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 49.136396][ T5981] hub 5-1:0.0: bad descriptor, ignoring hub [ 49.138288][ T5981] hub 5-1:0.0: probe with driver hub failed with error -5 [ 49.473080][ T6129] program syz.1.32 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.565981][ T5934] Bluetooth: hci1: command tx timeout [ 49.566016][ T63] Bluetooth: hci3: command tx timeout [ 49.566979][ T5946] Bluetooth: hci2: command tx timeout [ 49.568500][ T5945] Bluetooth: hci0: command tx timeout [ 49.597848][ T6120] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 49.773483][ T6136] syzkaller1: entered promiscuous mode [ 49.776747][ T6136] syzkaller1: entered allmulticast mode [ 50.135020][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.196899][ T6018] usb 5-1: USB disconnect, device number 2 [ 50.285641][ T40] kauditd_printk_skb: 120 callbacks suppressed [ 50.285656][ T40] audit: type=1400 audit(1750782709.732:210): avc: denied { mount } for pid=6150 comm="syz.1.40" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.289517][ T6151] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 50.294787][ T40] audit: type=1400 audit(1750782709.732:211): avc: denied { read } for pid=6150 comm="syz.1.40" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 50.303017][ T6151] CIFS mount error: No usable UNC path provided in device string! [ 50.303017][ T6151] [ 50.310136][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 50.310275][ T40] audit: type=1400 audit(1750782709.732:212): avc: denied { open } for pid=6150 comm="syz.1.40" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 50.314572][ T6151] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 50.315674][ T40] audit: type=1400 audit(1750782709.732:213): avc: denied { ioctl } for pid=6150 comm="syz.1.40" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 50.317187][ T24] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 50.317226][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 50.317245][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 50.317264][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 50.317283][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 50.317316][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 50.317335][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.332036][ T6151] QAT: Stopping all acceleration devices. [ 50.335727][ T40] audit: type=1400 audit(1750782709.732:214): avc: denied { mounton } for pid=6150 comm="syz.1.40" path="/18/file0" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.482352][ T40] audit: type=1400 audit(1750782709.922:215): avc: denied { mounton } for pid=6152 comm="syz.1.41" path="/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.491845][ T40] audit: type=1400 audit(1750782709.922:216): avc: denied { create } for pid=6152 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 50.499757][ T40] audit: type=1400 audit(1750782709.932:217): avc: denied { sys_admin } for pid=6152 comm="syz.1.41" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 50.523896][ T24] usb 8-1: usb_control_msg returned -32 [ 50.527175][ T24] usbtmc 8-1:16.0: can't read capabilities [ 50.536149][ T40] audit: type=1400 audit(1750782709.982:218): avc: denied { unmount } for pid=6152 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.719192][ T40] audit: type=1400 audit(1750782710.162:219): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 50.771022][ T6161] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 50.772963][ T6161] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 50.776081][ T6161] vhci_hcd vhci_hcd.0: Device attached [ 50.779511][ T6162] vhci_hcd: cannot find a urb of seqnum 4294967226 max seqnum 0 [ 50.783181][ T13] vhci_hcd: stop threads [ 50.785436][ T13] vhci_hcd: release socket [ 50.786892][ T13] vhci_hcd: disconnect device [ 51.083566][ T6018] usb 8-1: USB disconnect, device number 2 [ 51.263058][ T6167] trusted_key: syz.1.44 sent an empty control message without MSG_MORE. [ 51.417107][ T6170] binder: 6168:6170 ioctl c018620c 200000000300 returned -22 [ 51.420833][ T6170] vivid-000: disconnect [ 51.532862][ T6170] vivid-000: reconnect [ 51.582153][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'. [ 51.624112][ T6182] ALSA: mixer_oss: invalid OSS volume '' [ 51.644827][ T5945] Bluetooth: hci3: command tx timeout [ 51.644854][ T63] Bluetooth: hci0: command tx timeout [ 51.644958][ T5934] Bluetooth: hci1: command tx timeout [ 51.644988][ T5934] Bluetooth: hci2: command tx timeout [ 51.719846][ T6189] warning: `syz.0.51' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 51.742579][ T6190] block device autoloading is deprecated and will be removed. [ 51.816047][ T6184] md2: using deprecated bitmap file support [ 51.817797][ T6194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.818477][ T6184] md2: error: failed to get bitmap file [ 51.821848][ T6194] batadv_slave_0: entered promiscuous mode [ 52.075925][ T6208] batadv_slave_1: entered promiscuous mode [ 52.152579][ T6207] batadv_slave_1: left promiscuous mode [ 52.187243][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'. [ 52.270591][ T6222] IPv6: NLM_F_CREATE should be specified when creating new route [ 52.348400][ T6229] batman_adv: batadv0: Adding interface: dummy0 [ 52.351049][ T6229] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.359499][ T6229] batman_adv: batadv0: Interface activated: dummy0 [ 52.590516][ T6237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.64'. [ 52.642482][ T6240] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.682786][ T6242] 9pnet_fd: Insufficient options for proto=fd [ 52.709062][ T6248] random: crng reseeded on system resumption [ 52.728243][ T6253] xt_hashlimit: size too large, truncated to 1048576 [ 53.257782][ T6286] fuse: Bad value for 'fd' [ 53.316492][ T6292] NILFS (nbd0): device size too small [ 53.329583][ T6294] fuse: Bad value for 'fd' [ 53.404133][ T6307] tipc: Enabling of bearer rejected, failed to enable media [ 53.533513][ T6328] Bluetooth: MGMT ver 1.23 [ 53.607420][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 53.609994][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 53.612448][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 53.616179][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 53.618496][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 53.620942][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 53.623316][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 53.627346][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 53.629815][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 53.632759][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 53.639654][ T6352] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 53.685833][ T6354] syz.2.95 uses obsolete (PF_INET,SOCK_PACKET) [ 53.730287][ T63] Bluetooth: hci2: command tx timeout [ 53.730325][ T5945] Bluetooth: hci1: command tx timeout [ 54.578064][ T6398] capability: warning: `syz.3.109' uses deprecated v2 capabilities in a way that may be insecure [ 55.154798][ T839] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 55.284818][ T839] usb 5-1: device descriptor read/64, error -71 [ 55.524942][ T839] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 55.565485][ T5945] Bluetooth: hci0: command tx timeout [ 55.664741][ T839] usb 5-1: device descriptor read/64, error -71 [ 55.775514][ T839] usb usb5-port1: attempt power cycle [ 56.116272][ T839] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 56.135671][ T839] usb 5-1: device descriptor read/8, error -71 [ 56.384802][ T839] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 56.405154][ T839] usb 5-1: device descriptor read/8, error -71 [ 56.515334][ T839] usb usb5-port1: unable to enumerate USB device [ 67.311244][ T40] kauditd_printk_skb: 70 callbacks suppressed [ 67.311258][ T40] audit: type=1400 audit(1750782726.752:290): avc: denied { create } for pid=6436 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 67.321027][ T40] audit: type=1400 audit(1750782726.752:291): avc: denied { write } for pid=6436 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 67.328940][ T40] audit: type=1400 audit(1750782726.752:292): avc: denied { write } for pid=6436 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 67.340106][ T40] audit: type=1400 audit(1750782726.772:293): avc: denied { create } for pid=6441 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.347677][ T40] audit: type=1400 audit(1750782726.772:294): avc: denied { wake_alarm } for pid=6441 comm="syz.2.119" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 67.356292][ T6445] zonefs (nbd0) ERROR: Not a zoned block device [ 67.357073][ T40] audit: type=1400 audit(1750782726.782:295): avc: denied { setopt } for pid=6441 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.364346][ T6449] zonefs (nbd0) ERROR: Not a zoned block device [ 67.391168][ T6451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.483498][ T6470] block nbd0: not configured, cannot reconfigure [ 67.485852][ T6472] netlink: 28 bytes leftover after parsing attributes in process `syz.3.129'. [ 67.488752][ T6472] netlink: 'syz.3.129': attribute type 7 has an invalid length. [ 67.491178][ T6472] netlink: 'syz.3.129': attribute type 8 has an invalid length. [ 67.493682][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.129'. [ 67.538476][ T6476] netlink: 'syz.0.131': attribute type 15 has an invalid length. [ 67.603463][ T40] audit: type=1400 audit(1750782727.042:296): avc: denied { block_suspend } for pid=6471 comm="syz.3.129" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 67.611169][ T6472] netlink: 'syz.3.129': attribute type 4 has an invalid length. [ 67.654704][ T40] audit: type=1400 audit(1750782727.092:297): avc: denied { ioctl } for pid=6481 comm="syz.3.133" path="socket:[11503]" dev="sockfs" ino=11503 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.658814][ T6482] netlink: 'syz.3.133': attribute type 10 has an invalid length. [ 67.895830][ T6482] hsr_slave_0: left promiscuous mode [ 67.898269][ T6482] hsr_slave_1: left promiscuous mode [ 67.928924][ T6487] netlink: 28 bytes leftover after parsing attributes in process `syz.0.135'. [ 67.931875][ T6487] netlink: 28 bytes leftover after parsing attributes in process `syz.0.135'. [ 67.980986][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 68.074806][ T40] audit: type=1400 audit(1750782727.512:298): avc: denied { remove_name } for pid=6504 comm="syz.3.141" name="file2" dev="9p" ino=36047868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.082477][ T6507] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=6507 comm=syz.0.140 [ 68.083187][ T40] audit: type=1400 audit(1750782727.512:299): avc: denied { rmdir } for pid=6504 comm="syz.3.141" name="file2" dev="9p" ino=36047868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.085592][ T6509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.142'. [ 68.085623][ T6509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.142'. [ 68.614454][ T6547] xt_cluster: node mask cannot exceed total number of nodes [ 68.731905][ T5945] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 68.799297][ T6568] syz.3.161: attempt to access beyond end of device [ 68.799297][ T6568] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 68.804903][ T6568] (syz.3.161,6568,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 68.807252][ T6568] (syz.3.161,6568,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 68.809496][ T6568] (syz.3.161,6568,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 68.812174][ T6568] (syz.3.161,6568,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 69.810469][ T6608] evm: overlay not supported [ 69.830007][ T6608] Cannot find add_set index 0 as target [ 69.926101][ T6610] netlink: 80 bytes leftover after parsing attributes in process `syz.2.175'. [ 69.930991][ T6610] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.935122][ T6610] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.059753][ T6620] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 70.063436][ T6620] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 70.071447][ T6625] overlayfs: failed to clone upperpath [ 70.079816][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'. [ 70.178196][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 70.394728][ T34] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 70.554699][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 70.557886][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 70.561305][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 70.564420][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 70.568196][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 70.571327][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.575536][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 70.578350][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.730595][ T6676] overlayfs: failed to clone upperpath [ 70.734957][ T6675] syz_tun: entered allmulticast mode [ 70.737593][ T6674] syz_tun: left allmulticast mode [ 70.786401][ T34] usb 5-1: GET_CAPABILITIES returned 0 [ 70.788239][ T34] usbtmc 5-1:16.0: can't read capabilities [ 70.887439][ T6682] overlay: ./file0 is not a directory [ 70.995519][ T10] usb 5-1: USB disconnect, device number 7 [ 71.089013][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.091139][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.671880][ T6704] process 'syz.1.206' launched './file0' with NULL argv: empty string added [ 71.754514][ T5945] Bluetooth: hci2: Malformed HCI Event [ 71.766426][ T34] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 71.784407][ T6721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6721 comm=syz.2.210 [ 71.884380][ T6729] netlink: 'syz.2.212': attribute type 1 has an invalid length. [ 71.916663][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 71.919924][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.924159][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 71.928052][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.135521][ T6693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.144841][ T6693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.151688][ T6693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.155946][ T6693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.159987][ T6693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.163156][ T6693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.167357][ T6693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.171120][ T6693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.175472][ T6693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.179303][ T6693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.231555][ T6752] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 72.239317][ T34] usb 5-1: usb_control_msg returned -32 [ 72.241793][ T34] usbtmc 5-1:16.0: can't read capabilities [ 72.581378][ T6791] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6791 comm=syz.1.220 [ 72.633444][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 72.633454][ T40] audit: type=1400 audit(1750782732.072:337): avc: denied { remount } for pid=6799 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.815413][ T6822] batadv_slave_1: entered promiscuous mode [ 72.819740][ T6822] batadv_slave_1: left promiscuous mode [ 72.846592][ T6823] __nla_validate_parse: 3 callbacks suppressed [ 72.846609][ T6823] netlink: 36 bytes leftover after parsing attributes in process `syz.2.226'. [ 72.865731][ T6826] capability: warning: `syz.1.228' uses 32-bit capabilities (legacy support in use) [ 72.964914][ T40] audit: type=1400 audit(1750782732.412:338): avc: denied { read } for pid=6829 comm="syz.3.230" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 72.974421][ T40] audit: type=1400 audit(1750782732.412:339): avc: denied { open } for pid=6829 comm="syz.3.230" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 73.035023][ T6839] netlink: 20 bytes leftover after parsing attributes in process `syz.2.231'. [ 73.035129][ T6838] netlink: 20 bytes leftover after parsing attributes in process `syz.2.231'. [ 73.051872][ T6828] tmpfs: Bad value for 'mpol' [ 73.054450][ T40] audit: type=1400 audit(1750782732.492:340): avc: denied { accept } for pid=6827 comm="syz.1.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 73.140744][ T40] audit: type=1400 audit(1750782732.582:341): avc: denied { nlmsg_read } for pid=6846 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.175449][ T40] audit: type=1400 audit(1750782732.622:342): avc: denied { mounton } for pid=6851 comm="syz.3.236" path="/45/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 73.187725][ T40] audit: type=1400 audit(1750782732.632:343): avc: denied { unmount } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 73.208007][ T6861] netlink: 24 bytes leftover after parsing attributes in process `syz.3.238'. [ 73.210906][ T40] audit: type=1400 audit(1750782732.652:344): avc: denied { remount } for pid=6858 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 73.238812][ T40] audit: type=1400 audit(1750782732.682:345): avc: denied { open } for pid=6865 comm="syz.3.240" path="/dev/ttyqb" dev="devtmpfs" ino=394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 73.321111][ T6878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.244'. [ 73.333292][ T6878] netlink: 'syz.3.244': attribute type 39 has an invalid length. [ 73.339749][ T40] audit: type=1400 audit(1750782732.782:346): avc: denied { create } for pid=6879 comm="syz.2.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.384525][ T6886] netlink: 28 bytes leftover after parsing attributes in process `syz.3.244'. [ 73.453111][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.247'. [ 73.456050][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.247'. [ 73.458684][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.247'. [ 73.461245][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.247'. [ 73.544151][ T6897] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.657829][ T5945] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 73.660885][ T5945] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 73.663787][ T5945] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 73.666891][ T5945] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 73.669756][ T5945] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 73.672610][ T5945] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 73.675648][ T5945] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 73.678504][ T5945] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 73.681355][ T5945] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 73.684177][ T5945] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 73.687401][ T5945] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 73.859067][ T5945] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 73.862979][ T5945] CPU: 2 UID: 0 PID: 5945 Comm: kworker/u33:5 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 73.862995][ T5945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.863004][ T5945] Workqueue: hci0 hci_rx_work [ 73.863024][ T5945] Call Trace: [ 73.863028][ T5945] [ 73.863033][ T5945] dump_stack_lvl+0x16c/0x1f0 [ 73.863050][ T5945] sysfs_warn_dup+0x7f/0xa0 [ 73.863076][ T5945] sysfs_create_dir_ns+0x24b/0x2b0 [ 73.863091][ T5945] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 73.863105][ T5945] ? find_held_lock+0x2b/0x80 [ 73.863121][ T5945] ? do_raw_spin_unlock+0x172/0x230 [ 73.863135][ T5945] kobject_add_internal+0x2c4/0x9b0 [ 73.863154][ T5945] kobject_add+0x16e/0x240 [ 73.863165][ T5945] ? __pfx_kobject_add+0x10/0x10 [ 73.863175][ T5945] ? do_raw_spin_unlock+0x172/0x230 [ 73.863186][ T5945] ? kobject_put+0xab/0x5a0 [ 73.863205][ T5945] device_add+0x288/0x1a70 [ 73.863223][ T5945] ? __pfx_dev_set_name+0x10/0x10 [ 73.863233][ T5945] ? __pfx_device_add+0x10/0x10 [ 73.863249][ T5945] ? mgmt_send_event_skb+0x2fb/0x460 [ 73.863268][ T5945] hci_conn_add_sysfs+0x17e/0x230 [ 73.863285][ T5945] le_conn_complete_evt+0x1075/0x1d70 [ 73.863303][ T5945] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 73.863318][ T5945] ? hci_event_packet+0x459/0x11c0 [ 73.863335][ T5945] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 73.863351][ T5945] ? skb_pull_data+0x166/0x210 [ 73.863366][ T5945] hci_le_meta_evt+0x357/0x5e0 [ 73.863381][ T5945] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 73.863398][ T5945] hci_event_packet+0x682/0x11c0 [ 73.863412][ T5945] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 73.863428][ T5945] ? __pfx_hci_event_packet+0x10/0x10 [ 73.863444][ T5945] ? kcov_remote_start+0x3c9/0x6d0 [ 73.863457][ T5945] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.863474][ T5945] hci_rx_work+0x2c5/0x16b0 [ 73.863491][ T5945] ? rcu_is_watching+0x12/0xc0 [ 73.863506][ T5945] process_one_work+0x9cc/0x1b70 [ 73.863522][ T5945] ? __pfx_process_one_work+0x10/0x10 [ 73.863536][ T5945] ? assign_work+0x1a0/0x250 [ 73.863554][ T5945] worker_thread+0x6c8/0xf10 [ 73.863570][ T5945] ? __pfx_worker_thread+0x10/0x10 [ 73.863581][ T5945] kthread+0x3c2/0x780 [ 73.863590][ T5945] ? __pfx_kthread+0x10/0x10 [ 73.863600][ T5945] ? rcu_is_watching+0x12/0xc0 [ 73.863612][ T5945] ? __pfx_kthread+0x10/0x10 [ 73.863622][ T5945] ret_from_fork+0x5d4/0x6f0 [ 73.863637][ T5945] ? __pfx_kthread+0x10/0x10 [ 73.863647][ T5945] ret_from_fork_asm+0x1a/0x30 [ 73.863664][ T5945] [ 73.863679][ T5945] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 73.968371][ T5945] Bluetooth: hci0: failed to register connection device [ 74.355978][ T6920] fuse: Bad value for 'fd' [ 74.523973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 74.530105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.532945][ T53] usb 5-1: USB disconnect, device number 8 [ 74.844191][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a725c00: rx timeout, send abort [ 75.348543][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a725c00: abort rx timeout. Force session deactivation [ 75.635959][ T6975] NILFS (nbd0): device size too small [ 75.982776][ T6984] usb 2-1: USB disconnect, device number 2 [ 76.030497][ T6985] hub 2-0:1.0: USB hub found [ 76.033204][ T6985] hub 2-0:1.0: 6 ports detected [ 76.038847][ T6991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61204 sclass=netlink_route_socket pid=6991 comm=syz.3.276 [ 76.119263][ T7005] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 76.174045][ T7010] overlayfs: failed to clone upperpath [ 76.196621][ T61] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 76.349645][ T7028] net_ratelimit: 23 callbacks suppressed [ 76.349657][ T7028] netlink: zone id is out of range [ 76.353406][ T7028] netlink: zone id is out of range [ 76.355877][ T7028] netlink: zone id is out of range [ 76.357703][ T7028] netlink: zone id is out of range [ 76.368169][ T7028] netlink: set zone limit has 4 unknown bytes [ 76.372240][ T7028] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 76.374868][ T7028] IPv6: NLM_F_CREATE should be set when creating new route [ 76.389041][ T61] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 76.391931][ T61] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 76.395509][ T61] usb 2-1: Product: QEMU USB Tablet [ 76.397297][ T61] usb 2-1: Manufacturer: QEMU [ 76.398824][ T61] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 76.420758][ T61] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0002/input/input5 [ 76.490706][ T61] hid-generic 0003:0627:0001.0002: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 76.866943][ T7072] random: crng reseeded on system resumption [ 76.874107][ T7072] netlink: 'syz.0.300': attribute type 1 has an invalid length. [ 76.879166][ T7072] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 76.883180][ T7072] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.886306][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.889175][ T7072] bridge0: entered allmulticast mode [ 76.899188][ T7072] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 77.300283][ T7096] wg2: entered promiscuous mode [ 77.302801][ T7096] wg2: entered allmulticast mode [ 77.427513][ T7118] tmpfs: Unknown parameter 'usrquota_block_|jhardlimit' [ 77.454972][ T7122] netlink: 'syz.1.314': attribute type 29 has an invalid length. [ 77.464488][ T7122] netlink: 'syz.1.314': attribute type 29 has an invalid length. [ 77.596950][ T7131] geneve2: entered promiscuous mode [ 77.598639][ T7131] geneve2: entered allmulticast mode [ 77.638712][ T7135] qnx6: unable to set blocksize [ 77.646328][ T7134] Cannot find add_set index 0 as target [ 77.652832][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 77.652842][ T40] audit: type=1400 audit(1750782737.092:389): avc: denied { connect } for pid=7137 comm="syz.1.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.685415][ T40] audit: type=1400 audit(1750782737.122:390): avc: denied { create } for pid=7142 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 77.692395][ T40] audit: type=1400 audit(1750782737.132:391): avc: denied { create } for pid=7142 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 77.707913][ T7147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=7147 comm=syz.2.324 [ 77.712014][ T7148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=7148 comm=syz.2.324 [ 77.713238][ T40] audit: type=1400 audit(1750782737.132:392): avc: denied { setopt } for pid=7142 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 77.804505][ T40] audit: type=1400 audit(1750782737.242:393): avc: denied { setopt } for pid=7163 comm="syz.0.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.844188][ T7173] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 77.847270][ T7173] UDF-fs: Scanning with blocksize 512 failed [ 77.849611][ T7173] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 77.852232][ T7173] UDF-fs: Scanning with blocksize 1024 failed [ 77.855869][ T7173] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 77.858717][ T7173] UDF-fs: Scanning with blocksize 2048 failed [ 77.861116][ T7173] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 77.863536][ T7173] UDF-fs: Scanning with blocksize 4096 failed [ 77.937086][ T7180] __nla_validate_parse: 7 callbacks suppressed [ 77.937096][ T7180] netlink: 56 bytes leftover after parsing attributes in process `syz.2.334'. [ 77.974727][ T7178] netlink: 'syz.3.335': attribute type 21 has an invalid length. [ 77.977193][ T7178] netlink: 'syz.3.335': attribute type 6 has an invalid length. [ 77.979615][ T7178] netlink: 132 bytes leftover after parsing attributes in process `syz.3.335'. [ 78.063792][ T40] audit: type=1400 audit(1750782737.502:394): avc: denied { read write } for pid=7186 comm="syz.3.338" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 78.071329][ T40] audit: type=1400 audit(1750782737.502:395): avc: denied { open } for pid=7186 comm="syz.3.338" path="/70/file0/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 78.078471][ T40] audit: type=1400 audit(1750782737.512:396): avc: denied { ioctl } for pid=7186 comm="syz.3.338" path="/70/file0/file0" dev="fuse" ino=5 ioctlcmd=0x545c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 78.101144][ T40] audit: type=1400 audit(1750782737.542:397): avc: denied { write } for pid=7188 comm="syz.0.339" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.109194][ T40] audit: type=1400 audit(1750782737.552:398): avc: denied { ioctl } for pid=7188 comm="syz.0.339" path="/dev/input/event1" dev="devtmpfs" ino=942 ioctlcmd=0x4509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.263909][ T7208] netlink: 'syz.0.344': attribute type 13 has an invalid length. [ 78.267786][ T7208] macvtap0: entered promiscuous mode [ 78.272547][ T7208] macvtap0: refused to change device tx_queue_len [ 78.294749][ T5945] Bluetooth: hci0: command 0x0406 tx timeout [ 78.421876][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'. [ 78.421914][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'. [ 78.424715][ T7225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.349'. [ 78.430383][ T7224] netlink: 24 bytes leftover after parsing attributes in process `syz.2.349'. [ 78.541969][ T7231] netlink: 'syz.1.352': attribute type 1 has an invalid length. [ 78.567913][ T7231] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 78.571049][ T7234] netlink: 132 bytes leftover after parsing attributes in process `syz.2.353'. [ 78.575953][ T6341] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 78.576505][ T7231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.599823][ T7231] veth3: entered promiscuous mode [ 78.603882][ T7231] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 78.647505][ T7243] overlayfs: failed to resolve './file0': -40 [ 78.695890][ T6345] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 78.725638][ T7253] netlink: 80 bytes leftover after parsing attributes in process `syz.1.359'. [ 78.762430][ T7259] Cannot find del_set index 85 as target [ 78.945795][ T7287] qrtr: Invalid version 0 [ 78.959250][ T7293] geneve2: entered promiscuous mode [ 78.960991][ T7293] geneve2: entered allmulticast mode [ 79.012026][ T7304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.376'. [ 79.039533][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'. [ 79.052263][ T7306] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 79.120092][ T7319] vlan2: entered promiscuous mode [ 79.122177][ T7319] bridge0: entered promiscuous mode [ 79.124355][ T7319] vlan2: entered allmulticast mode [ 79.131315][ T7319] bridge0: entered allmulticast mode [ 79.322512][ T7346] netlink: 'syz.1.391': attribute type 21 has an invalid length. [ 79.534720][ T837] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 79.601493][ T7382] bridge0: entered promiscuous mode [ 79.603395][ T7382] macsec1: entered promiscuous mode [ 79.606992][ T7382] bridge0: port 3(macsec1) entered blocking state [ 79.609120][ T7382] bridge0: port 3(macsec1) entered disabled state [ 79.611313][ T7382] macsec1: entered allmulticast mode [ 79.612993][ T7382] bridge0: entered allmulticast mode [ 79.616202][ T7382] macsec1: left allmulticast mode [ 79.617843][ T7382] bridge0: left allmulticast mode [ 79.620227][ T7382] bridge0: left promiscuous mode [ 79.690344][ T7386] overlayfs: failed to clone upperpath [ 79.694742][ T837] usb 8-1: Using ep0 maxpacket: 16 [ 79.701472][ T837] usb 8-1: config 2 has an invalid interface number: 20 but max is 1 [ 79.703982][ T837] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 79.707301][ T837] usb 8-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 79.710228][ T837] usb 8-1: config 2 has no interface number 0 [ 79.712176][ T837] usb 8-1: config 2 interface 20 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.716269][ T837] usb 8-1: config 2 interface 20 has no altsetting 0 [ 79.719903][ T837] usb 8-1: New USB device found, idVendor=0499, idProduct=1503, bcdDevice=39.55 [ 79.722730][ T837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.725169][ T837] usb 8-1: Manufacturer: 瘎ꎖ뀭넲豠ꥧ탡૑ሜ蛖▲뾱㥢禆뒑⒏貽ղ됥⏸麙쀄ጘ溘Ẹ륃̌妪ෆ㭶䚐놉㕃᧐퉉주躪紫䠪퐈ޤ֌㞔烿唧ȂⰡ뢡 [ 79.799697][ T7390] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 79.799782][ T7389] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 79.802890][ T7390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.950157][ T837] usb 8-1: USB disconnect, device number 3 [ 79.974380][ T6943] udevd[6943]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:2.20/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 80.183455][ T7413] raw_sendmsg: syz.0.414 forgot to set AF_INET. Fix it! [ 80.448293][ T7440] netlink: 'syz.0.419': attribute type 4 has an invalid length. [ 80.691286][ T7454] SELinux: security_context_str_to_sid () failed with errno=-22 [ 80.698820][ T7453] SELinux: syz.3.424 (7453) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 81.326853][ T838] cfg80211: failed to load regulatory.db [ 81.538967][ T7557] pimreg: entered allmulticast mode [ 81.541082][ T7558] pimreg: left allmulticast mode [ 81.544732][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 81.553828][ T7498] cgroup: fork rejected by pids controller in /syz3 [ 81.674687][ T10] usb 5-1: device descriptor read/64, error -71 [ 81.776548][ T7573] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.779790][ T7573] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.934685][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 82.046807][ T7601] hsr_slave_0 (unregistering): left promiscuous mode [ 82.064822][ T10] usb 5-1: device descriptor read/64, error -71 [ 82.176057][ T10] usb usb5-port1: attempt power cycle [ 82.435579][ T7612] netlink: 'syz.3.448': attribute type 2 has an invalid length. [ 82.534713][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 82.556594][ T10] usb 5-1: device descriptor read/8, error -71 [ 82.794740][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 82.821342][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 82.821352][ T40] audit: type=1400 audit(1750782742.262:414): avc: denied { getopt } for pid=7631 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 82.824811][ T7632] fuse: Invalid rootmode [ 82.829362][ T40] audit: type=1400 audit(1750782742.262:415): avc: denied { kexec_image_load } for pid=7631 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 82.837104][ T10] usb 5-1: device descriptor read/8, error -71 [ 82.866377][ T7634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.869174][ T7634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.872769][ T7634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.876457][ T7634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.919689][ T7635] xt_CT: You must specify a L4 protocol and not use inversions on it [ 82.954925][ T10] usb usb5-port1: unable to enumerate USB device [ 83.326968][ T7668] Driver unsupported XDP return value 0 on prog (id 54) dev N/A, expect packet loss! [ 83.335432][ T7671] syz_tun: entered promiscuous mode [ 83.337696][ T7671] batadv_slave_0: entered promiscuous mode [ 83.341357][ T7671] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 83.344151][ T7671] Cannot create hsr debugfs directory [ 83.378011][ T7676] ptrace attach of "/syz-executor exec"[5933] was attempted by "/syz-executor exec"[7676] [ 83.580012][ T40] audit: type=1400 audit(1750782743.022:416): avc: denied { mount } for pid=7693 comm="syz.2.475" name="/" dev="configfs" ino=3185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 83.589991][ T7694] overlayfs: failed to clone lowerpath [ 83.690189][ T7701] xt_hashlimit: size too large, truncated to 1048576 [ 83.901348][ T7718] overlay: ./bus is not a directory [ 83.906372][ T7718] __nla_validate_parse: 9 callbacks suppressed [ 83.906381][ T7718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.482'. [ 83.911189][ T7718] netlink: 60 bytes leftover after parsing attributes in process `syz.3.482'. [ 83.914195][ T7718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.482'. [ 83.917599][ T7718] netlink: 60 bytes leftover after parsing attributes in process `syz.3.482'. [ 83.920516][ T7718] netlink: 104 bytes leftover after parsing attributes in process `syz.3.482'. [ 84.020427][ T40] audit: type=1400 audit(1750782743.462:417): avc: denied { listen } for pid=7729 comm="syz.3.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.027498][ T40] audit: type=1400 audit(1750782743.462:418): avc: denied { accept } for pid=7729 comm="syz.3.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.057437][ T40] audit: type=1400 audit(1750782743.502:419): avc: denied { ioctl } for pid=7733 comm="syz.2.489" path="socket:[14079]" dev="sockfs" ino=14079 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.700833][ T40] audit: type=1400 audit(1750782744.142:420): avc: denied { create } for pid=7749 comm="syz.1.495" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 84.898495][ T7760] 9p: Unknown access argument 18446744073709551615: -34 [ 84.948803][ T7763] netlink: 'syz.3.498': attribute type 27 has an invalid length. [ 84.972857][ T7764] overlayfs: failed to clone upperpath [ 84.977647][ T7763] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.980731][ T7763] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.027641][ T7763] wg2: left promiscuous mode [ 85.029173][ T7763] wg2: left allmulticast mode [ 85.054499][ T7763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.064114][ T7763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.098492][ T7770] net_ratelimit: 1 callbacks suppressed [ 85.098503][ T7770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.110211][ T7763] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.113095][ T7763] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.117368][ T7763] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.120123][ T7763] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.236709][ T7783] xt_hashlimit: size too large, truncated to 1048576 [ 85.288919][ T7785] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.505'. [ 85.380092][ T7787] tmpfs: Unknown parameter '0x0000000000000008' [ 85.472999][ T40] audit: type=1400 audit(1750782744.912:421): avc: denied { connect } for pid=7805 comm="syz.2.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 85.566876][ T7818] ip6_vti0: entered promiscuous mode [ 85.603515][ T7827] binder: 7824:7827 ioctl 8018456f 200000000400 returned -22 [ 85.712359][ T7848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.523'. [ 85.733302][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880340ee400: rx timeout, send abort [ 85.764394][ T7854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.525'. [ 85.769404][ T7854] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7854 comm=syz.1.525 [ 85.880587][ T40] audit: type=1400 audit(1750782745.322:422): avc: denied { getopt } for pid=7864 comm="syz.0.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 85.891800][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'. [ 85.920786][ T7873] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 85.960344][ T7865] bridge_slave_1 (unregistering): left allmulticast mode [ 85.963027][ T7865] bridge_slave_1 (unregistering): left promiscuous mode [ 85.965981][ T7865] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.050318][ T7888] netlink: 14 bytes leftover after parsing attributes in process `syz.0.536'. [ 86.070288][ T7888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.076810][ T7888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.081288][ T7888] bond0 (unregistering): Released all slaves [ 86.115234][ T40] audit: type=1400 audit(1750782745.552:423): avc: denied { execute } for pid=7892 comm="syz.1.538" path="/memory.numa_stat" dev="ramfs" ino=14190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 86.228547][ T7901] syz_tun: entered allmulticast mode [ 86.234057][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804746d000: rx timeout, send abort [ 86.237419][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880340ee400: abort rx timeout. Force session deactivation [ 86.276302][ T7913] overlayfs: failed to clone upperpath [ 86.356651][ T7926] overlayfs: failed to clone lowerpath [ 86.523727][ T7953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7953 comm=syz.0.560 [ 86.644521][ T7963] netlink: 'syz.2.563': attribute type 7 has an invalid length. [ 86.737389][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804746d000: abort rx timeout. Force session deactivation [ 86.837777][ T7978] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.888165][ T7980] binder: 7979:7980 ioctl c018620c 200000000300 returned -22 [ 86.919299][ T7988] xt_HMARK: spi-set and port-set can't be combined [ 87.384773][ T6020] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 87.546675][ T6020] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 87.550042][ T6020] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.553934][ T6020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 87.575000][ T6020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 87.578398][ T6020] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.584579][ T6020] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 87.591307][ T6020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.594023][ T6020] usb 5-1: Product: syz [ 87.595418][ T6020] usb 5-1: Manufacturer: syz [ 87.596892][ T6020] usb 5-1: SerialNumber: syz [ 87.600125][ T6020] usb 5-1: config 0 descriptor?? [ 87.602823][ T7992] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 87.608669][ T6020] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input7 [ 87.967326][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 87.967336][ T40] audit: type=1400 audit(1750782747.412:439): avc: denied { read } for pid=7996 comm="syz.3.574" dev="sockfs" ino=16847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.970355][ T7997] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 87.979195][ T6018] usb 5-1: USB disconnect, device number 13 [ 88.011958][ T7926] syz.1.551: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 88.019161][ T7926] CPU: 3 UID: 0 PID: 7926 Comm: syz.1.551 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 88.019186][ T7926] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.019197][ T7926] Call Trace: [ 88.019202][ T7926] [ 88.019209][ T7926] dump_stack_lvl+0x16c/0x1f0 [ 88.019261][ T7926] warn_alloc+0x248/0x3a0 [ 88.019286][ T7926] ? __pfx_warn_alloc+0x10/0x10 [ 88.019319][ T7926] ? hash_netiface_create+0x3ec/0x1250 [ 88.019344][ T7926] ? __vmalloc_node_noprof+0xad/0xf0 [ 88.019368][ T7926] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 88.019396][ T7926] ? hash_netiface_create+0x3ec/0x1250 [ 88.019428][ T7926] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 88.019457][ T7926] ? hash_netiface_create+0x3ec/0x1250 [ 88.019481][ T7926] __vmalloc_node_noprof+0xad/0xf0 [ 88.019500][ T7926] ? hash_netiface_create+0x3ec/0x1250 [ 88.019528][ T7926] __vmalloc_node_range_noprof+0xb73/0x14b0 [ 88.019556][ T7926] ? hash_netiface_create+0x3ec/0x1250 [ 88.019587][ T7926] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 88.019608][ T7926] ? __alloc_pages_noprof+0xb/0x1b0 [ 88.019630][ T7926] ? ___kmalloc_large_node+0x84/0x1e0 [ 88.019654][ T7926] __kvmalloc_node_noprof+0x30a/0x620 [ 88.019676][ T7926] ? hash_netiface_create+0x3ec/0x1250 [ 88.019700][ T7926] ? hash_netiface_create+0x3ec/0x1250 [ 88.019730][ T7926] ? hash_netiface_create+0x3ec/0x1250 [ 88.019753][ T7926] hash_netiface_create+0x3ec/0x1250 [ 88.019779][ T7926] ? __pfx___nla_validate+0xb/0x10 [ 88.019814][ T7926] ? __pfx_hash_netiface_create+0x10/0x10 [ 88.019857][ T7926] ip_set_create+0x7e4/0x14d0 [ 88.019887][ T7926] ? __pfx_ip_set_create+0x10/0x10 [ 88.019929][ T7926] ? find_held_lock+0x2b/0x80 [ 88.019964][ T7926] nfnetlink_rcv_msg+0x9fc/0x1200 [ 88.019995][ T7926] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 88.020020][ T7926] ? __lock_acquire+0x622/0x1c90 [ 88.020068][ T7926] ? avc_has_perm_noaudit+0x149/0x3b0 [ 88.020104][ T7926] netlink_rcv_skb+0x158/0x420 [ 88.020122][ T7926] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 88.020142][ T7926] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 88.020172][ T7926] ? ns_capable+0xd7/0x110 [ 88.020195][ T7926] nfnetlink_rcv+0x1b3/0x430 [ 88.020216][ T7926] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 88.020236][ T7926] ? netlink_deliver_tap+0x1ae/0xd30 [ 88.020270][ T7926] netlink_unicast+0x53a/0x7f0 [ 88.020291][ T7926] ? __pfx_netlink_unicast+0x10/0x10 [ 88.020317][ T7926] netlink_sendmsg+0x8d1/0xdd0 [ 88.020339][ T7926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.020366][ T7926] ____sys_sendmsg+0xa95/0xc70 [ 88.020386][ T7926] ? copy_msghdr_from_user+0x10a/0x160 [ 88.020411][ T7926] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.020427][ T7926] ? preempt_schedule_thunk+0x16/0x30 [ 88.020454][ T7926] ? try_to_wake_up+0xa2f/0x1680 [ 88.020480][ T7926] ___sys_sendmsg+0x134/0x1d0 [ 88.020507][ T7926] ? __pfx____sys_sendmsg+0x10/0x10 [ 88.020529][ T7926] ? __lock_acquire+0x622/0x1c90 [ 88.020588][ T7926] __sys_sendmsg+0x16d/0x220 [ 88.020614][ T7926] ? __pfx___sys_sendmsg+0x10/0x10 [ 88.020638][ T7926] ? __x64_sys_futex+0x1e0/0x4c0 [ 88.020682][ T7926] do_syscall_64+0xcd/0x4c0 [ 88.020708][ T7926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.020726][ T7926] RIP: 0033:0x7f18cd38e929 [ 88.020741][ T7926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.020758][ T7926] RSP: 002b:00007f18ce299038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.020776][ T7926] RAX: ffffffffffffffda RBX: 00007f18cd5b5fa0 RCX: 00007f18cd38e929 [ 88.020787][ T7926] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 88.020798][ T7926] RBP: 00007f18cd410b39 R08: 0000000000000000 R09: 0000000000000000 [ 88.020808][ T7926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.020817][ T7926] R13: 0000000000000000 R14: 00007f18cd5b5fa0 R15: 00007ffd37926578 [ 88.020841][ T7926] [ 88.021827][ T7926] Mem-Info: [ 88.156257][ T7926] active_anon:29325 inactive_anon:27045 isolated_anon:0 [ 88.156257][ T7926] active_file:10630 inactive_file:32053 isolated_file:0 [ 88.156257][ T7926] unevictable:1768 dirty:56 writeback:0 [ 88.156257][ T7926] slab_reclaimable:8492 slab_unreclaimable:70822 [ 88.156257][ T7926] mapped:24612 shmem:41407 pagetables:1200 [ 88.156257][ T7926] sec_pagetables:301 bounce:0 [ 88.156257][ T7926] kernel_misc_reclaimable:0 [ 88.156257][ T7926] free:391015 free_pcp:12903 free_cma:0 [ 88.170212][ T7926] Node 0 active_anon:83348kB inactive_anon:108180kB active_file:42492kB inactive_file:127920kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98336kB dirty:200kB writeback:0kB shmem:129580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13072kB pagetables:4436kB sec_pagetables:1200kB all_unreclaimable? no Balloon:0kB [ 88.180792][ T7926] Node 1 active_anon:33952kB inactive_anon:0kB active_file:28kB inactive_file:292kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:112kB dirty:24kB writeback:0kB shmem:36048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:144kB pagetables:364kB sec_pagetables:4kB all_unreclaimable? no Balloon:0kB [ 88.190997][ T7926] Node 0 DMA free:5332kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1256kB inactive_anon:1084kB active_file:104kB inactive_file:2704kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:400kB local_pcp:96kB free_cma:0kB [ 88.200419][ T7926] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 88.202240][ T7926] Node 0 DMA32 free:51724kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:82092kB inactive_anon:107096kB active_file:42388kB inactive_file:125216kB unevictable:3536kB writepending:200kB present:2080628kB managed:1264708kB mlocked:0kB bounce:0kB free_pcp:8112kB local_pcp:5256kB free_cma:0kB [ 88.212149][ T7926] lowmem_reserve[]: 0 0 0 0 0 [ 88.213669][ T7926] Node 1 Normal free:1506880kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33952kB inactive_anon:0kB active_file:28kB inactive_file:292kB unevictable:3536kB writepending:24kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:43696kB local_pcp:11064kB free_cma:0kB [ 88.223480][ T7926] lowmem_reserve[]: 0 0 0 0 0 [ 88.225057][ T7926] Node 0 DMA: 5*4kB (UM) 3*8kB (M) 2*16kB (UM) 6*32kB (UM) 7*64kB (UM) 4*128kB (M) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 5324kB [ 88.229814][ T7926] Node 0 DMA32: 616*4kB (ME) 409*8kB (UME) 232*16kB (UME) 272*32kB (UME) 184*64kB (UME) 33*128kB (UME) 15*256kB (UME) 6*512kB (UM) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 51304kB [ 88.235563][ T7926] Node 1 Normal: 4*4kB (ME) 7*8kB (UE) 2*16kB (UE) 7*32kB (UME) 13*64kB (ME) 7*128kB (UME) 2*256kB (UM) 42*512kB (UME) 38*1024kB (UME) 11*2048kB (UM) 347*4096kB (UM) = 1506824kB [ 88.241171][ T7926] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 88.244140][ T7926] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 88.247253][ T7926] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 88.250185][ T7926] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 88.253079][ T7926] 84088 total pagecache pages [ 88.254576][ T7926] 0 pages in swap cache [ 88.255985][ T7926] Free swap = 88900kB [ 88.257286][ T7926] Total swap = 124996kB [ 88.258608][ T7926] 1048443 pages RAM [ 88.260135][ T7926] 0 pages HighMem/MovableOnly [ 88.261986][ T7926] 282937 pages reserved [ 88.263653][ T7926] 0 pages cma reserved [ 88.366182][ T7926] syz.1.551 (7926) used greatest stack depth: 18024 bytes left [ 88.536201][ T8013] overlayfs: failed to clone upperpath [ 88.569195][ T40] audit: type=1400 audit(1750782748.012:440): avc: denied { map } for pid=8018 comm="syz.1.582" path="/182/file0" dev="tmpfs" ino=996 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 88.599612][ T8025] netlink: 'syz.0.583': attribute type 1 has an invalid length. [ 88.600251][ T8024] overlayfs: failed to resolve './bus': -2 [ 88.612515][ T40] audit: type=1400 audit(1750782748.052:441): avc: denied { accept } for pid=8028 comm="syz.1.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 88.676857][ T8037] netlink: 'syz.1.588': attribute type 2 has an invalid length. [ 88.679370][ T8037] nbd: must specify a device to reconfigure [ 88.734504][ T8044] Malformed UNC in devname [ 88.734504][ T8044] [ 88.734955][ T40] audit: type=1400 audit(1750782748.182:442): avc: denied { map } for pid=8036 comm="syz.1.588" path="socket:[18511]" dev="sockfs" ino=18511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.737405][ T8044] CIFS: VFS: Malformed UNC in devname [ 88.745093][ T40] audit: type=1400 audit(1750782748.182:443): avc: denied { read } for pid=8036 comm="syz.1.588" path="socket:[18511]" dev="sockfs" ino=18511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.775612][ T8047] Bluetooth: MGMT ver 1.23 [ 88.825886][ T8054] program syz.0.595 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.834719][ T40] audit: type=1400 audit(1750782748.272:444): avc: denied { append } for pid=8053 comm="syz.0.595" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 88.908672][ T8063] dvmrp1: entered allmulticast mode [ 89.089684][ T40] audit: type=1400 audit(1750782748.532:445): avc: denied { setopt } for pid=8089 comm="syz.3.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 89.800815][ T40] audit: type=1400 audit(1750782749.242:446): avc: denied { ioctl } for pid=8108 comm="syz.2.611" path="socket:[17709]" dev="sockfs" ino=17709 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.814437][ T8113] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 89.836095][ T40] audit: type=1400 audit(1750782749.282:447): avc: denied { ioctl } for pid=8114 comm="syz.2.612" path="socket:[17719]" dev="sockfs" ino=17719 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.026705][ T8134] __nla_validate_parse: 8 callbacks suppressed [ 90.026716][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.618'. [ 90.053748][ T6018] libceph: connect (1)[c::]:6789 error -101 [ 90.064179][ T6018] libceph: mon0 (1)[c::]:6789 connect error [ 90.067505][ T40] audit: type=1400 audit(1750782749.512:448): avc: denied { read write } for pid=8133 comm="syz.0.618" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 90.088138][ T8136] ceph: No mds server is up or the cluster is laggy [ 90.137293][ T8149] openvswitch: netlink: EtherType 0 is less than min 600 [ 90.221816][ T8153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.622'. [ 90.225693][ T8153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.622'. [ 90.420132][ T8179] MPI: mpi too large (16392 bits) [ 90.424792][ T6019] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 90.584864][ T6019] usb 5-1: Using ep0 maxpacket: 16 [ 90.587182][ T6019] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 90.589212][ T6019] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 90.589234][ T6019] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.589251][ T6019] usb 5-1: Product: syz [ 90.589263][ T6019] usb 5-1: Manufacturer: syz [ 90.589275][ T6019] usb 5-1: SerialNumber: syz [ 90.591429][ T6019] usb 5-1: config 0 descriptor?? [ 90.594488][ T8190] ================================================================== [ 90.594497][ T8190] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 90.594520][ T8190] Write of size 8 at addr ffffc90005159000 by task syz.3.629/8190 [ 90.594534][ T8190] [ 90.594542][ T8190] CPU: 1 UID: 0 PID: 8190 Comm: syz.3.629 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 90.594563][ T8190] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.594573][ T8190] Call Trace: [ 90.594579][ T8190] [ 90.594585][ T8190] dump_stack_lvl+0x116/0x1f0 [ 90.594610][ T8190] print_report+0xcd/0x680 [ 90.594649][ T8190] ? __virt_addr_valid+0x81/0x610 [ 90.594670][ T8190] ? sys_imageblit+0x1a6f/0x1e60 [ 90.594687][ T8190] kasan_report+0xe0/0x110 [ 90.594709][ T8190] ? sys_imageblit+0x1a6f/0x1e60 [ 90.594729][ T8190] sys_imageblit+0x1a6f/0x1e60 [ 90.594749][ T8190] ? __pfx_sys_imageblit+0x10/0x10 [ 90.594767][ T8190] ? do_raw_spin_lock+0x12c/0x2b0 [ 90.594790][ T8190] ? queue_work_on+0x12a/0x1f0 [ 90.594807][ T8190] ? lockdep_hardirqs_on+0x7c/0x110 [ 90.594830][ T8190] ? queue_work_on+0x8b/0x1f0 [ 90.594848][ T8190] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 90.594869][ T8190] bit_putcs+0x90f/0xde0 [ 90.594904][ T8190] ? __pfx_bit_putcs+0x10/0x10 [ 90.594930][ T8190] ? lockdep_hardirqs_on+0x7c/0x110 [ 90.594952][ T8190] ? fb_get_color_depth+0x120/0x250 [ 90.594974][ T8190] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 90.594994][ T8190] ? __pfx_bit_putcs+0x10/0x10 [ 90.595017][ T8190] fbcon_putcs+0x383/0x4a0 [ 90.595039][ T8190] do_update_region+0x2e6/0x3f0 [ 90.595058][ T8190] redraw_screen+0x63f/0x760 [ 90.595079][ T8190] ? __pfx_vc_do_resize+0x10/0x10 [ 90.595099][ T8190] ? __pfx_redraw_screen+0x10/0x10 [ 90.595121][ T8190] fbcon_set_disp+0x7d4/0xe40 [ 90.595143][ T8190] set_con2fb_map+0x703/0x1060 [ 90.595167][ T8190] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 90.595191][ T8190] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 90.595217][ T8190] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 90.595236][ T8190] do_fb_ioctl+0x328/0x7e0 [ 90.595250][ T8190] ? __pfx_do_fb_ioctl+0x10/0x10 [ 90.595267][ T8190] ? do_vfs_ioctl+0x523/0x1a60 [ 90.595297][ T8190] ? selinux_file_ioctl+0x180/0x270 [ 90.595322][ T8190] fb_ioctl+0xe5/0x150 [ 90.595335][ T8190] ? __pfx_fb_ioctl+0x10/0x10 [ 90.595350][ T8190] __x64_sys_ioctl+0x18e/0x210 [ 90.595368][ T8190] do_syscall_64+0xcd/0x4c0 [ 90.595393][ T8190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.595411][ T8190] RIP: 0033:0x7f6cc2d8e929 [ 90.595424][ T8190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.595455][ T8190] RSP: 002b:00007f6cc3b3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.595472][ T8190] RAX: ffffffffffffffda RBX: 00007f6cc2fb6160 RCX: 00007f6cc2d8e929 [ 90.595483][ T8190] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 0000000000000011 [ 90.595493][ T8190] RBP: 00007f6cc2e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 90.595504][ T8190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.595514][ T8190] R13: 0000000000000000 R14: 00007f6cc2fb6160 R15: 00007ffe37750ce8 [ 90.595530][ T8190] [ 90.595536][ T8190] [ 90.595543][ T8190] The buggy address belongs to the virtual mapping at [ 90.595543][ T8190] [ffffc90004e59000, ffffc9000515a000) created by: [ 90.595543][ T8190] drm_gem_shmem_vmap_locked+0x4bc/0x720 [ 90.595566][ T8190] [ 90.595570][ T8190] Memory state around the buggy address: [ 90.595580][ T8190] ffffc90005158f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 90.595591][ T8190] ffffc90005158f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 90.595602][ T8190] >ffffc90005159000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 90.595611][ T8190] ^ [ 90.595619][ T8190] ffffc90005159080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 90.595630][ T8190] ffffc90005159100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 90.595639][ T8190] ================================================================== [ 90.596229][ T8190] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 90.596243][ T8190] CPU: 0 UID: 0 PID: 8190 Comm: syz.3.629 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 90.596265][ T8190] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.596275][ T8190] Call Trace: [ 90.596281][ T8190] [ 90.596287][ T8190] dump_stack_lvl+0x3d/0x1f0 [ 90.596314][ T8190] panic+0x71c/0x800 [ 90.596339][ T8190] ? __pfx_panic+0x10/0x10 [ 90.596361][ T8190] ? mark_held_locks+0x49/0x80 [ 90.596386][ T8190] ? preempt_schedule_thunk+0x16/0x30 [ 90.596408][ T8190] ? sys_imageblit+0x1a6f/0x1e60 [ 90.596425][ T8190] ? preempt_schedule_common+0x44/0xc0 [ 90.596448][ T8190] ? check_panic_on_warn+0x1f/0xb0 [ 90.596474][ T8190] ? sys_imageblit+0x1a6f/0x1e60 [ 90.596490][ T8190] check_panic_on_warn+0xab/0xb0 [ 90.596515][ T8190] end_report+0x107/0x170 [ 90.596538][ T8190] kasan_report+0xee/0x110 [ 90.596561][ T8190] ? sys_imageblit+0x1a6f/0x1e60 [ 90.596581][ T8190] sys_imageblit+0x1a6f/0x1e60 [ 90.596601][ T8190] ? __pfx_sys_imageblit+0x10/0x10 [ 90.596619][ T8190] ? do_raw_spin_lock+0x12c/0x2b0 [ 90.596639][ T8190] ? queue_work_on+0x12a/0x1f0 [ 90.596657][ T8190] ? lockdep_hardirqs_on+0x7c/0x110 [ 90.596679][ T8190] ? queue_work_on+0x8b/0x1f0 [ 90.596698][ T8190] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 90.596717][ T8190] bit_putcs+0x90f/0xde0 [ 90.596746][ T8190] ? __pfx_bit_putcs+0x10/0x10 [ 90.596772][ T8190] ? lockdep_hardirqs_on+0x7c/0x110 [ 90.596794][ T8190] ? fb_get_color_depth+0x120/0x250 [ 90.596815][ T8190] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 90.596836][ T8190] ? __pfx_bit_putcs+0x10/0x10 [ 90.596858][ T8190] fbcon_putcs+0x383/0x4a0 [ 90.596886][ T8190] do_update_region+0x2e6/0x3f0 [ 90.596904][ T8190] redraw_screen+0x63f/0x760 [ 90.596925][ T8190] ? __pfx_vc_do_resize+0x10/0x10 [ 90.596945][ T8190] ? __pfx_redraw_screen+0x10/0x10 [ 90.596969][ T8190] fbcon_set_disp+0x7d4/0xe40 [ 90.596991][ T8190] set_con2fb_map+0x703/0x1060 [ 90.597015][ T8190] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 90.597039][ T8190] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 90.597065][ T8190] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 90.597084][ T8190] do_fb_ioctl+0x328/0x7e0 [ 90.597099][ T8190] ? __pfx_do_fb_ioctl+0x10/0x10 [ 90.597117][ T8190] ? do_vfs_ioctl+0x523/0x1a60 [ 90.597147][ T8190] ? selinux_file_ioctl+0x180/0x270 [ 90.597171][ T8190] fb_ioctl+0xe5/0x150 [ 90.597184][ T8190] ? __pfx_fb_ioctl+0x10/0x10 [ 90.597199][ T8190] __x64_sys_ioctl+0x18e/0x210 [ 90.597218][ T8190] do_syscall_64+0xcd/0x4c0 [ 90.597242][ T8190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.597260][ T8190] RIP: 0033:0x7f6cc2d8e929 [ 90.597273][ T8190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.597289][ T8190] RSP: 002b:00007f6cc3b3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.597305][ T8190] RAX: ffffffffffffffda RBX: 00007f6cc2fb6160 RCX: 00007f6cc2d8e929 [ 90.597317][ T8190] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 0000000000000011 [ 90.597327][ T8190] RBP: 00007f6cc2e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 90.597337][ T8190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.597347][ T8190] R13: 0000000000000000 R14: 00007f6cc2fb6160 R15: 00007ffe37750ce8 [ 90.597363][ T8190] [ 90.598085][ T8190] Kernel Offset: disabled VM DIAGNOSIS: 16:32:30 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b9fd5 RDI=ffffffff9b087320 RBP=ffffffff9b0872e0 RSP=ffffc900038ef0f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000073 R14=ffffffff9b0872e0 R15=ffffffff855b9f70 RIP=ffffffff855b9fff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6cc3b3d6c0 ffffffff 00c00000 GS =0000 ffff8880d6753000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6cc3b5df98 CR3=0000000058152000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe37751070 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cc2e11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cc2e11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cc2e11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cc2e11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cc2e11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cc2e11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81607d30 RDX=ffff888021e64880 RSI=ffffffff81607d78 RDI=ffffffff93d1f080 RBP=0000000000000001 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff27a3e10 R10=ffffffff93d1f087 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81607d79 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6853000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6cc3b7ef98 CR3=0000000028b66000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 30261d02182ef292 a7edba91e73a4f4e ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 04a9ab557b564771 d6916c02e78257e7 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 22685f7f368332ec 56b07a699520de35 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 14f6d24189429209 591341b12497a70e ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006e00 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3da2000000000000 0000000000380c02 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6936000040160000 0c02585c0000380c ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fa5e0000003805cf 00000005003805cd ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 024fbe7a7a797300 7973000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c75d8af2eda280cd ae2977b0b23a3f2e ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 419cf97595f90f4d a75a611f68d6c4df ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000302e63 64755f796d6d7564 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81607d30 RDX=ffff88802c862440 RSI=ffffffff81607d78 RDI=ffffffff93d1f080 RBP=0000000000000002 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff27a3e10 R10=ffffffff93d1f087 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81607d79 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f602a840c80 ffffffff 00c00000 GS =0000 ffff8880d6953000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6cc3b3cf98 CR3=0000000033c8a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558d73a2b600 0000558d73a2b600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1ab76a10 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f76656462665f6d 726420205d303931 3854205b5d383438 3439352e30392020 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343130322f31302f 343020312b32316f 70627e322d332e36 312e312d6e616962 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65642d332e36312e 3120534f4942202c 2939303032202c39 484349202b203533 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5128204350206472 61646e6174532055 4d4551203a656d61 6e20657261776472 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6148205d30393138 54205b5d33363534 39352e3039202020 5b203a6c656e7265 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81607d30 RDX=ffff88805758a440 RSI=ffffffff81607d78 RDI=ffffffff93d1f080 RBP=0000000000000003 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff27a3e10 R10=ffffffff93d1f087 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81607d79 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000000e128000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6ab611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6ab611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6ab611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6ab611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6ab611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6ab611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6ab784488 00007fb6ab784480 00007fb6ab784478 00007fb6ab784450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6ac2ed100 00007fb6ab784440 00007fb6ab780004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6ab784498 00007fb6ab784490 00007fb6ab784488 00007fb6ab784480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000