last executing test programs: 3.380589203s ago: executing program 3 (id=29): r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0xc8d03) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)={@fallback=r1, r1, 0x2f}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000080)={&(0x7f0000000040)=[r3, r3, r3], 0x0, 0x3}) 3.310853776s ago: executing program 3 (id=32): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000040)="8d4c2b0f5e8b14e55feb3003cb0d94eb39a7a8e040fd598a578078893136a184714863c55a1d9a4861d3ccd599d0cf2d11784d65e63c45c87a7d088741f2ebc932", 0x41, 0x0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) 3.230593412s ago: executing program 3 (id=33): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[], 0x1df) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x12, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "28ce30ec8d08598948224ad54af2c11d875397bdb22d0000b420a1a93c5291ecc6f19e01177d3d458dd49928610000002000", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 3.178148371s ago: executing program 3 (id=35): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) r1 = gettid() fcntl$lock(r0, 0x6, &(0x7f00000031c0)={0x1, 0x1, 0x0, 0x2, r1}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x80000001, 0xa2c, 0x0, 0x0, 0xc, 0x0, 0xffffffff, 0x3000007}}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476b76e4a4e0b75db47c327ab5b7233ac3507e16db41df04709094056af33a6db1e301a74db81f27f6aa6a8ca9d22a565ff96d46e88fa99b284c26c46494072fc2e47da240c71"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x2, 0x3) 3.115678857s ago: executing program 3 (id=38): fanotify_init(0x4000, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_io_uring_setup(0x6b72, &(0x7f0000000280)={0x0, 0x9d09, 0x4, 0x2, 0xd6, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000340)) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000040cb06a78100000080000109022400ff0f00000009fb3aa92fbbc5dbdab5631a1d29b065f2000009030000000921000000012229002c7344060000000002"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') write$yama_ptrace_scope(r4, &(0x7f0000000040)='3\x00', 0x2) ioctl$HIDIOCGPHYS(r3, 0x80404812, &(0x7f0000000240)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r1, 0x10000, {0x0, 0x0, 0x0, 0x2eed, 0x7fff, 0x0, 0x0, 0x0, 0xc, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a6a4274f040000000001000010e200"}}) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000006, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000040)={0x10, 0x5, 0x1, "1101000b0d1400000100b64c0015005c4b7c1500000000000300", 0x38303553}) writev(r5, &(0x7f0000000300)=[{&(0x7f00000000c0)='\b', 0x1}], 0x1) 1.377259319s ago: executing program 2 (id=89): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b0100fc00e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) 570.624895ms ago: executing program 1 (id=105): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4091) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}]]}, 0x24}}, 0x0) (fail_nth: 7) 480.992071ms ago: executing program 2 (id=107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000007042f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 480.8251ms ago: executing program 1 (id=108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000040030000000026000000080007000000000018000180140002007465616d5f736c6176655f30"], 0x34}}, 0x4004080) 419.845855ms ago: executing program 1 (id=110): syz_open_dev$tty20(0xc, 0x4, 0x0) 369.602388ms ago: executing program 1 (id=111): unlink(0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500140601fe800000f5ffffff00000000000000bbfe8000000000290000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) 369.322598ms ago: executing program 2 (id=112): r0 = syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x40}}, 0x40080c0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB="00001e0000000000"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x389180, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x700}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xd) ioctl$TIOCSTI(r4, 0x5412, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x801, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880e) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000280)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000001c0)="66baa100b800100000ef2e0fc72a2e2e65f30f7ec4640f01cac4e10d58b8000800000f20d835080000000f22d8b98b0a00000f32b8010000000f01d9c4c1e4556800f4", 0x43}], 0x1, 0x28, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x40080) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @ioapic={0x2, 0x8a67, 0x800, 0x800, 0x0, [{0x7, 0x2, 0x6}, {0xfd, 0xa0, 0x0, '\x00', 0x2}, {0x6, 0x5, 0x6, '\x00', 0xd}, {0x7, 0x1, 0x40, '\x00', 0xa7}, {0x0, 0x25, 0x1c, '\x00', 0x4}, {0x2, 0x16, 0xa0, '\x00', 0x3}, {0x7, 0x8, 0x0, '\x00', 0x1}, {0x7, 0xb4, 0x0, '\x00', 0x7}, {0x9, 0x19, 0x8, '\x00', 0x6}, {0x6, 0x6, 0x1a, '\x00', 0x9}, {0x7, 0x8, 0x3, '\x00', 0x7}, {0x9c, 0x5, 0xfe}, {0x3, 0x9, 0x4, '\x00', 0xb}, {0x5, 0x2, 0x81, '\x00', 0x2c}, {0x8c, 0x9, 0xe6, '\x00', 0x2}, {0x3, 0x5, 0xd0, '\x00', 0xf}, {0x80, 0x1, 0x3, '\x00', 0x4}, {0x5, 0x4, 0x98}, {0x9f, 0x0, 0x5, '\x00', 0x5}, {0x8, 0x5, 0xfa, '\x00', 0x5}, {0x2, 0xd, 0x4, '\x00', 0x2}, {0x9, 0x4, 0x3, '\x00', 0x9b}, {0x40, 0xc0, 0x0, '\x00', 0x6}, {0x1, 0xf5, 0x8, '\x00', 0x1}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(r0, &(0x7f0000000240)='./file0\x00', 0x101) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) read$alg(r7, &(0x7f0000000780)=""/64, 0x40) syz_open_dev$video4linux(&(0x7f0000000000), 0x4, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x111040, 0x0) 280.805957ms ago: executing program 0 (id=113): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)="2a6496b1b6c1d1bec17a5fd9eb1ecafc4136bdbad8fb1a3576919f808bc39106cf1858783295a13b70cec32877059db6c40d282cb7b9b21be7b60b45c32aa55c453f9c6c702812492a04a070a349f9bbb5ec2f929ef9cd5ecb2b5c07c87ca21013f2a904df4f76fd15e0e73d9f6dc49ccce903670c14ceef8697fadd8ee8f1b9b75f176cc2c5f658fb37ad0cdfcab46ccdc692a053acc781e56fefca457789cb3d71", 0xa2}, {&(0x7f0000000700)="7cb7017d959e797073c86b08edd3475f675bfaae2fd4c682550f9555aa2c7402b69a25", 0x23}], 0x2, &(0x7f0000000500)}}, {{&(0x7f0000000540)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000e80)=[{&(0x7f00000005c0)="37f9635b95ac8b14e39ffd03920684651fee53dd77a80b1fd39b0d45f702b1da", 0x20}, {&(0x7f0000000980)="a1892c46fb5bca5a01cd5074d6bb66a76c1063330ee8cd8b38c1915887dc1872d5fc879a0f5613d617d03be4ac3e5f356dccfd9764e34ad598d76e0a9be1a911b702eb7fb76aae79979e755ee29ea05df3daf27959168a1ddbb17100fef9d5faf5ed98618e901e2fda00fad472382d534d0927b6dd2b5a0e5460115c48183070b90408766a7ed47e6ba94c69cdaad82eb5dff0c593ed110830c53ebb24723bb3e63afb3085", 0xa5}, {0x0}, {0x0}, {0x0}], 0x5}}, {{&(0x7f0000000f80)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000002240)=[{&(0x7f0000000fc0)="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", 0x24a}, {0x0}], 0x2, &(0x7f00000022c0)=ANY=[@ANYBLOB="80000000000000000000000007000000440c8b53640101020000007f4428b6c000000004"], 0x80}}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002380)="9c1a42de39af97367b6e129a48f9cfdf8425eb410ba4475cdfc579b8e24b8ee6fc17b00c555ee47ec0b204ded39c9d2a2a1f61abc78d7b17892e9d86a0b77e124de93519d575b1a31556c7120fac8ca9026ed944856f01d92336927151d26eb4ead1748619a6c34fd8aec63ffdee779736ffc706f68a5ee7b34c8f40f492898d267275c459b8b0629926b46d3fb657d0ddaeb12bde29dc0802b5f37e9c4595feeeaf8f4658eb62e5d250836d95bfdede4680d710e5be02b8310c206ee7790853222c5ca171ed15f83ef328a30a8c92c8ed8834a8ed", 0xd5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002540)="e13f46404aeaae459ca69868d9f1a2bc0fb8fe", 0x13}, {&(0x7f0000002580)="cf270866a1179b3f2e07b668e9d0e8de607d4732ba5b608f79c2a017c8295b2bf8da38dbdbea64b242136c4e03dc733353fd41070435798f0db58322bf87fa5ef608a33fd80ddc2c1e3a5beca2957b87eab9ee6bac144cbce23a01384c67cbba57793d3b718ec5c0ef43da6895334c69c0e892dcd2d61f4dadb31489ec4ebfdfc1bbfd8a2811d0c716e3465b2b9b57270f6eaf487047", 0x96}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000004200)=ANY=[@ANYBLOB="140000000000000000000000020000007f0100000000000014000000000000000000000002000000fdffffff000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="0a0101000a01010000000000ac000000000000000000000007000000441800000000000200010000ffffffdc000000040000000644344c41ac1414bb000001037f00000100000100ac1414bb00000005ac1414aa00000001ac1414bb00000009640101000000002b940400008631000000010709eeb86e780007cb0602060e8b8998791c85f543b8f9cbe30012599d493abe11250e6b27105480d5815f94040100830b82000000010a010100830bce000000000a010101000000000014000000000000000000000002000000080000000000000014000000000000000000000002000000c34f00000000000011"], 0x148}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002b40)="fb4c853e925e07a645134ee5305cf9f393db9a0ffc661d954749", 0x1a}], 0x1}}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000002d00)="b87744", 0x3}, {0x0}, {&(0x7f0000002e40)}], 0x3, &(0x7f0000003ec0)}}], 0x8, 0xc0) 280.616765ms ago: executing program 0 (id=114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x68, 0x3, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000040}, 0x2000051) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xd9, 0x2}, @can={0x1d, r1}, @tipc=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0xd, 0x0, 0x0, 0x0, 0x714, &(0x7f0000000040)='syzkaller0\x00', 0xfffffffffffffffe, 0xb9d9, 0x9}) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x7, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x0) 221.1263ms ago: executing program 1 (id=115): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0xf0, 0x20048054}, 0x0) 220.825394ms ago: executing program 0 (id=116): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x2f, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000a00)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(r1, 0x0) r2 = syz_io_uring_setup(0x48a9, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x334}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r1, 0x0}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) r5 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$PTP_ENABLE_PPS(r5, 0x40043d04, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4}, 0x94) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1400) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000380)={0x0, 0x5}, &(0x7f00000003c0)=0x8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$can_bcm(r7, &(0x7f0000000300)={&(0x7f0000000180)={0x1d, r10}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="053066000000000008006050ed", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="f0b88b1201000000030000e004010000a14cd5b6e0076a77"], 0x48}, 0x1, 0x0, 0x0, 0x8801}, 0x40000) 220.541583ms ago: executing program 1 (id=117): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b0100fd00e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) 120.806834ms ago: executing program 0 (id=118): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4091) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}]]}, 0x24}}, 0x0) (fail_nth: 8) 120.555923ms ago: executing program 2 (id=119): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="14000000250001000000fe00f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 59.202784ms ago: executing program 0 (id=120): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file1\x00') chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000380)='./file1\x00', r0, &(0x7f00000003c0)='./bus\x00', 0x400) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) fallocate(r1, 0x46, 0xbf27, 0xd28) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) (async) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) (async) rmdir(&(0x7f0000000240)='./file1\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') (async) linkat(r0, &(0x7f0000000380)='./file1\x00', r0, &(0x7f00000003c0)='./bus\x00', 0x400) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) (async) fallocate(r1, 0x46, 0xbf27, 0xd28) (async) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') (async) 58.986316ms ago: executing program 3 (id=121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000008042f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 878.839µs ago: executing program 0 (id=122): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058ff0b, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, &(0x7f00000000c0)={0x2, 0x1, 0xa2, 0xd1e, 0x401ff, 0x17f}) ioctl$IOCTL_VMCI_VERSION(r2, 0x79f, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x14) getpid() (async) syz_pidfd_open(r0, 0x0) (async) ioctl$VIDIOC_QBUF(r1, 0xc058ff0b, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, &(0x7f00000000c0)={0x2, 0x1, 0xa2, 0xd1e, 0x401ff, 0x17f}) (async) ioctl$IOCTL_VMCI_VERSION(r2, 0x79f, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x14) (async) 106.663µs ago: executing program 2 (id=123): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)="2a6496b1b6c1d1bec17a5fd9eb1ecafc4136bdbad8fb1a3576919f808bc39106cf1858783295a13b70cec32877059db6c40d282cb7b9b21be7b60b45c32aa55c453f9c6c702812492a04a070a349f9bbb5ec2f929ef9cd5ecb2b5c07c87ca21013f2a904df4f76fd15e0e73d9f6dc49ccce903670c14ceef8697fadd8ee8f1b9b75f176cc2c5f658fb37ad0cdfcab46ccdc692a053acc781e56fefca457789cb3d71", 0xa2}, {&(0x7f0000000700)="7cb7017d959e797073c86b08edd3475f675bfaae2fd4c682550f9555aa2c7402b69a25", 0x23}], 0x2, &(0x7f0000000500)}}, {{&(0x7f0000000540)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000e80)=[{&(0x7f00000005c0)="37f9635b95ac8b14e39ffd03920684651fee53dd77a80b1fd39b0d45f702b1da", 0x20}, {&(0x7f0000000980)="a1892c46fb5bca5a01cd5074d6bb66a76c1063330ee8cd8b38c1915887dc1872d5fc879a0f5613d617d03be4ac3e5f356dccfd9764e34ad598d76e0a9be1a911b702eb7fb76aae79979e755ee29ea05df3daf27959168a1ddbb17100fef9d5faf5ed98618e901e2fda00fad472382d534d0927b6dd2b5a0e5460115c48183070b90408766a7ed47e6ba94c69cdaad82eb5dff0c593ed110830c53ebb24723bb3e63afb3085", 0xa5}, {0x0}, {0x0}, {0x0}], 0x5}}, {{&(0x7f0000000f80)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000002240)=[{&(0x7f0000000fc0)="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", 0x24a}, {0x0}], 0x2, &(0x7f00000022c0)=ANY=[@ANYBLOB="80000000000000000000000007000000440c8b53640101020000007f4428b6c000000004"], 0x80}}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002380)="9c1a42de39af97367b6e129a48f9cfdf8425eb410ba4475cdfc579b8e24b8ee6fc17b00c555ee47ec0b204ded39c9d2a2a1f61abc78d7b17892e9d86a0b77e124de93519d575b1a31556c7120fac8ca9026ed944856f01d92336927151d26eb4ead1748619a6c34fd8aec63ffdee779736ffc706f68a5ee7b34c8f40f492898d267275c459b8b0629926b46d3fb657d0ddaeb12bde29dc0802b5f37e9c4595feeeaf8f4658eb62e5d250836d95bfdede4680d710e5be02b8310c206ee7790853222c5ca171ed15f83ef328a30a8c92c8ed8834a8ed", 0xd5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002540)="e13f46404aeaae459ca69868d9f1a2bc0fb8fe", 0x13}, {&(0x7f0000002580)="cf270866a1179b3f2e07b668e9d0e8de607d4732ba5b608f79c2a017c8295b2bf8da38dbdbea64b242136c4e03dc733353fd41070435798f0db58322bf87fa5ef608a33fd80ddc2c0c3a5beca2957b87eab9ee6bac144cbce23a01384c67cbba57793d3b718ec5c0ef43da6895334c69c0e892dcd2d61f4dadb31489ec4ebfdfc1bbfd8a2811d0c716e3465b2b9b57270f6eaf487047", 0x96}, {0x0, 0x240}, {0x0}, {0x0}], 0x5, &(0x7f0000004200)=ANY=[@ANYBLOB="140000000000000000000000020000007f0100000000000014000000000000000000000002000000fdffffff000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="0a0101000a01010000000000ac000000000000000000000007000000441800000000000200010000ffffffdc000000040000000644344c41ac1414bb000001037f00000100000100ac1414bb00000005ac1414aa00000001ac1414bb00000009640101000000002b940400008631000000010709eeb86e780007cb0602060e8b8998791c85f543b8f9cbe30012599d493abe11250e6b27105480d5815f94040100830b82000000010a010100830bce000000000a010101000000000014000000000000000000000002000000080000000000000014000000000000000000000002000000c34f00000000000011"], 0x148}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002b40)="fb4c853e925e07a645134ee5305cf9f393db9a0ffc661d954749", 0x1a}], 0x1}}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000002d00)="b87744", 0x3}, {0x0}, {&(0x7f0000002e40)}], 0x3, &(0x7f0000003ec0)}}], 0x8, 0xc0) 0s ago: executing program 2 (id=124): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) (async) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) syz_emit_ethernet(0x9a, &(0x7f0000000200)=ANY=[@ANYBLOB="83c0db84847daaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e204e20006490780200000001000000e8ff0f00628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74882ed6741e7632daeaec0c95f2ad1cd68fb3d9fd3efe8e4ea8b5ec7448ddd6a3215990e1b896120966af96b22cf049f0"], 0x0) kernel console output (not intermixed with test programs): [ 44.078038][ T40] audit: type=1400 audit(1751038221.202:61): avc: denied { siginh } for pid=5898 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:44643' (ED25519) to the list of known hosts. [ 45.001663][ T40] audit: type=1400 audit(1751038222.152:62): avc: denied { name_bind } for pid=5919 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.017471][ T40] audit: type=1400 audit(1751038222.172:63): avc: denied { write } for pid=5920 comm="sh" path="pipe:[1996]" dev="pipefs" ino=1996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.032139][ T40] audit: type=1400 audit(1751038222.182:64): avc: denied { execute } for pid=5920 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.042125][ T40] audit: type=1400 audit(1751038222.182:65): avc: denied { execute_no_trans } for pid=5920 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.931074][ T40] audit: type=1400 audit(1751038224.082:66): avc: denied { mounton } for pid=5920 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 46.937661][ T5920] cgroup: Unknown subsys name 'net' [ 47.058001][ T5920] cgroup: Unknown subsys name 'cpuset' [ 47.064828][ T5920] cgroup: Unknown subsys name 'rlimit' [ 47.304539][ T5927] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.027339][ T5920] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.038811][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 51.038821][ T40] audit: type=1400 audit(1751038228.192:80): avc: denied { execmem } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.271892][ T40] audit: type=1400 audit(1751038228.422:81): avc: denied { create } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.288115][ T40] audit: type=1400 audit(1751038228.422:82): avc: denied { read write } for pid=5935 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.298397][ T40] audit: type=1400 audit(1751038228.422:83): avc: denied { open } for pid=5935 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.307386][ T40] audit: type=1400 audit(1751038228.432:84): avc: denied { ioctl } for pid=5935 comm="syz-executor" path="socket:[6415]" dev="sockfs" ino=6415 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.320330][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.323381][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.326263][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.329755][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.333133][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.338065][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.341434][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.344825][ T5293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.348672][ T40] audit: type=1400 audit(1751038228.502:85): avc: denied { read } for pid=5935 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.350545][ T5293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.357979][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.359241][ T40] audit: type=1400 audit(1751038228.502:86): avc: denied { open } for pid=5935 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.359265][ T40] audit: type=1400 audit(1751038228.502:87): avc: denied { mounton } for pid=5935 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.360558][ T5293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.364062][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.385420][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.389228][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.390983][ T5293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.392950][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.396500][ T5293] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.401356][ T5293] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.404314][ T5942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.408706][ T5942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.539247][ T40] audit: type=1400 audit(1751038228.692:88): avc: denied { module_request } for pid=5935 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 51.590323][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 51.730240][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 51.759975][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.762884][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.765892][ T5935] bridge_slave_0: entered allmulticast mode [ 51.770544][ T5935] bridge_slave_0: entered promiscuous mode [ 51.777610][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.780325][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.783459][ T5935] bridge_slave_1: entered allmulticast mode [ 51.789637][ T5935] bridge_slave_1: entered promiscuous mode [ 51.866963][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.900901][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.922702][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 51.959880][ T5935] team0: Port device team_slave_0 added [ 51.999125][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 52.022874][ T5935] team0: Port device team_slave_1 added [ 52.053522][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.057526][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.060634][ T5939] bridge_slave_0: entered allmulticast mode [ 52.064679][ T5939] bridge_slave_0: entered promiscuous mode [ 52.124791][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.127643][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.130506][ T5939] bridge_slave_1: entered allmulticast mode [ 52.134359][ T5939] bridge_slave_1: entered promiscuous mode [ 52.162362][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.165411][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.176312][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.183100][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.186213][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.195293][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.304584][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.320140][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.323827][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.326990][ T5946] bridge_slave_0: entered allmulticast mode [ 52.330683][ T5946] bridge_slave_0: entered promiscuous mode [ 52.335415][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.338448][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.341683][ T5946] bridge_slave_1: entered allmulticast mode [ 52.345865][ T5946] bridge_slave_1: entered promiscuous mode [ 52.351597][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.464429][ T5939] team0: Port device team_slave_0 added [ 52.536835][ T5939] team0: Port device team_slave_1 added [ 52.541556][ T5935] hsr_slave_0: entered promiscuous mode [ 52.544539][ T5935] hsr_slave_1: entered promiscuous mode [ 52.547260][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.549836][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.552154][ T5943] bridge_slave_0: entered allmulticast mode [ 52.555154][ T5943] bridge_slave_0: entered promiscuous mode [ 52.559768][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.595531][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.598834][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.601760][ T5943] bridge_slave_1: entered allmulticast mode [ 52.605497][ T5943] bridge_slave_1: entered promiscuous mode [ 52.609515][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.612796][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.615202][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.623167][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.629011][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.631261][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.639277][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.727470][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.732122][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.750602][ T5946] team0: Port device team_slave_0 added [ 52.786294][ T5946] team0: Port device team_slave_1 added [ 52.816871][ T5943] team0: Port device team_slave_0 added [ 52.869741][ T5943] team0: Port device team_slave_1 added [ 52.889155][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.891397][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.899522][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.907630][ T5939] hsr_slave_0: entered promiscuous mode [ 52.910796][ T5939] hsr_slave_1: entered promiscuous mode [ 52.913529][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.918651][ T5939] Cannot create hsr debugfs directory [ 52.947324][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.950237][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.960903][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.980144][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.982359][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.990667][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.999695][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.001824][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.009659][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.098859][ T5946] hsr_slave_0: entered promiscuous mode [ 53.102173][ T5946] hsr_slave_1: entered promiscuous mode [ 53.105413][ T5946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.108652][ T5946] Cannot create hsr debugfs directory [ 53.205965][ T5943] hsr_slave_0: entered promiscuous mode [ 53.208912][ T5943] hsr_slave_1: entered promiscuous mode [ 53.211772][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.215672][ T5943] Cannot create hsr debugfs directory [ 53.336609][ T5935] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.364425][ T5935] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.371071][ T5935] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.378850][ T5935] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.424566][ T63] Bluetooth: hci0: command tx timeout [ 53.424572][ T5938] Bluetooth: hci2: command tx timeout [ 53.424653][ T5293] Bluetooth: hci1: command tx timeout [ 53.427048][ T5942] Bluetooth: hci3: command tx timeout [ 53.475247][ T5939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.479515][ T5939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.492855][ T5939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.498312][ T5939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.537829][ T5943] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.542716][ T5943] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.552544][ T5943] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.571842][ T5943] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.644535][ T5946] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.656189][ T5946] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.662595][ T5946] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.691945][ T5946] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.736259][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.751406][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.776902][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.784944][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.800107][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.803108][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.810788][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.813730][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.819467][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.831513][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.834434][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.845276][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.847912][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.881646][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.891830][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.894075][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.915431][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.927954][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.930192][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.945640][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.963939][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.966558][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.988336][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.990865][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.046992][ T40] audit: type=1400 audit(1751038231.202:89): avc: denied { sys_module } for pid=5939 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.129843][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.147329][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.183620][ T5939] veth0_vlan: entered promiscuous mode [ 54.191023][ T5943] veth0_vlan: entered promiscuous mode [ 54.198733][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.205382][ T5943] veth1_vlan: entered promiscuous mode [ 54.209919][ T5939] veth1_vlan: entered promiscuous mode [ 54.232905][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.241825][ T5939] veth0_macvtap: entered promiscuous mode [ 54.255524][ T5939] veth1_macvtap: entered promiscuous mode [ 54.270703][ T5943] veth0_macvtap: entered promiscuous mode [ 54.277323][ T5935] veth0_vlan: entered promiscuous mode [ 54.283514][ T5943] veth1_macvtap: entered promiscuous mode [ 54.292932][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.302177][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.307117][ T5935] veth1_vlan: entered promiscuous mode [ 54.317280][ T5939] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.320376][ T5939] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.323053][ T5939] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.326060][ T5939] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.336565][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.364262][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.367153][ T5946] veth0_vlan: entered promiscuous mode [ 54.385527][ T5943] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.388265][ T5943] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.391008][ T5943] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.393861][ T5943] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.403185][ T5946] veth1_vlan: entered promiscuous mode [ 54.405889][ T5935] veth0_macvtap: entered promiscuous mode [ 54.418052][ T5935] veth1_macvtap: entered promiscuous mode [ 54.430854][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.434622][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.434788][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.452252][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.458965][ T5935] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.462130][ T5935] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.466098][ T5935] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.468840][ T5935] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.500544][ T5946] veth0_macvtap: entered promiscuous mode [ 54.507649][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.510407][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.510541][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.515512][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.515731][ T5946] veth1_macvtap: entered promiscuous mode [ 54.554996][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.558149][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.567318][ T5939] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.572123][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.572381][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.580962][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.598134][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.606163][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.608057][ T5946] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.612345][ T5946] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.617366][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.617702][ T5946] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.623864][ T5946] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.703119][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.709297][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.722849][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.726337][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.766356][ T6024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 54.803847][ T6033] syz.0.6 uses obsolete (PF_INET,SOCK_PACKET) [ 54.810694][ T6035] IPv4: Oversized IP packet from 127.202.26.0 [ 54.844784][ T6038] xt_hashlimit: size too large, truncated to 1048576 [ 54.861835][ T6042] Cannot find set identified by id 0 to match [ 54.867405][ T6038] syz.2.8: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 54.872795][ T6038] CPU: 3 UID: 0 PID: 6038 Comm: syz.2.8 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 54.872810][ T6038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.872817][ T6038] Call Trace: [ 54.872820][ T6038] [ 54.872824][ T6038] dump_stack_lvl+0x16c/0x1f0 [ 54.872843][ T6038] warn_alloc+0x248/0x3a0 [ 54.872858][ T6038] ? __pfx_warn_alloc+0x10/0x10 [ 54.872877][ T6038] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 54.872891][ T6038] ? __vmalloc_node_noprof+0xad/0xf0 [ 54.872904][ T6038] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 54.872920][ T6038] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 54.872937][ T6038] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 54.872949][ T6038] ? __alloc_pages_noprof+0xb/0x1b0 [ 54.872962][ T6038] ? ___kmalloc_large_node+0x84/0x1e0 [ 54.872975][ T6038] __kvmalloc_node_noprof+0x30a/0x620 [ 54.872988][ T6038] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 54.873001][ T6038] ? net_generic+0xea/0x2a0 [ 54.873012][ T6038] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 54.873028][ T6038] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 54.873041][ T6038] hashlimit_mt_check_common+0x8bb/0x1460 [ 54.873057][ T6038] hashlimit_mt_check+0x71/0x90 [ 54.873069][ T6038] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 54.873087][ T6038] xt_check_match+0x283/0xa50 [ 54.873100][ T6038] ? schedule+0x1b2/0x3a0 [ 54.873114][ T6038] ? __pfx_xt_check_match+0x10/0x10 [ 54.873128][ T6038] ? xt_find_target+0x1f2/0x290 [ 54.873141][ T6038] ? xt_find_match+0x1f6/0x290 [ 54.873155][ T6038] find_check_entry.constprop.0+0x34e/0xa20 [ 54.873172][ T6038] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 54.873188][ T6038] ? kasan_quarantine_put+0x10a/0x240 [ 54.873202][ T6038] ? lockdep_hardirqs_on+0x7c/0x110 [ 54.873218][ T6038] ? kfree+0x2b4/0x4d0 [ 54.873228][ T6038] ? translate_table+0xc0e/0x17b0 [ 54.873242][ T6038] translate_table+0xd0b/0x17b0 [ 54.873260][ T6038] ? __pfx_translate_table+0x10/0x10 [ 54.873271][ T6038] ? xt_alloc_table_info+0x3e/0xa0 [ 54.873286][ T6038] do_ip6t_set_ctl+0x570/0xb00 [ 54.873299][ T6038] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 54.873312][ T6038] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 54.873325][ T6038] ? avc_has_perm+0x196/0x1c0 [ 54.873336][ T6038] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 54.873358][ T6038] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 54.873370][ T6038] nf_setsockopt+0x8d/0xf0 [ 54.873382][ T6038] ipv6_setsockopt+0x135/0x170 [ 54.873396][ T6038] rawv6_setsockopt+0xc2/0x510 [ 54.873406][ T6038] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 54.873417][ T6038] ? selinux_socket_setsockopt+0x6a/0x80 [ 54.873429][ T6038] ? sock_common_setsockopt+0x2e/0xf0 [ 54.873440][ T6038] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 54.873450][ T6038] do_sock_setsockopt+0x221/0x470 [ 54.873460][ T6038] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 54.873477][ T6038] __sys_setsockopt+0x1a0/0x230 [ 54.873493][ T6038] __x64_sys_setsockopt+0xbd/0x160 [ 54.873506][ T6038] ? do_syscall_64+0x91/0x4c0 [ 54.873522][ T6038] ? lockdep_hardirqs_on+0x7c/0x110 [ 54.873536][ T6038] do_syscall_64+0xcd/0x4c0 [ 54.873552][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.873563][ T6038] RIP: 0033:0x7f8a4cf8e929 [ 54.873572][ T6038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.873582][ T6038] RSP: 002b:00007f8a4dd78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 54.873591][ T6038] RAX: ffffffffffffffda RBX: 00007f8a4d1b5fa0 RCX: 00007f8a4cf8e929 [ 54.873598][ T6038] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 54.873604][ T6038] RBP: 00007f8a4d010b39 R08: 0000000000000588 R09: 0000000000000000 [ 54.873610][ T6038] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 54.873616][ T6038] R13: 0000000000000000 R14: 00007f8a4d1b5fa0 R15: 00007ffd64922278 [ 54.873628][ T6038] [ 54.873632][ T6038] Mem-Info: [ 54.996649][ T6038] active_anon:7622 inactive_anon:0 isolated_anon:0 [ 54.996649][ T6038] active_file:1013 inactive_file:40573 isolated_file:0 [ 54.996649][ T6038] unevictable:1768 dirty:1579 writeback:0 [ 54.996649][ T6038] slab_reclaimable:11269 slab_unreclaimable:66779 [ 54.996649][ T6038] mapped:24098 shmem:2397 pagetables:1217 [ 54.996649][ T6038] sec_pagetables:301 bounce:0 [ 54.996649][ T6038] kernel_misc_reclaimable:0 [ 54.996649][ T6038] free:472686 free_pcp:24847 free_cma:0 [ 55.012356][ T6038] Node 0 active_anon:30612kB inactive_anon:0kB active_file:4052kB inactive_file:162092kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:96392kB dirty:6280kB writeback:0kB shmem:6052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12304kB pagetables:4512kB sec_pagetables:1204kB all_unreclaimable? no Balloon:0kB [ 55.023226][ T6038] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:36kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 55.033784][ T6038] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 55.042204][ T6038] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 55.045387][ T6038] Node 0 DMA32 free:262900kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30860kB inactive_anon:0kB active_file:4052kB inactive_file:162092kB unevictable:3536kB writepending:6280kB present:2080628kB managed:1264684kB mlocked:0kB bounce:0kB free_pcp:87908kB local_pcp:11244kB free_cma:0kB [ 55.056765][ T6038] lowmem_reserve[]: 0 0 0 0 0 [ 55.058269][ T6038] Node 1 Normal free:1611308kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB writepending:36kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:12724kB local_pcp:3128kB free_cma:0kB [ 55.068222][ T6038] lowmem_reserve[]: 0 0 0 0 0 [ 55.069717][ T6038] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 55.073372][ T6038] Node 0 DMA32: 217*4kB (UM) 182*8kB (ME) 93*16kB (UME) 134*32kB (UME) 112*64kB (UM) 63*128kB (UM) 8*256kB (UME) 4*512kB (M) 2*1024kB (M) 2*2048kB (ME) 56*4096kB (M) = 262948kB [ 55.079400][ T6038] Node 1 Normal: 2*4kB (E) 10*8kB (ME) 11*16kB (UME) 7*32kB (ME) 9*64kB (UME) 11*128kB (UME) 2*256kB (U) 3*512kB (M) 1*1024kB (U) 2*2048kB (ME) 391*4096kB (M) = 1611176kB [ 55.084876][ T6038] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 55.088142][ T6038] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 55.091172][ T6038] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 55.094830][ T6038] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 55.098418][ T6038] 43982 total pagecache pages [ 55.100193][ T6038] 0 pages in swap cache [ 55.102097][ T6038] Free swap = 124996kB [ 55.104128][ T6038] Total swap = 124996kB [ 55.105669][ T6038] 1048443 pages RAM [ 55.107115][ T6038] 0 pages HighMem/MovableOnly [ 55.108741][ T6038] 282943 pages reserved [ 55.110060][ T6038] 0 pages cma reserved [ 55.277740][ T6059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 55.352662][ T6062] kvm: user requested TSC rate below hardware speed [ 55.383753][ T3227] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 55.500238][ T6069] netlink: 'syz.1.18': attribute type 10 has an invalid length. [ 55.504517][ T5942] Bluetooth: hci3: command tx timeout [ 55.504549][ T5938] Bluetooth: hci0: command tx timeout [ 55.504892][ T63] Bluetooth: hci2: command tx timeout [ 55.504924][ T63] Bluetooth: hci1: command tx timeout [ 55.518937][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 55.536581][ T3227] usb 8-1: config 0 has no interfaces? [ 55.539939][ T3227] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 55.543308][ T3227] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 55.546767][ T3227] usb 8-1: Product: syz [ 55.549174][ T3227] usb 8-1: Manufacturer: syz [ 55.554277][ T3227] usb 8-1: config 0 descriptor?? [ 55.764122][ T6051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12'. [ 55.770385][ T5972] usb 8-1: USB disconnect, device number 2 [ 55.966904][ T6083] Cannot find set identified by id 0 to match [ 56.026723][ T6085] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 56.059428][ T40] kauditd_printk_skb: 85 callbacks suppressed [ 56.059444][ T40] audit: type=1400 audit(1751038233.212:175): avc: denied { watch watch_reads } for pid=6084 comm="syz.0.24" path="pipe:[8880]" dev="pipefs" ino=8880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 56.345795][ T40] audit: type=1400 audit(1751038233.502:176): avc: denied { prog_run } for pid=6087 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.347660][ T6088] Bluetooth: MGMT ver 1.23 [ 56.353070][ T40] audit: type=1400 audit(1751038233.502:177): avc: denied { bind } for pid=6087 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.353107][ T40] audit: type=1400 audit(1751038233.502:178): avc: denied { write } for pid=6087 comm="syz.3.25" path="socket:[6093]" dev="sockfs" ino=6093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.418000][ T40] audit: type=1400 audit(1751038233.572:179): avc: denied { create } for pid=6091 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.426568][ T40] audit: type=1400 audit(1751038233.572:180): avc: denied { write } for pid=6091 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.436926][ T40] audit: type=1400 audit(1751038233.572:181): avc: denied { read } for pid=6091 comm="syz.1.26" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 56.446247][ T40] audit: type=1400 audit(1751038233.572:182): avc: denied { open } for pid=6091 comm="syz.1.26" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 56.454283][ T40] audit: type=1400 audit(1751038233.572:183): avc: denied { remount } for pid=6091 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.460619][ T40] audit: type=1400 audit(1751038233.582:184): avc: denied { unlink } for pid=6091 comm="syz.1.26" name="#1" dev="tmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 56.552832][ T6097] program syz.2.28 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.695675][ T6109] loop6: detected capacity change from 0 to 7 [ 56.700785][ T5945] Dev loop6: unable to read RDB block 7 [ 56.702767][ T5945] loop6: AHDI p3 p4 [ 56.705252][ T5945] loop6: partition table partially beyond EOD, truncated [ 56.707972][ T5945] loop6: p3 start 1869967406 is beyond EOD, truncated [ 56.712724][ T6109] Dev loop6: unable to read RDB block 7 [ 56.714687][ T6109] loop6: AHDI p3 p4 [ 56.715998][ T6109] loop6: partition table partially beyond EOD, truncated [ 56.719128][ T6109] loop6: p3 start 1869967406 is beyond EOD, truncated [ 56.758821][ T6113] binder: 6111:6113 ioctl c0306201 200000000640 returned -22 [ 56.871708][ T6124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 56.888067][ T6126] netlink: 'syz.0.40': attribute type 3 has an invalid length. [ 56.891186][ T6126] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 56.899256][ T6126] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 56.998758][ T6136] Cannot find set identified by id 0 to match [ 57.027430][ T6138] loop6: detected capacity change from 0 to 7 [ 57.031480][ T6138] Dev loop6: unable to read RDB block 7 [ 57.034302][ T6138] loop6: AHDI p3 p4 [ 57.036417][ T6138] loop6: partition table partially beyond EOD, truncated [ 57.040594][ T6138] loop6: p3 start 1869967406 is beyond EOD, truncated [ 57.073832][ T3227] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 57.091161][ T6147] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.226453][ T3227] usb 8-1: config 15 has too many interfaces: 255, using maximum allowed: 32 [ 57.229066][ T3227] usb 8-1: config 15 has an invalid descriptor of length 181, skipping remainder of the config [ 57.232151][ T3227] usb 8-1: config 15 has 0 interfaces, different from the descriptor's value: 255 [ 57.241699][ T3227] usb 8-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 57.245091][ T3227] usb 8-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 57.247803][ T3227] usb 8-1: Product: syz [ 57.324063][ T6172] loop6: detected capacity change from 0 to 7 [ 57.327412][ T6172] Dev loop6: unable to read RDB block 7 [ 57.329252][ T6172] loop6: AHDI p3 p4 [ 57.330815][ T6172] loop6: partition table partially beyond EOD, truncated [ 57.333607][ T6172] loop6: p3 start 1869967406 is beyond EOD, truncated [ 57.545817][ T6188] xt_hashlimit: size too large, truncated to 1048576 [ 57.583920][ T5938] Bluetooth: hci3: command tx timeout [ 57.583946][ T5942] Bluetooth: hci0: command tx timeout [ 57.584056][ T5293] Bluetooth: hci1: command tx timeout [ 57.584079][ T5293] Bluetooth: hci2: command tx timeout [ 57.654600][ T6194] IPv4: Oversized IP packet from 127.202.26.0 [ 57.739551][ T6198] Cannot find set identified by id 0 to match [ 57.940757][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 57.969669][ T6216] FAULT_INJECTION: forcing a failure. [ 57.969669][ T6216] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 57.974102][ T6216] CPU: 3 UID: 0 PID: 6216 Comm: syz.2.73 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 57.974117][ T6216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.974123][ T6216] Call Trace: [ 57.974127][ T6216] [ 57.974131][ T6216] dump_stack_lvl+0x16c/0x1f0 [ 57.974151][ T6216] should_fail_ex+0x512/0x640 [ 57.974167][ T6216] _copy_from_iter+0x29f/0x16f0 [ 57.974183][ T6216] ? __alloc_skb+0x200/0x380 [ 57.974198][ T6216] ? __pfx__copy_from_iter+0x10/0x10 [ 57.974213][ T6216] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 57.974228][ T6216] netlink_sendmsg+0x829/0xdd0 [ 57.974240][ T6216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 57.974255][ T6216] ____sys_sendmsg+0xa95/0xc70 [ 57.974266][ T6216] ? copy_msghdr_from_user+0x10a/0x160 [ 57.974281][ T6216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 57.974297][ T6216] ___sys_sendmsg+0x134/0x1d0 [ 57.974312][ T6216] ? __pfx____sys_sendmsg+0x10/0x10 [ 57.974326][ T6216] ? __lock_acquire+0x622/0x1c90 [ 57.974361][ T6216] __sys_sendmsg+0x16d/0x220 [ 57.974375][ T6216] ? __pfx___sys_sendmsg+0x10/0x10 [ 57.974394][ T6216] ? fput+0x70/0xf0 [ 57.974412][ T6216] do_syscall_64+0xcd/0x4c0 [ 57.974429][ T6216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.974440][ T6216] RIP: 0033:0x7f8a4cf8e929 [ 57.974449][ T6216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.974459][ T6216] RSP: 002b:00007f8a4dd78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.974469][ T6216] RAX: ffffffffffffffda RBX: 00007f8a4d1b5fa0 RCX: 00007f8a4cf8e929 [ 57.974475][ T6216] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 57.974481][ T6216] RBP: 00007f8a4dd78090 R08: 0000000000000000 R09: 0000000000000000 [ 57.974487][ T6216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.974493][ T6216] R13: 0000000000000000 R14: 00007f8a4d1b5fa0 R15: 00007ffd64922278 [ 57.974505][ T6216] [ 58.076209][ T6218] xt_hashlimit: size too large, truncated to 1048576 [ 58.165437][ T6225] loop6: detected capacity change from 0 to 63 [ 58.169453][ T6225] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.173071][ T6225] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.176551][ T6227] Cannot find set identified by id 0 to match [ 58.178367][ T6225] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.181754][ T6225] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.184329][ T6225] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.186748][ T6225] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.189183][ T6225] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.191660][ T6225] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.194209][ T6225] ldm_validate_partition_table(): Disk read failed. [ 58.196256][ T6225] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.203759][ T6225] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.206294][ T6225] Dev loop6: unable to read RDB block 0 [ 58.208200][ T6225] loop6: unable to read partition table [ 58.217909][ T6225] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 58.361756][ T6246] FAULT_INJECTION: forcing a failure. [ 58.361756][ T6246] name failslab, interval 1, probability 0, space 0, times 1 [ 58.367812][ T6246] CPU: 0 UID: 0 PID: 6246 Comm: syz.1.82 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 58.367834][ T6246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.367843][ T6246] Call Trace: [ 58.367849][ T6246] [ 58.367855][ T6246] dump_stack_lvl+0x16c/0x1f0 [ 58.367881][ T6246] should_fail_ex+0x512/0x640 [ 58.367918][ T6246] should_failslab+0xc2/0x120 [ 58.367942][ T6246] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 58.367964][ T6246] ? skb_clone+0x190/0x3f0 [ 58.367989][ T6246] skb_clone+0x190/0x3f0 [ 58.368008][ T6246] netlink_deliver_tap+0xabd/0xd30 [ 58.368039][ T6246] netlink_unicast+0x5df/0x7f0 [ 58.368058][ T6246] ? __pfx_netlink_unicast+0x10/0x10 [ 58.368081][ T6246] netlink_sendmsg+0x8d1/0xdd0 [ 58.368095][ T6246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.368125][ T6246] ____sys_sendmsg+0xa95/0xc70 [ 58.368158][ T6246] ? copy_msghdr_from_user+0x10a/0x160 [ 58.368180][ T6246] ? __pfx_____sys_sendmsg+0x10/0x10 [ 58.368206][ T6246] ___sys_sendmsg+0x134/0x1d0 [ 58.368226][ T6246] ? __pfx____sys_sendmsg+0x10/0x10 [ 58.368245][ T6246] ? __lock_acquire+0x622/0x1c90 [ 58.368299][ T6246] __sys_sendmsg+0x16d/0x220 [ 58.368316][ T6246] ? __pfx___sys_sendmsg+0x10/0x10 [ 58.368353][ T6246] do_syscall_64+0xcd/0x4c0 [ 58.368377][ T6246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.368393][ T6246] RIP: 0033:0x7fb70738e929 [ 58.368406][ T6246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.368417][ T6246] RSP: 002b:00007fb7082d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.368433][ T6246] RAX: ffffffffffffffda RBX: 00007fb7075b5fa0 RCX: 00007fb70738e929 [ 58.368443][ T6246] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 58.368452][ T6246] RBP: 00007fb7082d0090 R08: 0000000000000000 R09: 0000000000000000 [ 58.368461][ T6246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.368470][ T6246] R13: 0000000000000000 R14: 00007fb7075b5fa0 R15: 00007ffd14dec678 [ 58.368492][ T6246] [ 58.462660][ T6248] Bluetooth: MGMT ver 1.23 [ 58.715868][ T6270] futex_wake_op: syz.0.91 tries to shift op by 32; fix this program [ 58.851242][ T6277] FAULT_INJECTION: forcing a failure. [ 58.851242][ T6277] name failslab, interval 1, probability 0, space 0, times 0 [ 58.857928][ T6277] CPU: 0 UID: 0 PID: 6277 Comm: syz.0.94 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 58.857950][ T6277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.857960][ T6277] Call Trace: [ 58.857966][ T6277] [ 58.857972][ T6277] dump_stack_lvl+0x16c/0x1f0 [ 58.858000][ T6277] should_fail_ex+0x512/0x640 [ 58.858021][ T6277] ? __kmalloc_noprof+0xbf/0x510 [ 58.858038][ T6277] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 58.858059][ T6277] should_failslab+0xc2/0x120 [ 58.858082][ T6277] __kmalloc_noprof+0xd2/0x510 [ 58.858103][ T6277] ? avc_has_perm_noaudit+0x149/0x3b0 [ 58.858120][ T6277] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 58.858149][ T6277] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 58.858167][ T6277] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 58.858194][ T6277] ? bpf_lsm_capable+0x9/0x10 [ 58.858210][ T6277] ? security_capable+0x7e/0x260 [ 58.858228][ T6277] ? ns_capable+0xd7/0x110 [ 58.858247][ T6277] genl_rcv_msg+0x55c/0x800 [ 58.858266][ T6277] ? __pfx_genl_rcv_msg+0x10/0x10 [ 58.858282][ T6277] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 58.858304][ T6277] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 58.858324][ T6277] ? __pfx_nl80211_post_doit+0x10/0x10 [ 58.858355][ T6277] netlink_rcv_skb+0x155/0x420 [ 58.858371][ T6277] ? __pfx_genl_rcv_msg+0x10/0x10 [ 58.858387][ T6277] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 58.858410][ T6277] ? netlink_deliver_tap+0x1ae/0xd30 [ 58.858439][ T6277] genl_rcv+0x28/0x40 [ 58.858454][ T6277] netlink_unicast+0x53d/0x7f0 [ 58.858472][ T6277] ? __pfx_netlink_unicast+0x10/0x10 [ 58.858495][ T6277] netlink_sendmsg+0x8d1/0xdd0 [ 58.858510][ T6277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.858535][ T6277] ____sys_sendmsg+0xa95/0xc70 [ 58.858553][ T6277] ? copy_msghdr_from_user+0x10a/0x160 [ 58.858575][ T6277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 58.858602][ T6277] ___sys_sendmsg+0x134/0x1d0 [ 58.858622][ T6277] ? __pfx____sys_sendmsg+0x10/0x10 [ 58.858640][ T6277] ? __lock_acquire+0x622/0x1c90 [ 58.858692][ T6277] __sys_sendmsg+0x16d/0x220 [ 58.858713][ T6277] ? __pfx___sys_sendmsg+0x10/0x10 [ 58.858739][ T6277] ? fput+0x70/0xf0 [ 58.858764][ T6277] do_syscall_64+0xcd/0x4c0 [ 58.858789][ T6277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.858804][ T6277] RIP: 0033:0x7fe53f38e929 [ 58.858817][ T6277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.858855][ T6277] RSP: 002b:00007fe53d1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.858872][ T6277] RAX: ffffffffffffffda RBX: 00007fe53f5b5fa0 RCX: 00007fe53f38e929 [ 58.858882][ T6277] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 58.858892][ T6277] RBP: 00007fe53d1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 58.858901][ T6277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.858910][ T6277] R13: 0000000000000000 R14: 00007fe53f5b5fa0 R15: 00007ffc9117f5d8 [ 58.858933][ T6277] [ 58.980318][ T5343] ldm_validate_partition_table(): Disk read failed. [ 58.982519][ T5343] Dev loop6: unable to read RDB block 0 [ 58.984938][ T5343] loop6: unable to read partition table [ 59.125099][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'. [ 59.159288][ T6293] xt_hashlimit: size too large, truncated to 1048576 [ 59.356947][ T6305] FAULT_INJECTION: forcing a failure. [ 59.356947][ T6305] name failslab, interval 1, probability 0, space 0, times 0 [ 59.361863][ T6305] CPU: 2 UID: 0 PID: 6305 Comm: syz.1.105 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 59.361881][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.361887][ T6305] Call Trace: [ 59.361891][ T6305] [ 59.361895][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 59.361915][ T6305] should_fail_ex+0x512/0x640 [ 59.361929][ T6305] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 59.361945][ T6305] should_failslab+0xc2/0x120 [ 59.361961][ T6305] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 59.361974][ T6305] ? __alloc_skb+0x2b2/0x380 [ 59.361989][ T6305] ? bpf_lsm_capable+0x9/0x10 [ 59.362002][ T6305] __alloc_skb+0x2b2/0x380 [ 59.362015][ T6305] ? __pfx___alloc_skb+0x10/0x10 [ 59.362033][ T6305] ? genl_rcv_msg+0x4c0/0x800 [ 59.362045][ T6305] ? genl_rcv_msg+0x4bb/0x800 [ 59.362060][ T6305] netlink_ack+0x15d/0xb80 [ 59.362074][ T6305] netlink_rcv_skb+0x332/0x420 [ 59.362084][ T6305] ? __pfx_genl_rcv_msg+0x10/0x10 [ 59.362097][ T6305] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 59.362113][ T6305] ? netlink_deliver_tap+0x1ae/0xd30 [ 59.362131][ T6305] genl_rcv+0x28/0x40 [ 59.362142][ T6305] netlink_unicast+0x53d/0x7f0 [ 59.362153][ T6305] ? __pfx_netlink_unicast+0x10/0x10 [ 59.362167][ T6305] netlink_sendmsg+0x8d1/0xdd0 [ 59.362180][ T6305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.362195][ T6305] ____sys_sendmsg+0xa95/0xc70 [ 59.362206][ T6305] ? copy_msghdr_from_user+0x10a/0x160 [ 59.362221][ T6305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 59.362237][ T6305] ___sys_sendmsg+0x134/0x1d0 [ 59.362252][ T6305] ? __pfx____sys_sendmsg+0x10/0x10 [ 59.362266][ T6305] ? __lock_acquire+0x622/0x1c90 [ 59.362299][ T6305] __sys_sendmsg+0x16d/0x220 [ 59.362314][ T6305] ? __pfx___sys_sendmsg+0x10/0x10 [ 59.362333][ T6305] ? fput+0x70/0xf0 [ 59.362351][ T6305] do_syscall_64+0xcd/0x4c0 [ 59.362367][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.362378][ T6305] RIP: 0033:0x7fb70738e929 [ 59.362387][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.362398][ T6305] RSP: 002b:00007fb7082d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.362408][ T6305] RAX: ffffffffffffffda RBX: 00007fb7075b5fa0 RCX: 00007fb70738e929 [ 59.362414][ T6305] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 59.362420][ T6305] RBP: 00007fb7082d0090 R08: 0000000000000000 R09: 0000000000000000 [ 59.362426][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.362432][ T6305] R13: 0000000000000000 R14: 00007fb7075b5fa0 R15: 00007ffd14dec678 [ 59.362444][ T6305] [ 59.495458][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 59.562585][ T6318] xt_hashlimit: size too large, truncated to 1048576 [ 59.666941][ T5942] Bluetooth: hci3: command tx timeout [ 59.666995][ T63] Bluetooth: hci1: command tx timeout [ 59.671129][ T5938] Bluetooth: hci2: command tx timeout [ 59.673981][ T5938] Bluetooth: hci0: command tx timeout [ 59.766107][ T6334] netlink: 6 bytes leftover after parsing attributes in process `syz.0.116'. [ 59.860665][ T5974] usb 8-1: USB disconnect, device number 3 [ 59.893193][ T6342] overlay: ./bus is not a directory [ 59.964250][ T6357] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN NOPTI [ 59.968137][ T6357] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 59.972825][ T6357] CPU: 2 UID: 0 PID: 6357 Comm: syz.2.124 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 59.977017][ T6357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.980737][ T6357] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 59.982365][ T6357] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 1a ea 4d f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 59.983529][ T6363] xt_hashlimit: size too large, truncated to 1048576 [ 59.988259][ T6357] RSP: 0018:ffffc900065afbf0 EFLAGS: 00010293 [ 59.988272][ T6357] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff886e360a [ 59.988279][ T6357] RDX: ffff8880261ca440 RSI: ffffffff886e3656 RDI: 0000000000000005 [ 59.988285][ T6357] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 59.988292][ T6357] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc900065afd88 [ 59.988298][ T6357] R13: ffffc900065afd88 R14: 0000000000000001 R15: ffff88803c1c7400 [ 59.988304][ T6357] FS: 00007f8a4dd576c0(0000) GS:ffff8880d6952000(0000) knlGS:0000000000000000 [ 59.988326][ T6357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.988335][ T6357] CR2: 00007f8a4dd36d58 CR3: 0000000032b9a000 CR4: 0000000000352ef0 [ 59.988341][ T6357] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.988347][ T6357] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.988353][ T6357] Call Trace: [ 59.988358][ T6357] [ 59.988363][ T6357] ? __pfx_bcsp_recv+0x10/0x10 [ 59.988378][ T6357] hci_uart_tty_receive+0x254/0x7e0 [ 59.988395][ T6357] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 59.988410][ T6357] tty_ioctl+0x580/0x1640 [ 59.988426][ T6357] ? __pfx_tty_ioctl+0x10/0x10 [ 59.988440][ T6357] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 59.988457][ T6357] ? hook_file_ioctl_common+0x145/0x410 [ 59.988475][ T6357] ? selinux_file_ioctl+0x180/0x270 [ 59.988489][ T6357] ? selinux_file_ioctl+0xb4/0x270 [ 59.988503][ T6357] ? __pfx_tty_ioctl+0x10/0x10 [ 59.988517][ T6357] __x64_sys_ioctl+0x18b/0x210 [ 59.988529][ T6357] do_syscall_64+0xcd/0x4c0 [ 59.988546][ T6357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.044287][ T6357] RIP: 0033:0x7f8a4cf8e929 [ 60.046042][ T6357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.052538][ T6357] RSP: 002b:00007f8a4dd57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.055239][ T6357] RAX: ffffffffffffffda RBX: 00007f8a4d1b6080 RCX: 00007f8a4cf8e929 [ 60.057777][ T6357] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000004 [ 60.060386][ T6357] RBP: 00007f8a4d010b39 R08: 0000000000000000 R09: 0000000000000000 [ 60.062891][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.065488][ T6357] R13: 0000000000000000 R14: 00007f8a4d1b6080 R15: 00007ffd64922278 [ 60.068057][ T6357] [ 60.069044][ T6357] Modules linked in: [ 60.071178][ T6357] ---[ end trace 0000000000000000 ]--- [ 60.076521][ T6357] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 60.078462][ T6357] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 1a ea 4d f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 60.085008][ T6357] RSP: 0018:ffffc900065afbf0 EFLAGS: 00010293 [ 60.086972][ T6357] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff886e360a [ 60.089434][ T6357] RDX: ffff8880261ca440 RSI: ffffffff886e3656 RDI: 0000000000000005 [ 60.091909][ T6357] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 60.094776][ T6357] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc900065afd88 [ 60.097238][ T6357] R13: ffffc900065afd88 R14: 0000000000000001 R15: ffff88803c1c7400 [ 60.099689][ T6357] FS: 00007f8a4dd576c0(0000) GS:ffff8880d6a52000(0000) knlGS:0000000000000000 [ 60.102751][ T6357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.105691][ T6357] CR2: 0000000000000000 CR3: 0000000032b9a000 CR4: 0000000000352ef0 [ 60.108630][ T6357] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.111266][ T6357] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.113905][ T6357] Kernel panic - not syncing: Fatal exception [ 60.116395][ T6357] Kernel Offset: disabled [ 60.117771][ T6357] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:30:37 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff917531f6 RBX=ffffffff90deb64c RCX=dffffc0000000000 RDX=fffffffff3bcf40c RSI=0000000000000000 RDI=ffffffff90deb64c RBP=ffffffff90deb64c RSP=ffffc9002919f5c8 R8 =ffffffff917531fc R9 =0000000000000000 R10=ffffc9002919f678 R11=0000000000039bab R12=ffffffff90deb64c R13=ffffffff849bab3f R14=ffffffff90deb64c R15=ffffffff90deb64c RIP=ffffffff816abd66 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f4d216ac880 ffffffff 00c00000 GS =0000 ffff8880d6752000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8a4dd35f98 CR3=0000000026c21000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000029 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005561412ecfc0 00007f4d20ff1b60 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005561413de210 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556141385e20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d20ff1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d20ff1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 676b096199c0a90e 737326176449b9fe ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373a2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 327570632f302f71 6d2f30706f6f6c2f 6b636f6c622f6c61 75747269762f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003275 70632f302f716d2f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 14187a12eab3da7d 00005564173a7620 0000000000000221 0000000000000033 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003a756b733a322e 392d3533712d6370 7276633a3174633a 554d45516e76633a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffffffff9b0357e0 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff9b0357e4 RBP=1ffff92000690f2e RSP=ffffc90003487968 R8 =0000000000000001 R9 =0000000000000000 R10=ffffffff90a81657 R11=0000000000000000 R12=1ffff92000690f48 R13=ffff888026147390 R14=ffffffff9b0357d8 R15=ffffffff9b0357e0 RIP=ffffffff8198c601 RFL=00000807 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055555ae13500 ffffffff 00c00000 GS =0000 ffff8880d6852000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe5400e56c0 CR3=00000000507d8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc9117f960 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53f411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53f411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53f411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53f411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53f411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53f411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bfa95 RDI=ffffffff9b088320 RBP=ffffffff9b0882e0 RSP=ffffc900065af5f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b0882e0 R15=ffffffff855bfa30 RIP=ffffffff855bfabf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8a4dd576c0 ffffffff 00c00000 GS =0000 ffff8880d6952000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8a4dd36d58 CR3=0000000032b9a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8a4d011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8a4d011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8a4d011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8a4d011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8a4d011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8a4d011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8a4d184488 00007f8a4d184480 00007f8a4d184478 00007f8a4d184450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8a4dced100 00007f8a4d184440 00007f8a4d184458 00007f8a4d1844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8a4d184498 00007f8a4d184490 00007f8a4d184488 00007f8a4d184480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffff88806a73a2c0 RCX=0000000000000004 RDX=0000000da4962400 RSI=ffff88806a73a2c0 RDI=ffff88806a73af00 RBP=0000000da4aa9a58 RSP=ffffc90003537720 R8 =dffffc0000000000 R9 =1ffff1100d4e75c9 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=ffff88806a73adf8 R14=0000000da4aa9a58 R15=ffffffff8df17038 RIP=ffffffff8192a8d4 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055557626e500 ffffffff 00c00000 GS =0000 ffff8880d6a52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000024a27000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555576281730 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557628634d 0000555576285ed0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555762915c3 0000555576290d90 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 048080808080f808 0006100014100006 006fe80fffffffff ffff04020175f20a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 aaaaaaaa74080003 169010000b800401 8008005208000100 000008060a016996 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000010000000000 0000000080fe0106 140035840a60dd86 bbaaaaaaaaaaaaaa ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030894928d880800 7403224e0000aa00 0000000000000029 0000000080febb00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0fffffffffffff04 0004019410000601 71e0500208018403 0894928d8808007c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010410000e10000f ffffffffffff0406 0174dc0fffffffff ffff040004019410 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060171e0500208 0184030894928d88 08007c030894928d 8808007403224e00 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00aa000000000000 0000290000000080 febb000000010000 0000000000000080 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fe0106140035840a 60dd86bbaaaaaaaa aaaaaaaaaaaaaa74 080003169010000b ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000