last executing test programs: 6.37027116s ago: executing program 3 (id=136): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x50}, {0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) landlock_create_ruleset(&(0x7f0000000040), 0x10, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'vlan0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1, 0x1, 0x10, 0x8, 0xf, 0x0, 0x1000067b, 0x5, 0x8}}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='lock io'], 0xc) r4 = epoll_create(0xb398) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)={0x10000000}) write$vga_arbiter(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='unlock io'], 0xe) fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001140)={0x3c, r1, 0x101, 0x70bd2d, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x60}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c041) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x245, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x10, 0x40, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0x251}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0xca, 0x4, 0x7}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x9, 0x4, 0x5, 0x10, 0x7}, 0x4f, &(0x7f00000006c0)={0x5, 0xf, 0x4f, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0xf, 0x1000}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x59, 0xa0, 0x10, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xa6, 0x8a, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0xc, 0xc89}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x4, 0x0, 0x5, [0x30, 0x3f00, 0x0, 0xf0, 0xc0ff, 0xc000]}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x402}}, {0xb9, &(0x7f0000000600)=@string={0xb9, 0x3, "5aef8193e1d9c7460eef2e2169af03b76f975db33f85313a9b1f5c09863cc5af49572f5f60a7e985fb344e292cd165a7de363e8c150b80bfefbcab7346f76f4ce827573c76bab6e2f8895c585380aa62391467586a89c97763eb8a999c53e37092cec365e96b1a3e358ff2190353c108547b8647e3187be9d7fff9dd99a5d9ffb1e97cbef160155e4eb55a549470cfc0d3369c201c4192f5aa4942b6523900e5e9669e15253be3ee3003f26998670490639e48b0220fef"}}, {0xea, &(0x7f0000000200)=@string={0xea, 0x3, "4eee419d9482367f1b7b84ab958fde66e97163a5ee9a091d21c95d0dba1830150351818b43e3b2ead949f6963047603d9a772222bfb775d5c2e2b86f322aa401b8dce89b8608f14638ad41d5532f05b85c4e62688f506b1c0b64bcc976aba8e86f69927641adaaea2e5a8330c5c7c1aa0199428cef4e8b28ed8c933908131cff4f64beee942538255678f580bb7fb7e5743e8ed382892e53117fbc3ad694ce2566c9a249e16dccb99c442147f6413d6090df372bc879640976654109ad096fc969caa7260ea46544aa3b0a55f251d6a19dbadc1b9e72736a0d3150174f09bf0f015bd6939aeca0b5"}}, {0x89, &(0x7f0000000300)=@string={0x89, 0x3, "eb4e81e1156f926ed1f7ad54df3aaaf81061848368d24a225c4c4ab8bce059ec8a3ecfeab21c9cd2fc166a18af0f20bbae3783bad4247db60972ad635e78bdf5b8a8a0af35ca44e0947f11d7b110aabbc05661a296c3e0de5ea8316bf1f77c935b9e1bc50120b292e1f7e9dbe54a50da070974d53d2e825fd79fdb16efb68b4d2ef8b2c8eb5070"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1009}}, {0xa5, &(0x7f0000000400)=@string={0xa5, 0x3, "780cffaaf88ee2acb5a4430c5a8c39e243736e0034d46910aaee8a0c77e4cd9ee6ecc09c80f98ad2d282c29f5fd7d7805219fd0449c561b9cdd40cb0f3f537f7ef19cb64321e394c87d41f6275ad771486cbab072eab4b3c55cee52eeb6259c150634681c993b542fcc90d0d83acc370365793b8370d4614a45a77fb1fd7fdbdd52328cbf66bb65dd05a166e38232c407e9a9043959aa13f2a94c033ea0c4c9248164e"}}]}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x10000, 0x5a) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0), 0x106, 0xa}}, 0x20) 6.000953246s ago: executing program 0 (id=139): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x50}, {0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) landlock_create_ruleset(&(0x7f0000000040), 0x10, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'vlan0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1, 0x1, 0x10, 0x8, 0xf, 0x0, 0x1000067b, 0x5, 0x8}}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='lock io'], 0xc) r4 = epoll_create(0xb398) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)={0x10000000}) write$vga_arbiter(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='unlock io'], 0xe) fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001140)={0x3c, r1, 0x101, 0x70bd2d, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x60}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c041) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x245, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x10, 0x40, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0x251}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0xca, 0x4, 0x7}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x9, 0x4, 0x5, 0x10, 0x7}, 0x4f, &(0x7f00000006c0)={0x5, 0xf, 0x4f, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0xf, 0x1000}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x59, 0xa0, 0x10, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xa6, 0x8a, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0xc, 0xc89}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x4, 0x0, 0x5, [0x30, 0x3f00, 0x0, 0xf0, 0xc0ff, 0xc000]}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x402}}, {0xb9, &(0x7f0000000600)=@string={0xb9, 0x3, "5aef8193e1d9c7460eef2e2169af03b76f975db33f85313a9b1f5c09863cc5af49572f5f60a7e985fb344e292cd165a7de363e8c150b80bfefbcab7346f76f4ce827573c76bab6e2f8895c585380aa62391467586a89c97763eb8a999c53e37092cec365e96b1a3e358ff2190353c108547b8647e3187be9d7fff9dd99a5d9ffb1e97cbef160155e4eb55a549470cfc0d3369c201c4192f5aa4942b6523900e5e9669e15253be3ee3003f26998670490639e48b0220fef"}}, {0xea, &(0x7f0000000200)=@string={0xea, 0x3, "4eee419d9482367f1b7b84ab958fde66e97163a5ee9a091d21c95d0dba1830150351818b43e3b2ead949f6963047603d9a772222bfb775d5c2e2b86f322aa401b8dce89b8608f14638ad41d5532f05b85c4e62688f506b1c0b64bcc976aba8e86f69927641adaaea2e5a8330c5c7c1aa0199428cef4e8b28ed8c933908131cff4f64beee942538255678f580bb7fb7e5743e8ed382892e53117fbc3ad694ce2566c9a249e16dccb99c442147f6413d6090df372bc879640976654109ad096fc969caa7260ea46544aa3b0a55f251d6a19dbadc1b9e72736a0d3150174f09bf0f015bd6939aeca0b5"}}, {0x89, &(0x7f0000000300)=@string={0x89, 0x3, "eb4e81e1156f926ed1f7ad54df3aaaf81061848368d24a225c4c4ab8bce059ec8a3ecfeab21c9cd2fc166a18af0f20bbae3783bad4247db60972ad635e78bdf5b8a8a0af35ca44e0947f11d7b110aabbc05661a296c3e0de5ea8316bf1f77c935b9e1bc50120b292e1f7e9dbe54a50da070974d53d2e825fd79fdb16efb68b4d2ef8b2c8eb5070"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x2, &(0x7f0000000400)=@string={0x2}}]}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x10000, 0x5a) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0), 0x106, 0xa}}, 0x20) 4.010465153s ago: executing program 2 (id=145): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='macsec0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x22000600) select(0x17, &(0x7f0000000980)={0x7f}, 0x0, 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x14, r5, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd601646b085a2009a2f00ff020000000000000000000000000001fc010000000000000000000000000000000000000000000005020000000000000420880b00460000670c12d787bc48454ad5ab0dbcd795bf5fb1f628b38949083230f6690fa256ac9e09b06b584ba6ff"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) splice(r2, 0x0, r3, 0x0, 0x7fff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0xfa, 0x2}, {0xa}}}}, 0xf) 3.880135448s ago: executing program 1 (id=146): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffff7, 0x400000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000002f00)={0x0, 0x0, r1}) r2 = socket$inet(0x2, 0x3, 0x5) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) shmctl$IPC_RMID(0x0, 0x0) (async) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00') read$char_usb(r4, &(0x7f0000000000)=""/178, 0xb2) (async) r5 = socket$kcm(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000a00)) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000380)={"84db8cb4", 0x0, 0x0, 0x0, 0x0, 0x0, "0022aed9ae659d4d95fd3d1fa09814", "aadb641b", "912ec72a", "5439cfe3", ["f56f1a42e3d0ab344d8bc6cc", "22147745eb9df6cf6a880d29", "9ad3eb5918df0f52938453c9", "ac562047f08f7537b6597721"]}) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) lseek(0xffffffffffffffff, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) (async) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000000b80)=""/102391, 0x18ff7}], 0x1, 0x0, 0x0) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) (async) socket$inet6(0xa, 0x0, 0x0) (async) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f00000000c0)=0x1) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) r8 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030021000b63d25a80648c2594f90124fc60350c030b022e0009083582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3000}, 0x0) (async) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000100)={0x1, 0x3}) (async) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, 0x0) 3.879854584s ago: executing program 1 (id=147): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7f}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x381, 0x0, 0xfffffffc}, &(0x7f0000000300)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = dup(r7) ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0e05403, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000003064f25000000000000003c000000000500010007"], 0x28}}, 0x0) 3.340310393s ago: executing program 3 (id=148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x400c844) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) 3.150671305s ago: executing program 2 (id=149): syz_io_uring_setup(0x2e94, &(0x7f0000000180)={0x0, 0x363, 0x13090, 0x0, 0x2ea}, &(0x7f0000000100), &(0x7f0000000240)) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000004100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000001740)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f00000000c0)={r2, 0x1, 0x6, @local}, 0x200000d0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r5, 0x40184150, &(0x7f0000000080)={0x0, &(0x7f0000000300)="df", 0x4000000000000000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x6, 0x0, 0x7}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 2.975344705s ago: executing program 1 (id=150): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES16=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x40) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x24000040) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = io_uring_setup(0x253d, &(0x7f0000000280)={0x0, 0x547a, 0x8, 0x0, 0x3ca}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r7, &(0x7f0000000300)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0x80) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) 2.972701268s ago: executing program 0 (id=151): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7ffc}, &(0x7f0000000500)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4840}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3, r5}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000d000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000008000000ac0400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000009cea0f9a9a57d9188ad722fae34583138146fdd2e4d7effb0dc1b1604b1a32ea768f1e7091f1e388c45fbad05990c406eaceef68d5e700bbcf16dae62eb6baceaa5f097ca73f15f3543e03334b390cdb29f50d853615b3d5724ace67fe5e7fc4830ee26167c1a0794847fcb24a0d0042e300d7506625463f02f8f103314441"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r8, &(0x7f0000000000), 0x0}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000100)) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)="ee"}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death={0x400c630e, 0x0, 0x100000000000000}, @clear_death], 0x0, 0x0, 0x0}) syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000000)=0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="66af9d98e65017440c114c000009b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000340)=0x0, &(0x7f00000005c0)) openat$cgroup_ro(r9, &(0x7f0000000400)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) syz_io_uring_submit(r13, r12, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) 2.62056924s ago: executing program 2 (id=152): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x40) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x24000040) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) r7 = io_uring_setup(0x253d, &(0x7f0000000280)={0x0, 0x547a, 0x8, 0x0, 0x3ca}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r8, &(0x7f0000000300)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0x80) close_range(r7, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) 2.460533821s ago: executing program 3 (id=153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000a9f850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='netlink_extack\x00', r2}, 0xb3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@getnexthop={0x18, 0x76, 0xb0d, 0x0, 0x0, {0x3, 0x0, 0x0, 0x2}}, 0x18}}, 0x0) r4 = eventfd(0x0) r5 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r4, 0x0, 0x2, r5}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x81, 0x0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3aac1373788c1231, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="1818000006000020000000000002000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000002000000fe12ff0f080000008f600400f0ffffff4306f0fff0ffffff18180000", @ANYRES32, @ANYBLOB="00000000000000008500000051000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x5, 0x0, 0x8, 0x4}, 0x10, r6, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000002c0)=[{0x1, 0x1, 0xb, 0x7}, {0x2, 0x4, 0x2, 0x2}], 0x10, 0x1, @void, @value}, 0x90) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r8, &(0x7f0000009700)=[{{&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000a00)=[{0x10, 0x1}], 0x10}}], 0x1, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000c4000000c4000000030000000e00000000000009000000000b00000009000004010100000300000005000000010000800c00000001000000020000000500000000000000000000000200000002000000090002000d00000004000000000000000800000002000000000000000600000005000000008000000300000000000000030000000600000004000000ff0f000002000000000000010000000015002501010000000000000203000000000000000000000300000000020000000400000001000000000000000000000200000000009300"], &(0x7f0000000700)=""/4096, 0xdf, 0x1000, 0x0, 0xa73, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x20000000000000a9, &(0x7f0000000340)=ANY=[@ANYRES64=0x0], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r7, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000001140)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x0, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ip={@private, @private, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00'}, 0x0, 0x220, 0x248, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x6, 0x1}}}, {{@ip={@rand_addr=0x64010101, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xff, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3e0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r4, 0xfffff, 0x2, r5}) statfs(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)=""/235) pselect6(0x40, &(0x7f0000001700)={0x9, 0xffffffffffff2231, 0x10001, 0x8, 0x200, 0xffffffffffffffff, 0x7fffffffffffffff, 0xffffffff00000000}, &(0x7f0000001740)={0x8, 0x6, 0x7fffffff, 0x0, 0xffffffffffffffff, 0xb8, 0x1000, 0x3f}, &(0x7f0000001780)={0x4d, 0x9a2, 0xffffffff, 0x80000000, 0x1, 0x208, 0x8, 0x8}, &(0x7f00000017c0), &(0x7f0000001840)={&(0x7f0000001800)={[0x323]}, 0x8}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b7040000000000008500000033000000850000000700000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r13}, 0xc) 2.257390951s ago: executing program 3 (id=154): socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x6, 0x7fe2, 0x5, 0x140, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x18, 0x0, 0x9, 0x2000, 0x5200, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x80) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f00000002c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000040)={0x0, 0x0}) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000001000/0x4000)=nil) ptrace$setopts(0x4206, r6, 0x0, 0x0) pread64(r4, &(0x7f0000000080)=""/237, 0xed, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000b00)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$radio(&(0x7f0000000400), 0x1, 0x2) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) mount$9p_fd(0x20100000, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) 2.18024931s ago: executing program 3 (id=155): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x3}, 0x8) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) (async) close(r0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e08371b0c"], 0xb) (async) ioperm(0x0, 0x1, 0x8) (async) r1 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000040)=0x80047c7, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x40000000000000}, {}, 0x0, 0x0, 0x2}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212"], 0x10}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYRES32=r0, @ANYRES64=r5, @ANYBLOB="2ceac2c463b20aed4d9c118ae0d57cbc9e2585b41d24054a99f2aca3a9984a3c3a234464521a3040a75fa8ae23db401ef14b18c7a9b81bc074cdf52c3da6f28a489cbc7f442a5aadc2d63fd60aa80352ce6027bac8bc8c5d68a027abc75a945109f267a8e5de46759887ab97cb70009882e69a03408af2d278246a0e90b568b152b01ca9435588380866329cfd852284fe9e8e17042075218e32f7ca198792ede4b25d0df9da9fea329991edd5737ca2862a7ee57c28db959cc4c8d4b6c96bd1129ec3", @ANYRESDEC=r2, @ANYRES16=r1, @ANYBLOB="3cb4d23e48030426af060a08afd2283a80c1e3a7f3842ba5881a72220c63996536a7d4e3b256a2724c0304f3393e6e91606cc2f4717aa8c9e5ef0b1b20575e376f19e7a1bc7e2a6a6b196a5195d35ea7766e0b93f46a85598b4cbdd2adf1fd5bd957f56326fb7b7eca864f3987dd638b131e8600903d35f901dc9afe2463a6c17fb45f6e8f6900e9b6a2823271d60eaf177e2f2ecbba32e969c85069548d8053d0333be5a078d0c4bf2fe2322a825bd66c36e077764ee8280e3fbece717716be09a32eb299d7930da0d69771fc4e8a202b8de29b590837a4700600111594f3a7532f1b4082114a226f86eb27e65c46", @ANYRESHEX=r0], 0x80}}, 0x20000080) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) (async) syz_emit_ethernet(0x8e, &(0x7f00000005c0)=ANY=[@ANYRES64, @ANYRES8=r5], 0x0) (async) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) (async) r6 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f00000004c0)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)="2c02c67e"}) 2.17997616s ago: executing program 3 (id=156): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x50}, {0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) landlock_create_ruleset(&(0x7f0000000040), 0x10, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'vlan0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1, 0x1, 0x10, 0x8, 0xf, 0x0, 0x1000067b, 0x5, 0x8}}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='lock io'], 0xc) r4 = epoll_create(0xb398) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)={0x10000000}) write$vga_arbiter(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='unlock io'], 0xe) fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001140)={0x3c, r1, 0x101, 0x70bd2d, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x60}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c041) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x245, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x10, 0x40, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0x251}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0xca, 0x4, 0x7}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x9, 0x4, 0x5, 0x10, 0x7}, 0x4f, &(0x7f00000006c0)={0x5, 0xf, 0x4f, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0xf, 0x1000}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x59, 0xa0, 0x10, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xa6, 0x8a, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0xc, 0xc89}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x4, 0x0, 0x5, [0x30, 0x3f00, 0x0, 0xf0, 0xc0ff, 0xc000]}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x402}}, {0xb9, &(0x7f0000000600)=@string={0xb9, 0x3, "5aef8193e1d9c7460eef2e2169af03b76f975db33f85313a9b1f5c09863cc5af49572f5f60a7e985fb344e292cd165a7de363e8c150b80bfefbcab7346f76f4ce827573c76bab6e2f8895c585380aa62391467586a89c97763eb8a999c53e37092cec365e96b1a3e358ff2190353c108547b8647e3187be9d7fff9dd99a5d9ffb1e97cbef160155e4eb55a549470cfc0d3369c201c4192f5aa4942b6523900e5e9669e15253be3ee3003f26998670490639e48b0220fef"}}, {0xea, &(0x7f0000000200)=@string={0xea, 0x3, "4eee419d9482367f1b7b84ab958fde66e97163a5ee9a091d21c95d0dba1830150351818b43e3b2ead949f6963047603d9a772222bfb775d5c2e2b86f322aa401b8dce89b8608f14638ad41d5532f05b85c4e62688f506b1c0b64bcc976aba8e86f69927641adaaea2e5a8330c5c7c1aa0199428cef4e8b28ed8c933908131cff4f64beee942538255678f580bb7fb7e5743e8ed382892e53117fbc3ad694ce2566c9a249e16dccb99c442147f6413d6090df372bc879640976654109ad096fc969caa7260ea46544aa3b0a55f251d6a19dbadc1b9e72736a0d3150174f09bf0f015bd6939aeca0b5"}}, {0x89, &(0x7f0000000300)=@string={0x89, 0x3, "eb4e81e1156f926ed1f7ad54df3aaaf81061848368d24a225c4c4ab8bce059ec8a3ecfeab21c9cd2fc166a18af0f20bbae3783bad4247db60972ad635e78bdf5b8a8a0af35ca44e0947f11d7b110aabbc05661a296c3e0de5ea8316bf1f77c935b9e1bc50120b292e1f7e9dbe54a50da070974d53d2e825fd79fdb16efb68b4d2ef8b2c8eb5070"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1009}}, {0xa5, &(0x7f0000000400)=@string={0xa5, 0x3, "780cffaaf88ee2acb5a4430c5a8c39e243736e0034d46910aaee8a0c77e4cd9ee6ecc09c80f98ad2d282c29f5fd7d7805219fd0449c561b9cdd40cb0f3f537f7ef19cb64321e394c87d41f6275ad771486cbab072eab4b3c55cee52eeb6259c150634681c993b542fcc90d0d83acc370365793b8370d4614a45a77fb1fd7fdbdd52328cbf66bb65dd05a166e38232c407e9a9043959aa13f2a94c033ea0c4c9248164e"}}]}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x10000, 0x5a) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0), 0x106, 0xa}}, 0x20) 2.080209874s ago: executing program 1 (id=157): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/27, 0x1b}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f00000000c0)=""/246, 0xf6}], 0x3, 0x8, 0xf) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000400)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r3, 0x0, 0x3}]) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd121e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = accept4(r2, 0x0, 0x0, 0x0) bind$bt_hci(r5, &(0x7f0000000200)={0x1f, 0x4, 0x4}, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) write$UHID_INPUT(r1, &(0x7f0000002100)={0x18, {"a2e3ad2119c752f91a5e09091bf70e0dd038e7ff7fc6e5539b324d078b089b3b0838721a0890e0878f0e1ac6e7049b3d63959b509a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70d998ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5af098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000108000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b2fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f794c9eee1198751adaa13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d8872fe174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f980000000203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 2.079608459s ago: executing program 0 (id=158): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xa, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() setrlimit(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x22, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x58, 0x29, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ca0f10971b091de, 0x4}, {0x10, 0x9}, {0x0, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x33}}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0xfc, 0x10}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_RATE={0x6, 0x5, {0x7d, 0xb5}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xc}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000000)=r3) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) renameat2(0xffffffffffffffff, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x5) sendfile(r1, r0, 0x0, 0x80009) 1.740497995s ago: executing program 2 (id=159): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x6a040000) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000058c38a631ecb260500"/27], 0x48) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000400)={0x3, 0x1fe, 0x3, 0x0, 0xc}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) unshare(0x8040480) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x4004743a, 0x0) r3 = io_uring_setup(0x497c, &(0x7f00000001c0)) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x3000000, 0x0, {0x6}}, 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = fsopen(&(0x7f00000003c0)='virtiofs\x00', 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x3d, 0x0, 0x0, 0x3654}]}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x12, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fchdir(r0) 1.179865452s ago: executing program 0 (id=160): syz_io_uring_setup(0x2e94, &(0x7f0000000180)={0x0, 0x363, 0x13090, 0x0, 0x2ea}, &(0x7f0000000100), &(0x7f0000000240)) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000004100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000001740)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f00000000c0)={r2, 0x1, 0x6, @local}, 0x200000d0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r5, 0x40184150, &(0x7f0000000080)={0x0, &(0x7f0000000300)="df", 0x4000000000000000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x6, 0x0, 0x7}]}, 0x10) 1.130092565s ago: executing program 1 (id=161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x400c844) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) 903.709419ms ago: executing program 2 (id=162): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001fc0)={0x0, 0x0, 0x0}, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x748d, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000002340)='./bus\x00') r3 = open(&(0x7f0000007f80)='./bus\x00', 0x141142, 0x0) ftruncate(r3, 0x2007ffb) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000650901000000000066000000ffffff80180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b503000000000000850000a1e8798400b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xe4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(&(0x7f0000000400)='./bus\x00', 0x500, 0x0) socket$qrtr(0x2a, 0x2, 0x0) statfs(&(0x7f0000000180)='./file1\x00', &(0x7f0000000440)=""/226) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) 618.893618ms ago: executing program 0 (id=163): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) (fail_nth: 28) 618.598286ms ago: executing program 0 (id=164): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000008181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) timerfd_create(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x0, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100)={0x0, 0x17}, 0xc) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)=[0x0], &(0x7f00000007c0), 0x3f00, 0x1, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000200)={0x0, r5, r4}) openat$nullb(0xffffffffffffff9c, 0x0, 0x80600, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r7, &(0x7f0000000040)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r7, &(0x7f0000000280)='p', 0x29fcb, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 189.108492ms ago: executing program 1 (id=165): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES16=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="00000000522b1eaf0000000000000000000000000000000000000000e8a9afe6eb346381377be0782cbcb956408cb2d570f9f4b3e7c66d7f351b2a039e24c3d90ea4b673bc877f563dcccba4f2c9931e3ebcbb8f904df040fecb93b165f7a4a15237adbf721ae9257c484f01c69c0fac6afcaa670c7af187a7b732eefb02aa30ad8f8f2c4557af3545a0a789f441751268a551453b92fc3c3304995a349dea234491098691a1b62fa3c7ae71781bd6a56b022a3652081b4cf6882c97b45f666a1c0546fc438331e5f8fab504e66f157726abe8e1928f8ba58eb0b1ec31383b06e61233add5a344114b29b4f504e9ec95dc56454c6e101eb7e5f0c25f05e16c978fd9cf5cdcb933952b4af96f07a8f4921af7546e69f9c6c2c5622572c9e661d7c1a64f4d9fd865c7d2026abff655e82cde5324c7ebca6e94dd5af6a803ca182a4ae81d1b9b0c3d78902bdadfe1ffd13eb35f"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x40) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x24000040) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = io_uring_setup(0x253d, &(0x7f0000000280)={0x0, 0x547a, 0x8, 0x0, 0x3ca}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r7, &(0x7f0000000300)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0x80) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) 0s ago: executing program 2 (id=166): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r6, 0x0, 0x0) fchdir(r5) mount(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000140)={0x0, 0x0}) r9 = syz_open_procfs(r8, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, &(0x7f0000000480)={0x0, 0x738}) (fail_nth: 5) r10 = userfaultfd(0x1) ioctl$UFFDIO_API(r10, 0xc018aa3f, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r10) kernel console output (not intermixed with test programs): [ 31.798609][ T39] audit: type=1400 audit(1729160702.984:80): avc: denied { write } for pid=5278 comm="sh" path="pipe:[2746]" dev="pipefs" ino=2746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 31.805952][ T39] audit: type=1400 audit(1729160702.984:81): avc: denied { rlimitinh } for pid=5278 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.812267][ T39] audit: type=1400 audit(1729160702.984:82): avc: denied { siginh } for pid=5278 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:10158' (ED25519) to the list of known hosts. [ 32.809300][ T39] audit: type=1400 audit(1729160704.004:83): avc: denied { name_bind } for pid=5313 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 32.816640][ T39] audit: type=1400 audit(1729160704.014:84): avc: denied { read } for pid=4811 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 32.822459][ T39] audit: type=1400 audit(1729160704.014:85): avc: denied { append } for pid=4811 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.828037][ T39] audit: type=1400 audit(1729160704.014:86): avc: denied { open } for pid=4811 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.833865][ T39] audit: type=1400 audit(1729160704.014:87): avc: denied { getattr } for pid=4811 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.477119][ T5315] cgroup: Unknown subsys name 'net' [ 34.657629][ T5315] cgroup: Unknown subsys name 'cpuset' [ 34.660871][ T5315] cgroup: Unknown subsys name 'rlimit' [ 34.876134][ T5324] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 35.432030][ T5315] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.445580][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 37.445595][ T39] audit: type=1400 audit(1729160708.634:105): avc: denied { execmem } for pid=5326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.838085][ T39] audit: type=1400 audit(1729160709.034:106): avc: denied { create } for pid=5330 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.845137][ T39] audit: type=1400 audit(1729160709.034:107): avc: denied { read write } for pid=5330 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.853603][ T39] audit: type=1400 audit(1729160709.034:108): avc: denied { open } for pid=5330 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.860389][ T39] audit: type=1400 audit(1729160709.044:109): avc: denied { ioctl } for pid=5330 comm="syz-executor" path="socket:[5230]" dev="sockfs" ino=5230 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.888005][ T5336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.890335][ T5335] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.891518][ T5336] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.894156][ T5335] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.894728][ T5336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.896368][ T5335] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.898628][ T5336] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.899923][ T5335] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.903553][ T5342] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.903697][ T5335] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.906522][ T5342] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.907603][ T5335] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.909356][ T5342] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.911386][ T5335] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.913388][ T5342] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.914672][ T5335] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.917284][ T5345] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 37.918485][ T5335] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.922298][ T5345] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 37.924143][ T39] audit: type=1400 audit(1729160709.114:110): avc: denied { read } for pid=5330 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.925386][ T5345] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.928542][ T5341] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.930611][ T39] audit: type=1400 audit(1729160709.114:111): avc: denied { open } for pid=5330 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.932437][ T5345] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 37.935784][ T39] audit: type=1400 audit(1729160709.114:112): avc: denied { mounton } for pid=5330 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.939312][ T5345] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.948912][ T5346] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.061299][ T39] audit: type=1400 audit(1729160709.254:113): avc: denied { module_request } for pid=5330 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 38.103707][ T5330] chnl_net:caif_netlink_parms(): no params data found [ 38.143195][ T5343] chnl_net:caif_netlink_parms(): no params data found [ 38.152149][ T5337] chnl_net:caif_netlink_parms(): no params data found [ 38.212385][ T5331] chnl_net:caif_netlink_parms(): no params data found [ 38.249019][ T5330] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.251619][ T5330] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.254344][ T5330] bridge_slave_0: entered allmulticast mode [ 38.257124][ T5330] bridge_slave_0: entered promiscuous mode [ 38.326688][ T5330] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.329368][ T5330] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.331783][ T5330] bridge_slave_1: entered allmulticast mode [ 38.334259][ T5330] bridge_slave_1: entered promiscuous mode [ 38.363542][ T5337] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.366024][ T5337] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.368403][ T5337] bridge_slave_0: entered allmulticast mode [ 38.371137][ T5337] bridge_slave_0: entered promiscuous mode [ 38.376888][ T5337] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.379091][ T5337] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.381013][ T5337] bridge_slave_1: entered allmulticast mode [ 38.382994][ T5337] bridge_slave_1: entered promiscuous mode [ 38.384980][ T5343] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.387594][ T5343] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.389867][ T5343] bridge_slave_0: entered allmulticast mode [ 38.392336][ T5343] bridge_slave_0: entered promiscuous mode [ 38.403680][ T5330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.435274][ T5343] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.438233][ T5343] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.440399][ T5343] bridge_slave_1: entered allmulticast mode [ 38.442398][ T5343] bridge_slave_1: entered promiscuous mode [ 38.458278][ T5330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.504950][ T5343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.523546][ T5331] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.526558][ T5331] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.529108][ T5331] bridge_slave_0: entered allmulticast mode [ 38.532042][ T5331] bridge_slave_0: entered promiscuous mode [ 38.537557][ T5337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.542302][ T5343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.575059][ T5331] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.577878][ T5331] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.580771][ T5331] bridge_slave_1: entered allmulticast mode [ 38.583917][ T5331] bridge_slave_1: entered promiscuous mode [ 38.601928][ T5337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.636847][ T5330] team0: Port device team_slave_0 added [ 38.659077][ T5343] team0: Port device team_slave_0 added [ 38.662644][ T5330] team0: Port device team_slave_1 added [ 38.673619][ T5331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.679485][ T5337] team0: Port device team_slave_0 added [ 38.681824][ T5343] team0: Port device team_slave_1 added [ 38.691889][ T5331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.695820][ T5337] team0: Port device team_slave_1 added [ 38.710894][ T5330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.712796][ T5330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.722645][ T5330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.769845][ T5330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.772261][ T5330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.781184][ T5330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.814846][ T5343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.816833][ T5343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.822716][ T5343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.831158][ T5343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.832833][ T5343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.839949][ T5343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.844904][ T5331] team0: Port device team_slave_0 added [ 38.847448][ T5337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.849836][ T5337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.858686][ T5337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.864219][ T5337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.866657][ T5337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.875282][ T5337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.886597][ T5331] team0: Port device team_slave_1 added [ 38.915396][ T5331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.917987][ T5331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.926864][ T5331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.965965][ T5331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.968379][ T5331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.977759][ T5331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.985084][ T5330] hsr_slave_0: entered promiscuous mode [ 38.987971][ T5330] hsr_slave_1: entered promiscuous mode [ 39.028678][ T5337] hsr_slave_0: entered promiscuous mode [ 39.030470][ T5337] hsr_slave_1: entered promiscuous mode [ 39.032152][ T5337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.034045][ T5337] Cannot create hsr debugfs directory [ 39.038683][ T5343] hsr_slave_0: entered promiscuous mode [ 39.041414][ T5343] hsr_slave_1: entered promiscuous mode [ 39.044415][ T5343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.047420][ T5343] Cannot create hsr debugfs directory [ 39.207313][ T5331] hsr_slave_0: entered promiscuous mode [ 39.209991][ T5331] hsr_slave_1: entered promiscuous mode [ 39.212429][ T5331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.215011][ T5331] Cannot create hsr debugfs directory [ 39.449436][ T5337] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.455426][ T5337] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.463271][ T5337] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.471177][ T5337] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.479334][ T5330] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.483467][ T5330] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.486649][ T5330] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.492902][ T5330] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.520547][ T5343] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.525872][ T5343] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.530330][ T5343] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.543810][ T5343] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.573496][ T5331] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.576905][ T5331] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.584769][ T5331] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.588095][ T5331] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.613129][ T5330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.624267][ T5337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.634905][ T5337] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.652314][ T5330] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.655293][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.657443][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.665457][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.667598][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.681935][ T5343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.686841][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.688732][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.699365][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.701257][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.718421][ T5343] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.732384][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.735232][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.742467][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.743307][ T39] audit: type=1400 audit(1729160710.934:114): avc: denied { sys_module } for pid=5337 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 39.744902][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.765410][ T5331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.774697][ T5330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.781090][ T5331] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.791828][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.793709][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.802827][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.804721][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.820792][ T5337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.861648][ T5337] veth0_vlan: entered promiscuous mode [ 39.865359][ T5337] veth1_vlan: entered promiscuous mode [ 39.879544][ T5330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.900420][ T5337] veth0_macvtap: entered promiscuous mode [ 39.913617][ T5337] veth1_macvtap: entered promiscuous mode [ 39.918168][ T5330] veth0_vlan: entered promiscuous mode [ 39.924302][ T5330] veth1_vlan: entered promiscuous mode [ 39.930613][ T5337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.938272][ T5337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.947725][ T5337] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.951028][ T5337] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.953995][ T5337] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.957542][ T5337] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.971137][ T5343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.976131][ T5346] Bluetooth: hci2: command tx timeout [ 39.976330][ T5345] Bluetooth: hci3: command tx timeout [ 39.976660][ T65] Bluetooth: hci0: command tx timeout [ 39.976886][ T5336] Bluetooth: hci1: command tx timeout [ 39.987582][ T5330] veth0_macvtap: entered promiscuous mode [ 39.990988][ T5331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.003179][ T5330] veth1_macvtap: entered promiscuous mode [ 40.023770][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.027956][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.038269][ T5330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.041388][ T5330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.045192][ T5330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.052652][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.054063][ T5330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.055223][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.058234][ T5330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.058741][ T5330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.078158][ T5330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.080550][ T5330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.082824][ T5330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.085170][ T5330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.089905][ T5331] veth0_vlan: entered promiscuous mode [ 40.102516][ T5337] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.105949][ T5331] veth1_vlan: entered promiscuous mode [ 40.108918][ T5343] veth0_vlan: entered promiscuous mode [ 40.121811][ T5343] veth1_vlan: entered promiscuous mode [ 40.144330][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.147952][ T5331] veth0_macvtap: entered promiscuous mode [ 40.148478][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.158667][ T5331] veth1_macvtap: entered promiscuous mode [ 40.174103][ T5331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.177969][ T5331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.181220][ T5331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.184665][ T5331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.189379][ T5331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.200604][ T5343] veth0_macvtap: entered promiscuous mode [ 40.200935][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.204030][ T5331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.205247][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.209827][ T5331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.213169][ T5331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.216314][ T5331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.219707][ T5331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.222964][ T5331] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.225123][ T5331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.228086][ T5331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.230525][ T5331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.242829][ T5343] veth1_macvtap: entered promiscuous mode [ 40.260573][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.264710][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.268714][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.272179][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.275406][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.279335][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.285122][ T5343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.289798][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.292534][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.295353][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.299157][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.302520][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.306838][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.311550][ T5343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.318519][ T5343] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.321653][ T5343] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.327090][ T5343] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.331100][ T5343] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.336418][ T5396] Zero length message leads to an empty skb [ 40.558271][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.560376][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.579021][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.584070][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.589877][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.593215][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.610949][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.614143][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.729726][ T5400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 41.129394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.132486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.287212][ T5412] ptrace attach of "/syz-executor exec"[5331] was attempted by "/syz-executor exec"[5412] [ 42.056243][ T5345] Bluetooth: hci3: command tx timeout [ 42.058031][ T5346] Bluetooth: hci2: command tx timeout [ 42.058168][ T5345] Bluetooth: hci1: command tx timeout [ 42.058196][ T5336] Bluetooth: hci0: command tx timeout [ 42.463737][ T5431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'. [ 43.285332][ T39] kauditd_printk_skb: 38 callbacks suppressed [ 43.285342][ T39] audit: type=1400 audit(1729160714.474:153): avc: denied { append } for pid=5443 comm="syz.0.14" name="rtc0" dev="devtmpfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.293921][ T39] audit: type=1400 audit(1729160714.484:154): avc: denied { open } for pid=5443 comm="syz.0.14" path="/dev/rtc0" dev="devtmpfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.434683][ T5447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13'. [ 43.565575][ T39] audit: type=1400 audit(1729160714.754:155): avc: denied { ioctl } for pid=5443 comm="syz.0.14" path="/dev/rtc0" dev="devtmpfs" ino=865 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 44.135661][ T5345] Bluetooth: hci2: command tx timeout [ 44.145662][ T5345] Bluetooth: hci0: command tx timeout [ 44.147265][ T5345] Bluetooth: hci3: command tx timeout [ 44.147879][ T5346] Bluetooth: hci1: command tx timeout [ 44.547167][ T5458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16'. [ 44.988016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 45.035604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 45.067810][ T39] audit: type=1400 audit(1729160716.264:156): avc: denied { unlink } for pid=5469 comm="syz.2.19" name="#1" dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 45.073433][ T39] audit: type=1400 audit(1729160716.264:157): avc: denied { mount } for pid=5469 comm="syz.2.19" name="/" dev="overlay" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 45.094104][ T5470] evm: overlay not supported [ 45.106867][ T39] audit: type=1804 audit(1729160716.304:158): pid=5470 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.19" name="/newroot/4/bus/bus" dev="overlay" ino=45 res=1 errno=0 [ 45.158504][ T39] audit: type=1400 audit(1729160716.354:159): avc: denied { create } for pid=5469 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 45.164596][ T39] audit: type=1400 audit(1729160716.354:160): avc: denied { connect } for pid=5469 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 45.325732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 45.335759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 45.350202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 45.365584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 45.621664][ T39] audit: type=1804 audit(1729160716.814:161): pid=5480 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.21" name="/newroot/5/bus/bus" dev="overlay" ino=51 res=1 errno=0 [ 45.705763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 45.708508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 45.850578][ T39] audit: type=1804 audit(1729160717.044:162): pid=5485 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.22" name="/newroot/4/bus/bus" dev="overlay" ino=45 res=1 errno=0 [ 46.215968][ T5346] Bluetooth: hci3: command tx timeout [ 46.216077][ T5345] Bluetooth: hci2: command tx timeout [ 46.225712][ T5345] Bluetooth: hci1: command tx timeout [ 46.225908][ T5346] Bluetooth: hci0: command tx timeout [ 46.579373][ T5495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24'. [ 47.262688][ T5522] batadv_slave_1: entered promiscuous mode [ 47.787901][ T5521] batadv_slave_1: left promiscuous mode [ 49.135531][ T39] kauditd_printk_skb: 20 callbacks suppressed [ 49.135615][ T39] audit: type=1804 audit(1729160720.324:183): pid=5548 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.37" name="/newroot/10/bus/bus" dev="overlay" ino=85 res=1 errno=0 [ 50.096289][ T5563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.40'. [ 50.108684][ T5568] batadv_slave_1: entered promiscuous mode [ 50.628052][ T5567] batadv_slave_1: left promiscuous mode [ 51.274153][ T5582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'. [ 52.912650][ T39] audit: type=1400 audit(1729160724.104:184): avc: denied { read } for pid=5612 comm="syz.3.52" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.921197][ T39] audit: type=1400 audit(1729160724.104:185): avc: denied { open } for pid=5612 comm="syz.3.52" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.928937][ T39] audit: type=1400 audit(1729160724.124:186): avc: denied { ioctl } for pid=5612 comm="syz.3.52" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.937124][ T39] audit: type=1400 audit(1729160724.124:187): avc: denied { write } for pid=5612 comm="syz.3.52" name="vmci" dev="devtmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.187075][ T39] audit: type=1400 audit(1729160724.384:188): avc: denied { read } for pid=4814 comm="acpid" name="mouse." dev="devtmpfs" ino=2385 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 53.192781][ T39] audit: type=1400 audit(1729160724.384:189): avc: denied { open } for pid=4814 comm="acpid" path="/dev/input/mouse." dev="devtmpfs" ino=2385 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 53.198862][ T39] audit: type=1400 audit(1729160724.384:190): avc: denied { ioctl } for pid=4814 comm="acpid" path="/dev/input/mouse." dev="devtmpfs" ino=2385 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 53.429225][ T39] audit: type=1400 audit(1729160724.624:191): avc: denied { append } for pid=5622 comm="syz.1.56" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 53.431248][ T5621] batadv_slave_1: entered promiscuous mode [ 53.535693][ T39] audit: type=1400 audit(1729160724.724:192): avc: denied { name_bind } for pid=5622 comm="syz.1.56" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 53.797221][ T5630] program syz.2.57 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.922713][ T5631] mmap: syz.2.58 (5631): VmData 37597184 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 53.966960][ T5620] batadv_slave_1: left promiscuous mode [ 54.180657][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 54.180703][ T39] audit: type=1400 audit(1729160725.374:202): avc: denied { write } for pid=5638 comm="syz.3.61" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 54.228248][ T5639] FAULT_INJECTION: forcing a failure. [ 54.228248][ T5639] name failslab, interval 1, probability 0, space 0, times 1 [ 54.231531][ T5639] CPU: 0 UID: 0 PID: 5639 Comm: syz.3.61 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 54.234293][ T5639] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.237114][ T5639] Call Trace: [ 54.237992][ T5639] [ 54.238779][ T5639] dump_stack_lvl+0x16c/0x1f0 [ 54.240040][ T5639] should_fail_ex+0x497/0x5b0 [ 54.241284][ T5639] ? fs_reclaim_acquire+0xae/0x150 [ 54.242831][ T5639] should_failslab+0xc2/0x120 [ 54.244085][ T5639] __kmalloc_noprof+0xcb/0x400 [ 54.245353][ T5639] tomoyo_encode2+0x100/0x3e0 [ 54.246619][ T5639] tomoyo_encode+0x29/0x50 [ 54.247837][ T5639] tomoyo_realpath_from_path+0x19d/0x720 [ 54.249324][ T5639] ? tomoyo_path_number_perm+0x232/0x590 [ 54.250798][ T5639] tomoyo_path_number_perm+0x245/0x590 [ 54.252239][ T5639] ? tomoyo_path_number_perm+0x232/0x590 [ 54.253742][ T5639] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 54.255325][ T5639] ? trace_lock_acquire+0x14a/0x1d0 [ 54.256755][ T5639] ? lock_acquire+0x2f/0xb0 [ 54.257955][ T5639] ? __fget_files+0x40/0x3f0 [ 54.259188][ T5639] ? __fget_files+0x244/0x3f0 [ 54.260445][ T5639] security_file_ioctl+0x9b/0x240 [ 54.261774][ T5639] __x64_sys_ioctl+0xbb/0x220 [ 54.263022][ T5639] do_syscall_64+0xcd/0x250 [ 54.264299][ T5639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.265855][ T5639] RIP: 0033:0x7fe4d137dff9 [ 54.267033][ T5639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.272348][ T5639] RSP: 002b:00007fe4d2146038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.274537][ T5639] RAX: ffffffffffffffda RBX: 00007fe4d1535f80 RCX: 00007fe4d137dff9 [ 54.276757][ T5639] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 54.279300][ T5639] RBP: 00007fe4d2146090 R08: 0000000000000000 R09: 0000000000000000 [ 54.281402][ T5639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.283485][ T5639] R13: 0000000000000000 R14: 00007fe4d1535f80 R15: 00007ffc5ab92868 [ 54.285580][ T5639] [ 54.286860][ T5639] ERROR: Out of memory at tomoyo_realpath_from_path. [ 54.400776][ T39] audit: type=1400 audit(1729160725.594:203): avc: denied { read } for pid=5643 comm="syz.1.62" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 54.407391][ T39] audit: type=1400 audit(1729160725.594:204): avc: denied { open } for pid=5643 comm="syz.1.62" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 54.643649][ T5649] loop9: detected capacity change from 0 to 6 [ 54.649443][ T5649] loop9: [POWERTEC] p1 [ 54.651434][ T5649] loop9: p1 start 2717908992 is beyond EOD, truncated [ 54.742052][ T5651] ptrace attach of "/syz-executor exec"[5337] was attempted by "/syz-executor exec"[5651] [ 54.986106][ T5649] loop9: [POWERTEC] p1 [ 54.987380][ T5649] loop9: p1 start 2717908992 is beyond EOD, truncated [ 55.033464][ T5654] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 55.036644][ T5654] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 55.233659][ T5643] ALSA: mixer_oss: invalid OSS volume '' [ 55.500355][ T39] audit: type=1400 audit(1729160726.694:205): avc: denied { ioctl } for pid=5655 comm="syz.3.65" path="socket:[6836]" dev="sockfs" ino=6836 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.509613][ T39] audit: type=1400 audit(1729160726.694:206): avc: denied { read write } for pid=5655 comm="syz.3.65" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 55.519462][ T39] audit: type=1400 audit(1729160726.694:207): avc: denied { open } for pid=5655 comm="syz.3.65" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 55.528737][ T39] audit: type=1400 audit(1729160726.704:208): avc: denied { ioctl } for pid=5655 comm="syz.3.65" path="socket:[8684]" dev="sockfs" ino=8684 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.785692][ T5392] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 55.863795][ T39] audit: type=1400 audit(1729160727.054:209): avc: denied { ioctl } for pid=5657 comm="syz.0.67" path="socket:[8714]" dev="sockfs" ino=8714 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.948728][ T5664] hfs: can't find a HFS filesystem on dev nullb0 [ 55.987952][ T39] audit: type=1400 audit(1729160727.134:210): avc: denied { nlmsg_read } for pid=5660 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 55.993422][ T39] audit: type=1326 audit(1729160727.134:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5660 comm="syz.1.66" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a477dff9 code=0x7ffc0000 [ 56.146324][ T5666] overlay: ./file0 is not a directory [ 56.325272][ T5677] raw_sendmsg: syz.1.71 forgot to set AF_INET. Fix it! [ 56.505664][ T5392] usb 8-1: Invalid ep0 maxpacket: 64 [ 56.635588][ T5392] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 56.785715][ T5392] usb 8-1: Invalid ep0 maxpacket: 64 [ 56.788018][ T5392] usb usb8-port1: attempt power cycle [ 57.135618][ T5392] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 57.156808][ T5392] usb 8-1: Invalid ep0 maxpacket: 64 [ 57.285657][ T5392] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 57.307458][ T5392] usb 8-1: Invalid ep0 maxpacket: 64 [ 57.309508][ T5392] usb usb8-port1: unable to enumerate USB device [ 57.471150][ T5689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.74'. [ 57.474098][ T5690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.74'. [ 57.662904][ T5698] overlayfs: missing 'lowerdir' [ 58.570602][ T5715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 58.599480][ T5711] netlink: 'syz.1.80': attribute type 10 has an invalid length. [ 58.601918][ T5711] netlink: 40 bytes leftover after parsing attributes in process `syz.1.80'. [ 58.605554][ T5711] batman_adv: batadv0: Adding interface: vlan1 [ 58.607324][ T5711] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.613655][ T5711] batman_adv: batadv0: Interface activated: vlan1 [ 58.932938][ T5721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.83'. [ 59.610724][ T25] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 59.641718][ T5743] Illegal XDP return value 1041530880 on prog (id 34) dev syz_tun, expect packet loss! [ 59.658644][ T39] kauditd_printk_skb: 61 callbacks suppressed [ 59.658654][ T39] audit: type=1400 audit(1729160730.854:273): avc: denied { ioctl } for pid=5742 comm="syz.3.87" path="socket:[9390]" dev="sockfs" ino=9390 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.668854][ T39] audit: type=1400 audit(1729160730.864:274): avc: denied { bind } for pid=5742 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.755894][ T25] usb 5-1: Invalid ep0 maxpacket: 64 [ 59.792958][ T5745] ptrace attach of "/syz-executor exec"[5331] was attempted by "/syz-executor exec"[5745] [ 59.898370][ T25] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 60.065663][ T25] usb 5-1: Invalid ep0 maxpacket: 64 [ 60.068055][ T25] usb usb5-port1: attempt power cycle [ 60.100784][ T5748] batadv_slave_1: entered promiscuous mode [ 60.110991][ T5747] batadv_slave_1: left promiscuous mode [ 60.172405][ T5750] batadv_slave_1: entered promiscuous mode [ 60.179081][ T5749] batadv_slave_1: left promiscuous mode [ 60.226942][ T5752] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 60.228966][ T5752] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 60.231963][ T5752] vhci_hcd vhci_hcd.0: Device attached [ 60.445626][ T25] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 60.475670][ T5392] usb 15-1: new low-speed USB device number 2 using vhci_hcd [ 60.478241][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 60.486282][ T25] usb 5-1: Invalid ep0 maxpacket: 64 [ 60.636443][ T25] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 60.666131][ T25] usb 5-1: Invalid ep0 maxpacket: 64 [ 60.668320][ T25] usb usb5-port1: unable to enumerate USB device [ 60.905991][ T39] audit: type=1400 audit(1729160732.104:275): avc: denied { sqpoll } for pid=5759 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.168858][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 61.171334][ T9] usb 6-1: New USB device found, idVendor=0af0, idProduct=7201, bcdDevice=ad.95 [ 61.173660][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.178515][ T9] usb 6-1: config 0 descriptor?? [ 61.292907][ T5766] netlink: 'syz.2.94': attribute type 4 has an invalid length. [ 61.302808][ T39] audit: type=1400 audit(1729160732.494:276): avc: denied { bind } for pid=5765 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.349966][ T39] audit: type=1400 audit(1729160732.544:277): avc: denied { ioctl } for pid=5767 comm="syz.2.95" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10527 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 61.389511][ T5753] usbip_core: unknown command [ 61.390874][ T5753] vhci_hcd: unknown pdu 251658240 [ 61.392208][ T5753] usbip_core: unknown command [ 61.394528][ T5390] usb 6-1: USB disconnect, device number 2 [ 61.395645][ T1178] vhci_hcd: stop threads [ 61.398355][ T1178] vhci_hcd: release socket [ 61.400970][ T1178] vhci_hcd: disconnect device [ 61.652107][ T5775] @: renamed from vlan0 (while UP) [ 61.660040][ T39] audit: type=1400 audit(1729160732.854:278): avc: denied { view } for pid=5771 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 61.666455][ T39] audit: type=1400 audit(1729160732.854:279): avc: denied { execute } for pid=5771 comm="syz.3.96" name="file0" dev="tmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.673783][ T39] audit: type=1400 audit(1729160732.854:280): avc: denied { execute_no_trans } for pid=5771 comm="syz.3.96" path="/22/file0" dev="tmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.281080][ T39] audit: type=1326 audit(1729160733.474:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.2.97" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1857dff9 code=0x7ffc0000 [ 62.285309][ T5778] hfs: can't find a HFS filesystem on dev nullb0 [ 62.287360][ T39] audit: type=1326 audit(1729160733.474:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.2.97" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1857dff9 code=0x7ffc0000 [ 62.338217][ T5785] batadv_slave_1: entered promiscuous mode [ 62.345258][ T5784] batadv_slave_1: left promiscuous mode [ 62.396446][ T5788] batadv_slave_1: entered promiscuous mode [ 62.402550][ T5786] batadv_slave_1: left promiscuous mode [ 62.426741][ T5790] mmap: syz.1.99 (5790) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 62.910942][ T5803] FAULT_INJECTION: forcing a failure. [ 62.910942][ T5803] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 62.915535][ T5803] CPU: 1 UID: 0 PID: 5803 Comm: syz.0.103 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 62.919081][ T5803] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.922505][ T5803] Call Trace: [ 62.923630][ T5803] [ 62.924629][ T5803] dump_stack_lvl+0x16c/0x1f0 [ 62.926235][ T5803] should_fail_ex+0x497/0x5b0 [ 62.927748][ T5803] _copy_from_iter+0x2a1/0x1540 [ 62.929332][ T5803] ? __pfx__copy_from_iter+0x10/0x10 [ 62.931017][ T5803] ? __virt_addr_valid+0x1a4/0x590 [ 62.932675][ T5803] ? __virt_addr_valid+0x5e/0x590 [ 62.934369][ T5803] ? __phys_addr_symbol+0x30/0x80 [ 62.936098][ T5803] ? __check_object_size+0x488/0x710 [ 62.937832][ T5803] netlink_sendmsg+0x813/0xd70 [ 62.939335][ T5803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.941130][ T5803] ? __import_iovec+0x1fd/0x6e0 [ 62.942799][ T5803] ____sys_sendmsg+0xaaf/0xc90 [ 62.944426][ T5803] ? copy_msghdr_from_user+0x10b/0x160 [ 62.946226][ T5803] ? __pfx_____sys_sendmsg+0x10/0x10 [ 62.947974][ T5803] ? __pfx___lock_acquire+0x10/0x10 [ 62.949699][ T5803] ___sys_sendmsg+0x135/0x1e0 [ 62.951295][ T5803] ? __pfx____sys_sendmsg+0x10/0x10 [ 62.953072][ T5803] ? lock_acquire+0x2f/0xb0 [ 62.954616][ T5803] ? __fget_files+0x40/0x3f0 [ 62.956229][ T5803] ? fdget+0x176/0x210 [ 62.957630][ T5803] __sys_sendmsg+0x117/0x1f0 [ 62.959364][ T5803] ? __pfx___sys_sendmsg+0x10/0x10 [ 62.961132][ T5803] ? __fget_files+0x244/0x3f0 [ 62.962763][ T5803] do_syscall_64+0xcd/0x250 [ 62.964333][ T5803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.966338][ T5803] RIP: 0033:0x7fe241b7dff9 [ 62.967973][ T5803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.973149][ T5803] RSP: 002b:00007fe2415bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.975336][ T5803] RAX: ffffffffffffffda RBX: 00007fe241d36130 RCX: 00007fe241b7dff9 [ 62.977445][ T5803] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000008 [ 62.979849][ T5803] RBP: 00007fe2415bd090 R08: 0000000000000000 R09: 0000000000000000 [ 62.981895][ T5803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.984022][ T5803] R13: 0000000000000000 R14: 00007fe241d36130 R15: 00007ffe2121d178 [ 62.986185][ T5803] [ 63.464694][ T5811] hfs: can't find a HFS filesystem on dev nullb0 [ 63.513495][ T5815] batadv_slave_1: entered promiscuous mode [ 63.515911][ T5814] batadv_slave_1: left promiscuous mode [ 63.825918][ T8] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 64.015641][ T5371] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 64.055594][ T8] usb 5-1: Invalid ep0 maxpacket: 64 [ 64.175810][ T5371] usb 6-1: Invalid ep0 maxpacket: 64 [ 64.185671][ T8] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 64.305629][ T5371] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 64.335798][ T8] usb 5-1: Invalid ep0 maxpacket: 64 [ 64.343173][ T8] usb usb5-port1: attempt power cycle [ 64.455626][ T5371] usb 6-1: Invalid ep0 maxpacket: 64 [ 64.457609][ T5371] usb usb6-port1: attempt power cycle [ 64.599928][ T5838] batadv_slave_1: entered promiscuous mode [ 64.685671][ T8] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 64.706167][ T8] usb 5-1: Invalid ep0 maxpacket: 64 [ 64.797793][ T5371] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 64.826468][ T5371] usb 6-1: Invalid ep0 maxpacket: 64 [ 64.835658][ T8] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 64.856569][ T8] usb 5-1: Invalid ep0 maxpacket: 64 [ 64.858324][ T8] usb usb5-port1: unable to enumerate USB device [ 64.965651][ T5371] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 64.986079][ T5371] usb 6-1: Invalid ep0 maxpacket: 64 [ 64.987705][ T5371] usb usb6-port1: unable to enumerate USB device [ 65.116790][ T5837] batadv_slave_1: left promiscuous mode [ 65.457325][ T5850] netlink: 'syz.3.122': attribute type 10 has an invalid length. [ 65.460037][ T5850] netlink: 40 bytes leftover after parsing attributes in process `syz.3.122'. [ 65.466704][ T5850] batman_adv: batadv0: Adding interface: vlan1 [ 65.468677][ T5850] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.477722][ T5850] batman_adv: batadv0: Interface activated: vlan1 [ 65.506908][ T39] kauditd_printk_skb: 33 callbacks suppressed [ 65.506918][ T39] audit: type=1400 audit(1729160736.704:315): avc: denied { mount } for pid=5843 comm="syz.2.120" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.565577][ T5392] vhci_hcd: vhci_device speed not set [ 65.630948][ T39] audit: type=1400 audit(1729160736.824:316): avc: denied { read write } for pid=5853 comm="syz.3.123" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 65.646030][ T39] audit: type=1400 audit(1729160736.834:317): avc: denied { open } for pid=5853 comm="syz.3.123" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 66.188145][ T39] audit: type=1400 audit(1729160737.384:318): avc: denied { unmount } for pid=5330 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.213304][ T5868] batadv_slave_1: entered promiscuous mode [ 66.589065][ T5872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.128'. [ 66.606310][ T5872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.610329][ T5872] bond0: (slave bond1): Enslaving as an active interface with an up link [ 66.614893][ T39] audit: type=1400 audit(1729160737.804:319): avc: denied { create } for pid=5871 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.621768][ T39] audit: type=1400 audit(1729160737.804:320): avc: denied { bind } for pid=5871 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.622129][ T5872] bond0: (slave bond1): Releasing backup interface [ 66.731001][ T5867] batadv_slave_1: left promiscuous mode [ 66.788641][ T5879] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.137'. [ 66.796147][ T39] audit: type=1400 audit(1729160737.974:321): avc: denied { bind } for pid=5878 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.801379][ T39] audit: type=1400 audit(1729160737.974:322): avc: denied { setopt } for pid=5878 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.820747][ T39] audit: type=1400 audit(1729160738.014:323): avc: denied { bind } for pid=5878 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 66.823437][ T5879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 66.825875][ T39] audit: type=1400 audit(1729160738.014:324): avc: denied { write } for pid=5878 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 66.872864][ T5877] xt_CT: No such helper "pptp" [ 66.953218][ T5887] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 67.074786][ T5891] Bluetooth: MGMT ver 1.23 [ 67.082019][ T5891] syz.3.133: attempt to access beyond end of device [ 67.082019][ T5891] nbd3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 67.085366][ T5891] VFS: unable to read V7 FS superblock on device nbd3. [ 67.087233][ T5891] VFS: could not find a valid V7 on nbd3. [ 67.135057][ T5888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.131'. [ 67.205586][ T5334] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 67.365622][ T5334] usb 7-1: Using ep0 maxpacket: 16 [ 67.368529][ T5334] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.371516][ T5334] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.374112][ T5334] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 67.376869][ T5334] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 67.379375][ T5334] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 67.382023][ T5334] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 67.386933][ T5334] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.389369][ T5334] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.391415][ T5334] usb 7-1: Product: syz [ 67.392584][ T5334] usb 7-1: Manufacturer: syz [ 67.393912][ T5334] usb 7-1: SerialNumber: syz [ 67.633321][ T5902] batadv_slave_1: entered promiscuous mode [ 67.695792][ T5340] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 67.810679][ T5334] cdc_ncm 7-1:1.0: bind() failure [ 67.817550][ T5334] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 67.820269][ T5334] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 67.824518][ T5334] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 67.829462][ T5334] usb 7-1: USB disconnect, device number 2 [ 67.855565][ T5340] usb 8-1: Invalid ep0 maxpacket: 64 [ 67.985606][ T5340] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 68.085610][ T830] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 68.136506][ T5340] usb 8-1: Invalid ep0 maxpacket: 64 [ 68.138510][ T5340] usb usb8-port1: attempt power cycle [ 68.151758][ T5901] batadv_slave_1: left promiscuous mode [ 68.255609][ T830] usb 5-1: Invalid ep0 maxpacket: 64 [ 68.285212][ T5909] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.385623][ T830] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 68.401075][ T5911] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.141'. [ 68.419891][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'. [ 68.475627][ T5340] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 68.499003][ T5340] usb 8-1: Invalid ep0 maxpacket: 64 [ 68.555696][ T830] usb 5-1: Invalid ep0 maxpacket: 64 [ 68.557458][ T830] usb usb5-port1: attempt power cycle [ 68.625591][ T5340] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 68.646016][ T5340] usb 8-1: Invalid ep0 maxpacket: 64 [ 68.647973][ T5340] usb usb8-port1: unable to enumerate USB device [ 68.897737][ T830] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 68.916104][ T830] usb 5-1: Invalid ep0 maxpacket: 64 [ 69.046328][ T830] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 69.066397][ T830] usb 5-1: Invalid ep0 maxpacket: 64 [ 69.067968][ T830] usb usb5-port1: unable to enumerate USB device [ 70.087050][ T5934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.147'. [ 70.629976][ T5939] batadv_slave_1: entered promiscuous mode [ 70.642013][ T5940] ptrace attach of "/syz-executor exec"[5337] was attempted by "/syz-executor exec"[5940] [ 71.018602][ T1379] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.020527][ T1379] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.147244][ T5938] batadv_slave_1: left promiscuous mode [ 71.581465][ T5958] ptrace attach of "/syz-executor exec"[5337] was attempted by ""[5958] [ 71.584795][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 71.584804][ T39] audit: type=1400 audit(1729160742.774:333): avc: denied { read write } for pid=5957 comm="syz.3.154" dev="sockfs" ino=9657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.592885][ T5958] 9pnet_fd: Insufficient options for proto=fd [ 71.715624][ T39] audit: type=1400 audit(1729160742.904:334): avc: denied { read } for pid=5968 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 71.915616][ T73] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 72.125654][ T73] usb 8-1: Invalid ep0 maxpacket: 64 [ 72.213721][ T5979] virtio-fs: tag <(null)> not found [ 72.255633][ T73] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 72.415599][ T73] usb 8-1: Invalid ep0 maxpacket: 64 [ 72.417609][ T73] usb usb8-port1: attempt power cycle [ 72.618093][ T5981] batadv_slave_1: entered promiscuous mode [ 72.755606][ T73] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 72.786199][ T73] usb 8-1: Invalid ep0 maxpacket: 64 [ 72.806938][ T5985] ptrace attach of "/syz-executor exec"[5331] was attempted by "/syz-executor exec"[5985] [ 72.915614][ T73] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 72.937376][ T73] usb 8-1: Invalid ep0 maxpacket: 64 [ 72.939732][ T73] usb usb8-port1: unable to enumerate USB device [ 72.993880][ T39] audit: type=1804 audit(1729160744.184:335): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.162" name="/newroot/40/bus/bus" dev="overlay" ino=261 res=1 errno=0 [ 73.141335][ T5980] batadv_slave_1: left promiscuous mode [ 73.843252][ T6008] FAULT_INJECTION: forcing a failure. [ 73.843252][ T6008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.847861][ T6008] CPU: 0 UID: 0 PID: 6008 Comm: syz.2.166 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 73.851314][ T6008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.854981][ T6008] Call Trace: [ 73.856173][ T6008] [ 73.857300][ T6008] dump_stack_lvl+0x16c/0x1f0 [ 73.858947][ T6008] should_fail_ex+0x497/0x5b0 [ 73.860595][ T6008] _copy_to_user+0x30/0xc0 [ 73.862154][ T6008] simple_read_from_buffer+0xd0/0x160 [ 73.864005][ T6008] proc_fail_nth_read+0x198/0x270 [ 73.865741][ T6008] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 73.867653][ T6008] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 73.869577][ T6008] vfs_read+0x1ce/0xbd0 [ 73.871036][ T6008] ? __fget_files+0x23a/0x3f0 [ 73.872743][ T6008] ? fdget_pos+0x24c/0x360 [ 73.874302][ T6008] ? __pfx_lock_release+0x10/0x10 [ 73.876072][ T6008] ? trace_lock_acquire+0x14a/0x1d0 [ 73.877868][ T6008] ? __pfx_vfs_read+0x10/0x10 [ 73.879515][ T6008] ? __pfx___mutex_lock+0x10/0x10 [ 73.881287][ T6008] ? __fget_files+0x244/0x3f0 [ 73.882934][ T6008] ksys_read+0x12f/0x260 [ 73.884423][ T6008] ? __pfx_ksys_read+0x10/0x10 [ 73.886088][ T6008] ? __secure_computing+0x273/0x3f0 [ 73.887897][ T6008] do_syscall_64+0xcd/0x250 [ 73.889510][ T6008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.891530][ T6008] RIP: 0033:0x7f4f1857ca3c [ 73.893050][ T6008] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 73.899583][ T6008] RSP: 002b:00007f4f17fff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 73.902434][ T6008] RAX: ffffffffffffffda RBX: 00007f4f18736058 RCX: 00007f4f1857ca3c [ 73.905206][ T6008] RDX: 000000000000000f RSI: 00007f4f17fff0a0 RDI: 0000000000000003 [ 73.907916][ T6008] RBP: 00007f4f17fff090 R08: 0000000000000000 R09: 0000000000000000 [ 73.910618][ T6008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.913251][ T6008] R13: 0000000000000000 R14: 00007f4f18736058 R15: 00007fff3e9471d8 [ 73.915932][ T6008] SYZFAIL: ShmemBuilder: too large output offset size=1818845542 consumed=1948279909 (errno 11: Resource temporarily unavailable) [ 74.373956][ T45] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.456094][ T45] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.513895][ T45] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.597314][ T45] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.682106][ T45] bridge_slave_1: left allmulticast mode [ 74.684311][ T45] bridge_slave_1: left promiscuous mode [ 74.687395][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.693929][ T45] bridge_slave_0: left allmulticast mode [ 74.698681][ T45] bridge_slave_0: left promiscuous mode [ 74.700912][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.894997][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.899087][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.902375][ T45] bond0 (unregistering): Released all slaves [ 74.917194][ T39] audit: type=1400 audit(1729160746.114:336): avc: denied { search } for pid=5049 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.922739][ T39] audit: type=1400 audit(1729160746.114:337): avc: denied { read } for pid=5049 comm="dhcpcd" name="n71" dev="tmpfs" ino=2298 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.928494][ T39] audit: type=1400 audit(1729160746.114:338): avc: denied { open } for pid=5049 comm="dhcpcd" path="/run/udev/data/n71" dev="tmpfs" ino=2298 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.934351][ T39] audit: type=1400 audit(1729160746.114:339): avc: denied { getattr } for pid=5049 comm="dhcpcd" path="/run/udev/data/n71" dev="tmpfs" ino=2298 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.957289][ T39] audit: type=1400 audit(1729160746.154:340): avc: denied { read } for pid=6013 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.963178][ T39] audit: type=1400 audit(1729160746.154:341): avc: denied { open } for pid=6013 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.969856][ T39] audit: type=1400 audit(1729160746.154:342): avc: denied { getattr } for pid=6013 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.229852][ T45] hsr_slave_0: left promiscuous mode [ 75.232222][ T45] hsr_slave_1: left promiscuous mode [ 75.234383][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.237265][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.240837][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.243453][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.248392][ T45] batman_adv: batadv0: Interface deactivated: vlan1 [ 75.250747][ T45] batman_adv: batadv0: Removing interface: vlan1 [ 75.265417][ T45] veth1_macvtap: left promiscuous mode [ 75.267490][ T45] veth0_macvtap: left promiscuous mode [ 75.268983][ T45] veth1_vlan: left promiscuous mode [ 75.270434][ T45] veth0_vlan: left promiscuous mode [ 75.728754][ T45] team0 (unregistering): Port device team_slave_1 removed [ 75.783012][ T45] team0 (unregistering): Port device team_slave_0 removed [ 76.139724][ T30] cfg80211: failed to load regulatory.db [ 76.642937][ T45] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.717914][ T45] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.785695][ T45] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.846546][ T45] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.960454][ T45] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.050135][ T45] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.127012][ T45] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.214903][ T45] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.297984][ T45] bridge_slave_1: left allmulticast mode [ 77.299489][ T45] bridge_slave_1: left promiscuous mode [ 77.301010][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.304978][ T45] bridge_slave_0: left allmulticast mode [ 77.307531][ T45] bridge_slave_0: left promiscuous mode [ 77.309065][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.313142][ T45] bridge_slave_1: left allmulticast mode [ 77.314621][ T45] bridge_slave_1: left promiscuous mode [ 77.316573][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.326782][ T45] bridge_slave_0: left allmulticast mode [ 77.328282][ T45] bridge_slave_0: left promiscuous mode [ 77.330111][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.656158][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.660318][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.664146][ T45] bond0 (unregistering): Released all slaves [ 77.717814][ T45] bond1 (unregistering): Released all slaves [ 77.770635][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.774194][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.777629][ T45] bond0 (unregistering): Released all slaves [ 78.196425][ T45] hsr_slave_0: left promiscuous mode [ 78.204842][ T45] hsr_slave_1: left promiscuous mode [ 78.207266][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.209255][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.211499][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.213481][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.218004][ T45] hsr_slave_0: left promiscuous mode [ 78.226782][ T45] hsr_slave_1: left promiscuous mode [ 78.228809][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.230750][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.234239][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.236925][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.239276][ T45] batman_adv: batadv0: Interface deactivated: vlan1 [ 78.241024][ T45] batman_adv: batadv0: Removing interface: vlan1 [ 78.264921][ T45] veth1_macvtap: left promiscuous mode [ 78.266688][ T45] veth0_macvtap: left promiscuous mode [ 78.268217][ T45] veth1_vlan: left promiscuous mode [ 78.269559][ T45] veth0_vlan: left promiscuous mode [ 78.272850][ T45] veth1_macvtap: left promiscuous mode [ 78.274391][ T45] veth0_macvtap: left promiscuous mode [ 78.276559][ T45] veth1_vlan: left promiscuous mode [ 78.278172][ T45] veth0_vlan: left promiscuous mode [ 78.799469][ T45] team0 (unregistering): Port device team_slave_1 removed [ 78.850316][ T45] team0 (unregistering): Port device team_slave_0 removed [ 79.685293][ T45] team0 (unregistering): Port device team_slave_1 removed [ 79.744553][ T45] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 10:25:45 Registers: info registers vcpu 0 CPU#0 RAX=00000000001caa8b RBX=0000000000000000 RCX=ffffffff8b225149 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1a800 RBP=fffffbfff1bd2af8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c7025 R10=ffff88806a63812b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de957c0 R14=ffffffff905f49c8 R15=0000000000000000 RIP=ffffffff8b22652f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000004d0ce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffffe Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f17fff060 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f185f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f185f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f185f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f185f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f185f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f185f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73697664616d2065 74616c75706f7000 757a253d657a6973 2070253d72747000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 564c534144480540 51444950554a5500 505f0018405f4c56 0555001857515500 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 00000000000000f8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=1ffff92000959f1c RCX=ffffc90004acf920 RDX=1ffff110046b215a RSI=ffffffff8b6cd340 RDI=ffffffff8bd1a800 RBP=c90c5592e1ebe11d RSP=ffffc90004acf8d0 R8 =0000000000000000 R9 =fffffbfff20be939 R10=ffffffff905f49cf R11=0000000000000000 R12=0000000000000003 R13=0000000000000004 R14=ffff888023590ad8 R15=ffff888023590000 RIP=ffffffff816aa89c RFL=00000057 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f649fab5280 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4f187052d8 CR3=000000002805a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=00000000100001ff Opmask02=000000007fffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558fc823dc80 0000558fc821f740 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc773faae0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc773fa080 0000003000000010 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00716d2f32706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f646e756f732f00 682e6c6974752f64 65726168732f6372 732f2e2e2f2e2e00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00716d2f32706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000007900 737265646c6f682f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558fc821fcd0 0000558fc82498d0 0000000000000031 00006c61636f6c2d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a2433273f397b27 697a787c69303b7e 69305f474f5b647c 69303a2433273f39 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 383a3a263d383a3a 263c383a3a263f38 3a3a263e383a3a26 39383a3a2638383a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f45454d41490054 454e5f4449692e6e 6524004452414f42 4e4f5f454d414e5f ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4445414d41450000 454e4c4449452e41 002400444c414442 004144454141424e ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 2 CPU#2 RAX=0000000000127b4b RBX=0000000000000002 RCX=ffffffff8b225149 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1a800 RBP=ffffed1003b5c000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d507025 R10=ffff88806a83812b R11=0000000000000000 R12=0000000000000002 R13=ffff88801dae0000 R14=ffffffff905f49c8 R15=0000000000000000 RIP=ffffffff8b22652f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555c84c4c8e8 CR3=0000000023846000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59a47f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59a47f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59a47f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59a47f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59a47f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59a47f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59a490b488 00007f59a490b480 00007f59a490b478 00007f59a490b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59a546d100 00007f59a490b440 00007f59a4900004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59a490b498 00007f59a490b490 00007f59a490b488 00007f59a490b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b9dc5ccfd98f976c e1055fc2f0e5b71e 106e4c4556dc95ec e904f5b4294b1144 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5fb33ed1ffe1dfda 2b90783d0c9b1b1d e84a2a18ca03a8f6 5add946ecaebc724 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 53de2ce855f6bf6a 02d2c765d89f4d4f a6c1d761e6c97225 62c5c2c6f9696e54 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f71a92f4a8076ff9 4a2b9533b9dc5ccf d98f976ce1055fc2 f0e5b71e106e4c45 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 56dc95ece904f5b4 294b1144a3d5ad33 12e6063b3831ecb1 b08ea58b8f92e1e8 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffea0000d02080 RCX=ffffffff81dc6730 RDX=ffff888030612440 RSI=0000000000000000 RDI=0000000000000007 RBP=ffffea0000d02080 RSP=ffffc90003e3f820 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffea0000d02048 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff818d83ab RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbfe3867d60 CR3=000000000df7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=000000000000000f Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbfe2d0b6a3 00007fbfe2d0b6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff0dcf74b0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558584f4a0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555585857d03 0000555585857950 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555585857d18 0000555585857d10 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c62616c696176 616e7520796c6972 61726f706d657420 656372756f736552 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0210000214509a12 800418828398d408 0001000012080606 0113b600000a0700 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0101000014080610 8c10000108000601 04c603ffffffff04 1881c5a8fe080001 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000140806060123 b60210000214509a 12800418828398d4 0800010000120806 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 060113b600000a07 00080012b0030008 0012a80300080012 a0031cf010001290 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300100012800318 8004000000100806 04124f9000342f64 6601ffffffffffff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000