last executing test programs: 2.200706343s ago: executing program 3 (id=536): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r1, r2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) poll(&(0x7f0000000040), 0x0, 0x400b) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000380)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x74, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x35, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@device_b, {0x0, 0x4}}, 0x0, @default, 0x1007, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xab, 0x4b}}, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_IE_PROBE_RESP={0xc, 0x7f, [@ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x100}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x74}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r7, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r8, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414"], 0x528}}, 0xc000) 1.836236003s ago: executing program 2 (id=548): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x61, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x100, 0x7fffffff, 0x7ff}, [@TCA_NETEM_LOSS={0x28}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x8c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)="3282db78e0ea55c52d87bc2a166b9e46818f5faca0b3a411e056b7928ccacd30019d925e47ecd2f92675d1d8c795dd0ab0", 0x31}], 0x1}, 0x8400) sendmsg$inet(r3, &(0x7f0000000c00)={&(0x7f0000000540)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000280)="6e4602e2", 0x4}], 0x1}, 0x0) 1.742928706s ago: executing program 2 (id=549): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0xf67d10fbb02e609b, 0x1, 0x0, 0x0, 0x400}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0xecab}}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd0, &(0x7f00000000c0)=""/208, 0x0, 0x28, '\x00', r3, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.741574001s ago: executing program 2 (id=550): socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='maps\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0x6}]}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000bde000/0x4000)=nil) shmat(r2, &(0x7f0000bdc000/0x2000)=nil, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') read$rfkill(r0, &(0x7f0000000040), 0x8) fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x7, 0x2) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000140)={{@hyper, 0x20000}, 0x0, 0x1, 0x6a13}) r5 = syz_open_procfs(r3, &(0x7f0000000100)='statm\x00') read$msr(r5, &(0x7f0000032680)=""/102385, 0xffffff49) r6 = openat$ptp1(0xffffffffffffff9c, &(0x7f00000005c0), 0x80, 0x0) ioctl$PTP_PIN_SETFUNC(r6, 0x40603d07, &(0x7f0000001880)={'\x00', 0xc1, 0x2, 0x2}) r7 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e21, 0x80000, @mcast2, 0x204}, 0x1c, 0x0, 0x0, &(0x7f0000000040)}, 0x26004890) 1.240349084s ago: executing program 3 (id=551): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) (async, rerun: 32) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (rerun: 32) truncate(&(0x7f0000000280)='./file1\x00', 0x3) (async, rerun: 32) ioctl$KVM_SMI(r0, 0xaeb7) (async, rerun: 32) write$binfmt_elf64(r0, &(0x7f0000000dc0)=ANY=[@ANYRES32=r0], 0xb23) (async, rerun: 64) r1 = socket$inet6(0xa, 0x0, 0x40000040) (rerun: 64) sendmmsg$inet6(r1, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) (async, rerun: 32) listen(r3, 0x3) (rerun: 32) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0xfa) r5 = accept4(r3, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) recvmmsg(r7, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/96, 0x60}], 0x1}, 0xc}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000800)=""/213, 0xd5}], 0x1}, 0x7e0}], 0x2, 0x60002000, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) (async) recvmmsg(r4, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001500), 0x588, 0x3000000) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000040)="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", 0x2000, 0xfffffffffffffffe) (async) syz_clone3(&(0x7f0000000900)={0x40000800, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0xae) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (rerun: 64) 887.463858ms ago: executing program 1 (id=552): r0 = socket$netlink(0x10, 0x3, 0x13) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='br_fdb_external_learn_add\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x16}}, 0x0) 886.959072ms ago: executing program 3 (id=553): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f00001ea000/0x3000)=nil, 0x3000, 0x300000a, 0x20010, r1, 0xca3cb000) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0x12000043) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000017859c4bfbdcd259fe170988307316164b", @ANYRES32], 0x48) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00f\x00'], 0xfe33) r3 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_PEC(r4, 0x708, 0x40) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x4, &(0x7f00000000c0)={0x0, "af5405a7b1818f4a097d9a9f2996a3177cef40e38b874823e38090260074bf2cb6"}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440), 0x1) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa6acf7427c100000000000000000000ff020000003c4b899e0000000000000173009078000000000c79ef1cfb698e35cb7c556097"], 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 821.190011ms ago: executing program 2 (id=555): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x8004) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_PEC(r2, 0x708, 0x2) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0}) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb011a52f436dd2a", 0x2a}], 0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r5, 0x3b86, &(0x7f00000000c0)={0x18, r6, 0x7e1e, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x5, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) 714.669393ms ago: executing program 0 (id=557): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf200000000000002600020007ffffffbd0310000000000095002000000000006916000000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee61e00bf150000000000000f5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f1d5af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916fcecc8158f0200000000c8fb735fd552bdc268694aeb0743e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3738270b315d362ed834f2af97787f696649a462e7e090000000000000045eac1f2014f720e83b7838e3eede14308d582685e1becd6f35154bcb4000000000000000000000000000000bc3af2b170ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbf909a2cabf5b8ea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f4a2575fbe943a6c40000000000000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca68c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233bff7f0000000000009fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c1ba322fd4d6fbf19e617d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be691c334ea35bae71e76e160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7bcf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da04647aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ced4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b874c9a0c6c04b96360d6f499d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b257b5a786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc1364640250136729ba4f763ff25c33e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a5628878040000000000000017b68afd95d4abf7920de9ebe1c89661f4adc3d83d72b1b778e30c2bf2efbbcd054cf51f4205ebf9a98a0d9f18135cb1d8d567c3436fa697b72c3b0200000000000079c0b3339debc78352b2e65299223d7ef2bd540e78167b3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586360c3663531eb5995d228f011a10ffc8b17d716b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22d9669560d296287c13c92070000ee7553eb2df17839542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c8c0130187081c8d320642389f5f0c42dba0ff68e84d7b130906f17f6aa075a257310f2d92cb1d1e16468949f5675262ee318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0fde97a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1ff01000000000000bdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee807fc081e004ffb7d3104af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5e8bac16e79da9c2444420900000000000000f888a94365b99b72796fca1b922fc9aefaf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837beeedba483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c794846e403950bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be05a40fde69c350e59f11f1d26a4d04d8c8b2c4a4d23ec931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f64705f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680f346ff0ffbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705116b2f4fc20d4e93882bdd6ccea97f3a08d3565b0000000000000000000000000000d35fb97c2d7a9374294dcec3da3df9a13c4fc63b00426682534d894caee0b963a3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x4, 0x4fdc, 0x1, 0x68421, 0x1, 0x2, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x2, @value, @void, @void, @value}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0xe, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x30, 0x61]}}, &(0x7f00000002c0)=""/55, 0x2c, 0x37, 0x1, 0x2, 0x0, @void, @value}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r3}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x0, 0x1, 0x53c, 0x8, r4, 0x400002, '\x00', r1, r5, 0x0, 0x2, 0x2, 0x8, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6}, &(0x7f0000000280), &(0x7f0000000300)=r2}, 0xfcc6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000140)=""/127) r8 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) shmat(r8, &(0x7f0000ffd000/0x2000)=nil, 0x6000) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000580)='xprtrdma_marshal_failed\x00', r9}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r11, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r11, &(0x7f0000000100)={0x50, 0x0, r12, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r11, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r13) close_range(r10, 0xffffffffffffffff, 0x0) 713.599336ms ago: executing program 2 (id=558): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@ipmr_delroute={0x4c, 0x19, 0x400, 0x70bd25, 0x25dfdbfe, {0x80, 0x80, 0x10, 0x5, 0x0, 0x2, 0xc8, 0xa, 0x3a00}, [@RTA_PREFSRC={0x8, 0x7, @local}, @RTA_FLOW={0x8, 0xb, 0x4}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}, @RTA_NH_ID={0x8, 0x1e, 0x9}, @RTA_DPORT={0x6, 0x1d, 0x4e23}, @RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2f}}]}, 0x4c}}, 0x4000004) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48a41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000002200)="fcd206f727ff696702c0db70d4c5a5", 0xf}], 0x2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000640)={[0x2, 0xfffffffffffffffc, 0x9, 0x10, 0x3ff, 0x6, 0x2, 0x444, 0x9, 0x6, 0xc14, 0xc, 0x200, 0x811, 0x4, 0x81df], 0x100000, 0x100800}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r5, &(0x7f000000c1c0)={0x2020}, 0x2020) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = memfd_create(&(0x7f0000000000)='\xf3\xd9\b\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84\x9d\x14Q\xa4=\xfa\x81\f\x1et\x10\x0e\xcf', 0x0) pwrite64(r8, &(0x7f0000000540)='/', 0x1, 0x0) (async) lseek(r8, 0x0, 0x4) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x44, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x44}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0xd4, r7, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x79965803}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x18}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x700, 0xc, 0xff, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @empty, @empty}}}}) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x10a, 0x0, 0x6}]}) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 609.461162ms ago: executing program 1 (id=559): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xcf1, 0x45}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x1}]}}}]}, 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x8) 605.884579ms ago: executing program 1 (id=560): r0 = socket(0x10, 0x3, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000000)={0x9, "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"}) (async) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000000)={0x9, "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"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) (async) writev(r4, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',ro00100000,user_id=\x00'/34, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES8=r0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',ro00100000,user_id=\x00'/34, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES8=r0]) utimes(&(0x7f0000000340)='./file0\x00', &(0x7f0000000200)={{0x77359400}}) r5 = socket$packet(0x11, 0x2, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8001}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'bitmap:ip\x00'}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x9}, @TCA_FQ_PLIMIT={0x8}]}}]}, 0x48}}, 0x0) 533.188714ms ago: executing program 0 (id=561): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x34, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r0}]}, 0x34}}, 0xc000) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) r3 = dup2(r2, r1) clock_gettime(0x0, &(0x7f0000002200)={0x0, 0x0}) request_key(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0xfffffffffffffff8) ppoll(&(0x7f00000021c0)=[{r1, 0x2180}, {r2, 0x2}, {r1, 0x208}, {r2, 0x20}, {r3, 0x224}, {r1}], 0x6, &(0x7f0000002240)={r4, r5+10000000}, &(0x7f0000002280)={[0x622a0d01]}, 0x8) r6 = syz_open_dev$mouse(&(0x7f0000000140), 0x7, 0xc0) read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x188b) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioperm(0x0, 0x5, 0x4000000000000020) getpriority(0x0, 0x5) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRESHEX=r7, @ANYRES16=r2, @ANYRES32=r1, @ANYRESOCT=r1], 0x160}}, 0x0) 532.83761ms ago: executing program 2 (id=562): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x13) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x13) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x2, &(0x7f0000000080)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x7, 0x2, 0x9, 0xa, 0x6}], &(0x7f0000000000)='syzkaller\x00', 0x20000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0xc00, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0xc00, 0x0) r2 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) (async) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000280)={0x28, 0x0, 0x2711, @local}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x33, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r7, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x3c}}, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) (async) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 532.686435ms ago: executing program 0 (id=563): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x29a1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x40003}, 0x1c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f00000000c0)=ANY=[@ANYBLOB='dyn']) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') write$P9_RREADDIR(r1, &(0x7f0000000140)={0xe4, 0x29, 0x2, {0x0, [{{0x80, 0x0, 0x5}, 0xff, 0x4, 0x7, './file0'}, {{0x20, 0x3, 0x1}, 0x1000, 0xe, 0x7, './file0'}, {{0x4, 0x0, 0x2}, 0x200, 0x0, 0x7, './file0'}, {{0x20, 0x0, 0x2}, 0x40, 0xc, 0x7, './file0'}, {{0x1, 0x3, 0x3}, 0x8, 0x2, 0x7, './file0'}, {{0x40, 0x3, 0x8}, 0x8, 0x5, 0x7, './file0'}, {{0x40, 0x2, 0x7}, 0x44f9, 0x7, 0x7, './file0'}]}}, 0xe4) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) (async) r2 = socket$inet_dccp(0x2, 0x6, 0x0) (async) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000ffd000/0x2000)=nil) (async) listen(r0, 0x5) (async) r3 = epoll_create1(0x0) (async) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) (async) close_range(r3, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) (async) sendmmsg(r2, &(0x7f000000a240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000000000000d0100000800f13c16"], 0x10}}], 0x2, 0x0) 459.83521ms ago: executing program 0 (id=564): r0 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='\x996\x19(\xef+\x89d\x8bQ\xccnB\xb4!eU\x82\xe7V\xe8!\x9a`:\xd1 8\xd7D\x1dSE\xed\xc4\xf0\xc3\x1c\xc4\xe8\xce\t\xc1y|YT\xa2\xae{\x02\x03-\x80\xed\x01\xea\xc2\x06\xb0\x94\x17,mb/\x00,\xff\xf7\x89\xd4\x00\x00[A\xb9\xb2\x9eD\xe8Q3\x0e\xa9\xba\x88\x1c\x1cyM\xd2\xa2\x91\xfa\x88Z-G\xc3F\xb0\xf5\x95()\r~\xc9*\xd8\xc4\x00\x00\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x4044810}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES32=r3, @ANYBLOB="4000a6080a000200ffffffffffff00000c000e8005000100fd0000000600050001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003c000703fcffff324a0000de03"], 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0xc084) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000000000)={0x0, 0x7a120, 0x43b, {0x0, 0x10000}}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x1010, 0xffffffffffffffff, 0x10000000) 459.37198ms ago: executing program 1 (id=565): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000280)={r3, 0x11, 0x6}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x20040000) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) dup3(r9, r8, 0x0) pselect6(0x40, &(0x7f0000000100)={0x9, 0x7b, 0x1, 0x80000001, 0x5, 0x7, 0x6, 0x3ff}, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000300)={0x10, 0x0, &(0x7f0000000140)=[@request_death], 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000180)={r7}, 0x8) r10 = socket(0x1e, 0x4, 0x0) getsockopt$sock_cred(r10, 0x1, 0x1c, 0x0, &(0x7f00000000c0)=0xfcb5) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r11, 0x40286608, &(0x7f00000002c0)={0x9, 0x0, 0x8b09, 0xffffffffffffffff, 0x8f1, 0x7}) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r12, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) close_range(r0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0xa) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 458.885985ms ago: executing program 0 (id=566): unshare(0x62040200) r0 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [0x80000000000008, 0x4, 0xfffffffffffffa9f, 0x2, 0x1, 0x4b3]}, &(0x7f0000000000)=0x78) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x8, &(0x7f0000000040)="e1", 0x1) getsockopt$inet_opts(r1, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000340)=0x10) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 277.243517ms ago: executing program 0 (id=567): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYRESDEC=r0, @ANYBLOB="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", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r3}, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000340)=""/14, 0xe) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0xfffffffffffffe9c, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x6, 0x10000000, 0x0, 0xffe0000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r6}}]}, {0x4, 0xa}, {0xc}, {0xffffffffffffff09}}}]}]}, 0x88}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6, @ANYBLOB="8258d7d58209c8c4505acc707695d4160208e58357e66f4474ef6e5f9b7b12caf4cf2bd63b3d0b428a6183d3c99fb6c37f3e0101b7ccf9ffd57c680be343e91246157fa956fead71020561e2af94667737723e9939fb739ab6d3be498b684e07359e70c2dc7692ec2b0b16aa9b8b6ebf26e20d7fd8fe9e128ed4648f4b3e96a28d44a0852e23366423017c42c81d3514eddbf1fb23535cdf022f6f31a64e5797e4"], 0x20}, 0x1, 0x0, 0x0, 0x8081}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r8, 0x0, 0xd0, 0x0, &(0x7f0000000040)) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0xffffffffffffff03, r9, 0x1, 0x0, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="6f73322e47504c008a7b33b2b6322ba9c8052ab7e89db98cf97f080c2f90d5673df9ec98fa7cdf6b96cafc93fd9f7481ca1874e5eab3ba227ba682c72b768e3f47725e418187ae0100e197f52bafcce2eb921f93d9e97a6d5fb812a69d201c"]) r11 = add_key(&(0x7f0000000300)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000600)="b84a47b8a9bfd2ae", 0xfffffffffffffef2, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r12, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000000f06010100003ac120956bc545cd0001f545ab7935c120df2713764015d966b840d8a20ccec89606cd"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x8080) keyctl$get_security(0x11, r11, &(0x7f00000193c0)=""/82, 0x52) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="0ff5027bf00f0664f3902e660f3881870001c0fe66b896000f00d80f233464f3abb8bb0000000f23c00f21f83502000a000f23f866bad10466ed", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r13 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$inet(r13, &(0x7f00000008c0)=""/216, 0xd8, 0x300, &(0x7f0000000580)={0x2, 0x4e20, @local}, 0x3) 276.853125ms ago: executing program 1 (id=568): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000280)="80fd01869b40", 0x6}], 0x1, 0x0, 0x3) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000040)) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008031, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a40)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) r4 = socket$nl_generic(0x11, 0x3, 0x10) keyctl$clear(0x11, 0xfffffffffffffffd) r5 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r5, 0x0, 0x0, 0x12000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0x4}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000040)=@buf={0x99, &(0x7f0000000140)="5178019eaa211152eab3cd879b34f90316776e99bf57174450219c21d441041759658473a6a446c905b7542b670caa296c2a7282d252b0669bea5e454dea3f565f7645b60cb145b4f3ddc57fb44a11a6790d3ade738497bb79cbfb2ddc5281aedc21c467dbe5f655d4ab2ab1a77aafaccf0160b00d03e7e1845c434c1140d6d64b51d68b245cee8f31a244a9588f3e26e4d56a083d8846ed06"}) 192.19593ms ago: executing program 3 (id=569): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200000, &(0x7f0000000c00)=ANY=[]) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0xf8, 0x11, 0x148, 0xf8, 0x0, 0x220, 0x2a8, 0x2a8, 0x220, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'geneve0\x00'}, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@ttl={{0x28}}, @common=@icmp={{0x28}, {0x0, "e3ec"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) getresgid(&(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000240)=0x0) fchownat(r0, &(0x7f0000000080)='./file0\x00', 0x0, r2, 0x1000) close(r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f00000000c0)=0x26d, 0x4) chdir(&(0x7f00000000c0)='./bus\x00') 191.981981ms ago: executing program 3 (id=570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b05, &(0x7f0000000040)={'wlan0\x00'}) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x44, 0x7, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x848) 84.735297ms ago: executing program 1 (id=571): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000001c0)=""/137, 0x89) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x94}}}}}}, 0x0) r2 = syz_clone(0x8000200, 0x0, 0x31, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) openat(r0, &(0x7f0000000080)='./file0\x00', 0x400400, 0x1) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000000a03ce2931fa3b82f3a0769db65b7e9320f580355533c1e50c20bd8dff7c1659648c4a4dc4f68eed7bece8a91dd9e78ae45b14e5c8ad76627057663510adef1a8fb23949aaeeb85e8b55f2b5aa145d6b4dfecebf65d47d3d1cd72df2cba684de6498b781dd67c80d0cd87db844d4d6af7b68e9f", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c0002800600010001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) ptrace(0x10, r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) wait4(r2, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=572): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000018000900000000000000000002000000fe0000010000000008000500ac1414ff"], 0x24}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f00000000c0)=0x4, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x80001) (async) r2 = userfaultfd(0x80001) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x200, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000054c0)={0x19, 0x1, 0x0, "6106007722366ccef4ba566c4acd3d00e7bfeb8cace586d84a500000000800", 0x34325258}) read(r3, &(0x7f00000002c0)=""/199, 0xc7) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x4, 0xc0, 0xf, 0x1, 0x9, @mcast1, @loopback, 0x8007, 0x7800, 0x80000000, 0x9}}) bind$can_j1939(r3, &(0x7f00000001c0)={0x1d, r5, 0x1, {0x2, 0x1, 0x3}, 0x1}, 0x18) (async) bind$can_j1939(r3, &(0x7f00000001c0)={0x1d, r5, 0x1, {0x2, 0x1, 0x3}, 0x1}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) (async) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) kernel console output (not intermixed with test programs): [ 38.240786][ T39] audit: type=1400 audit(1737015462.815:80): avc: denied { write } for pid=5914 comm="sh" path="pipe:[3889]" dev="pipefs" ino=3889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.247899][ T39] audit: type=1400 audit(1737015462.815:81): avc: denied { rlimitinh } for pid=5914 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.253668][ T39] audit: type=1400 audit(1737015462.815:82): avc: denied { siginh } for pid=5914 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.448503][ T39] audit: type=1400 audit(1737015464.035:83): avc: denied { read } for pid=5330 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.454835][ T39] audit: type=1400 audit(1737015464.035:84): avc: denied { append } for pid=5330 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.461143][ T39] audit: type=1400 audit(1737015464.035:85): avc: denied { open } for pid=5330 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.467446][ T39] audit: type=1400 audit(1737015464.035:86): avc: denied { getattr } for pid=5330 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:38657' (ED25519) to the list of known hosts. [ 39.607356][ T39] audit: type=1400 audit(1737015464.185:87): avc: denied { name_bind } for pid=5918 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.200914][ T5920] cgroup: Unknown subsys name 'net' [ 41.320217][ T5920] cgroup: Unknown subsys name 'cpuset' [ 41.323712][ T5920] cgroup: Unknown subsys name 'rlimit' [ 41.539578][ T5925] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.136703][ T5920] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 43.827352][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 43.827366][ T39] audit: type=1400 audit(1737015468.405:105): avc: denied { execmem } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.966953][ T39] audit: type=1400 audit(1737015468.545:106): avc: denied { create } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.973203][ T39] audit: type=1400 audit(1737015468.545:107): avc: denied { read write } for pid=5931 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 43.980909][ T39] audit: type=1400 audit(1737015468.545:108): avc: denied { open } for pid=5931 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 43.987580][ T39] audit: type=1400 audit(1737015468.555:109): avc: denied { ioctl } for pid=5931 comm="syz-executor" path="socket:[6316]" dev="sockfs" ino=6316 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.018330][ T5938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.021353][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.023609][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.025997][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.028315][ T5946] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.030688][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.032985][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.036896][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.038039][ T5943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.039296][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.042007][ T39] audit: type=1400 audit(1737015468.615:110): avc: denied { read } for pid=5931 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.042397][ T5945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.045273][ T5945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.045892][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.046171][ T5944] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 44.046315][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.050225][ T5933] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.051861][ T39] audit: type=1400 audit(1737015468.615:111): avc: denied { open } for pid=5931 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.057050][ T5933] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.058775][ T39] audit: type=1400 audit(1737015468.615:112): avc: denied { mounton } for pid=5931 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 44.061422][ T5945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.066196][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.078553][ T5943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.083399][ T5944] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.087180][ T5943] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 44.089045][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.097924][ T5287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.150494][ T39] audit: type=1400 audit(1737015468.735:113): avc: denied { module_request } for pid=5931 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 44.193400][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 44.248514][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 44.345339][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.347841][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.350870][ T5931] bridge_slave_0: entered allmulticast mode [ 44.353966][ T5931] bridge_slave_0: entered promiscuous mode [ 44.376014][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.378179][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.380262][ T5931] bridge_slave_1: entered allmulticast mode [ 44.383957][ T5931] bridge_slave_1: entered promiscuous mode [ 44.401095][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 44.450519][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.453196][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.455561][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.457619][ T5936] bridge_slave_0: entered allmulticast mode [ 44.460097][ T5936] bridge_slave_0: entered promiscuous mode [ 44.464680][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.466778][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.468991][ T5936] bridge_slave_1: entered allmulticast mode [ 44.471202][ T5936] bridge_slave_1: entered promiscuous mode [ 44.485664][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.507232][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.541474][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 44.547684][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.582727][ T5931] team0: Port device team_slave_0 added [ 44.590571][ T5931] team0: Port device team_slave_1 added [ 44.608500][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.610590][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.612625][ T5932] bridge_slave_0: entered allmulticast mode [ 44.614814][ T5932] bridge_slave_0: entered promiscuous mode [ 44.648404][ T5936] team0: Port device team_slave_0 added [ 44.650544][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.653306][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.656167][ T5932] bridge_slave_1: entered allmulticast mode [ 44.659282][ T5932] bridge_slave_1: entered promiscuous mode [ 44.665574][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.668452][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.678701][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.684902][ T5936] team0: Port device team_slave_1 added [ 44.714880][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.717690][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.727900][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.741797][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.743775][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.751345][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.762928][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.784172][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.786158][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.794084][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.798352][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.808640][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.810704][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.812926][ T5939] bridge_slave_0: entered allmulticast mode [ 44.815050][ T5939] bridge_slave_0: entered promiscuous mode [ 44.845238][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.847565][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.850250][ T5939] bridge_slave_1: entered allmulticast mode [ 44.852374][ T5939] bridge_slave_1: entered promiscuous mode [ 44.889894][ T5931] hsr_slave_0: entered promiscuous mode [ 44.892065][ T5931] hsr_slave_1: entered promiscuous mode [ 44.906145][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.911273][ T5932] team0: Port device team_slave_0 added [ 44.927883][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.931632][ T5932] team0: Port device team_slave_1 added [ 44.936475][ T5936] hsr_slave_0: entered promiscuous mode [ 44.942602][ T5936] hsr_slave_1: entered promiscuous mode [ 44.945157][ T5936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.948313][ T5936] Cannot create hsr debugfs directory [ 45.004552][ T5939] team0: Port device team_slave_0 added [ 45.037933][ T5939] team0: Port device team_slave_1 added [ 45.040827][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.042856][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.051786][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.057021][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.060200][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.070130][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.116036][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.118103][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.125372][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.132211][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.135011][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.142795][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.205030][ T5932] hsr_slave_0: entered promiscuous mode [ 45.207370][ T5932] hsr_slave_1: entered promiscuous mode [ 45.209997][ T5932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.212230][ T5932] Cannot create hsr debugfs directory [ 45.257005][ T5939] hsr_slave_0: entered promiscuous mode [ 45.259246][ T5939] hsr_slave_1: entered promiscuous mode [ 45.261096][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.263231][ T5939] Cannot create hsr debugfs directory [ 45.376147][ T5931] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.381044][ T5931] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.401086][ T5931] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.406608][ T5931] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.440014][ T5936] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.443732][ T5936] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.447176][ T5936] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.452227][ T5936] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.477576][ T5939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.481337][ T5939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.488510][ T5939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.493539][ T5939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.535243][ T5932] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.539520][ T5932] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.543169][ T5932] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.554710][ T5932] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.567625][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.599389][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.611429][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.614346][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.624986][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.627190][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.643875][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.653593][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.672455][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.683084][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.690615][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.702079][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.704577][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.707480][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.709610][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.712713][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.714752][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.717472][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.719560][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.735337][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.747826][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.750793][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.763219][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.766104][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.793445][ T39] audit: type=1400 audit(1737015470.375:114): avc: denied { sys_module } for pid=5931 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 45.801994][ T5932] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.847115][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.853059][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.861906][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.892194][ T5939] veth0_vlan: entered promiscuous mode [ 45.898529][ T5931] veth0_vlan: entered promiscuous mode [ 45.901392][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.904006][ T5936] veth0_vlan: entered promiscuous mode [ 45.908514][ T5939] veth1_vlan: entered promiscuous mode [ 45.911824][ T5936] veth1_vlan: entered promiscuous mode [ 45.916779][ T5931] veth1_vlan: entered promiscuous mode [ 45.935026][ T5936] veth0_macvtap: entered promiscuous mode [ 45.942673][ T5939] veth0_macvtap: entered promiscuous mode [ 45.945789][ T5931] veth0_macvtap: entered promiscuous mode [ 45.948398][ T5936] veth1_macvtap: entered promiscuous mode [ 45.952466][ T5939] veth1_macvtap: entered promiscuous mode [ 45.955647][ T5931] veth1_macvtap: entered promiscuous mode [ 45.969326][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.971891][ T5932] veth0_vlan: entered promiscuous mode [ 45.976202][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.979896][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.983418][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.987997][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.991764][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.994561][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.997509][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.001081][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.004604][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.007769][ T5932] veth1_vlan: entered promiscuous mode [ 46.012432][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.015426][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.019858][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.022089][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.025026][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.027762][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.030916][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.034220][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.037370][ T5931] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.040239][ T5931] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.042770][ T5931] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.045286][ T5931] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.051419][ T5936] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.053924][ T5936] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.056386][ T5936] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.058957][ T5936] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.068910][ T5939] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.072407][ T5939] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.075840][ T5939] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.080124][ T5939] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.109574][ T5942] Bluetooth: hci3: command tx timeout [ 46.112050][ T5942] Bluetooth: hci1: command tx timeout [ 46.118266][ T5942] Bluetooth: hci2: command tx timeout [ 46.118372][ T5287] Bluetooth: hci0: command tx timeout [ 46.121169][ T5932] veth0_macvtap: entered promiscuous mode [ 46.129938][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.132290][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.139450][ T5932] veth1_macvtap: entered promiscuous mode [ 46.156473][ T1255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.156662][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.158899][ T1255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.162660][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.166754][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.170557][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.173352][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.176367][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.181255][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.199788][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.200112][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.202306][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.205129][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.205137][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.215444][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.219432][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.222421][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.225750][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.228744][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.231053][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.242265][ T5932] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.245404][ T5932] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.249144][ T5932] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.251681][ T5932] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.260458][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.263419][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.283282][ T1255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.285600][ T1255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.295716][ T5931] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.307631][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.312974][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.329163][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.331588][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.351923][ T5997] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5997 comm=syz.3.4 [ 46.355572][ T5997] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2574 sclass=netlink_tcpdiag_socket pid=5997 comm=syz.3.4 [ 46.360117][ T5997] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2580 sclass=netlink_tcpdiag_socket pid=5997 comm=syz.3.4 [ 46.360439][ T6000] tmpfs: Bad value for 'mpol' [ 46.365097][ T5997] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2580 sclass=netlink_tcpdiag_socket pid=5997 comm=syz.3.4 [ 46.373559][ T5997] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2571 sclass=netlink_tcpdiag_socket pid=5997 comm=syz.3.4 [ 46.381240][ T5997] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=5997 comm=syz.3.4 [ 46.402959][ T5995] xt_hashlimit: size too large, truncated to 1048576 [ 46.406207][ T5973] hid-generic 00EC:0003:0000.0002: unknown main item tag 0x0 [ 46.409481][ T5973] hid-generic 00EC:0003:0000.0002: unknown main item tag 0x0 [ 46.416658][ T5973] hid-generic 00EC:0003:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz1 [ 46.453574][ T6009] process 'syz.2.3' launched '/dev/fd/1' with NULL argv: empty string added [ 46.481026][ T6020] geneve2: entered promiscuous mode [ 46.482565][ T6020] geneve2: entered allmulticast mode [ 46.484855][ T6020] bridge0: port 3(geneve2) entered blocking state [ 46.486938][ T6020] bridge0: port 3(geneve2) entered disabled state [ 46.490105][ T6020] bridge0: port 3(geneve2) entered blocking state [ 46.492137][ T6020] bridge0: port 3(geneve2) entered forwarding state [ 46.663912][ T6054] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16'. [ 46.683833][ T6057] ipt_REJECT: TCP_RESET invalid for non-tcp [ 46.688004][ T6057] bridge0: entered promiscuous mode [ 46.693360][ T6057] macvlan2: entered promiscuous mode [ 46.695556][ T6057] bridge0: port 3(macvlan2) entered blocking state [ 46.697520][ T6057] bridge0: port 3(macvlan2) entered disabled state [ 46.700231][ T6057] macvlan2: entered allmulticast mode [ 46.701899][ T6057] bridge0: entered allmulticast mode [ 46.705823][ T6057] macvlan2: left allmulticast mode [ 46.708626][ T6057] bridge0: left allmulticast mode [ 46.714420][ T6057] bridge0: left promiscuous mode [ 46.827349][ T6065] tmpfs: Unknown parameter 'no' [ 46.874832][ T6072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22'. [ 46.892744][ T6072] Illegal XDP return value 3812240429 on prog (id 6) dev N/A, expect packet loss! [ 46.911773][ T6069] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21'. [ 47.605751][ T6098] fuse: Bad value for 'fd' [ 47.642816][ T6100] Dead loop on virtual device ip6_vti0, fix it urgently! [ 47.648270][ T6100] Zero length message leads to an empty skb [ 47.655886][ T6100] sp0: Synchronizing with TNC [ 47.723585][ T6107] tun0: tun_chr_ioctl cmd 1074025672 [ 47.725274][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 47.726943][ T6107] tun0: ignored: set checksum enabled [ 47.727894][ T6109] netlink: 'syz.1.35': attribute type 30 has an invalid length. [ 47.730125][ T6107] ata1.00: invalid cdb length 6 [ 47.732277][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35'. [ 47.813959][ T6120] netlink: 72 bytes leftover after parsing attributes in process `syz.3.39'. [ 47.856226][ T6129] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 47.907566][ T6133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.43'. [ 47.977434][ T6142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'. [ 47.981616][ T6142] bridge_slave_1: left allmulticast mode [ 47.983333][ T6142] bridge_slave_1: left promiscuous mode [ 47.985589][ T6142] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.992700][ T6142] fuse: Unknown parameter 'ma­3ĉœTÏx000066' [ 48.012292][ T6143] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 48.016240][ T6143] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 48.054851][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 48.188315][ T5287] Bluetooth: hci2: command tx timeout [ 48.188342][ T5942] Bluetooth: hci1: command tx timeout [ 48.189227][ T5943] Bluetooth: hci0: command tx timeout [ 48.189255][ T5943] Bluetooth: hci3: command tx timeout [ 48.718365][ T6153] syz.2.49 uses obsolete (PF_INET,SOCK_PACKET) [ 48.723209][ T6153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.49'. [ 48.798269][ T6153] kvm: kvm [6152]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 48.814172][ T6158] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 48.884932][ T39] kauditd_printk_skb: 129 callbacks suppressed [ 48.884942][ T39] audit: type=1400 audit(1737015473.465:244): avc: denied { read } for pid=6162 comm="syz.3.51" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 48.896086][ T39] audit: type=1400 audit(1737015473.465:245): avc: denied { open } for pid=6162 comm="syz.3.51" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 48.903077][ T39] audit: type=1400 audit(1737015473.465:246): avc: denied { map } for pid=6162 comm="syz.3.51" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 48.985660][ T6169] ======================================================= [ 48.985660][ T6169] WARNING: The mand mount option has been deprecated and [ 48.985660][ T6169] and is ignored by this kernel. Remove the mand [ 48.985660][ T6169] option from the mount to silence this warning. [ 48.985660][ T6169] ======================================================= [ 48.985726][ T39] audit: type=1400 audit(1737015473.565:247): avc: denied { remount } for pid=6168 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.048261][ T6178] netlink: 'syz.3.55': attribute type 13 has an invalid length. [ 49.052493][ T6178] syz_tun: refused to change device tx_queue_len [ 49.054569][ T6178] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 49.087334][ T39] audit: type=1400 audit(1737015473.665:248): avc: denied { create } for pid=6181 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 49.093214][ T39] audit: type=1400 audit(1737015473.675:249): avc: denied { ioctl } for pid=6181 comm="syz.3.56" path="socket:[10251]" dev="sockfs" ino=10251 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 49.115598][ T6185] sp0: Synchronizing with TNC [ 49.120177][ T6185] sp0: Found TNC [ 49.241893][ T39] audit: type=1400 audit(1737015473.825:250): avc: denied { read } for pid=6186 comm="syz.3.58" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.247902][ T6187] binder: 6186:6187 ioctl c0306201 20000580 returned -14 [ 49.250455][ T39] audit: type=1400 audit(1737015473.825:251): avc: denied { open } for pid=6186 comm="syz.3.58" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.261683][ T39] audit: type=1400 audit(1737015473.825:252): avc: denied { ioctl } for pid=6186 comm="syz.3.58" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.271284][ T39] audit: type=1400 audit(1737015473.825:253): avc: denied { set_context_mgr } for pid=6186 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 49.583191][ T6210] i2c i2c-1: Invalid block write size 34 [ 49.630820][ T6216] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 50.268193][ T5942] Bluetooth: hci1: command tx timeout [ 50.268213][ T5287] Bluetooth: hci2: command tx timeout [ 50.270521][ T5942] Bluetooth: hci3: command tx timeout [ 50.271729][ T5287] Bluetooth: hci0: command tx timeout [ 50.687387][ T6277] overlayfs: invalid origin (0000) [ 51.453242][ T6279] sp0: Synchronizing with TNC [ 51.615160][ T5974] IPVS: starting estimator thread 0... [ 51.659348][ T6306] netlink: 'syz.0.92': attribute type 2 has an invalid length. [ 51.684592][ T6309] __nla_validate_parse: 8 callbacks suppressed [ 51.684603][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'. [ 51.708171][ T6304] IPVS: using max 38 ests per chain, 91200 per kthread [ 51.730319][ T6318] netlink: 52 bytes leftover after parsing attributes in process `syz.2.95'. [ 51.734943][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.95'. [ 51.738274][ T6318] tipc: MTU too low for tipc bearer [ 51.740342][ T6318] netlink: 52 bytes leftover after parsing attributes in process `syz.2.95'. [ 51.887993][ T6338] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 51.893790][ T6338] netlink: 'syz.0.98': attribute type 2 has an invalid length. [ 52.010726][ T6358] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 52.021101][ T6358] evm: overlay not supported [ 52.130301][ T6367] warning: `syz.2.106' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 52.348329][ T5287] Bluetooth: hci2: command tx timeout [ 52.350039][ T5945] Bluetooth: hci1: command tx timeout [ 52.350564][ T5942] Bluetooth: hci0: command tx timeout [ 52.540467][ T5972] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.564202][ T6391] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.608498][ T6396] program syz.3.113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.658153][ T6399] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 52.703064][ T5972] usb 7-1: config index 0 descriptor too short (expected 12592, got 96) [ 52.706086][ T5972] usb 7-1: config 55 has too many interfaces: 55, using maximum allowed: 32 [ 52.711245][ T5972] usb 7-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 52.715228][ T5972] usb 7-1: config 55 has 0 interfaces, different from the descriptor's value: 55 [ 52.717161][ T6404] netlink: 36 bytes leftover after parsing attributes in process `syz.0.115'. [ 52.723754][ T5972] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 52.723825][ T6404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.115'. [ 52.726399][ T5972] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 52.726412][ T5972] usb 7-1: Product: syz [ 52.726419][ T5972] usb 7-1: Manufacturer: syz [ 52.736319][ T6404] netlink: 36 bytes leftover after parsing attributes in process `syz.0.115'. [ 52.740216][ T6404] netlink: 36 bytes leftover after parsing attributes in process `syz.0.115'. [ 52.802151][ T6411] netlink: 'syz.0.118': attribute type 10 has an invalid length. [ 52.808480][ T6413] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 52.823044][ T6411] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 52.877861][ T6416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.120'. [ 52.881954][ T6416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.120'. [ 52.938977][ T6429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=6429 comm=syz.3.126 [ 52.950040][ T5972] usb 7-1: USB disconnect, device number 2 [ 53.076810][ T6459] veth1_macvtap: left promiscuous mode [ 53.080309][ T6459] macsec0: entered promiscuous mode [ 53.082254][ T6459] macsec0: entered allmulticast mode [ 53.087861][ T6459] veth1_macvtap: entered promiscuous mode [ 53.090995][ T6459] veth1_macvtap: entered allmulticast mode [ 53.094170][ T6459] macsec0: left promiscuous mode [ 53.096088][ T6459] macsec0: left allmulticast mode [ 53.098536][ T6459] veth1_macvtap: left allmulticast mode [ 53.328221][ T30] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 53.388246][ T3227] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 53.489691][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 53.493136][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 53.495883][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 53.501213][ T30] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 53.505145][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.507408][ T30] usb 6-1: Product: syz [ 53.508789][ T30] usb 6-1: Manufacturer: syz [ 53.510134][ T30] usb 6-1: SerialNumber: syz [ 53.512550][ T30] usb 6-1: config 0 descriptor?? [ 53.538160][ T3227] usb 8-1: Using ep0 maxpacket: 32 [ 53.540990][ T3227] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 53.544230][ T3227] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 53.546815][ T3227] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 53.549582][ T3227] usb 8-1: config 1 has no interface number 0 [ 53.551489][ T3227] usb 8-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 53.555184][ T3227] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 53.559059][ T3227] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 53.561946][ T3227] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.569664][ T3227] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 53.724350][ T30] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 53.735133][ T6480] openvswitch: netlink: IPv4 tun info is not correct [ 53.768480][ T3227] snd_usb_pod 8-1:1.1: endpoint not available, using fallback values [ 53.772022][ T3227] snd_usb_pod 8-1:1.1: invalid control EP [ 53.773775][ T3227] snd_usb_pod 8-1:1.1: cannot start listening: -22 [ 53.777284][ T3227] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 53.779841][ T3227] snd_usb_pod 8-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 53.923082][ T30] usb 6-1: USB disconnect, device number 2 [ 53.923652][ T6485] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 53.930336][ T39] kauditd_printk_skb: 74 callbacks suppressed [ 53.930345][ T39] audit: type=1400 audit(1737015478.515:328): avc: denied { map } for pid=6484 comm="syz.0.141" path="socket:[13315]" dev="sockfs" ino=13315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.972995][ T6469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.977153][ T6469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.986171][ T39] audit: type=1400 audit(1737015478.565:329): avc: denied { setattr } for pid=6489 comm="syz.0.142" name="/" dev="9p" ino=40239522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.994932][ T5941] usb 8-1: USB disconnect, device number 2 [ 54.017955][ T6492] vivid-002: disconnect [ 54.024727][ T6492] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.039683][ T6492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.120619][ T6492] bond1 (unregistering): Released all slaves [ 54.127666][ T6497] xt_TPROXY: Can be used only with -p tcp or -p udp [ 54.222293][ T39] audit: type=1400 audit(1737015478.805:330): avc: denied { read } for pid=6504 comm="syz.0.146" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.342304][ T6491] vivid-002: reconnect [ 54.485073][ T6519] /dev/sg0: Can't lookup blockdev [ 54.526460][ T6525] netlink: 'syz.3.152': attribute type 2 has an invalid length. [ 54.530277][ T6525] netlink: 'syz.3.152': attribute type 1 has an invalid length. [ 54.531690][ T39] audit: type=1400 audit(1737015479.115:331): avc: denied { create } for pid=6524 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.539002][ T39] audit: type=1400 audit(1737015479.115:332): avc: denied { setopt } for pid=6524 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.561176][ T6531] overlayfs: missing 'lowerdir' [ 54.562369][ T39] audit: type=1400 audit(1737015479.145:333): avc: denied { ioctl } for pid=6530 comm="syz.3.156" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 54.568676][ T5941] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 54.576524][ T39] audit: type=1400 audit(1737015479.155:334): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.582511][ T39] audit: type=1400 audit(1737015479.165:335): avc: denied { append } for pid=6529 comm="syz.1.155" name="001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 54.720131][ T6539] kvm: emulating exchange as write [ 54.745304][ T5941] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 54.748301][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.750806][ T5941] usb 5-1: Product: syz [ 54.752161][ T5941] usb 5-1: Manufacturer: syz [ 54.753513][ T5941] usb 5-1: SerialNumber: syz [ 54.757654][ T5941] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 54.794348][ T5941] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 55.046691][ T39] audit: type=1400 audit(1737015479.625:336): avc: denied { create } for pid=6553 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 55.057037][ T39] audit: type=1400 audit(1737015479.635:337): avc: denied { ioctl } for pid=6553 comm="syz.1.163" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 55.205196][ T3227] usb 5-1: USB disconnect, device number 2 [ 55.822204][ T6578] netlink: 'syz.0.171': attribute type 16 has an invalid length. [ 55.834496][ T6578] netlink: 'syz.0.171': attribute type 16 has an invalid length. [ 55.868245][ T5941] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 55.871466][ T5941] ath9k_htc: Failed to initialize the device [ 55.875376][ T5287] Bluetooth: min 0 < 6 [ 55.878128][ T3227] usb 5-1: ath9k_htc: USB layer deinitialized [ 56.268188][ T3227] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 56.419717][ T3227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.422788][ T3227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.425382][ T3227] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 56.429814][ T3227] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 56.432289][ T3227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.435444][ T3227] usb 5-1: config 0 descriptor?? [ 56.499694][ T6599] hsr0: entered allmulticast mode [ 56.501272][ T6599] hsr_slave_0: entered allmulticast mode [ 56.502929][ T6599] hsr_slave_1: entered allmulticast mode [ 56.669621][ T5287] Bluetooth: hci4: command 0x1003 tx timeout [ 56.669650][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 56.865066][ T3227] usbhid 5-1:0.0: can't add hid device: -71 [ 56.866843][ T3227] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 56.870310][ T3227] usb 5-1: USB disconnect, device number 3 [ 58.908933][ T5942] Bluetooth: hci0: command 0x0c1a tx timeout [ 58.910937][ T6613] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 59.809275][ T6613] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 59.817384][ T6613] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 59.821291][ T6613] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 59.823810][ T6613] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 59.826447][ T6613] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 59.833088][ T6613] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 59.835677][ T6613] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 59.839337][ T6613] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 59.843068][ T6613] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 59.845431][ T6613] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 59.849631][ T6613] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 59.890693][ T6642] netlink: 'syz.1.193': attribute type 1 has an invalid length. [ 59.892902][ T6642] __nla_validate_parse: 35 callbacks suppressed [ 59.892910][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'. [ 59.903735][ T6649] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 59.909521][ T6648] binder: 6646:6648 unknown command 0 [ 59.910035][ T39] kauditd_printk_skb: 15 callbacks suppressed [ 59.910048][ T39] audit: type=1804 audit(1737015484.495:353): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.193" name="/newroot/42/bus/file0" dev="overlay" ino=246 res=1 errno=0 [ 59.915710][ T6648] binder: 6646:6648 ioctl c0306201 200001c0 returned -22 [ 59.939070][ T39] audit: type=1400 audit(1737015484.525:354): avc: denied { read } for pid=6650 comm="syz.3.195" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 59.947301][ T39] audit: type=1400 audit(1737015484.525:355): avc: denied { open } for pid=6650 comm="syz.3.195" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 59.957413][ T39] audit: type=1400 audit(1737015484.535:356): avc: denied { ioctl } for pid=6650 comm="syz.3.195" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 59.983605][ T39] audit: type=1400 audit(1737015484.565:357): avc: denied { ioctl } for pid=6650 comm="syz.3.195" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.003040][ T39] audit: type=1400 audit(1737015484.585:358): avc: denied { create } for pid=6654 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 60.008561][ T6655] batman_adv: batadv0: Adding interface: dummy0 [ 60.010353][ T39] audit: type=1400 audit(1737015484.585:359): avc: denied { connect } for pid=6654 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 60.012160][ T6655] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.023046][ T39] audit: type=1400 audit(1737015484.595:360): avc: denied { write } for pid=6652 comm="syz.2.196" name="/" dev="9p" ino=40239522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.027032][ T6655] batman_adv: batadv0: Interface activated: dummy0 [ 60.034021][ T39] audit: type=1400 audit(1737015484.595:361): avc: denied { remove_name } for pid=6652 comm="syz.2.196" name="file2" dev="9p" ino=40239545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.036183][ T6653] netlink: 'syz.2.196': attribute type 5 has an invalid length. [ 60.043671][ T39] audit: type=1400 audit(1737015484.595:362): avc: denied { rmdir } for pid=6652 comm="syz.2.196" name="file2" dev="9p" ino=40239545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.054783][ T6655] batadv0: mtu less than device minimum [ 60.058572][ T6655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.064350][ T6655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.069677][ T6655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.071899][ T5941] hid-generic 0006:0007:D47A.0003: item fetching failed at offset 22/37 [ 60.075366][ T6655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.080144][ T5941] hid-generic 0006:0007:D47A.0003: probe with driver hid-generic failed with error -22 [ 60.081964][ T6655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.089412][ T6655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.094917][ T6655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.100805][ T6655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.106546][ T6655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.139857][ T5942] Bluetooth: hci0: Unable to find connection with handle 0x00c9 [ 60.317771][ T6664] could not allocate digest TFM handle cryptd(blake2b-160) [ 60.341091][ T6684] team0: Device gtp0 is of different type [ 60.626761][ T6707] Cannot find del_set index 2 as target [ 60.660714][ T6710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.212'. [ 60.664270][ T6710] netlink: 40 bytes leftover after parsing attributes in process `syz.2.212'. [ 60.704595][ T6715] overlayfs: failed to resolve './file1': -2 [ 60.736401][ T6720] tipc: Started in network mode [ 60.737959][ T6720] tipc: Node identity ee6f4b47cab, cluster identity 4711 [ 60.740618][ T6720] tipc: Enabled bearer , priority 0 [ 60.747404][ T6720] syzkaller0: MTU too low for tipc bearer [ 60.749861][ T6720] tipc: Disabling bearer [ 60.903591][ T5942] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 60.916064][ T6743] xt_hashlimit: size too large, truncated to 1048576 [ 60.998219][ T5942] Bluetooth: hci0: command 0x0c1a tx timeout [ 61.554258][ T6757] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 61.593712][ T6760] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6760 comm=syz.0.225 [ 61.627924][ T6761] XFS (nullb0): Invalid superblock magic number [ 61.655645][ T6760] XFS (nullb0): Invalid superblock magic number [ 61.697191][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.227'. [ 61.868249][ T5942] Bluetooth: hci3: command 0x0c1a tx timeout [ 61.868468][ T5287] Bluetooth: hci2: command 0x0c1a tx timeout [ 61.868553][ T5945] Bluetooth: hci1: command 0x0c1a tx timeout [ 61.977308][ T6799] netlink: 'syz.0.232': attribute type 1 has an invalid length. [ 61.986751][ T6799] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.155142][ T6823] trusted_key: syz.0.239 sent an empty control message without MSG_MORE. [ 62.358169][ T5941] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 62.383385][ T6831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33024 sclass=netlink_route_socket pid=6831 comm=syz.0.242 [ 62.500665][ T6847] mmap: syz.2.246 (6847) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 62.508300][ T5941] usb 8-1: Using ep0 maxpacket: 32 [ 62.511998][ T5941] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 62.516303][ T5941] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 62.521818][ T5941] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 62.525467][ T5941] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 62.530303][ T5941] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 62.534079][ T5941] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 62.539667][ T5941] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 62.543342][ T5941] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.548190][ T5941] usb 8-1: config 0 descriptor?? [ 62.604891][ T6849] syz.0.247: attempt to access beyond end of device [ 62.604891][ T6849] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 62.796384][ T5941] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 62.902861][ T6874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6874 comm=syz.0.255 [ 62.991675][ T6889] kAFS: No cell specified [ 62.993486][ T6821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.000559][ T6821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.011139][ T5974] usb 8-1: USB disconnect, device number 3 [ 63.014646][ T5974] usblp0: removed [ 63.078214][ T5287] Bluetooth: hci0: command 0x0c1a tx timeout [ 63.099941][ T6900] netlink: 64 bytes leftover after parsing attributes in process `syz.1.264'. [ 63.133925][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'. [ 63.136619][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'. [ 63.139735][ T6902] netlink: 'syz.1.265': attribute type 11 has an invalid length. [ 63.172385][ T6905] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 63.174413][ T6905] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 63.178855][ T6905] vhci_hcd vhci_hcd.0: Device attached [ 63.182851][ T6905] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 63.184773][ T6905] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 63.187026][ T6905] vhci_hcd vhci_hcd.0: Device attached [ 63.191519][ T6905] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(8) [ 63.193449][ T6905] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 63.195690][ T6905] vhci_hcd vhci_hcd.0: Device attached [ 63.198998][ T6905] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 63.201301][ T6905] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 63.203863][ T6905] vhci_hcd vhci_hcd.0: Device attached [ 63.209527][ T6912] vhci_hcd: connection closed [ 63.209965][ T6910] vhci_hcd: connection closed [ 63.210241][ T6908] vhci_hcd: connection closed [ 63.211170][ T6906] vhci_hcd: connection closed [ 63.215802][ T1137] vhci_hcd: stop threads [ 63.218936][ T1137] vhci_hcd: release socket [ 63.220351][ T1137] vhci_hcd: disconnect device [ 63.221961][ T1137] vhci_hcd: stop threads [ 63.223277][ T1137] vhci_hcd: release socket [ 63.224657][ T1137] vhci_hcd: disconnect device [ 63.226272][ T1137] vhci_hcd: stop threads [ 63.227592][ T1137] vhci_hcd: release socket [ 63.229079][ T1137] vhci_hcd: disconnect device [ 63.231676][ T1137] vhci_hcd: stop threads [ 63.233410][ T1137] vhci_hcd: release socket [ 63.234875][ T1137] vhci_hcd: disconnect device [ 63.668541][ T30] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 63.671988][ T5287] Bluetooth: hci2: Unknown advertising packet type: 0x40 [ 63.699816][ T6932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6932 comm=syz.3.273 [ 63.733546][ T6935] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 63.786288][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.274'. [ 63.822996][ T30] usb 5-1: config 0 has no interfaces? [ 63.824598][ T30] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 63.827091][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.830783][ T30] usb 5-1: config 0 descriptor?? [ 63.852140][ T6943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.277'. [ 63.948251][ T5287] Bluetooth: hci3: command 0x0c1a tx timeout [ 63.958227][ T5287] Bluetooth: hci2: command 0x0c1a tx timeout [ 63.958246][ T5942] Bluetooth: hci1: command 0x0c1a tx timeout [ 64.037350][ T6915] ipvlan2: entered promiscuous mode [ 64.041066][ T6915] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 64.044685][ T6915] team0: Device ipvlan2 is already an upper device of the team interface [ 64.085151][ T6945] netlink: 48 bytes leftover after parsing attributes in process `syz.0.267'. [ 64.132032][ T5974] usb 5-1: USB disconnect, device number 4 [ 64.746771][ T6967] netlink: 'syz.3.286': attribute type 5 has an invalid length. [ 64.752092][ T6967] xt_CT: You must specify a L4 protocol and not use inversions on it [ 64.900515][ T6975] syzkaller1: entered promiscuous mode [ 64.902757][ T6975] syzkaller1: entered allmulticast mode [ 64.906751][ T6975] IPv6: NLM_F_CREATE should be specified when creating new route [ 64.995931][ T6967] jfs: Unknown parameter 'discardċ˙' [ 64.995944][ T39] kauditd_printk_skb: 55 callbacks suppressed [ 64.995954][ T39] audit: type=1400 audit(1737015489.557:418): avc: denied { mounton } for pid=6966 comm="syz.3.286" path="/90/bus" dev="tmpfs" ino=498 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 65.025238][ T6981] netlink: 100 bytes leftover after parsing attributes in process `syz.1.289'. [ 65.075831][ T39] audit: type=1400 audit(1737015489.641:419): avc: denied { ioctl } for pid=6983 comm="syz.0.290" path="socket:[14312]" dev="sockfs" ino=14312 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 65.179670][ T6989] capability: warning: `syz.3.291' uses deprecated v2 capabilities in a way that may be insecure [ 65.246034][ T39] audit: type=1400 audit(3474030981.452:420): avc: denied { bind } for pid=7002 comm="syz.1.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.249784][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'. [ 65.257329][ T3227] kernel write not supported for file /260/attr/exec (pid: 3227 comm: kworker/2:2) [ 65.305557][ T7011] 9pnet: Unknown protocol version 9p20\++} [ 65.363812][ T7017] netlink: 'syz.1.303': attribute type 1 has an invalid length. [ 65.441798][ T7024] overlay: ./file0 is not a directory [ 65.479576][ T39] audit: type=1400 audit(3474030981.677:421): avc: denied { nlmsg_read } for pid=7023 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 65.606387][ T5993] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 65.616750][ T7036] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 65.626942][ T7036] CIFS mount error: No usable UNC path provided in device string! [ 65.626942][ T7036] [ 65.632076][ T7036] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 65.778062][ T5993] usb 8-1: Using ep0 maxpacket: 8 [ 65.781863][ T5993] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 65.784241][ T5993] usb 8-1: config 0 has no interface number 0 [ 65.786007][ T5993] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 65.789914][ T5993] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 65.793024][ T5993] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 65.796144][ T5993] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 65.800007][ T5993] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 65.802610][ T5993] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.805797][ T5993] usb 8-1: config 0 descriptor?? [ 65.807728][ T39] audit: type=1400 audit(3474030981.976:422): avc: denied { append } for pid=7053 comm="syz.0.316" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 65.809984][ T5993] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 65.908367][ T7060] bond0: entered promiscuous mode [ 65.909913][ T7060] bond_slave_0: entered promiscuous mode [ 65.911635][ T7060] bond_slave_1: entered promiscuous mode [ 65.914717][ T7060] batadv0: entered promiscuous mode [ 65.918085][ T7060] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 65.920561][ T39] audit: type=1400 audit(3474030982.088:423): avc: denied { listen } for pid=7063 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.928037][ T39] audit: type=1400 audit(3474030982.088:424): avc: denied { accept } for pid=7063 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.992854][ T7069] Bluetooth: MGMT ver 1.23 [ 65.993014][ T39] audit: type=1400 audit(3474030982.154:425): avc: denied { write } for pid=7063 comm="syz.1.317" path="socket:[15457]" dev="sockfs" ino=15457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.002348][ T7073] netlink: 'syz.0.321': attribute type 8 has an invalid length. [ 66.005531][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 66.032314][ T30] usb 8-1: USB disconnect, device number 4 [ 66.036412][ T30] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 66.055141][ T39] audit: type=1800 audit(3474030982.200:426): pid=7071 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.320" name="file1" dev="overlay" ino=370 res=0 errno=0 [ 66.097553][ T7084] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 66.130281][ T5287] Bluetooth: hci2: command 0x0c1a tx timeout [ 66.132060][ T5287] Bluetooth: hci3: command 0x0c1a tx timeout [ 66.132373][ T5942] Bluetooth: hci1: command 0x0c1a tx timeout [ 66.134952][ T39] audit: type=1400 audit(3474030982.285:427): avc: denied { ioctl } for pid=7082 comm="syz.2.324" path="socket:[15464]" dev="sockfs" ino=15464 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 66.136696][ T5942] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 66.296624][ T30] IPVS: starting estimator thread 0... [ 66.373233][ T7114] net_ratelimit: 13 callbacks suppressed [ 66.373243][ T7114] openvswitch: netlink: Multiple metadata blocks provided [ 66.408178][ T7111] IPVS: using max 41 ests per chain, 98400 per kthread [ 66.413990][ T7125] xt_l2tp: v2 tid > 0xffff: 150994944 [ 66.936176][ T7165] ALSA: mixer_oss: invalid OSS volume '' [ 66.939270][ T7163] netlink: 'syz.1.346': attribute type 21 has an invalid length. [ 66.940302][ T7166] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 66.942449][ T7163] netlink: 156 bytes leftover after parsing attributes in process `syz.1.346'. [ 66.942649][ T7167] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 66.953535][ T7162] netlink: 'syz.1.346': attribute type 21 has an invalid length. [ 66.955824][ T7162] netlink: 156 bytes leftover after parsing attributes in process `syz.1.346'. [ 66.958506][ T7163] netlink: 'syz.1.346': attribute type 21 has an invalid length. [ 66.960729][ T7163] netlink: 156 bytes leftover after parsing attributes in process `syz.1.346'. [ 67.044779][ T7172] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 67.109022][ T7176] netlink: 'syz.1.350': attribute type 2 has an invalid length. [ 67.113337][ T5942] Bluetooth: hci1: unexpected event for opcode 0x201c [ 67.200502][ T7181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.205313][ T7181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.455791][ T5974] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 67.564982][ T7221] sctp: [Deprecated]: syz.1.361 (pid 7221) Use of struct sctp_assoc_value in delayed_ack socket option. [ 67.564982][ T7221] Use struct sctp_sack_info instead [ 67.603262][ T7234] 9p filesystem being mounted at /79/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 67.607575][ T7234] 9pnet_virtio: no channels available for device syz [ 67.609711][ T7234] 9pnet_virtio: no channels available for device syz [ 67.611737][ T7234] 9pnet_virtio: no channels available for device syz [ 67.613760][ T7234] 9pnet_virtio: no channels available for device syz [ 67.615804][ T7234] 9pnet_virtio: no channels available for device syz [ 67.617934][ T7234] 9pnet_virtio: no channels available for device syz [ 67.620470][ T7234] 9pnet_virtio: no channels available for device syz [ 67.622539][ T7234] 9pnet_virtio: no channels available for device syz [ 67.624571][ T7234] 9pnet_virtio: no channels available for device syz [ 67.626839][ T7234] 9pnet_virtio: no channels available for device syz [ 67.628859][ T7234] 9pnet_virtio: no channels available for device syz [ 67.630940][ T7234] 9pnet_virtio: no channels available for device syz [ 67.632959][ T7234] 9pnet_virtio: no channels available for device syz [ 67.634972][ T7234] 9pnet_virtio: no channels available for device syz [ 67.637026][ T7234] 9pnet_virtio: no channels available for device syz [ 67.639615][ T7234] 9pnet_virtio: no channels available for device syz [ 67.641866][ T7234] 9pnet_virtio: no channels available for device syz [ 67.643940][ T7234] 9pnet_virtio: no channels available for device syz [ 67.645957][ T7234] 9pnet_virtio: no channels available for device syz [ 67.648213][ T7234] 9pnet_virtio: no channels available for device syz [ 67.650357][ T7234] 9pnet_virtio: no channels available for device syz [ 67.652476][ T7234] 9pnet_virtio: no channels available for device syz [ 67.680483][ T7245] tmpfs: Unknown parameter 'quFìĤota' [ 67.937655][ T7266] netlink: 2 bytes leftover after parsing attributes in process `syz.2.365'. [ 67.972620][ T7273] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 67.975441][ T7273] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 68.087325][ T7278] Bluetooth: MGMT ver 1.23 [ 68.628700][ T7309] ALSA: seq fatal error: cannot create timer (-19) [ 68.736906][ T7313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.381'. [ 68.749662][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'. [ 68.752296][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 68.756236][ T7313] tmpfs: Bad value for 'mpol' [ 68.928503][ T7318] ebt_among: dst integrity fail: 200 [ 69.169174][ T7325] erspan1: entered promiscuous mode [ 69.359504][ T7348] support for the xor transformation has been removed. [ 69.363595][ T7349] support for the xor transformation has been removed. [ 69.427998][ T7358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7358 comm=syz.0.396 [ 69.432635][ T7358] openvswitch: netlink: Missing valid actions attribute. [ 69.435147][ T7358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 69.590927][ T7377] netlink: 'syz.0.400': attribute type 4 has an invalid length. [ 69.597893][ T7377] netlink: 'syz.0.400': attribute type 4 has an invalid length. [ 69.862257][ T7425] overlay: ./file0 is not a directory [ 69.866109][ T7429] xt_TCPMSS: Only works on TCP SYN packets [ 69.868344][ T7425] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 69.872866][ T7425] overlayfs: missing 'lowerdir' [ 69.899481][ T7435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 69.943324][ T7441] tmpfs: Bad value for 'mpol' [ 70.007102][ T7433] syz.3.418 (7433) used greatest stack depth: 19712 bytes left [ 70.037709][ T7456] No buffer was provided with the request [ 70.082241][ T7460] nfs: Unknown parameter 'nofsce_slave_0' [ 70.629938][ T7497] netlink: 'syz.2.437': attribute type 1 has an invalid length. [ 70.630593][ T7498] netlink: 'syz.2.437': attribute type 1 has an invalid length. [ 70.638147][ T7497] __nla_validate_parse: 6 callbacks suppressed [ 70.638155][ T7497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.437'. [ 70.645340][ T7497] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 70.648866][ T7497] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 70.654014][ T7497] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 70.657527][ T7497] bond1 (unregistering): Released all slaves [ 70.740744][ T39] kauditd_printk_skb: 47 callbacks suppressed [ 70.740759][ T39] audit: type=1400 audit(3474030986.597:475): avc: denied { mount } for pid=7500 comm="syz.2.438" name="/" dev="hugetlbfs" ino=17917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 70.742163][ T7501] netlink: 160 bytes leftover after parsing attributes in process `syz.2.438'. [ 70.753999][ T39] audit: type=1400 audit(3474030986.606:476): avc: denied { connect } for pid=7500 comm="syz.2.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 70.762060][ T39] audit: type=1400 audit(3474030986.606:477): avc: denied { name_connect } for pid=7500 comm="syz.2.438" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 70.809018][ T39] audit: type=1400 audit(3474030986.653:478): avc: denied { setopt } for pid=7500 comm="syz.2.438" laddr=::1 lport=48270 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 71.225525][ T39] audit: type=1400 audit(3474030987.046:479): avc: denied { append } for pid=7521 comm="syz.0.443" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 71.302186][ T7531] Bluetooth: hci4: Frame reassembly failed (-84) [ 71.304596][ T7258] Bluetooth: hci4: Frame reassembly failed (-84) [ 71.355672][ T7533] ipt_REJECT: TCP_RESET invalid for non-tcp [ 71.596763][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.599505][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.665289][ T39] audit: type=1400 audit(3474030987.448:480): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 71.724006][ T7568] netlink: 'syz.2.456': attribute type 1 has an invalid length. [ 71.740088][ T39] audit: type=1400 audit(3474030987.523:481): avc: denied { read } for pid=7572 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.743026][ T7568] bond1: entered promiscuous mode [ 71.749605][ T39] audit: type=1400 audit(3474030987.523:482): avc: denied { open } for pid=7572 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.751693][ T7568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.761789][ T39] audit: type=1400 audit(3474030987.523:483): avc: denied { getattr } for pid=7572 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.774183][ T39] audit: type=1400 audit(3474030987.532:484): avc: denied { write } for pid=7570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.782204][ T7574] xt_hashlimit: size too large, truncated to 1048576 [ 72.111234][ T7597] input: syz1 as /devices/virtual/input/input8 [ 72.430046][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'. [ 72.433634][ T7611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.466'. [ 72.671438][ T7623] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 72.674168][ T7625] program syz.1.471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.728602][ T7628] openvswitch: netlink: IP tunnel dst address not specified [ 72.929418][ T7641] misc userio: The device must be registered before sending interrupts [ 73.225465][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 73.274075][ T7681] netlink: 'syz.0.490': attribute type 1 has an invalid length. [ 73.276081][ T7679] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 73.289893][ T7681] 8021q: adding VLAN 0 to HW filter on device bond2 [ 73.296288][ T7679] bridge_slave_0: left allmulticast mode [ 73.297981][ T7679] bridge_slave_0: left promiscuous mode [ 73.299972][ T7679] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.304031][ T7679] bridge_slave_1: left allmulticast mode [ 73.305756][ T7679] bridge_slave_1: left promiscuous mode [ 73.307957][ T7679] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.316004][ T7679] bond0: (slave bond_slave_0): Releasing backup interface [ 73.319699][ T7679] bond_slave_0: left promiscuous mode [ 73.323884][ T7679] bond0: (slave bond_slave_1): Releasing backup interface [ 73.328249][ T7679] bond_slave_1: left promiscuous mode [ 73.340227][ T7679] team0: Port device team_slave_0 removed [ 73.345462][ T7679] team0: Port device team_slave_1 removed [ 73.347680][ T7679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.349933][ T7679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.353944][ T7679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.356135][ T7679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.385374][ T7682] bond2: (slave gretap2): making interface the new active one [ 73.388058][ T7682] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 73.402998][ T7687] fuse: Unknown parameter 'smackfsdef' [ 73.474595][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 73.475409][ T5287] Bluetooth: hci4: command 0x1003 tx timeout [ 73.539938][ T7697] pim6reg1: entered promiscuous mode [ 73.541616][ T7697] pim6reg1: entered allmulticast mode [ 73.543958][ T7698] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 73.546473][ T7697] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 73.555136][ T7697] netlink: 'syz.3.494': attribute type 1 has an invalid length. [ 73.557527][ T7697] netlink: 56 bytes leftover after parsing attributes in process `syz.3.494'. [ 73.662009][ T7704] openvswitch: netlink: Tunnel attr 222 out of range max 16 [ 73.805165][ T7714] xt_CT: You must specify a L4 protocol and not use inversions on it [ 74.009664][ T7721] 9p filesystem being mounted at /136/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 74.015958][ T7721] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 74.025098][ T7721] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 74.411250][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.510'. [ 74.419639][ T7745] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 74.506306][ T5942] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 74.551154][ T7770] block device autoloading is deprecated and will be removed. [ 74.610287][ T7774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.519'. [ 74.613121][ T7774] netlink: 'syz.1.519': attribute type 25 has an invalid length. [ 74.650599][ T7777] netlink: 'syz.1.520': attribute type 1 has an invalid length. [ 74.653066][ T7777] veth1_to_team: mtu less than device minimum [ 74.658875][ T7779] 9p filesystem being mounted at /145/bus supports timestamps until 2106-02-07 (0xffffffff) [ 74.685169][ T7781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.522'. [ 74.771932][ T7795] SELinux: Context system_u:object_r:ssh_agent_exec_t:s0 is not valid (left unmapped). [ 74.945670][ T7829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 74.966975][ T7831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.019138][ T7838] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 75.028505][ T7838] kernel read not supported for file /policy (pid: 7838 comm: syz.1.542) [ 75.057715][ T7840] binder: 7839:7840 ioctl c0405610 20000240 returned -22 [ 75.060849][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.543'. [ 75.064530][ T7841] binder: 7839:7841 ioctl c0306201 20000080 returned -22 [ 75.088503][ T7845] xt_CT: You must specify a L4 protocol and not use inversions on it [ 75.263904][ T7857] netem: incorrect ge model size [ 75.265570][ T7857] netem: change failed [ 75.297114][ T7861] IPv6: NLM_F_CREATE should be specified when creating new route [ 76.138703][ T7855] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 76.140563][ T7855] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 76.142443][ T7855] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 76.145095][ T7855] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 76.146980][ T7855] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 76.176960][ T39] kauditd_printk_skb: 50 callbacks suppressed [ 76.176970][ T39] audit: type=1400 audit(3474030991.676:535): avc: denied { map } for pid=7876 comm="syz.3.553" path="socket:[20588]" dev="sockfs" ino=20588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.244173][ T39] audit: type=1400 audit(3474030991.742:536): avc: denied { module_request } for pid=7880 comm="syz.0.554" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 76.333125][ T7893] __nla_validate_parse: 1 callbacks suppressed [ 76.333136][ T7893] netlink: 16 bytes leftover after parsing attributes in process `syz.0.556'. [ 76.344782][ T7890] virt_wifi0 speed is unknown, defaulting to 1000 [ 76.348637][ T7890] virt_wifi0 speed is unknown, defaulting to 1000 [ 76.351722][ T7890] virt_wifi0 speed is unknown, defaulting to 1000 [ 76.355571][ T7890] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 76.362127][ T7890] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 76.385989][ T7890] virt_wifi0 speed is unknown, defaulting to 1000 [ 76.390207][ T7890] virt_wifi0 speed is unknown, defaulting to 1000 [ 76.393716][ T7890] virt_wifi0 speed is unknown, defaulting to 1000 [ 76.396800][ T7890] virt_wifi0 speed is unknown, defaulting to 1000 [ 76.402422][ T7890] netlink: 830 bytes leftover after parsing attributes in process `syz.1.552'. [ 76.441231][ T7904] bridge1: entered promiscuous mode [ 76.488235][ T7906] fuse: Unknown parameter 'ro00100000' [ 76.488308][ T7907] fuse: Unknown parameter 'ro00100000' [ 76.492536][ T7906] netlink: 48 bytes leftover after parsing attributes in process `syz.1.560'. [ 76.516856][ T39] audit: type=1400 audit(3474030991.994:537): avc: denied { append } for pid=7909 comm="syz.2.562" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 76.535870][ T7913] : entered promiscuous mode [ 76.541950][ T39] audit: type=1400 audit(3474030992.013:538): avc: denied { read } for pid=5333 comm="acpid" name="mouse7" dev="devtmpfs" ino=2829 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 76.548470][ T39] audit: type=1400 audit(3474030992.013:539): avc: denied { open } for pid=5333 comm="acpid" path="/dev/input/mouse7" dev="devtmpfs" ino=2829 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 76.555687][ T39] audit: type=1400 audit(3474030992.013:540): avc: denied { ioctl } for pid=5333 comm="acpid" path="/dev/input/mouse7" dev="devtmpfs" ino=2829 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 76.567036][ T39] audit: type=1400 audit(3474030992.041:541): avc: denied { bind } for pid=7914 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 76.572583][ T39] audit: type=1400 audit(3474030992.041:542): avc: denied { listen } for pid=7914 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 76.600513][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.565'. [ 76.602267][ T7922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.564'. [ 76.605666][ T7922] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 76.608700][ T7921] bridge0: port 3(geneve2) entered disabled state [ 76.614331][ T7921] bridge_slave_0: left allmulticast mode [ 76.615985][ T7921] bridge_slave_0: left promiscuous mode [ 76.617840][ T7921] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.714171][ T39] audit: type=1400 audit(3474030992.181:543): avc: denied { bind } for pid=7920 comm="syz.1.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 76.720203][ T7924] virt_wifi0 speed is unknown, defaulting to 1000 [ 76.797196][ T39] audit: type=1400 audit(3474030992.256:544): avc: denied { view } for pid=7935 comm="syz.1.568" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 76.797401][ T7933] netlink: 96 bytes leftover after parsing attributes in process `syz.0.567'. [ 76.799441][ T35] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 76.809437][ T7933] netlink: 96 bytes leftover after parsing attributes in process `syz.0.567'. [ 76.861372][ T7938] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 76.870855][ T7938] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 76.879230][ T7933] team0 (unregistering): Port device team_slave_0 removed [ 76.887450][ T7933] team0 (unregistering): Port device team_slave_1 removed [ 76.939257][ T35] usb 7-1: device descriptor read/64, error -71 [ 76.976582][ T7941] 9p filesystem being mounted at /152/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 77.004215][ T7941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.571'. [ 77.007197][ T7941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.571'. [ 77.072335][ T77] cfg80211: failed to load regulatory.db [ 77.165725][ T7948] ------------[ cut here ]------------ [ 77.167661][ T7948] WARNING: CPU: 2 PID: 7948 at kernel/signal.c:2050 posixtimer_send_sigqueue+0xba8/0x1020 [ 77.170502][ T7948] Modules linked in: [ 77.171739][ T7948] CPU: 2 UID: 0 PID: 7948 Comm: syz.3.572 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 77.176962][ T7948] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.180932][ T7948] RIP: 0010:posixtimer_send_sigqueue+0xba8/0x1020 [ 77.182908][ T7948] Code: ff ff 4c 89 e7 e8 98 fd 9d 00 e9 7e f8 ff ff 41 bf 02 00 00 00 e9 87 f8 ff ff 48 89 54 24 10 48 89 44 24 08 e8 c9 50 3b 00 90 <0f> 0b 90 48 8d 7b 10 48 8b 44 24 08 48 b9 00 00 00 00 00 fc ff df [ 77.188543][ T7948] RSP: 0018:ffffc900037f7bd8 EFLAGS: 00010093 [ 77.190338][ T7948] RAX: 0000000000000000 RBX: ffff888051ae25a0 RCX: 1ffff1100a35c4b7 [ 77.192639][ T7948] RDX: ffff88802a140000 RSI: ffffffff815ed3d7 RDI: 0000000000000001 [ 77.195386][ T7948] RBP: ffff88802a140000 R08: 0000000000000001 R09: 0000000000000000 [ 77.198330][ T7948] R10: 0000000000000001 R11: 0000000000000003 R12: ffff888051ae2644 [ 77.201313][ T7948] R13: 1ffff920006fef80 R14: ffff888051ae2678 R15: ffff888051ae2660 [ 77.203859][ T7948] FS: 00007f8f551ee6c0(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000 [ 77.206491][ T7948] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.208388][ T7948] CR2: 0000000020044000 CR3: 000000004e44c000 CR4: 0000000000352ef0 [ 77.210709][ T7948] DR0: 0000000000002800 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.212995][ T7948] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 77.215315][ T7948] Call Trace: [ 77.216493][ T7948] [ 77.217719][ T7948] ? __warn+0xea/0x3c0 [ 77.219291][ T7948] ? posixtimer_send_sigqueue+0xba8/0x1020 [ 77.220989][ T7948] ? report_bug+0x3c0/0x580 [ 77.222342][ T7948] ? handle_bug+0x54/0xa0 [ 77.223611][ T7948] ? exc_invalid_op+0x17/0x50 [ 77.224977][ T7948] ? asm_exc_invalid_op+0x1a/0x20 [ 77.226442][ T7948] ? posixtimer_send_sigqueue+0xba7/0x1020 [ 77.228117][ T7948] ? posixtimer_send_sigqueue+0xba8/0x1020 [ 77.229824][ T7948] ? posixtimer_send_sigqueue+0xba7/0x1020 [ 77.231504][ T7948] ? cpu_clock_sample+0xc9/0x140 [ 77.232937][ T7948] ? __pfx_posixtimer_send_sigqueue+0x10/0x10 [ 77.234692][ T7948] posix_cpu_timer_set+0x9e1/0xd30 [ 77.236171][ T7948] ? __pfx_posix_cpu_timer_set+0x10/0x10 [ 77.237789][ T7948] ? __lock_timer+0x1a9/0x4c0 [ 77.239151][ T7948] do_timer_settime+0x26c/0x400 [ 77.240552][ T7948] ? __pfx_posix_cpu_timer_set+0x10/0x10 [ 77.242182][ T7948] ? __pfx_do_timer_settime+0x10/0x10 [ 77.243751][ T7948] ? __pfx_do_futex+0x10/0x10 [ 77.245132][ T7948] __x64_sys_timer_settime+0x26a/0x2c0 [ 77.247272][ T7948] ? __pfx___x64_sys_timer_settime+0x10/0x10 [ 77.249542][ T7948] ? xfd_validate_state+0x5d/0x180 [ 77.251625][ T7948] do_syscall_64+0xcd/0x250 [ 77.253433][ T7948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.255824][ T7948] RIP: 0033:0x7f8f54385d29 [ 77.257679][ T7948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.265276][ T7948] RSP: 002b:00007f8f551ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 77.268592][ T7948] RAX: ffffffffffffffda RBX: 00007f8f54576080 RCX: 00007f8f54385d29 [ 77.271754][ T7948] RDX: 0000000020000340 RSI: 0000000000000001 RDI: 0000000000000000 [ 77.274934][ T7948] RBP: 00007f8f54401b08 R08: 0000000000000000 R09: 0000000000000000 [ 77.278058][ T7948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.281123][ T7948] R13: 0000000000000000 R14: 00007f8f54576080 R15: 00007ffda89b8a78 [ 77.283401][ T7948] [ 77.284320][ T7948] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 77.286593][ T7948] CPU: 2 UID: 0 PID: 7948 Comm: syz.3.572 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 77.290797][ T7948] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.295067][ T7948] Call Trace: [ 77.296418][ T7948] [ 77.297628][ T7948] dump_stack_lvl+0x3d/0x1f0 [ 77.299519][ T7948] panic+0x71d/0x800 [ 77.301131][ T7948] ? __pfx_panic+0x10/0x10 [ 77.302973][ T7948] ? show_trace_log_lvl+0x29d/0x3d0 [ 77.305046][ T7948] ? check_panic_on_warn+0x1f/0xb0 [ 77.307101][ T7948] ? posixtimer_send_sigqueue+0xba8/0x1020 [ 77.309454][ T7948] check_panic_on_warn+0xab/0xb0 [ 77.311494][ T7948] __warn+0xf6/0x3c0 [ 77.313102][ T7948] ? posixtimer_send_sigqueue+0xba8/0x1020 [ 77.315471][ T7948] report_bug+0x3c0/0x580 [ 77.317255][ T7948] handle_bug+0x54/0xa0 [ 77.318515][ T7948] exc_invalid_op+0x17/0x50 [ 77.319861][ T7948] asm_exc_invalid_op+0x1a/0x20 [ 77.321285][ T7948] RIP: 0010:posixtimer_send_sigqueue+0xba8/0x1020 [ 77.323121][ T7948] Code: ff ff 4c 89 e7 e8 98 fd 9d 00 e9 7e f8 ff ff 41 bf 02 00 00 00 e9 87 f8 ff ff 48 89 54 24 10 48 89 44 24 08 e8 c9 50 3b 00 90 <0f> 0b 90 48 8d 7b 10 48 8b 44 24 08 48 b9 00 00 00 00 00 fc ff df [ 77.329592][ T7948] RSP: 0018:ffffc900037f7bd8 EFLAGS: 00010093 [ 77.332065][ T7948] RAX: 0000000000000000 RBX: ffff888051ae25a0 RCX: 1ffff1100a35c4b7 [ 77.335051][ T7948] RDX: ffff88802a140000 RSI: ffffffff815ed3d7 RDI: 0000000000000001 [ 77.337860][ T7948] RBP: ffff88802a140000 R08: 0000000000000001 R09: 0000000000000000 [ 77.340748][ T7948] R10: 0000000000000001 R11: 0000000000000003 R12: ffff888051ae2644 [ 77.343933][ T7948] R13: 1ffff920006fef80 R14: ffff888051ae2678 R15: ffff888051ae2660 [ 77.347076][ T7948] ? posixtimer_send_sigqueue+0xba7/0x1020 [ 77.349431][ T7948] ? posixtimer_send_sigqueue+0xba7/0x1020 [ 77.351771][ T7948] ? cpu_clock_sample+0xc9/0x140 [ 77.353794][ T7948] ? __pfx_posixtimer_send_sigqueue+0x10/0x10 [ 77.356241][ T7948] posix_cpu_timer_set+0x9e1/0xd30 [ 77.358337][ T7948] ? __pfx_posix_cpu_timer_set+0x10/0x10 [ 77.360620][ T7948] ? __lock_timer+0x1a9/0x4c0 [ 77.362677][ T7948] do_timer_settime+0x26c/0x400 [ 77.364654][ T7948] ? __pfx_posix_cpu_timer_set+0x10/0x10 [ 77.366935][ T7948] ? __pfx_do_timer_settime+0x10/0x10 [ 77.369079][ T7948] ? __pfx_do_futex+0x10/0x10 [ 77.370985][ T7948] __x64_sys_timer_settime+0x26a/0x2c0 [ 77.373189][ T7948] ? __pfx___x64_sys_timer_settime+0x10/0x10 [ 77.375538][ T7948] ? xfd_validate_state+0x5d/0x180 [ 77.377518][ T7948] do_syscall_64+0xcd/0x250 [ 77.379401][ T7948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.381585][ T7948] RIP: 0033:0x7f8f54385d29 [ 77.383097][ T7948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.389877][ T7948] RSP: 002b:00007f8f551ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 77.392282][ T7948] RAX: ffffffffffffffda RBX: 00007f8f54576080 RCX: 00007f8f54385d29 [ 77.394578][ T7948] RDX: 0000000020000340 RSI: 0000000000000001 RDI: 0000000000000000 [ 77.396860][ T7948] RBP: 00007f8f54401b08 R08: 0000000000000000 R09: 0000000000000000 [ 77.399147][ T7948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.401472][ T7948] R13: 0000000000000000 R14: 00007f8f54576080 R15: 00007ffda89b8a78 [ 77.403766][ T7948] [ 78.466843][ T7948] Shutting down cpus with NMI [ 78.468771][ T7948] Kernel Offset: disabled [ 78.470149][ T7948] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:18:21 Registers: info registers vcpu 0 CPU#0 RAX=00000000000e4bed RBX=0000000000000000 RCX=ffffffff8b2a17c9 RDX=0000000000000000 RSI=ffffffff8b6cd9e0 RDI=ffffffff8bd1ef20 RBP=fffffbfff1bd2ef8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c6fed R10=ffff88806a637f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de977c0 R14=ffffffff905f4990 R15=0000000000000000 RIP=ffffffff8b2a2baf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff88806a600000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1c3311d018 CR3=000000002eed6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000305f6576616c 735f766461746162 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc301a02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc301a02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc301a02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc301a02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc301a02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc301a02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000004010a09 0000004c00000000 307a797300010009 0000000700000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c00000040050008 00000000307a7973 0001000900000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000400a0008 0000000700000000 0000000004010a09 0000004c00000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9f8eb6f76a4d4d84 db87cdd0807cd61d 788b49e64d68ba2c df72cdd1d3475df6 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ebecdfb4d645a15a 2b5fb5e885ebae9a 9423fba8f1de0a51 6376052766d78a5c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4eb145ae789edd91 8acebed7ee684fdc a4c4489665c1f7df d80bc2501e3c5355 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03580f32e9b765db 69073a2fb8a31f93 e23ca00000000000 0000000000000004 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=000000000003fb80 RCX=ffffffff82086a34 RDX=1ffffffff1b4ef9d RSI=ffffffff8bd1eea0 RDI=ffffffff8da77ce8 RBP=0000000000000001 RSP=ffffc90003816880 R8 =0000000000000007 R9 =000000000007ffff R10=000000000000000c R11=0000000000000002 R12=ffff88801c600000 R13=0000000000000000 R14=000000000146046e R15=dffffc0000000000 RIP=ffffffff817fb094 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc3028696c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000563a37752908 CR3=000000004f356000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=4a42f20c4a42f20c 4a42f20c4a42f20c 4a42f20c4a42f20c 4a42f20c4a42f20c 4a42f20c4a42f20c 4a42f20c4a42f20c 4a42f20c4a42f20c 4a42f20c4a42f20c ZMM22=0c88c68f0c88c68f 0c88c68f0c88c68f 0c88c68f0c88c68f 0c88c68f0c88c68f 0c88c68f0c88c68f 0c88c68f0c88c68f 0c88c68f0c88c68f 0c88c68f0c88c68f ZMM23=3eda12a23eda12a2 3eda12a23eda12a2 3eda12a23eda12a2 3eda12a23eda12a2 3eda12a23eda12a2 3eda12a23eda12a2 3eda12a23eda12a2 3eda12a23eda12a2 ZMM24=7ddcc6437ddcc643 7ddcc6437ddcc643 7ddcc6437ddcc643 7ddcc6437ddcc643 7ddcc6437ddcc643 7ddcc6437ddcc643 7ddcc6437ddcc643 7ddcc6437ddcc643 ZMM25=ca49c807ca49c807 ca49c807ca49c807 ca49c807ca49c807 ca49c807ca49c807 ca49c807ca49c807 ca49c807ca49c807 ca49c807ca49c807 ca49c807ca49c807 ZMM26=1221a38b1221a38b 1221a38b1221a38b 1221a38b1221a38b 1221a38b1221a38b 1221a38b1221a38b 1221a38b1221a38b 1221a38b1221a38b 1221a38b1221a38b ZMM27=c9a6eec9c9a6eec9 c9a6eec9c9a6eec9 c9a6eec9c9a6eec9 c9a6eec9c9a6eec9 c9a6eec9c9a6eec9 c9a6eec9c9a6eec9 c9a6eec9c9a6eec9 c9a6eec9c9a6eec9 ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=7503000075030000 7503000075030000 7503000075030000 7503000075030000 7503000075030000 7503000075030000 7503000075030000 7503000075030000 info registers vcpu 2 CPU#2 RAX=0000000000000044 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851c0de5 RDI=ffffffff9ab11b20 RBP=ffffffff9ab11ae0 RSP=ffffc900037f7538 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000008 R12=0000000000000000 R13=0000000000000044 R14=ffffffff851c0d80 R15=0000000000000000 RIP=ffffffff851c0e0f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8f551ee6c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020044000 CR3=000000004e44c000 CR4=00352ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f54402a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f54402aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f54402aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f54402ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f54402b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f54402c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f5454b488 00007f8f5454b480 00007f8f5454b478 00007f8f5454b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f550ad100 00007f8f5454b440 00007f8f5454b458 00007f8f5454b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f5454b498 00007f8f5454b490 00007f8f5454b488 00007f8f5454b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff8148aa3e RDX=ffff88802a18a440 RSI=ffffffff8148aa5b RDI=0000000000000000 RBP=ffff888029366f00 RSP=ffffc90003d27c10 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff88806a93fb00 R15=ffffed100526cde0 RIP=ffffffff8148aa5c RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555562ae2500 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8f551acd58 CR3=000000004e44c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f551ac9a0 00007f8f551ac9a0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f54402a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f54402aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f54402aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f54402ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f54402b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f54402c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f5454b488 00007f8f5454b480 00007f8f5454b478 00007f8f5454b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f550ad100 00007f8f5454b440 00007f8f5454b458 00007f8f5454b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f5454b498 00007f8f5454b490 00007f8f5454b488 00007f8f5454b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000