last executing test programs: 1.387215452s ago: executing program 2 (id=223): r0 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x62f) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x1, 0x9, 0x6, &(0x7f0000000100)={0x18, "aa66cad76c48d7fdda21479b0459f0a1068e3cccaddc78cbbca0e2c95f55c0b5b7"}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) setresgid(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x4000, 0x0, 0x3, 0x2f, 0x0, @empty, @local}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000006111680000000000950000000000000068dd253aa0e2332c817c5e9376eaf9"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.285466286s ago: executing program 2 (id=224): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x12080, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0xfffffecc}], 0x1) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0x19, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1405, 0x200, 0x70bd2c, 0x25dfdbfb}, 0x10}}, 0x2003853f76ec237e) 1.149142259s ago: executing program 3 (id=229): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x84902, 0x0) write$P9_RLERRORu(r0, 0x0, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x2, 0x1}]}}, &(0x7f0000000140)=""/148, 0x26, 0x94, 0x1, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f00000000c0)=0xfffffffffc000000) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r4, 0x1) shutdown(r4, 0x0) ppoll(&(0x7f0000000280)=[{r4, 0x8088}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, r7, 0x1, 0x70bd29, 0x4000000, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0xb}]}, 0x34}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0x35, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x2, 0x0, 0xa, 0xfffffffffffffff0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xe88}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7a}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit, @call={0x85, 0x0, 0x0, 0xac}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0xd7, &(0x7f00000002c0)=""/215, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000000c0)={0x3, 0x5, 0x51d9f05a, 0x9}, 0x10, r5, r0, 0x2, &(0x7f0000000100)=[r0, r8, r0, r0, r0], &(0x7f00000005c0)=[{0x1, 0x3, 0x9}, {0x2, 0x4, 0x3, 0x3}], 0x10, 0xf2, @void, @value}, 0x94) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r10 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40000000000000}, {0x0, 0x1000000000, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in=@rand_addr=0x64010102, 0x1, 0x32}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1502, 0x4, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="a5fdad8840000000280012800b0001006772657461700000180002800400120008000500c11d080006000f"], 0x50}}, 0x0) 1.075511357s ago: executing program 2 (id=231): mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6769643d210fc9104a3762e4bcb421ee8ec6d59cc85a89bd9a7ad2d576000100009c0868f6435efa6d9055d46a98943a4cc8d4ac99204633d5487dba5aa17a974fc6e6d807b9a5683826042aab9026e7ef22692fc2a938168eeb", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file1\x00'}) connect$caif(r0, &(0x7f0000000100), 0x18) 1.073769833s ago: executing program 3 (id=233): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000080)={0x4e8, r0, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x10c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "088cef928b93"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_SERVICE_INFO={0xe0, 0xb, "e6ddb47271198317b3fb1a5bebfb558d3acab4e82deef03d7c856e48c1ee11c49e31184fb0ca59ab87d280e957e827932296b160bf56411585350d3c26771bf9076df5784f868648b98680c0e1b83326581d906c8c86f508c1656c252fc77444f3456e56c168604e2992127a1f0116b8522c01629b1c7444f232ef0cee2aff0637bc6a0fabacfdf0e80f26ba6169f535fdfd375040ac4e7b00a724dc2a6f26fb6c4c1c5f8ba3635d9bd9c184d64702809368f5c589b621603ccc494f45be155c59cab2e051248b55d521326e5e6e8b6ad9454dd450c3e16a90a24d5e"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0xf4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0xd4, 0xe, 0x0, 0x1, [{0xcd, 0x0, "d34fc64eccdba6b48a31f71ddd5a38991f2e919abb300b0b8c43d1f76ec8a22a3bc8d3ee30fe39007420095291bb305f8b71e286c3bd83fed803966218764d827e7cdb50ebe55c6597d7019a5daddcb4e105c1a33c1d1d979fd52d4f18ca41340014d4fb5883a08257fe2f243ebf8d446547198f5ee0d84d3441b725485c9f4c9794774392eb67a455f04f675bc7b21793a1169fdb43d0ca752a61a096568de76f3b131fda7b9037407ffa7d22f5a767274479a4a13b7c68de14dd675036f354001392039ddfe80de3"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xe4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x56}, @NL80211_NAN_FUNC_TTL={0x8}]}, @NL80211_ATTR_NAN_FUNC={0x2c0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x6}, @NL80211_NAN_FUNC_SERVICE_INFO={0xc6, 0xb, "e8988651f90f93d48dcee013ae3669829594357d52d4471ec3350db832b97ded3503619afa6aad2d073155160e49ab3986376995200a7a9f404b8e0b2252aa01e16bb0240c0e75ff70a047c5481b3da9c4bbb413087f23fad10a11efb067ccc55b8fec102988934d556a84ec2062ba44fc8d26352a54fd12f19ce50c11d0cf2f2036ef7c9ed6b48219041547907ce1fdbf53ba183299e3b1c542c4b1e8e950dc0ea751f44745329821a4cd05ef86e35b148d570bede99581ebbe9f7d3eb57ac905cf"}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1e0, 0xe, 0x0, 0x1, [{0xed, 0x0, "6f7f457173a8f48a95223a8d10939d2dfdd086fe4bfcc9c354d436195c2bb6921a2b98816009d92e0fb783cdf9d3d376db88e57e258e1d0b04fad66c9aa5e2cee089d72393c6450c38dd456756695e866d1f049f040c8ab403f2a409bdae8d6b9885d19a9c49203a930fbc21dbb28c9b8895993c80f233b845ccb6c4da040241fa7afc37984974d43131fef0e7b42989a29764a3a353d6c8f34d4fcf388b2f8715db085d7809f6012463da4128c193c27674d67edc921acf6d70adf8e8d7fcebf4334724871e52ae9c123f6783331a19f005afa43d5995dec5155d5550b67a519a7014cab22a84dd23"}, {0xea, 0x0, "b5f01fd4f143af1328c05ba6e76acec2e2b52c75c4c59b55c760994662a695249462dabee7a13825bf882cacc216d1e05d12585e701d55d8e339fe68f31095ed63f61114a8bb7707710172885c2508763bb28bb9f035b518e21d1e96fd744c83b2c5f8ddb78de52e4f791cc6e7a0481a5682616e7a185aa0a6fe812819d2c218797757cc6bdacca67bad4e3a0e22a9352e88dda35c8b80ca725748afe5c73eb31f0262fcad86b05b310c5b822b0e84bc42f86ab6469b0c25e86bfd709f2416574f6495cd0ec2db653efa63bf5d45ee56c9c4178d832029151951390391b87387184779005599"}]}]}]}, 0x4e8}, 0x1, 0x0, 0x0, 0x20004014}, 0x8004) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x2, &(0x7f0000000600)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff8000}], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x22, &(0x7f0000000680)=""/34, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0xa, 0x831b, 0xe}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000740)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000780)=[{0x2, 0x3, 0x7, 0x5}, {0x2, 0x5, 0x9, 0x9}, {0x2, 0x1, 0x3, 0x2}, {0x4, 0x3, 0x4, 0x8}, {0x3, 0x4, 0xb, 0x2}, {0x1, 0x1, 0xfffffff8, 0x8}, {0x0, 0x3, 0x3, 0xc}], 0x10, 0x101, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000900), 0x802, 0x0) close_range(r2, r1, 0x0) (async) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000940), 0x101000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000980)) (async) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000a00)={&(0x7f00000009c0)=""/38, 0x26, 0xfffffffa, 0x3}) (async) r4 = syz_open_dev$swradio(&(0x7f0000000a40), 0x0, 0x2) close_range(r3, r4, 0x0) ioctl$CDROM_LOCKDOOR(0xffffffffffffffff, 0x5329, 0x1) (async) close_range(r2, r3, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000a80)={0x3, 0x0, 0x1}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000ac0)='scalable\x00', 0x9) (async) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000b00)={0x200, 0x3638, {0xffffffffffffffff}, {0xee01}, 0xb, 0x101}) prlimit64(r6, 0x1, 0x0, &(0x7f0000000b40)) ioctl$CDROMPAUSE(0xffffffffffffffff, 0x5301) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000b80)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xa) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000c00)={0x1, 0x0, &(0x7f0000000bc0)=[0x0]}) (async) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000c40)={0xa1d4dc353e487dba, 0x0, {0xf6, 0x5eb, 0x2021, 0x4, 0x9, 0x3, 0x0, 0x2}}) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xd8, 0x0, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80000001}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xff}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xc70}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xe}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x8f5}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x9}]}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x8, 0x1, 0x8000, 0x5]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) r7 = syz_open_dev$vcsu(&(0x7f0000000ec0), 0x0, 0x10081) connect$vsock_stream(r7, &(0x7f0000000f00)={0x28, 0x0, 0x0, @local}, 0x10) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000f40)={0x4}) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000000f80)) (async) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000fc0)="b37da913aa6d02cd59944b08f9c33810267e8a544a0d086bbf678ea3aa3ed47d07e2e6a849e055eb05c5cb6e8ca44e43e5eb364fddb6c93f73") 1.07268169s ago: executing program 0 (id=234): syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x122c42) open(&(0x7f0000000000)='./file0\x00', 0x220000, 0x6f) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) read$dsp(r1, &(0x7f0000003200)=""/4105, 0x1009) (fail_nth: 27) write$dsp(r0, &(0x7f0000002200)="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", 0x823) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 970.011305ms ago: executing program 3 (id=235): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000040)={0x0, 0x1, 0x5, 0x64, 0x3, 0x4, 0x1, "de147ee686fe5e73c3b3150a3df2af3efd9cd392", "a4f8d12d41afdd666362193d6167de6b90fff21b"}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000280)={r3, 0x0, 0x0, 0x0, 0x552}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aa", 0xf, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 969.54602ms ago: executing program 2 (id=236): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x4, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000580)={@mcast1, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x2000000, 0x0, 0x7d, 0x0, 0x0, 0x2930310}) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3104, 0x1b400}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}, @IFLA_MTU={0x8, 0x4, 0x2266}]}, 0x54}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x100, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x1}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async, rerun: 64) syz_emit_ethernet(0x7c, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "76db40", 0x46, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x8, 0x1}}}}}}}}}, 0x0) (async, rerun: 64) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) (async) syz_emit_ethernet(0xbe, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "020007651442eb"}, {0x5, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x2, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 835.529902ms ago: executing program 3 (id=237): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217"], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 835.121674ms ago: executing program 2 (id=239): r0 = socket$kcm(0x10, 0x2, 0x0) unshare(0x40020080) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet(r1, &(0x7f0000000400)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{0x0}], 0x1}}], 0x1, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) socket$inet6(0x2d, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00'}) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x44) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000002440)="0f20d83508ac00000f22d8440f787200b9800000c067440fc79f0080000035000800000f30400f07c443791dd2000f202366b8570000d0e6410f388052a30fc77e180f01c8", 0x45}], 0x1, 0x48, 0x0, 0x0) 763.95617ms ago: executing program 3 (id=242): epoll_create1(0x80000) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x418301, 0xbf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x800, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000100)=0x17, 0x4) r4 = socket$unix(0x1, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) msgsnd(0x0, &(0x7f0000000cc0)={0x0, "0973be348890c9c7eb026376a29f230617719aeb01ddccfa47a3b40709a23266ab2e57985636cca6fdf629b6ba8e9d96b2b1ad9247562e085ef1aec2e5d80e17fcf211a235843ab803cae5575bb9374ee924bdf9ff6153b7ba793f805cd95391fadf3b4e05cd96bd122d749b7dac968b36a8bb48eb4c2da13eab227d52c21a45189d54d57ae528cc1a"}, 0x91, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x40085503, &(0x7f0000000000)=0x3) syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, &(0x7f0000000140)={0x40, 0x23, 0xb, {0xb, 0x22, "3b562dbeb3df3ca06a"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}, &(0x7f0000000540)={0x0, 0xf, 0xfffffffffffffea6, {0x5, 0xf, 0x8, 0x1}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x10, 0xab, 0xd, "e5d72149", "a4f0a507"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x80, 0x9, 0xfb, 0x1, 0xfff9, 0xb5}}}, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x40, 0x18, 0xe6, "d91eecf98ef904b08d3671aa8709a851559f43be66360a13e1fda6224a109d080f5eabbcee4934d3170e23b95eeb0c01f5800b81a90e2a43b7192145e8d1c1fb69f18bea7ffcc59a8afd5cc42c278b6fdef814ecd2d0e4485cf1f70e3b6b6bdba434dc47b09e33133ffa3259aebf62647ad3abbb63964e9ab7fd564f152a0a9120666b58b6910aaee6e24c4d6d8057293f8bdd381981868d0b9a54bba426d310bc7aefad54cf9b2db6bb558ccacc12a2f3f91db09dc5288336273923e539cc84e8d80aeb113da4f03b9226c726a7855eb29f5d321ddc0d750d608352a6c3251b0e387d2420ee"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xd}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x23f47cb3bac94744, 0x18}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x3}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x10}, &(0x7f0000000600)={0x40, 0xb, 0x2, "361c"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000680)={0x40, 0x13, 0x6, @random="b42c83ccf4f3"}, &(0x7f00000006c0)={0x40, 0x17, 0x6}, &(0x7f0000000c40)={0x40, 0x19, 0x2, "170e"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x64ca}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x45}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x4}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x3000001a}) close(r4) syz_open_dev$dri(&(0x7f0000000bc0), 0x3, 0x100) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfd6d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b00)={@ifindex=0x0, 0x32, 0x0, 0xffff0f81, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0], 0x0}, 0x40) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="b702000007000000bfa300000000000007030000f0ffffff7a0af0ff0020000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26ffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a55b000000c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2d90addedc28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000801989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c1f860d050d694cc7806d294d3665016a7b29da0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d40887c58559b7dcb98a6273b8c651e57f727041c62cea5b7bd24d9f679e4fbe948dfb4cc4a389469608241630459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b83720eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb89872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebed161980f2fde4f9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e4bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802c8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af0be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99e85b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5359dbdfbf31a562395020becaf3fd1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4b28288e78980c1184d8223edbc4bf9258b7374e79a8f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b5524642c248aa813edaa626f0000000000000000000000000000000003ba5bac34b611569a451564d3a5400f9097ffe7a37e765bc652be71ee246d9cf19878dd62c53062d6000c40bde6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89ad07963acbd4dd4dc5b4552591edde7a22ad06f7567e6fec2f65011b579bf609d61a3ff4d6f490824bb035995449fc34106ae6889f036d67b6aaee784f855ebc746ac871b5d2031ac0a252ac1f86e93e245f3793cea80b6de773899d49d11d3b1ed79163b111c976cf840a2ef6214a43338fba8c9edb6be26e68fcc5d47ed74a66ce8aba726ab955b9b32ab1890e84a5e2d7476252af25e5c95c5a8b2b1b5c8a2645b01b823c0f169d6ab529cc889bb07889d9e155114cf3e26a50c527ec6d4021cd2cacfea6d7e41e39e26b3967cad65c648b170f12ea9cc69dcee64be0c27b1f4f7f5ce3e62c35602c9d2921326891901661c85b988494f094abb91ed813b42828aa93105896e0aee851a8087e169a1d69e841257d9053d0cdc3a6ac4f12084cc6470abebe8b344b1f56690a2687b428686c854c21831da277e8b8a21b7b91a46d22ba083eca7b1f8268048cde7d6f237dca42035881b29ca9c8c2937971821b613894297ff6f7796053a4de1fd77e180cc22b205d43bb4a1b59962c1f605ea1b74585cf5e8d579f157cb45561c357f9976cec6a43388b3049a0d9c171ff6145266ba119d00000000001ef3794a930eb12f3a6215c510bf0bca70c127e9c70cc7bef921249a7f18a0034ce3264a9e96656b47233e2ed7c76520e649c3fd550bdafd77c5cd72b4446d3e157ddd97e7622a6891fb739acd3b2cdaf65ac78490f0641be6e8c6f55bf3d228786895ff5fd5970faacd8a5025aca0aa1931f477ba06aa60051298c8bf7f3b399194f98dc3f4e8513ad06da09dc393c1284515986b8c70ac69512f6c0c04f42edb3a097a11f2ab480e3e391abffae097752300576337c6dd24c4a98280684aa1fe8c7b43ee8bce05fe979b34da18cdb44dbb030b8009cd3b3b44fd8e7b534acd3f1839cb54817668ab446d3d47848429ea831a57f222c714870582a8832c2a326c5d1e406c8b05dedddceb24483f8f998b05c3ddf85c3799c9000000000000000000000000001e57cf839eb3150d6a076fb7b86fae98dbb46014f483aecb4ec4f0877371bcae8912c78aff857c669760f0e55041563c5c3e8ee4a0eef885fd43fe34a1febc82370d1d07fdfe705ada47288e41e7e6ee82d66b99ae4b0889fe949e7342ca97c1a64dcc7f6a0c0da07de8c808b4caec54820f856889fc5f1af3d675206e3257f974d6e45ff1e905c2f0fc0173ac6714acaaca2397bee23630ecaa2c1c6ddc3085689a033d6d41a1a7ac59baec299158faa52308856805f2130863f4668e27b8bbef4f4cd43a2fd294b5b0bf2b0e4afbe570c54aa214579ca0caf54231d00a94eda2be6f037e2befdd03bf152f696ca1d1ea86eb7ee1f021062ad71246dae1580c4f959a320912032ed468a8ed9f27a2258ddf465de77a51b4713bc6b789a0e8b203f0f592ddb27aa90989a9e0cb624bc34e7d6ebf156ea251e3a2f83ada9f0b70035e8ed200a52b00"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r10, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r11}, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000c00)={0xffffffffffffffff, 0x8, 0x6, 0x0, @vifc_lcl_ifindex=r8, @remote}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b40)={@cgroup=r0, r0, 0xb, 0x27, r7, @void, @void, @void, @value=r11, r9}, 0x20) rt_sigaction(0x1e, &(0x7f0000000240)={&(0x7f00000001c0)="c403a97f35a2ab0000afc4819d72f59944540fcd3e45c06b5f90c4a3d5688ca3ce1bd5a802c442a1b96ca92d660f3a0e1bfec46191fb38c4a34d697c910000", 0x0, &(0x7f0000000200)="8fc97812ccc4a1f97ef93ed0fac481fe2ca09e400000460f8c97572a6ff265400f1e0b66450f3807642d09c4829596ac9bea64d376c443295df102660f604a0e", {[0x4]}}, &(0x7f0000000980)={&(0x7f0000000280)="65f241ff8a3e000000c4217f126699c4611df35eadc402599e76f7410f656500670f56874ae5000047f5c4412855ef45cf43af", 0x0, &(0x7f0000000940)="3644719ec4c1fa7f7aa766d8bf000810ff440f01de65470f3a0fed00440fd969f36526400f9fb28a7b2758400fb585775657f72e26450fd7c444d9e9"}, 0x8, &(0x7f00000009c0)) 605.408626ms ago: executing program 1 (id=245): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x88c0}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) 602.173938ms ago: executing program 1 (id=246): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x44b, 0x7fffffff, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x84}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@gettfilter={0x4c, 0x2e, 0x2, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x9}, {0x4, 0x1}, {0xb, 0x6}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xfffffffa}, {0x8, 0xb, 0x60}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@gettfilter={0x4c, 0x2e, 0x2, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x9}, {0x4, 0x1}, {0xb, 0x6}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xfffffffa}, {0x8, 0xb, 0x60}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 445.431492ms ago: executing program 1 (id=247): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000200)={0x200, 0x34, 0x1, 0x0, 0x0, "", [@nested={0x1ed, 0x3ffc, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @binary="207b4415ee034052d53bf8c2d98fe7b9dfd4ac7a0b03f7c68cae17b814cbacdf82f5cfad9edcd4754a1d969e9799896a"}, @generic="395d1d5e99b378865650ee72696fdd925abdd47ee59733d126068fa39d424f81d258997cb4c6c3dc55e217d99a4fb1c3864204018709c04ea64b797b46fa17a9fe315e1fbca6ba919485b08ef1d4c8ef95fbd9af12263fc6698b772579a49f18023acc3d7cb33558df262b062463116a8f1c6680a688569a2ff02938f0383bbd647139d9d6b7d434f3a2c0e18d915d256efc077e60770c3eb1f1b761a364d6e73f4cdcfe9401b940fac0961aed6c7500e657e73438221db53a20120526ec969ce51a560bd074a916ce57ef54a821f121fd354f2cb6ce48317133f3437129e2838a445d1f44b184e56eee6bcdde65b539", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc013529ec47d7f69f514408049fc119a74fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x255}], 0x1}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x1, @bearer=@l2={'ib', 0x3a, 'macvlan1\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x10004) 295.273543ms ago: executing program 1 (id=248): mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000001c0)='qnx4\x00', 0x208004, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 292.416574ms ago: executing program 0 (id=249): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000200)=0x1000000) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @loopback}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@newtclass={0x88, 0x28, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xadfdca15474399b6, 0x9}, {0x7, 0x1bf09e77eb704de7}, {0x2, 0x4}}, [@tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0xe0, 0x6}}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x7}}}, @TCA_RATE={0x6, 0x5, {0x7, 0x5d}}, @TCA_RATE={0x6, 0x5, {0x5, 0xf8}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x81, 0x3}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x400c0) 292.161712ms ago: executing program 1 (id=250): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file1\x00', 0x192) r1 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ff8000/0x1000)=nil) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x6000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg$unix(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2001) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000240)={{0x1, 0x3, 0x8, 0x2, 0x2}, 0xabc, 0x13a0000000000000, 0x1356}) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000002c0)) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2000) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x18, &(0x7f0000000100)=0x7d3, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000dc0)="67cb2da4b9a309552bce26d7e19bf3e06d4f8e642b33b2e49c13f388433be7d170a3e106b6a332746a93ec2cc912f09cc5ef9f8ff98f4f2c0cfa7efed0b126642099bfbfb9968276a41e7799c2e9a652947a70028ec0b68484e9b5c12a89315c0c509a24dc691dc5cdbe208117965e993975211c4a9163d61bbafbbf791f894e09114acf525031c19e014ecdae593d312565f46338ee363b4e20ea0c7c45d6babf309bdc5dba9162e6469235d2cc7754eaf5a129b32171b716cd8a5c7d2364cfa211a7cc38a02a9d4fb875fdbd8c182b79b66707ea9fb27b2675ef1b4717ba87009ddf6138481f08b8a8658c56cc933764ed87341ab39921bc77b92893d7e6284835b5c3472afd5e52698031774ed77236651c742fa2c83f6f5c13132af922fef120b2cde334e4319f157f3c3e70baa978608cfb72f50779c18cf2c301f843ad036019e46a0b5d69cf8d98aed311b3b8bd080bbc1adc27acd1f43a14b7178689fcd2ad68b0f3340268744d871127e31b6bb37a6272dee4602f8872c92b8671819c3aad77352f97e25cd5698c1116803dfaa0392a13adecd659af483fd9bd37b999bd267a228c11b2752447336701080f17448a45846521934a21eab99da8204c72ffc015e4bfd21200b2d207bdba4cd56b5afa0e6d903de380d5c80ee95cc93a4c164246db986325f627c7d240121180396e37a65f09ba7c5e9ce272b2c11c88e70bcc05324c6eaa74fe44f7ac08ab28401258b6c9a37202e0642f4352273d96a232c7136162207bb6744ceb0e2edb73c2b327121d8fae84b1a57c064471fdb9ba8b76a68c74853140cc07987472b3f684501c49190296a2c6cf1309af26e51a84eaacc55f2331537af8cc1cafaaf8f4d98b37d99c62d8d1155cfc90c2f9f954bf4cb93005a4524ef41bb43bdb1b2336713bc9a606845ca3dddad4393e387aa0d7b960f2c0952490f5d0490a29800fcc3409c0b43ad811959c2ae572bc995e1560b26967aea12aef516aa20150fc4259c2941b0ba64796eecdfc724b27470956e7b6294d5e9e51dbe5cea27768268dee9f40797a3512d3b146e134431717cdd1b0d54a9461f16ba0c2f1d1b43f2a15067e89358026a4048477ff5bc11a10d84e3ae8df9157f341c2bb5661edd06b52b74d0a39b2b314dd46f0a68f9303c9b6db11a214605b3c97672c1632d2d2d8a862a642bf905a269642a9faf59a6f5a9afb2c3a1363741761e90c47008a5787991b80a15fdc682862a1af8e0bf615d1a9e9148b581a0e809378e694983b017ca272b44b482c250d1d14dae6deb6331fc926978a1f34b263ee2b317589a74bf1f138a8e2767acee841f68530e40022af0a0c9ee27270a86fda7a0ae9b1f79aa0b5c9c8da15db4692025a77c434cd88c17dde936f0b503a3d2af3c336888461a78403f721e03cfa4a75aa8b2d0e7c34a0e026acc5ba9c0747c448d58e149c452026e4153a1acefa8384b5c1adaa6f5c5f7688063f9e193ff8b604374907197c67e644a835f64d2195d6c19784654a4999a59ecd8f51154a1639d46eb778d0a61549ef494849736915b9f6030e88e593ee618f6e7348f2ddc8d00b41eef1a2a31b83db0e84f1dc06e719424d3c8b53b2941d3b4d47b4c03e89a31915fb7a1a25f0456c9c3b9e76a9bc05441d629addacff365dfd2af2d4a1ab3f5de1e27e5329e7154e77b3d339364906b5fa457e38cd300c752355a8d69d003bbcee524c94ab1aa3e397d5bb0ed28040efd6077a74f194f47415820a1b7f98e1f6752bff0fe9abf7ee1a5d1612d597e107ce976fc6bcdc475bbd5714a1d21edb6a7ad43837fd446c15306c7af47418dd6172bb00d135a33587977ea2c96f2573d61f63affa6b9eb8381d214b4560d6e68400a9952e6086becefad18255ec7270bb903afbcd71d78845de470a87271ec780b5a3fb90e773e6f9c593ddab65d5b57be7d5c2c80fa9f5e019a3f36e96e14d480a9caf0bb2", 0x57d}], 0x1}}], 0x1, 0x4001c00) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0/file1\x00'}) sendmsg$inet(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='#', 0x1}], 0x1}, 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r5, 0x3) setsockopt$inet6_int(r5, 0x29, 0x49, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) unlink(&(0x7f0000000100)='./file0/file1\x00') link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') 291.587451ms ago: executing program 0 (id=251): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 125.148562ms ago: executing program 0 (id=252): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x4d, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x1, 0x5, 0x3c, 0x8, 0x6, 0x8001, 0x2, 0x8120}}}}]}, 0x58}}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xa, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xe}}]}}]}, 0x3c}}, 0x460d0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x400) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, &(0x7f00000000c0)) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000010c0)={0x8, "99bdb1b0c7251b0894d402060074bd856e3c10db57c3f7484d9ed4190db800f3"}) ioctl$SW_SYNC_IOC_INC(r6, 0xc0285700, &(0x7f0000000180)=0x8) sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000000c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x200, {}, [{0x84, 0x1, [@m_bpf={0x30, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x5, 0x6, "05"}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 124.728252ms ago: executing program 0 (id=253): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0xb, 0x1000, 0xffffffff, 0x17a}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000340)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x70a40, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r6, @ANYRESOCT=r0], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r8}, 0x10) r9 = dup(0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r10 = socket$kcm(0xa, 0x2, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c010000190001000000000000000000fc020000000000000000000000000000e00000020000000000d600000000000000000000000000000a00100000000000c48e94357f282bef6f63909f67666fa5b26275e2ae877c65e7a6665d89ef1db063a5a205af1948cf28da30f5b407be51302be7fb73ab42c888", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084000500ac1414bb000000000000000000000000000000006c00000000000000ac14140c000000000000000000000000000000000200000000000000000000000000000020010000000000000000000000000002000000003c00000000000000fc000000000000000000000000000001000000000400"/244], 0x13c}}, 0x0) sendmsg$kcm(r10, &(0x7f0000001b00)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x40000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0xfffffffffffffdeb, 0x0}, 0x200408c7) sendmsg$inet(r10, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6) close(0x3) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x10000d6) sendmmsg(r4, 0x0, 0x0, 0x0) r12 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r12, 0x5423, 0x0) ioctl$TCFLSH(r12, 0x8926, 0x40000020001100) close(0x3) 10.915091ms ago: executing program 1 (id=254): r0 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980282100f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4000980"], 0x21c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_io_uring_setup(0x1868, &(0x7f00000007c0)={0x0, 0xd2bb, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000780)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r4, r1, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x40, 0x0, @fd_index=0x2, 0xcab, 0x0, 0x1000, 0x1}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) 5.411232ms ago: executing program 2 (id=255): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x44}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000540)={r3}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x40) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)={0x34, r4, 0x1, 0x0, 0x800, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0xbe, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}, @ETHTOOL_A_RINGS_RX_MINI={0x0, 0x7, 0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x0, 0x8, 0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x0, 0x8, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c800}, 0x0) 2.980437ms ago: executing program 0 (id=256): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r0, 0xedaa7000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) syz_io_uring_setup(0x48a5, &(0x7f0000000080)={0x0, 0x5f1c, 0x10100, 0x0, 0x1000040}, &(0x7f0000000000)=0x0, &(0x7f0000000500)=0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r5, &(0x7f00000005c0)="04", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffff9, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r2, 0x0}) r6 = syz_open_dev$sndpcmc(&(0x7f0000001180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r6, 0x40044104, &(0x7f00000011c0)) syz_io_uring_setup(0x7f9a, &(0x7f0000001300)={0x0, 0x3575, 0x10, 0x3, 0xff, 0x0, r1}, &(0x7f00000012c0), &(0x7f0000001180)=0x0) openat$cgroup_ro(r1, &(0x7f00000011c0)='blkio.bfq.sectors\x00', 0x0, 0x0) syz_io_uring_submit(r3, r7, &(0x7f0000001280)=@IORING_OP_POLL_ADD={0x6, 0x65, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1000}}) getdents(r1, 0x0, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r8, 0x29, 0x7, 0x0, &(0x7f00000017c0)) r9 = socket(0x2, 0x80805, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x36eac49ec043b62f, 0x0, 0x25dfdbbf, {}, [{0x58, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x6, 0xd, 0xe}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x320, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) accept4$alg(r9, 0x0, 0x0, 0x800) getsockopt$bt_hci(r9, 0x84, 0x1f, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9) 0s ago: executing program 3 (id=257): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', &(0x7f0000000080)={0x101000, 0x106}, 0x18) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x402080, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000001c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x800, 0x0, 0xff, 0x0, 0x4, 0x5}, 0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0) kernel console output (not intermixed with test programs): [ 38.133303][ T40] audit: type=1400 audit(1744469232.641:81): avc: denied { rlimitinh } for pid=5848 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.139978][ T40] audit: type=1400 audit(1744469232.641:82): avc: denied { siginh } for pid=5848 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.479248][ T40] audit: type=1400 audit(1744469233.001:83): avc: denied { read } for pid=5337 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.485577][ T40] audit: type=1400 audit(1744469233.001:84): avc: denied { append } for pid=5337 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.494316][ T40] audit: type=1400 audit(1744469233.001:85): avc: denied { open } for pid=5337 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.501572][ T40] audit: type=1400 audit(1744469233.001:86): avc: denied { getattr } for pid=5337 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:12206' (ED25519) to the list of known hosts. [ 39.371708][ T40] audit: type=1400 audit(1744469233.891:87): avc: denied { name_bind } for pid=5858 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.366743][ T5860] cgroup: Unknown subsys name 'net' [ 41.508219][ T5860] cgroup: Unknown subsys name 'cpuset' [ 41.514393][ T5860] cgroup: Unknown subsys name 'rlimit' [ 41.723060][ T5921] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.441596][ T5860] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.316382][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 45.316397][ T40] audit: type=1400 audit(1744469239.841:105): avc: denied { execmem } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.551311][ T40] audit: type=1400 audit(1744469240.071:106): avc: denied { create } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.557696][ T40] audit: type=1400 audit(1744469240.071:107): avc: denied { read write } for pid=5938 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.565233][ T40] audit: type=1400 audit(1744469240.071:108): avc: denied { open } for pid=5938 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.571955][ T40] audit: type=1400 audit(1744469240.071:109): avc: denied { ioctl } for pid=5938 comm="syz-executor" path="socket:[6086]" dev="sockfs" ino=6086 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.576486][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.584814][ T67] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.587638][ T5953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.591086][ T5953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.593185][ T5953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.595898][ T5953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.598464][ T5953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.600529][ T5952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.601024][ T5953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.603193][ T5952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.605389][ T5953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.607081][ T5951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.607141][ T5952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.607737][ T5952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.607991][ T5952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.616258][ T40] audit: type=1400 audit(1744469240.131:110): avc: denied { read } for pid=5942 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.621988][ T40] audit: type=1400 audit(1744469240.131:111): avc: denied { open } for pid=5942 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.628693][ T5951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.630665][ T40] audit: type=1400 audit(1744469240.131:112): avc: denied { mounton } for pid=5942 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.635125][ T5954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.639452][ T5951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.641630][ T5954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.644156][ T5951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.791379][ T40] audit: type=1400 audit(1744469240.311:113): avc: denied { module_request } for pid=5944 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.833573][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 46.007354][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.009843][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.012103][ T5944] bridge_slave_0: entered allmulticast mode [ 46.016536][ T5944] bridge_slave_0: entered promiscuous mode [ 46.032339][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.035184][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.037943][ T5944] bridge_slave_1: entered allmulticast mode [ 46.041513][ T5944] bridge_slave_1: entered promiscuous mode [ 46.044427][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 46.130885][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 46.140559][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.150879][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.162988][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 46.232513][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.235468][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.237462][ T5942] bridge_slave_0: entered allmulticast mode [ 46.239841][ T5942] bridge_slave_0: entered promiscuous mode [ 46.250037][ T5944] team0: Port device team_slave_0 added [ 46.281245][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.284083][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.286769][ T5942] bridge_slave_1: entered allmulticast mode [ 46.290266][ T5942] bridge_slave_1: entered promiscuous mode [ 46.319319][ T5944] team0: Port device team_slave_1 added [ 46.363450][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.401009][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.466146][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.468138][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.476013][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.480317][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.482329][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.484601][ T5938] bridge_slave_0: entered allmulticast mode [ 46.486954][ T5938] bridge_slave_0: entered promiscuous mode [ 46.495159][ T5942] team0: Port device team_slave_0 added [ 46.497313][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.499335][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.507160][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.513692][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.516222][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.518841][ T5938] bridge_slave_1: entered allmulticast mode [ 46.522122][ T5938] bridge_slave_1: entered promiscuous mode [ 46.555099][ T5942] team0: Port device team_slave_1 added [ 46.602718][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.605618][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.607594][ T5949] bridge_slave_0: entered allmulticast mode [ 46.610106][ T5949] bridge_slave_0: entered promiscuous mode [ 46.612937][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.615040][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.617050][ T5949] bridge_slave_1: entered allmulticast mode [ 46.619389][ T5949] bridge_slave_1: entered promiscuous mode [ 46.642285][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.675061][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.677048][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.684389][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.688791][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.721290][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.723931][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.730893][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.762146][ T5944] hsr_slave_0: entered promiscuous mode [ 46.764595][ T5944] hsr_slave_1: entered promiscuous mode [ 46.768093][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.775797][ T5938] team0: Port device team_slave_0 added [ 46.779069][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.798455][ T5938] team0: Port device team_slave_1 added [ 46.891975][ T5942] hsr_slave_0: entered promiscuous mode [ 46.894631][ T5942] hsr_slave_1: entered promiscuous mode [ 46.896454][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.898676][ T5942] Cannot create hsr debugfs directory [ 46.932088][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.934616][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.942320][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.948044][ T5949] team0: Port device team_slave_0 added [ 46.951219][ T5949] team0: Port device team_slave_1 added [ 46.956008][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.957936][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.965646][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.032914][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.035053][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.043249][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.048076][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.050750][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.059890][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.105771][ T5938] hsr_slave_0: entered promiscuous mode [ 47.108506][ T5938] hsr_slave_1: entered promiscuous mode [ 47.111191][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.113555][ T5938] Cannot create hsr debugfs directory [ 47.237849][ T5949] hsr_slave_0: entered promiscuous mode [ 47.239893][ T5949] hsr_slave_1: entered promiscuous mode [ 47.241761][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.243934][ T5949] Cannot create hsr debugfs directory [ 47.416522][ T5944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.429971][ T5944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.434011][ T5944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.459977][ T5944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.494967][ T5942] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.499849][ T5942] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.506852][ T5942] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.513024][ T5942] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.560570][ T5938] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.566188][ T5938] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.572434][ T5938] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.584043][ T5938] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.638769][ T5949] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.642491][ T5949] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.646614][ T5949] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.652167][ T5949] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.670501][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.674157][ T5951] Bluetooth: hci0: command tx timeout [ 47.676024][ T5951] Bluetooth: hci3: command tx timeout [ 47.684019][ T5948] Bluetooth: hci1: command tx timeout [ 47.684033][ T5951] Bluetooth: hci2: command tx timeout [ 47.692793][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.707324][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.725938][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.727986][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.745029][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.747288][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.750428][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.767698][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.770411][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.779336][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.781360][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.801333][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.829826][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.858169][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.864219][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.866851][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.883923][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.885948][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.889770][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.896357][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.899121][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.903133][ T40] audit: type=1400 audit(1744469242.421:114): avc: denied { sys_module } for pid=5944 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.915591][ T235] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.918338][ T235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.971861][ T5938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.990191][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.021133][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.028886][ T5944] veth0_vlan: entered promiscuous mode [ 48.041933][ T5944] veth1_vlan: entered promiscuous mode [ 48.070442][ T5942] veth0_vlan: entered promiscuous mode [ 48.085294][ T5942] veth1_vlan: entered promiscuous mode [ 48.089192][ T5944] veth0_macvtap: entered promiscuous mode [ 48.094520][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.098013][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.102582][ T5944] veth1_macvtap: entered promiscuous mode [ 48.132113][ T5942] veth0_macvtap: entered promiscuous mode [ 48.139256][ T5942] veth1_macvtap: entered promiscuous mode [ 48.151017][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.161928][ T5938] veth0_vlan: entered promiscuous mode [ 48.165352][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.171331][ T5944] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.174828][ T5944] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.177254][ T5944] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.179635][ T5944] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.184525][ T5949] veth0_vlan: entered promiscuous mode [ 48.187407][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.191377][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.197579][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.209215][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.212081][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.215804][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.222064][ T5938] veth1_vlan: entered promiscuous mode [ 48.228426][ T5942] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.230803][ T5942] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.233127][ T5942] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.235964][ T5942] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.240288][ T5949] veth1_vlan: entered promiscuous mode [ 48.282317][ T5949] veth0_macvtap: entered promiscuous mode [ 48.289525][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.289655][ T5938] veth0_macvtap: entered promiscuous mode [ 48.291746][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.295951][ T5949] veth1_macvtap: entered promiscuous mode [ 48.311651][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.315386][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.318083][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.320947][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.324802][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.336340][ T5938] veth1_macvtap: entered promiscuous mode [ 48.341853][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.345715][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.348367][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.351208][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.355023][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.357391][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.359675][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.370356][ T5949] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.372785][ T5949] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.375720][ T5949] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.378112][ T5949] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.387216][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.389722][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.397105][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.399980][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.402657][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.406244][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.408971][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.411831][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.416768][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.424709][ T5944] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.434918][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.437848][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.440553][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.443399][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.446551][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.449458][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.452874][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.456877][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.457641][ T5938] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.459384][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.462511][ T5938] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.468087][ T5938] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.470642][ T5938] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.500710][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 48.507136][ T6006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 48.510766][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.512978][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.530147][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.533097][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.555674][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.559301][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.584640][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.587676][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.787529][ T6028] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 48.829567][ T6037] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 48.848584][ T6039] tipc: Started in network mode [ 48.850550][ T6039] tipc: Node identity ac1414aa, cluster identity 4711 [ 48.853163][ T6039] tipc: Enabled bearer , priority 10 [ 48.867909][ T6040] mkiss: ax0: crc mode is auto. [ 48.969640][ T6055] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 48.971946][ T6055] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 48.977339][ T6055] vhci_hcd vhci_hcd.0: Device attached [ 48.980793][ T6055] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 48.983227][ T6055] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 48.990079][ T6055] vhci_hcd vhci_hcd.0: Device attached [ 48.992713][ T6055] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(42) [ 48.994968][ T6055] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 48.998466][ T6055] vhci_hcd vhci_hcd.0: Device attached [ 49.001827][ T6055] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(44) [ 49.004377][ T6055] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 49.010507][ T6055] vhci_hcd vhci_hcd.0: Device attached [ 49.015279][ T6055] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(46) [ 49.017763][ T6055] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 49.023738][ T6055] vhci_hcd vhci_hcd.0: Device attached [ 49.026781][ T6053] ipt_REJECT: ECHOREPLY no longer supported. [ 49.029271][ T6053] ipt_REJECT: ECHOREPLY no longer supported. [ 49.031422][ T6053] ipt_REJECT: ECHOREPLY no longer supported. [ 49.051606][ T6067] vhci_hcd: connection closed [ 49.052912][ T6064] vhci_hcd: connection closed [ 49.055736][ T1177] vhci_hcd: stop threads [ 49.057057][ T6061] vhci_hcd: connection closed [ 49.057500][ T1177] vhci_hcd: release socket [ 49.058552][ T6059] vhci_hcd: connection closed [ 49.059830][ T1177] vhci_hcd: disconnect device [ 49.060023][ T1177] vhci_hcd: stop threads [ 49.062114][ T6056] vhci_hcd: connection closed [ 49.062462][ T1177] vhci_hcd: release socket [ 49.062471][ T1177] vhci_hcd: disconnect device [ 49.072887][ T1177] vhci_hcd: stop threads [ 49.074529][ T1177] vhci_hcd: release socket [ 49.075841][ T1177] vhci_hcd: disconnect device [ 49.077329][ T1177] vhci_hcd: stop threads [ 49.078023][ T6078] Zero length message leads to an empty skb [ 49.078507][ T1177] vhci_hcd: release socket [ 49.078515][ T1177] vhci_hcd: disconnect device [ 49.089712][ T1177] vhci_hcd: stop threads [ 49.090929][ T1177] vhci_hcd: release socket [ 49.093079][ T1177] vhci_hcd: disconnect device [ 49.100644][ T6081] tmpfs: Invalid uid '0x00000000ffffffff' [ 49.129780][ T6089] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23'. [ 49.153922][ T24] vhci_hcd: vhci_device speed not set [ 49.226797][ T6101] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.240740][ T6101] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.243984][ T6101] bond0: (slave bond1): Enslaving as an active interface with an up link [ 49.245239][ T6087] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.22'. [ 49.249376][ T6087] netlink: zone id is out of range [ 49.250848][ T6087] netlink: zone id is out of range [ 49.252289][ T6087] netlink: get zone limit has 8 unknown bytes [ 49.334894][ T6106] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 49.337274][ T6106] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 49.342429][ T6106] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 49.347467][ T6106] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 49.349776][ T6106] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 49.353396][ T6106] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 49.360998][ T6106] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 49.363223][ T6106] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 49.368794][ T6106] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 49.372752][ T9] kernel read not supported for file /zero (pid: 9 comm: kworker/0:0) [ 49.379746][ T6106] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 49.381951][ T6106] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 49.386541][ T6106] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 49.512648][ T5948] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 49.556302][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 49.558786][ T6123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.32'. [ 49.561419][ T6123] netlink: 'syz.0.32': attribute type 7 has an invalid length. [ 49.568772][ T6123] xt_hashlimit: size too large, truncated to 1048576 [ 49.680092][ T6127] syz.0.33 uses obsolete (PF_INET,SOCK_PACKET) [ 49.844834][ T9] tipc: Node number set to 2886997162 [ 49.863973][ T6136] process 'syz.1.36' launched './file0' with NULL argv: empty string added [ 50.077241][ T6151] 9pnet_fd: Insufficient options for proto=fd [ 50.109062][ T6151] kvm: pic: single mode not supported [ 50.125761][ T6151] kvm: pic: single mode not supported [ 50.139439][ T6151] kvm: pic: level sensitive irq not supported [ 50.161819][ T6153] overlayfs: upper fs does not support tmpfile. [ 50.169719][ T6153] batman_adv: batadv0: Adding interface: dummy0 [ 50.172054][ T6153] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.181290][ T6153] batman_adv: batadv0: Interface activated: dummy0 [ 50.193959][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 50.343583][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 50.347703][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 50.351045][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 50.353937][ T40] kauditd_printk_skb: 148 callbacks suppressed [ 50.353944][ T40] audit: type=1400 audit(1744469244.871:263): avc: denied { append } for pid=6154 comm="syz.0.43" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 50.361731][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 50.364441][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 50.367226][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 50.370749][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 50.373246][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.399370][ T40] audit: type=1400 audit(1744469244.921:264): avc: denied { write } for pid=6156 comm="syz.0.44" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 50.416141][ T6157] kvm: user requested TSC rate below hardware speed [ 50.430658][ T6157] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 50.467091][ T40] audit: type=1400 audit(1744469244.991:265): avc: denied { bind } for pid=6160 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.475422][ T40] audit: type=1400 audit(1744469244.991:266): avc: denied { node_bind } for pid=6160 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 50.585712][ T9] usb 6-1: usb_control_msg returned -32 [ 50.587325][ T9] usbtmc 6-1:16.0: can't read capabilities [ 50.676952][ T40] audit: type=1400 audit(1744469245.201:267): avc: denied { map } for pid=6170 comm="syz.0.47" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 50.726805][ T40] audit: type=1326 audit(1744469245.251:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6177 comm="syz.2.49" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f290e58d169 code=0x0 [ 50.745990][ T6180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.50'. [ 50.773597][ T40] audit: type=1400 audit(1744469245.291:269): avc: denied { create } for pid=6181 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 50.870114][ T40] audit: type=1400 audit(1744469245.381:270): avc: denied { create } for pid=6183 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.876336][ T40] audit: type=1400 audit(1744469245.381:271): avc: denied { write } for pid=6183 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.904329][ T6186] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 50.907345][ T6186] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 50.910594][ T6186] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 50.912809][ T6186] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 50.992816][ T40] audit: type=1400 audit(1744469245.511:272): avc: denied { unmount } for pid=5949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 51.069132][ T6201] netlink: 'syz.3.56': attribute type 2 has an invalid length. [ 51.071325][ T6201] netlink: 244 bytes leftover after parsing attributes in process `syz.3.56'. [ 51.074066][ T6201] netlink: 'syz.3.56': attribute type 2 has an invalid length. [ 51.076139][ T6201] netlink: 244 bytes leftover after parsing attributes in process `syz.3.56'. [ 51.078674][ T6201] netlink: 'syz.3.56': attribute type 2 has an invalid length. [ 51.080784][ T6201] netlink: 244 bytes leftover after parsing attributes in process `syz.3.56'. [ 51.083334][ T6201] netlink: 'syz.3.56': attribute type 2 has an invalid length. [ 51.086043][ T6201] netlink: 'syz.3.56': attribute type 2 has an invalid length. [ 51.088357][ T6201] netlink: 'syz.3.56': attribute type 2 has an invalid length. [ 51.090601][ T6201] netlink: 'syz.3.56': attribute type 2 has an invalid length. [ 51.092755][ T6201] netlink: 'syz.3.56': attribute type 2 has an invalid length. [ 51.095710][ T6201] netlink: 'syz.3.56': attribute type 2 has an invalid length. [ 51.177615][ T6210] capability: warning: `syz.3.59' uses deprecated v2 capabilities in a way that may be insecure [ 51.223898][ T6213] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 51.233404][ T6213] netdevsim netdevsim0: loading /lib/firmware// failed with error -22 [ 51.235995][ T6213] netdevsim netdevsim0: Direct firmware load for / failed with error -22 [ 51.238787][ T6213] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 51.627025][ T5940] usb 6-1: USB disconnect, device number 2 [ 52.023913][ T6233] : entered promiscuous mode [ 52.173065][ T6237] block device autoloading is deprecated and will be removed. [ 52.206329][ T6244] IPVS: Unknown mcast interface: netpci0 [ 52.241471][ T6252] ksmbd: Unknown IPC event: 3, ignore. [ 52.398469][ T6260] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.401862][ T6260] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.405138][ T6260] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.408263][ T6260] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.428048][ T6258] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 52.430464][ T6258] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 52.432728][ T6258] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 52.440872][ T6258] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 52.473669][ T9] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 52.654845][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 52.661492][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 52.665764][ T9] usb 6-1: string descriptor 0 read error: -22 [ 52.667580][ T9] usb 6-1: New USB device found, idVendor=056a, idProduct=0323, bcdDevice= 0.40 [ 52.670106][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.676378][ T6244] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 52.688513][ T6287] syz.3.81 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 52.692225][ T6287] loop8: detected capacity change from 0 to 128 [ 52.797347][ T6289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=6289 comm=syz.2.82 [ 52.800734][ T6289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=6289 comm=syz.2.82 [ 52.848523][ T6305] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 52.915669][ T9] usbhid 6-1:1.0: can't add hid device: -71 [ 52.917451][ T9] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 52.934060][ T6317] FAULT_INJECTION: forcing a failure. [ 52.934060][ T6317] name failslab, interval 1, probability 0, space 0, times 1 [ 52.934191][ T9] usb 6-1: USB disconnect, device number 3 [ 52.937769][ T6317] CPU: 3 UID: 0 PID: 6317 Comm: syz.2.91 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) [ 52.937784][ T6317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.937791][ T6317] Call Trace: [ 52.937801][ T6317] [ 52.937804][ T6317] dump_stack_lvl+0x16c/0x1f0 [ 52.937831][ T6317] should_fail_ex+0x512/0x640 [ 52.937845][ T6317] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 52.937858][ T6317] should_failslab+0xc2/0x120 [ 52.937870][ T6317] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 52.937880][ T6317] ? __pfx___might_resched+0x10/0x10 [ 52.937894][ T6317] ? alloc_vmap_area+0x613/0x2970 [ 52.937910][ T6317] alloc_vmap_area+0x613/0x2970 [ 52.937928][ T6317] ? __pfx_alloc_vmap_area+0x10/0x10 [ 52.937944][ T6317] __get_vm_area_node+0x1a7/0x300 [ 52.937961][ T6317] __vmalloc_node_range_noprof+0x277/0x1540 [ 52.937976][ T6317] ? __snd_dma_alloc_pages+0x50/0x90 [ 52.937987][ T6317] ? __mutex_trylock_common+0xe9/0x250 [ 52.937998][ T6317] ? __pfx___mutex_trylock_common+0x10/0x10 [ 52.938008][ T6317] ? __pfx___might_resched+0x10/0x10 [ 52.938023][ T6317] ? __snd_dma_alloc_pages+0x50/0x90 [ 52.938035][ T6317] ? do_alloc_pages+0xd7/0x280 [ 52.938049][ T6317] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 52.938065][ T6317] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 52.938081][ T6317] ? __snd_dma_alloc_pages+0x50/0x90 [ 52.938092][ T6317] vmalloc_noprof+0x6b/0x90 [ 52.938107][ T6317] ? __snd_dma_alloc_pages+0x50/0x90 [ 52.938117][ T6317] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 52.938128][ T6317] __snd_dma_alloc_pages+0x50/0x90 [ 52.938139][ T6317] snd_dma_alloc_dir_pages+0x151/0x240 [ 52.938151][ T6317] do_alloc_pages+0x115/0x280 [ 52.938162][ T6317] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 52.938175][ T6317] snd_pcm_hw_params+0x15e1/0x1b40 [ 52.938187][ T6317] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 52.938198][ T6317] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 52.938216][ T6317] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 52.938232][ T6317] ? __asan_memset+0x23/0x50 [ 52.938248][ T6317] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 52.938259][ T6317] snd_pcm_oss_change_params_locked+0x1432/0x3b40 [ 52.938281][ T6317] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 52.938307][ T6317] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 52.938324][ T6317] snd_pcm_oss_read+0x39b/0x760 [ 52.938333][ T6317] ? security_file_permission+0x71/0x210 [ 52.938350][ T6317] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 52.938360][ T6317] vfs_read+0x1de/0xc70 [ 52.938378][ T6317] ? __pfx_vfs_read+0x10/0x10 [ 52.938392][ T6317] ? find_held_lock+0x2b/0x80 [ 52.938405][ T6317] ? __fget_files+0x204/0x3c0 [ 52.938417][ T6317] ? __fget_files+0x20e/0x3c0 [ 52.938429][ T6317] ksys_read+0x12a/0x240 [ 52.938437][ T6317] ? __pfx_ksys_read+0x10/0x10 [ 52.938445][ T6317] ? rcu_is_watching+0x12/0xc0 [ 52.938461][ T6317] do_syscall_64+0xcd/0x260 [ 52.938476][ T6317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.938486][ T6317] RIP: 0033:0x7f290e58d169 [ 52.938495][ T6317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.938504][ T6317] RSP: 002b:00007f290f43e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.938514][ T6317] RAX: ffffffffffffffda RBX: 00007f290e7a5fa0 RCX: 00007f290e58d169 [ 52.938520][ T6317] RDX: 0000000000001009 RSI: 0000200000003200 RDI: 0000000000000005 [ 52.938525][ T6317] RBP: 00007f290f43e090 R08: 0000000000000000 R09: 0000000000000000 [ 52.938531][ T6317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.938536][ T6317] R13: 0000000000000000 R14: 00007f290e7a5fa0 R15: 00007ffd130ef598 [ 52.938548][ T6317] [ 52.938664][ T6317] syz.2.91: vmalloc error: size 2097152, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 53.042828][ T6317] CPU: 3 UID: 0 PID: 6317 Comm: syz.2.91 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) [ 53.042842][ T6317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.042848][ T6317] Call Trace: [ 53.042851][ T6317] [ 53.042854][ T6317] dump_stack_lvl+0x16c/0x1f0 [ 53.042872][ T6317] warn_alloc+0x248/0x3a0 [ 53.042883][ T6317] ? __pfx_warn_alloc+0x10/0x10 [ 53.042894][ T6317] ? kfree+0x2b6/0x4d0 [ 53.042911][ T6317] ? __get_vm_area_node+0x1e5/0x300 [ 53.042928][ T6317] __vmalloc_node_range_noprof+0xd31/0x1540 [ 53.042943][ T6317] ? __mutex_trylock_common+0xe9/0x250 [ 53.042954][ T6317] ? __pfx___mutex_trylock_common+0x10/0x10 [ 53.042964][ T6317] ? __pfx___might_resched+0x10/0x10 [ 53.042980][ T6317] ? __snd_dma_alloc_pages+0x50/0x90 [ 53.042993][ T6317] ? do_alloc_pages+0xd7/0x280 [ 53.043003][ T6317] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 53.043019][ T6317] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 53.043036][ T6317] ? __snd_dma_alloc_pages+0x50/0x90 [ 53.043047][ T6317] vmalloc_noprof+0x6b/0x90 [ 53.043062][ T6317] ? __snd_dma_alloc_pages+0x50/0x90 [ 53.043071][ T6317] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 53.043082][ T6317] __snd_dma_alloc_pages+0x50/0x90 [ 53.043093][ T6317] snd_dma_alloc_dir_pages+0x151/0x240 [ 53.043105][ T6317] do_alloc_pages+0x115/0x280 [ 53.043117][ T6317] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 53.043129][ T6317] snd_pcm_hw_params+0x15e1/0x1b40 [ 53.043142][ T6317] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 53.043153][ T6317] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 53.043171][ T6317] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 53.043187][ T6317] ? __asan_memset+0x23/0x50 [ 53.043204][ T6317] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 53.043215][ T6317] snd_pcm_oss_change_params_locked+0x1432/0x3b40 [ 53.043237][ T6317] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 53.043263][ T6317] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 53.043280][ T6317] snd_pcm_oss_read+0x39b/0x760 [ 53.043289][ T6317] ? security_file_permission+0x71/0x210 [ 53.043306][ T6317] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 53.043316][ T6317] vfs_read+0x1de/0xc70 [ 53.043334][ T6317] ? __pfx_vfs_read+0x10/0x10 [ 53.043349][ T6317] ? find_held_lock+0x2b/0x80 [ 53.043361][ T6317] ? __fget_files+0x204/0x3c0 [ 53.043373][ T6317] ? __fget_files+0x20e/0x3c0 [ 53.043385][ T6317] ksys_read+0x12a/0x240 [ 53.043393][ T6317] ? __pfx_ksys_read+0x10/0x10 [ 53.043401][ T6317] ? rcu_is_watching+0x12/0xc0 [ 53.043417][ T6317] do_syscall_64+0xcd/0x260 [ 53.043432][ T6317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.043442][ T6317] RIP: 0033:0x7f290e58d169 [ 53.043451][ T6317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.043460][ T6317] RSP: 002b:00007f290f43e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 53.043485][ T6317] RAX: ffffffffffffffda RBX: 00007f290e7a5fa0 RCX: 00007f290e58d169 [ 53.043492][ T6317] RDX: 0000000000001009 RSI: 0000200000003200 RDI: 0000000000000005 [ 53.043498][ T6317] RBP: 00007f290f43e090 R08: 0000000000000000 R09: 0000000000000000 [ 53.043503][ T6317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.043509][ T6317] R13: 0000000000000000 R14: 00007f290e7a5fa0 R15: 00007ffd130ef598 [ 53.043522][ T6317] [ 53.043582][ T6317] Mem-Info: [ 53.043589][ T6317] active_anon:6680 inactive_anon:0 isolated_anon:0 [ 53.043589][ T6317] active_file:899 inactive_file:38878 isolated_file:0 [ 53.043589][ T6317] unevictable:1786 dirty:1752 writeback:0 [ 53.043589][ T6317] slab_reclaimable:11076 slab_unreclaimable:69710 [ 53.043589][ T6317] mapped:23803 shmem:2473 pagetables:846 [ 53.043589][ T6317] sec_pagetables:297 bounce:0 [ 53.043589][ T6317] kernel_misc_reclaimable:0 [ 53.043589][ T6317] free:481021 free_pcp:1086 free_cma:0 [ 53.043615][ T6317] Node 0 active_anon:26720kB inactive_anon:0kB active_file:3596kB inactive_file:155440kB unevictable:3608kB isolated(anon):0kB isolated(file):0kB mapped:95212kB dirty:6980kB writeback:0kB shmem:6356kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11984kB pagetables:3384kB sec_pagetables:1188kB all_unreclaimable? no Balloon:0kB [ 53.043641][ T6317] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:28kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 53.043665][ T6317] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 53.043691][ T6317] lowmem_reserve[]: 0 1236 1236 1236 1236 [ 53.043710][ T6317] Node 0 DMA32 free:320672kB boost:0kB min:27548kB low:34432kB high:41316kB reserved_highatomic:0KB active_anon:26720kB inactive_anon:0kB active_file:3596kB inactive_file:155440kB unevictable:3608kB writepending:6980kB present:2080628kB managed:1265900kB mlocked:68kB bounce:0kB free_pcp:3324kB local_pcp:680kB free_cma:0kB [ 53.043738][ T6317] lowmem_reserve[]: 0 0 0 0 0 [ 53.043756][ T6317] Node 1 Normal free:1588052kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:3536kB writepending:28kB present:2097152kB managed:1781964kB mlocked:0kB bounce:0kB free_pcp:1020kB local_pcp:332kB free_cma:0kB [ 53.043788][ T6317] lowmem_reserve[]: 0 0 0 0 0 [ 53.043806][ T6317] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 53.043874][ T6317] Node 0 DMA32: 1*4kB (M) 5*8kB (UME) 12*16kB (E) 64*32kB (UME) 83*64kB (UME) 50*128kB (UM) 42*256kB (UM) 28*512kB (UME) 5*1024kB (M) 3*2048kB (UM) 66*4096kB (UM) = 320684kB [ 53.043958][ T6317] Node 1 Normal: 5*4kB (UME) 14*8kB (UME) 25*16kB (UME) 132*32kB (UME) 55*64kB (UME) 22*128kB (UME) 8*256kB (UE) 4*512kB (ME) 4*1024kB (UE) 2*2048kB (UM) 382*4096kB (M) = 1588052kB [ 53.044042][ T6317] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 53.044051][ T6317] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 53.044059][ T6317] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 53.044066][ T6317] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 53.044074][ T6317] 42250 total pagecache pages [ 53.044078][ T6317] 0 pages in swap cache [ 53.044082][ T6317] Free swap = 124996kB [ 53.044086][ T6317] Total swap = 124996kB [ 53.044090][ T6317] 1048443 pages RAM [ 53.044093][ T6317] 0 pages HighMem/MovableOnly [ 53.044097][ T6317] 282637 pages reserved [ 53.044100][ T6317] 0 pages cma reserved [ 53.194121][ T6324] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 53.237469][ T6324] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 53.239433][ T6324] vhci_hcd vhci_hcd.0: Device attached [ 53.245416][ T6325] vhci_hcd: cannot find the pending unlink 1023 [ 53.247473][ T6325] vhci_hcd: connection closed [ 53.247680][ T13] vhci_hcd: stop threads [ 53.250201][ T13] vhci_hcd: release socket [ 53.251380][ T13] vhci_hcd: disconnect device [ 53.301615][ T6331] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 53.532719][ T6340] mmap: syz.1.97 (6340) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.776017][ T6355] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 53.779706][ T6355] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 53.782131][ T6355] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 53.786253][ T6355] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 53.823838][ T6362] __nla_validate_parse: 63 callbacks suppressed [ 53.823848][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'. [ 53.825128][ T6367] syz.0.105: attempt to access beyond end of device [ 53.825128][ T6367] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 53.831782][ T6367] FAT-fs (nbd0): unable to read boot sector [ 53.849372][ T6370] netlink: 68 bytes leftover after parsing attributes in process `syz.2.107'. [ 53.886809][ T6373] FAULT_INJECTION: forcing a failure. [ 53.886809][ T6373] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 53.890432][ T6373] CPU: 0 UID: 0 PID: 6373 Comm: syz.3.108 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) [ 53.890446][ T6373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.890452][ T6373] Call Trace: [ 53.890456][ T6373] [ 53.890460][ T6373] dump_stack_lvl+0x16c/0x1f0 [ 53.890478][ T6373] should_fail_ex+0x512/0x640 [ 53.890491][ T6373] should_fail_alloc_page+0xe7/0x130 [ 53.890504][ T6373] prepare_alloc_pages+0x3c2/0x610 [ 53.890521][ T6373] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 53.890532][ T6373] ? __kernel_text_address+0xd/0x40 [ 53.890544][ T6373] ? unwind_get_return_address+0x59/0xa0 [ 53.890558][ T6373] ? arch_stack_walk+0xa6/0x100 [ 53.890576][ T6373] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 53.890587][ T6373] ? stack_trace_save+0x8e/0xc0 [ 53.890600][ T6373] ? __pfx_stack_trace_save+0x10/0x10 [ 53.890613][ T6373] ? stack_depot_save_flags+0x28/0xa50 [ 53.890624][ T6373] ? find_held_lock+0x2b/0x80 [ 53.890639][ T6373] ? kasan_save_stack+0x42/0x60 [ 53.890648][ T6373] ? kasan_save_stack+0x33/0x60 [ 53.890656][ T6373] ? kasan_save_track+0x14/0x30 [ 53.890664][ T6373] ? __kasan_slab_alloc+0x89/0x90 [ 53.890674][ T6373] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 53.890684][ T6373] ? alloc_vmap_area+0x613/0x2970 [ 53.890696][ T6373] ? __get_vm_area_node+0x1a7/0x300 [ 53.890709][ T6373] ? __vmalloc_node_range_noprof+0x277/0x1540 [ 53.890723][ T6373] ? vmalloc_noprof+0x6b/0x90 [ 53.890736][ T6373] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 53.890748][ T6373] ? policy_nodemask+0xea/0x4e0 [ 53.890761][ T6373] alloc_pages_mpol+0x1fb/0x550 [ 53.890772][ T6373] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 53.890790][ T6373] alloc_pages_noprof+0x131/0x390 [ 53.890802][ T6373] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 53.890817][ T6373] get_free_pages_noprof+0xc/0x40 [ 53.890829][ T6373] kasan_populate_vmalloc_pte+0x2d/0x160 [ 53.890845][ T6373] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 53.890860][ T6373] __apply_to_page_range+0x5f9/0xd30 [ 53.890876][ T6373] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 53.890894][ T6373] ? __pfx___apply_to_page_range+0x10/0x10 [ 53.890909][ T6373] ? alloc_vmap_area+0x872/0x2970 [ 53.890924][ T6373] alloc_vmap_area+0x919/0x2970 [ 53.890942][ T6373] ? __pfx_alloc_vmap_area+0x10/0x10 [ 53.890958][ T6373] __get_vm_area_node+0x1a7/0x300 [ 53.890975][ T6373] __vmalloc_node_range_noprof+0x277/0x1540 [ 53.890990][ T6373] ? __snd_dma_alloc_pages+0x50/0x90 [ 53.891001][ T6373] ? __mutex_trylock_common+0xe9/0x250 [ 53.891011][ T6373] ? __pfx___mutex_trylock_common+0x10/0x10 [ 53.891021][ T6373] ? __pfx___might_resched+0x10/0x10 [ 53.891037][ T6373] ? __snd_dma_alloc_pages+0x50/0x90 [ 53.891048][ T6373] ? do_alloc_pages+0xd7/0x280 [ 53.891058][ T6373] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 53.891074][ T6373] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 53.891091][ T6373] ? __snd_dma_alloc_pages+0x50/0x90 [ 53.891102][ T6373] vmalloc_noprof+0x6b/0x90 [ 53.891116][ T6373] ? __snd_dma_alloc_pages+0x50/0x90 [ 53.891126][ T6373] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 53.891137][ T6373] __snd_dma_alloc_pages+0x50/0x90 [ 53.891148][ T6373] snd_dma_alloc_dir_pages+0x151/0x240 [ 53.891160][ T6373] do_alloc_pages+0x115/0x280 [ 53.891171][ T6373] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 53.891184][ T6373] snd_pcm_hw_params+0x15e1/0x1b40 [ 53.891197][ T6373] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 53.891208][ T6373] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 53.891225][ T6373] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 53.891242][ T6373] ? __asan_memset+0x23/0x50 [ 53.891257][ T6373] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 53.891268][ T6373] snd_pcm_oss_change_params_locked+0x1432/0x3b40 [ 53.891291][ T6373] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 53.891317][ T6373] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 53.891334][ T6373] snd_pcm_oss_read+0x39b/0x760 [ 53.891343][ T6373] ? security_file_permission+0x71/0x210 [ 53.891360][ T6373] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 53.891369][ T6373] vfs_read+0x1de/0xc70 [ 53.891388][ T6373] ? __pfx_vfs_read+0x10/0x10 [ 53.891402][ T6373] ? find_held_lock+0x2b/0x80 [ 53.891415][ T6373] ? __fget_files+0x204/0x3c0 [ 53.891426][ T6373] ? __fget_files+0x20e/0x3c0 [ 53.891439][ T6373] ksys_read+0x12a/0x240 [ 53.891447][ T6373] ? __pfx_ksys_read+0x10/0x10 [ 53.891454][ T6373] ? rcu_is_watching+0x12/0xc0 [ 53.891470][ T6373] do_syscall_64+0xcd/0x260 [ 53.891485][ T6373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.891495][ T6373] RIP: 0033:0x7fabf338d169 [ 53.891504][ T6373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.891513][ T6373] RSP: 002b:00007fabf41ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 53.891522][ T6373] RAX: ffffffffffffffda RBX: 00007fabf35a5fa0 RCX: 00007fabf338d169 [ 53.891528][ T6373] RDX: 0000000000001009 RSI: 0000200000003200 RDI: 0000000000000005 [ 53.891534][ T6373] RBP: 00007fabf41ca090 R08: 0000000000000000 R09: 0000000000000000 [ 53.891539][ T6373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.891545][ T6373] R13: 0000000000000000 R14: 00007fabf35a5fa0 R15: 00007ffc61d154f8 [ 53.891557][ T6373] [ 54.047248][ T6375] syz.0.109: attempt to access beyond end of device [ 54.047248][ T6375] loop0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 54.050889][ T6375] MINIX-fs: unable to read superblock [ 54.205686][ T6388] trusted_key: syz.0.113 sent an empty control message without MSG_MORE. [ 54.575041][ T6402] netlink: 56 bytes leftover after parsing attributes in process `syz.1.115'. [ 54.579192][ T6402] netlink: 100 bytes leftover after parsing attributes in process `syz.1.115'. [ 54.767255][ T6417] validate_nla: 58 callbacks suppressed [ 54.767266][ T6417] netlink: 'syz.1.120': attribute type 10 has an invalid length. [ 54.784755][ T6417] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 54.796209][ T6417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.875818][ T6426] dccp_v4_rcv: dropped packet with invalid checksum [ 55.101442][ T6446] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 55.106045][ T6446] PKCS7: Only support pkcs7_signedData type [ 55.107872][ T6445] input: syz1 as /devices/virtual/input/input5 [ 55.128678][ T6445] No buffer was provided with the request [ 55.204787][ T6454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.132'. [ 55.207552][ T6455] netlink: 20 bytes leftover after parsing attributes in process `syz.1.132'. [ 55.221464][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'. [ 55.224743][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'. [ 55.321270][ T6474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5376 sclass=netlink_route_socket pid=6474 comm=syz.1.140 [ 55.326906][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.140'. [ 55.332862][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.140'. [ 55.433683][ T40] kauditd_printk_skb: 66 callbacks suppressed [ 55.433694][ T40] audit: type=1400 audit(1744469249.951:339): avc: denied { setopt } for pid=6466 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.442151][ T40] audit: type=1400 audit(1744469249.951:340): avc: denied { connect } for pid=6466 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 55.451347][ T40] audit: type=1400 audit(1744469249.971:341): avc: denied { create } for pid=6483 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 55.459199][ T40] audit: type=1400 audit(1744469249.971:342): avc: denied { ioctl } for pid=6483 comm="syz.1.143" path="socket:[10045]" dev="sockfs" ino=10045 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 55.779068][ T40] audit: type=1400 audit(1744469250.301:343): avc: denied { create } for pid=6499 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 55.834424][ T5948] Bluetooth: hci3: command 0x040f tx timeout [ 55.834573][ T5951] Bluetooth: hci2: command 0x040f tx timeout [ 55.834873][ T5295] Bluetooth: hci1: command 0x040f tx timeout [ 55.834889][ T5954] Bluetooth: hci0: command 0x040f tx timeout [ 55.855274][ T40] audit: type=1400 audit(1744469250.381:344): avc: denied { create } for pid=6499 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 55.933338][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 55.971504][ T40] audit: type=1400 audit(1744469250.491:345): avc: denied { append } for pid=6515 comm="syz.3.150" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.981296][ T40] audit: type=1400 audit(1744469250.501:346): avc: denied { getopt } for pid=6515 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.245479][ T40] audit: type=1400 audit(1744469250.771:347): avc: denied { create } for pid=6527 comm="syz.2.154" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 56.396846][ T40] audit: type=1400 audit(1744469250.921:348): avc: denied { name_connect } for pid=6529 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 56.484000][ T5940] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 56.485007][ T6540] macvlan1: entered promiscuous mode [ 56.488483][ T6540] macvlan1: entered allmulticast mode [ 56.492908][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 56.633569][ T5940] usb 7-1: Using ep0 maxpacket: 16 [ 56.636983][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.640039][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.642856][ T5940] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 56.646700][ T5940] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 56.649209][ T5940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.652645][ T5940] usb 7-1: config 0 descriptor?? [ 57.034919][ T6554] program syz.3.162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.037862][ T6554] netlink: 'syz.3.162': attribute type 5 has an invalid length. [ 57.062973][ T5940] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 57.067299][ T5940] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 57.069257][ T5940] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 57.071194][ T5940] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 57.073156][ T5940] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 57.078978][ T5940] input: HID 0955:7214 Haptics as /devices/virtual/input/input6 [ 57.099842][ T5940] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 57.102259][ T5940] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 57.239174][ T6565] xt_hashlimit: size too large, truncated to 1048576 [ 57.260685][ T6528] random: crng reseeded on system resumption [ 57.326657][ T6568] usb usb9: usbfs: process 6568 (syz.2.154) did not claim interface 0 before use [ 57.913618][ T5948] Bluetooth: hci1: command 0x040f tx timeout [ 57.913623][ T5295] Bluetooth: hci3: command 0x040f tx timeout [ 57.913833][ T5948] Bluetooth: hci0: command 0x040f tx timeout [ 57.924888][ T5948] Bluetooth: hci2: command 0x040f tx timeout [ 57.958383][ T6574] FAULT_INJECTION: forcing a failure. [ 57.958383][ T6574] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 57.962143][ T6574] CPU: 3 UID: 0 PID: 6574 Comm: syz.2.168 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) [ 57.962159][ T6574] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.962165][ T6574] Call Trace: [ 57.962169][ T6574] [ 57.962173][ T6574] dump_stack_lvl+0x16c/0x1f0 [ 57.962190][ T6574] should_fail_ex+0x512/0x640 [ 57.962204][ T6574] should_fail_alloc_page+0xe7/0x130 [ 57.962218][ T6574] prepare_alloc_pages+0x3c2/0x610 [ 57.962232][ T6574] ? rcu_is_watching+0x12/0xc0 [ 57.962247][ T6574] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 57.962258][ T6574] ? __kernel_text_address+0xd/0x40 [ 57.962270][ T6574] ? unwind_get_return_address+0x59/0xa0 [ 57.962285][ T6574] ? arch_stack_walk+0xa6/0x100 [ 57.962305][ T6574] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 57.962316][ T6574] ? stack_trace_save+0x8e/0xc0 [ 57.962330][ T6574] ? __pfx_stack_trace_save+0x10/0x10 [ 57.962343][ T6574] ? stack_depot_save_flags+0x28/0xa50 [ 57.962354][ T6574] ? find_held_lock+0x2b/0x80 [ 57.962369][ T6574] ? kasan_save_stack+0x42/0x60 [ 57.962381][ T6574] ? __lock_acquire+0xaa4/0x1ba0 [ 57.962389][ T6574] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 57.962401][ T6574] ? policy_nodemask+0xea/0x4e0 [ 57.962413][ T6574] alloc_pages_mpol+0x1fb/0x550 [ 57.962425][ T6574] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 57.962435][ T6574] ? __page_table_check_ptes_set+0x1ae/0x420 [ 57.962447][ T6574] ? find_held_lock+0x2b/0x80 [ 57.962461][ T6574] alloc_pages_noprof+0x131/0x390 [ 57.962473][ T6574] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 57.962488][ T6574] get_free_pages_noprof+0xc/0x40 [ 57.962500][ T6574] kasan_populate_vmalloc_pte+0x2d/0x160 [ 57.962517][ T6574] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 57.962532][ T6574] __apply_to_page_range+0x5f9/0xd30 [ 57.962548][ T6574] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 57.962567][ T6574] ? __pfx___apply_to_page_range+0x10/0x10 [ 57.962581][ T6574] ? alloc_vmap_area+0x872/0x2970 [ 57.962597][ T6574] alloc_vmap_area+0x919/0x2970 [ 57.962615][ T6574] ? __pfx_alloc_vmap_area+0x10/0x10 [ 57.962632][ T6574] __get_vm_area_node+0x1a7/0x300 [ 57.962649][ T6574] __vmalloc_node_range_noprof+0x277/0x1540 [ 57.962664][ T6574] ? __snd_dma_alloc_pages+0x50/0x90 [ 57.962675][ T6574] ? __mutex_trylock_common+0xe9/0x250 [ 57.962686][ T6574] ? __pfx___mutex_trylock_common+0x10/0x10 [ 57.962698][ T6574] ? __pfx___might_resched+0x10/0x10 [ 57.962713][ T6574] ? __snd_dma_alloc_pages+0x50/0x90 [ 57.962725][ T6574] ? do_alloc_pages+0xd7/0x280 [ 57.962735][ T6574] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 57.962751][ T6574] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 57.962768][ T6574] ? __snd_dma_alloc_pages+0x50/0x90 [ 57.962779][ T6574] vmalloc_noprof+0x6b/0x90 [ 57.962793][ T6574] ? __snd_dma_alloc_pages+0x50/0x90 [ 57.962803][ T6574] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 57.962814][ T6574] __snd_dma_alloc_pages+0x50/0x90 [ 57.962825][ T6574] snd_dma_alloc_dir_pages+0x151/0x240 [ 57.962838][ T6574] do_alloc_pages+0x115/0x280 [ 57.962849][ T6574] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 57.962862][ T6574] snd_pcm_hw_params+0x15e1/0x1b40 [ 57.962875][ T6574] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 57.962886][ T6574] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 57.962904][ T6574] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 57.962920][ T6574] ? __asan_memset+0x23/0x50 [ 57.962942][ T6574] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 57.962953][ T6574] snd_pcm_oss_change_params_locked+0x1432/0x3b40 [ 57.962975][ T6574] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 57.963002][ T6574] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 57.963019][ T6574] snd_pcm_oss_read+0x39b/0x760 [ 57.963028][ T6574] ? security_file_permission+0x71/0x210 [ 57.963045][ T6574] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 57.963055][ T6574] vfs_read+0x1de/0xc70 [ 57.963074][ T6574] ? __pfx_vfs_read+0x10/0x10 [ 57.963088][ T6574] ? find_held_lock+0x2b/0x80 [ 57.963100][ T6574] ? __fget_files+0x204/0x3c0 [ 57.963112][ T6574] ? __fget_files+0x20e/0x3c0 [ 57.963125][ T6574] ksys_read+0x12a/0x240 [ 57.963133][ T6574] ? __pfx_ksys_read+0x10/0x10 [ 57.963140][ T6574] ? rcu_is_watching+0x12/0xc0 [ 57.963156][ T6574] do_syscall_64+0xcd/0x260 [ 57.963171][ T6574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.963181][ T6574] RIP: 0033:0x7f290e58d169 [ 57.963190][ T6574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.963199][ T6574] RSP: 002b:00007f290f43e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.963209][ T6574] RAX: ffffffffffffffda RBX: 00007f290e7a5fa0 RCX: 00007f290e58d169 [ 57.963215][ T6574] RDX: 0000000000001009 RSI: 0000200000003200 RDI: 0000000000000005 [ 57.963221][ T6574] RBP: 00007f290f43e090 R08: 0000000000000000 R09: 0000000000000000 [ 57.963227][ T6574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 57.963232][ T6574] R13: 0000000000000000 R14: 00007f290e7a5fa0 R15: 00007ffd130ef598 [ 57.963245][ T6574] [ 58.226450][ T24] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 58.230542][ T24] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 58.234704][ T24] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 58.237990][ T24] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 58.254816][ T6585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.356941][ T5940] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 58.483601][ T5940] usb 7-1: device descriptor read/64, error -32 [ 58.494345][ T6603] kvm: pic: non byte read [ 58.553758][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 58.554204][ T5948] Bluetooth: hci4: command 0x1003 tx timeout [ 58.583591][ T6002] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.723674][ T5940] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 58.735202][ T6002] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 58.737484][ T6002] usb 5-1: can't read configurations, error -61 [ 58.789546][ T6623] input: syz1 as /devices/virtual/input/input7 [ 58.853711][ T5940] usb 7-1: device descriptor read/64, error -32 [ 58.863689][ T6002] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 58.930750][ T6629] gfs2: not a GFS2 filesystem [ 59.015143][ T6002] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 59.017314][ T6002] usb 5-1: can't read configurations, error -61 [ 59.019346][ T6002] usb usb5-port1: attempt power cycle [ 59.093574][ T5940] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 59.113910][ T5940] usb 7-1: device descriptor read/8, error -32 [ 59.354682][ T6002] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 59.363881][ T5940] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 59.375676][ T6002] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 59.378012][ T6002] usb 5-1: can't read configurations, error -61 [ 59.383737][ T5940] usb 7-1: device descriptor read/8, error -32 [ 59.493625][ T5940] raw-gadget.0 gadget.2: failed to queue suspend event [ 59.498223][ T24] usb 7-1: USB disconnect, device number 2 [ 59.514358][ T6002] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 59.540613][ T6002] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 59.542963][ T6002] usb 5-1: can't read configurations, error -61 [ 59.543964][ T6638] FAULT_INJECTION: forcing a failure. [ 59.543964][ T6638] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 59.545403][ T24] raw-gadget.0 gadget.2: failed to queue reset event [ 59.548388][ T6638] CPU: 0 UID: 0 PID: 6638 Comm: syz.3.188 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) [ 59.548403][ T6638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.548409][ T6638] Call Trace: [ 59.548412][ T6638] [ 59.548416][ T6638] dump_stack_lvl+0x16c/0x1f0 [ 59.548446][ T6638] should_fail_ex+0x512/0x640 [ 59.548463][ T6638] should_fail_alloc_page+0xe7/0x130 [ 59.548476][ T6638] prepare_alloc_pages+0x3c2/0x610 [ 59.548491][ T6638] ? rcu_is_watching+0x12/0xc0 [ 59.548505][ T6638] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 59.548518][ T6638] ? lock_acquire+0x179/0x350 [ 59.548530][ T6638] ? mark_held_locks+0x49/0x80 [ 59.548539][ T6638] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 59.548550][ T6638] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 59.548563][ T6638] ? stack_depot_save_flags+0x3e6/0xa50 [ 59.548577][ T6638] ? kasan_save_stack+0x42/0x60 [ 59.548588][ T6638] ? __lock_acquire+0xaa4/0x1ba0 [ 59.548596][ T6638] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 59.548608][ T6638] ? policy_nodemask+0xea/0x4e0 [ 59.548620][ T6638] alloc_pages_mpol+0x1fb/0x550 [ 59.548632][ T6638] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 59.548642][ T6638] ? __page_table_check_ptes_set+0x1ae/0x420 [ 59.548654][ T6638] ? find_held_lock+0x2b/0x80 [ 59.548669][ T6638] alloc_pages_noprof+0x131/0x390 [ 59.548680][ T6638] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 59.548695][ T6638] get_free_pages_noprof+0xc/0x40 [ 59.548707][ T6638] kasan_populate_vmalloc_pte+0x2d/0x160 [ 59.548723][ T6638] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 59.548739][ T6638] __apply_to_page_range+0x5f9/0xd30 [ 59.548759][ T6638] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 59.548784][ T6638] ? __pfx___apply_to_page_range+0x10/0x10 [ 59.548803][ T6638] ? alloc_vmap_area+0x872/0x2970 [ 59.548826][ T6638] alloc_vmap_area+0x919/0x2970 [ 59.548846][ T6638] ? __pfx_alloc_vmap_area+0x10/0x10 [ 59.548862][ T6638] __get_vm_area_node+0x1a7/0x300 [ 59.548879][ T6638] __vmalloc_node_range_noprof+0x277/0x1540 [ 59.548894][ T6638] ? __snd_dma_alloc_pages+0x50/0x90 [ 59.548905][ T6638] ? __mutex_trylock_common+0xe9/0x250 [ 59.548915][ T6638] ? __pfx___mutex_trylock_common+0x10/0x10 [ 59.548926][ T6638] ? __pfx___might_resched+0x10/0x10 [ 59.548941][ T6638] ? __snd_dma_alloc_pages+0x50/0x90 [ 59.548953][ T6638] ? do_alloc_pages+0xd7/0x280 [ 59.548963][ T6638] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 59.548979][ T6638] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 59.548996][ T6638] ? __snd_dma_alloc_pages+0x50/0x90 [ 59.549007][ T6638] vmalloc_noprof+0x6b/0x90 [ 59.549025][ T6638] ? __snd_dma_alloc_pages+0x50/0x90 [ 59.549035][ T6638] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 59.549046][ T6638] __snd_dma_alloc_pages+0x50/0x90 [ 59.549057][ T6638] snd_dma_alloc_dir_pages+0x151/0x240 [ 59.549069][ T6638] do_alloc_pages+0x115/0x280 [ 59.549080][ T6638] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 59.549093][ T6638] snd_pcm_hw_params+0x15e1/0x1b40 [ 59.549107][ T6638] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 59.549117][ T6638] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 59.549135][ T6638] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 59.549152][ T6638] ? __asan_memset+0x23/0x50 [ 59.549167][ T6638] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 59.549179][ T6638] snd_pcm_oss_change_params_locked+0x1432/0x3b40 [ 59.549201][ T6638] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 59.549227][ T6638] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 59.549244][ T6638] snd_pcm_oss_read+0x39b/0x760 [ 59.549253][ T6638] ? security_file_permission+0x71/0x210 [ 59.549270][ T6638] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 59.549280][ T6638] vfs_read+0x1de/0xc70 [ 59.549298][ T6638] ? __pfx_vfs_read+0x10/0x10 [ 59.549312][ T6638] ? find_held_lock+0x2b/0x80 [ 59.549325][ T6638] ? __fget_files+0x204/0x3c0 [ 59.549337][ T6638] ? __fget_files+0x20e/0x3c0 [ 59.549349][ T6638] ksys_read+0x12a/0x240 [ 59.549358][ T6638] ? __pfx_ksys_read+0x10/0x10 [ 59.549365][ T6638] ? rcu_is_watching+0x12/0xc0 [ 59.549381][ T6638] do_syscall_64+0xcd/0x260 [ 59.549396][ T6638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.549406][ T6638] RIP: 0033:0x7fabf338d169 [ 59.549415][ T6638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.549424][ T6638] RSP: 002b:00007fabf41ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 59.549434][ T6638] RAX: ffffffffffffffda RBX: 00007fabf35a5fa0 RCX: 00007fabf338d169 [ 59.549440][ T6638] RDX: 0000000000001009 RSI: 0000200000003200 RDI: 0000000000000005 [ 59.549446][ T6638] RBP: 00007fabf41ca090 R08: 0000000000000000 R09: 0000000000000000 [ 59.549451][ T6638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 59.549457][ T6638] R13: 0000000000000000 R14: 00007fabf35a5fa0 R15: 00007ffc61d154f8 [ 59.549469][ T6638] [ 59.562828][ T6636] sctp: [Deprecated]: syz.1.187 (pid 6636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 59.562828][ T6636] Use struct sctp_sack_info instead [ 59.565133][ T6002] usb usb5-port1: unable to enumerate USB device [ 59.773719][ T24] raw-gadget.0 gadget.2: failed to queue resume event [ 59.834253][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 59.836600][ C2] raw-gadget.0 gadget.2: ignoring, device is not running [ 59.838607][ T24] raw-gadget.0 gadget.2: failed to queue reset event [ 59.897873][ T6645] sctp: [Deprecated]: syz.2.190 (pid 6645) Use of int in max_burst socket option deprecated. [ 59.897873][ T6645] Use struct sctp_assoc_value instead [ 59.903632][ T24] raw-gadget.0 gadget.2: failed to queue resume event [ 59.964442][ T24] usb 7-1: device descriptor read/64, error -32 [ 59.978389][ T6647] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 59.981206][ T6647] syz.2.191: attempt to access beyond end of device [ 59.981206][ T6647] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 59.993661][ T5948] Bluetooth: hci0: command 0x040f tx timeout [ 59.993704][ T5295] Bluetooth: hci2: command 0x040f tx timeout [ 59.993726][ T5954] Bluetooth: hci1: command 0x040f tx timeout [ 60.003637][ T5295] Bluetooth: hci3: command 0x040f tx timeout [ 60.080439][ T6651] bridge_slave_0: left allmulticast mode [ 60.082322][ T6651] bridge_slave_0: left promiscuous mode [ 60.084458][ T24] raw-gadget.0 gadget.2: failed to queue suspend event [ 60.087075][ T6651] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.091642][ T24] raw-gadget.0 gadget.2: failed to queue reset event [ 60.097622][ T6651] bridge_slave_1: left allmulticast mode [ 60.099825][ T6651] bridge_slave_1: left promiscuous mode [ 60.102167][ T6651] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.115325][ T6651] bond0: (slave bond_slave_0): Releasing backup interface [ 60.119796][ T6651] bond0: (slave bond_slave_1): Releasing backup interface [ 60.129482][ T6651] team0: Port device team_slave_0 removed [ 60.135937][ T6651] team0: Port device team_slave_1 removed [ 60.138410][ T6651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.141067][ T6651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.146618][ T6651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.148694][ T6651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.163694][ T24] raw-gadget.0 gadget.2: failed to queue resume event [ 60.171542][ T6652] team0: Mode changed to "loadbalance" [ 60.178190][ T6651] __nla_validate_parse: 5 callbacks suppressed [ 60.178199][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.192'. [ 60.227744][ T6654] misc userio: Begin command sent, but we're already running [ 60.233710][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 60.236378][ C2] raw-gadget.0 gadget.2: ignoring, device is not running [ 60.238479][ T24] raw-gadget.0 gadget.2: failed to queue reset event [ 60.303589][ T24] raw-gadget.0 gadget.2: failed to queue resume event [ 60.340216][ T6657] ipip0: entered promiscuous mode [ 60.364041][ T24] usb 7-1: device descriptor read/64, error -32 [ 60.371282][ T6659] fuse: Unknown parameter 'user_id000000000000000000000x00000000000000040x0000000000000003' [ 60.374772][ T6659] netlink: 57 bytes leftover after parsing attributes in process `syz.3.195'. [ 60.384334][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.2.196'. [ 60.387450][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.2.196'. [ 60.408853][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.2.196'. [ 60.411350][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.2.196'. [ 60.442613][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.2.196'. [ 60.446335][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.2.196'. [ 60.466667][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 60.466680][ T40] audit: type=1400 audit(1744469254.991:389): avc: denied { create } for pid=6663 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 60.486761][ T24] raw-gadget.0 gadget.2: failed to queue suspend event [ 60.490176][ T24] usb usb7-port1: attempt power cycle [ 60.490627][ T40] audit: type=1400 audit(1744469255.011:390): avc: denied { watch } for pid=6660 comm="syz.2.196" path="/45/control" dev="tmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 60.492122][ T24] raw-gadget.0 gadget.2: failed to queue disconnect event [ 60.503411][ T24] raw-gadget.0 gadget.2: failed to queue reset event [ 60.571429][ T6680] hpfs: hpfs_map_sector(): read error [ 60.574854][ T40] audit: type=1400 audit(1744469255.101:391): avc: denied { getopt } for pid=6679 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.583735][ T24] raw-gadget.0 gadget.2: failed to queue resume event [ 60.586468][ T24] raw-gadget.0 gadget.2: failed to queue reset event [ 60.612335][ T6682] FAULT_INJECTION: forcing a failure. [ 60.612335][ T6682] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 60.618393][ T6682] CPU: 2 UID: 0 PID: 6682 Comm: syz.3.201 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) [ 60.618408][ T6682] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.618414][ T6682] Call Trace: [ 60.618418][ T6682] [ 60.618422][ T6682] dump_stack_lvl+0x16c/0x1f0 [ 60.618452][ T6682] should_fail_ex+0x512/0x640 [ 60.618469][ T6682] should_fail_alloc_page+0xe7/0x130 [ 60.618483][ T6682] prepare_alloc_pages+0x3c2/0x610 [ 60.618498][ T6682] ? rcu_is_watching+0x12/0xc0 [ 60.618512][ T6682] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 60.618523][ T6682] ? __kernel_text_address+0xd/0x40 [ 60.618536][ T6682] ? unwind_get_return_address+0x59/0xa0 [ 60.618549][ T6682] ? arch_stack_walk+0xa6/0x100 [ 60.618567][ T6682] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 60.618578][ T6682] ? stack_trace_save+0x8e/0xc0 [ 60.618592][ T6682] ? __pfx_stack_trace_save+0x10/0x10 [ 60.618605][ T6682] ? stack_depot_save_flags+0x28/0xa50 [ 60.618616][ T6682] ? find_held_lock+0x2b/0x80 [ 60.618631][ T6682] ? kasan_save_stack+0x42/0x60 [ 60.618643][ T6682] ? __lock_acquire+0xaa4/0x1ba0 [ 60.618651][ T6682] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 60.618663][ T6682] ? policy_nodemask+0xea/0x4e0 [ 60.618675][ T6682] alloc_pages_mpol+0x1fb/0x550 [ 60.618687][ T6682] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 60.618697][ T6682] ? __page_table_check_ptes_set+0x1ae/0x420 [ 60.618709][ T6682] ? find_held_lock+0x2b/0x80 [ 60.618723][ T6682] alloc_pages_noprof+0x131/0x390 [ 60.618734][ T6682] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 60.618750][ T6682] get_free_pages_noprof+0xc/0x40 [ 60.618761][ T6682] kasan_populate_vmalloc_pte+0x2d/0x160 [ 60.618782][ T6682] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 60.618798][ T6682] __apply_to_page_range+0x5f9/0xd30 [ 60.618814][ T6682] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 60.618832][ T6682] ? __pfx___apply_to_page_range+0x10/0x10 [ 60.618847][ T6682] ? alloc_vmap_area+0x872/0x2970 [ 60.618863][ T6682] alloc_vmap_area+0x919/0x2970 [ 60.618881][ T6682] ? __pfx_alloc_vmap_area+0x10/0x10 [ 60.618898][ T6682] __get_vm_area_node+0x1a7/0x300 [ 60.618915][ T6682] __vmalloc_node_range_noprof+0x277/0x1540 [ 60.618931][ T6682] ? __snd_dma_alloc_pages+0x50/0x90 [ 60.618942][ T6682] ? __mutex_trylock_common+0xe9/0x250 [ 60.618952][ T6682] ? __pfx___mutex_trylock_common+0x10/0x10 [ 60.618963][ T6682] ? __pfx___might_resched+0x10/0x10 [ 60.618978][ T6682] ? __snd_dma_alloc_pages+0x50/0x90 [ 60.618990][ T6682] ? do_alloc_pages+0xd7/0x280 [ 60.619000][ T6682] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 60.619016][ T6682] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 60.619034][ T6682] ? __snd_dma_alloc_pages+0x50/0x90 [ 60.619045][ T6682] vmalloc_noprof+0x6b/0x90 [ 60.619059][ T6682] ? __snd_dma_alloc_pages+0x50/0x90 [ 60.619069][ T6682] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 60.619080][ T6682] __snd_dma_alloc_pages+0x50/0x90 [ 60.619091][ T6682] snd_dma_alloc_dir_pages+0x151/0x240 [ 60.619103][ T6682] do_alloc_pages+0x115/0x280 [ 60.619115][ T6682] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 60.619128][ T6682] snd_pcm_hw_params+0x15e1/0x1b40 [ 60.619141][ T6682] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 60.619152][ T6682] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 60.619170][ T6682] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 60.619186][ T6682] ? __asan_memset+0x23/0x50 [ 60.619202][ T6682] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 60.619213][ T6682] snd_pcm_oss_change_params_locked+0x1432/0x3b40 [ 60.619235][ T6682] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 60.619262][ T6682] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 60.619279][ T6682] snd_pcm_oss_read+0x39b/0x760 [ 60.619288][ T6682] ? security_file_permission+0x71/0x210 [ 60.619305][ T6682] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 60.619315][ T6682] vfs_read+0x1de/0xc70 [ 60.619334][ T6682] ? __pfx_vfs_read+0x10/0x10 [ 60.619348][ T6682] ? find_held_lock+0x2b/0x80 [ 60.619361][ T6682] ? __fget_files+0x204/0x3c0 [ 60.619373][ T6682] ? __fget_files+0x20e/0x3c0 [ 60.619385][ T6682] ksys_read+0x12a/0x240 [ 60.619394][ T6682] ? __pfx_ksys_read+0x10/0x10 [ 60.619406][ T6682] do_syscall_64+0xcd/0x260 [ 60.619433][ T6682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.619443][ T6682] RIP: 0033:0x7fabf338d169 [ 60.619452][ T6682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.619462][ T6682] RSP: 002b:00007fabf41ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.619471][ T6682] RAX: ffffffffffffffda RBX: 00007fabf35a5fa0 RCX: 00007fabf338d169 [ 60.619478][ T6682] RDX: 0000000000001009 RSI: 0000200000003200 RDI: 0000000000000005 [ 60.619483][ T6682] RBP: 00007fabf41ca090 R08: 0000000000000000 R09: 0000000000000000 [ 60.619489][ T6682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.619494][ T6682] R13: 0000000000000000 R14: 00007fabf35a5fa0 R15: 00007ffc61d154f8 [ 60.619507][ T6682] [ 60.797275][ T24] raw-gadget.0 gadget.2: failed to queue resume event [ 60.835458][ T40] audit: type=1400 audit(1744469255.361:392): avc: denied { write } for pid=6685 comm="syz.1.202" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 60.855036][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 60.884267][ C2] raw-gadget.0 gadget.2: ignoring, device is not running [ 60.886768][ T24] usb 7-1: device descriptor read/8, error -32 [ 60.963274][ T40] audit: type=1400 audit(1744469255.481:393): avc: denied { read } for pid=6689 comm="syz.1.204" name="file0" dev="9p" ino=36831310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.971574][ T40] audit: type=1400 audit(1744469255.481:394): avc: denied { ioctl } for pid=6689 comm="syz.1.204" path="/50/file0/file0" dev="9p" ino=36831310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.993589][ T24] raw-gadget.0 gadget.2: failed to queue suspend event [ 61.001440][ T24] raw-gadget.0 gadget.2: failed to queue reset event [ 61.083615][ T24] raw-gadget.0 gadget.2: failed to queue resume event [ 61.143569][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 61.163729][ C2] raw-gadget.0 gadget.2: ignoring, device is not running [ 61.165846][ T24] usb 7-1: device descriptor read/8, error -32 [ 61.248944][ T6694] gfs2: path_lookup on ™6(ï+‰d‹QÌnB´!eU‚çVè!š`:Ñ 8×DSEíÄðÃÄèÎ Áy|YT¢®{-€íê°”,mb/ returned error -2 [ 61.275622][ T24] raw-gadget.0 gadget.2: failed to queue suspend event [ 61.279241][ T24] usb usb7-port1: unable to enumerate USB device [ 61.298633][ T6698] netlink: 112 bytes leftover after parsing attributes in process `syz.3.207'. [ 61.319639][ T6700] fuse: Bad value for 'fd' [ 61.390845][ T6709] netlink: 'syz.3.212': attribute type 2 has an invalid length. [ 61.412136][ T6697] QAT: failed to copy from user. [ 61.416991][ T6712] x_tables: duplicate underflow at hook 2 [ 61.419554][ T40] audit: type=1400 audit(1744469255.941:395): avc: denied { getopt } for pid=6711 comm="syz.2.213" laddr=ff01::1 lport=128 faddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 61.427238][ T40] audit: type=1400 audit(1744469255.941:396): avc: denied { read } for pid=5340 comm="acpid" name="event8" dev="devtmpfs" ino=2800 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 61.433195][ T40] audit: type=1400 audit(1744469255.941:397): avc: denied { open } for pid=5340 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=2800 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 61.442921][ T40] audit: type=1400 audit(1744469255.941:398): avc: denied { ioctl } for pid=5340 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=2800 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 61.459762][ T6718] FAULT_INJECTION: forcing a failure. [ 61.459762][ T6718] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 61.464432][ T6718] CPU: 0 UID: 0 PID: 6718 Comm: syz.3.216 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) [ 61.464447][ T6718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.464453][ T6718] Call Trace: [ 61.464457][ T6718] [ 61.464460][ T6718] dump_stack_lvl+0x16c/0x1f0 [ 61.464478][ T6718] should_fail_ex+0x512/0x640 [ 61.464492][ T6718] should_fail_alloc_page+0xe7/0x130 [ 61.464505][ T6718] prepare_alloc_pages+0x3c2/0x610 [ 61.464520][ T6718] ? rcu_is_watching+0x12/0xc0 [ 61.464534][ T6718] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 61.464545][ T6718] ? __kernel_text_address+0xd/0x40 [ 61.464557][ T6718] ? unwind_get_return_address+0x59/0xa0 [ 61.464571][ T6718] ? arch_stack_walk+0xa6/0x100 [ 61.464589][ T6718] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 61.464600][ T6718] ? stack_trace_save+0x8e/0xc0 [ 61.464613][ T6718] ? __pfx_stack_trace_save+0x10/0x10 [ 61.464626][ T6718] ? stack_depot_save_flags+0x28/0xa50 [ 61.464637][ T6718] ? find_held_lock+0x2b/0x80 [ 61.464652][ T6718] ? kasan_save_stack+0x42/0x60 [ 61.464663][ T6718] ? __lock_acquire+0xaa4/0x1ba0 [ 61.464671][ T6718] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 61.464683][ T6718] ? policy_nodemask+0xea/0x4e0 [ 61.464695][ T6718] alloc_pages_mpol+0x1fb/0x550 [ 61.464707][ T6718] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 61.464717][ T6718] ? __page_table_check_ptes_set+0x1ae/0x420 [ 61.464729][ T6718] ? find_held_lock+0x2b/0x80 [ 61.464743][ T6718] alloc_pages_noprof+0x131/0x390 [ 61.464755][ T6718] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 61.464776][ T6718] get_free_pages_noprof+0xc/0x40 [ 61.464788][ T6718] kasan_populate_vmalloc_pte+0x2d/0x160 [ 61.464804][ T6718] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 61.464820][ T6718] __apply_to_page_range+0x5f9/0xd30 [ 61.464836][ T6718] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 61.464854][ T6718] ? __pfx___apply_to_page_range+0x10/0x10 [ 61.464869][ T6718] ? alloc_vmap_area+0x872/0x2970 [ 61.464884][ T6718] alloc_vmap_area+0x919/0x2970 [ 61.464903][ T6718] ? __pfx_alloc_vmap_area+0x10/0x10 [ 61.464919][ T6718] __get_vm_area_node+0x1a7/0x300 [ 61.464935][ T6718] __vmalloc_node_range_noprof+0x277/0x1540 [ 61.464951][ T6718] ? __snd_dma_alloc_pages+0x50/0x90 [ 61.464962][ T6718] ? __mutex_trylock_common+0xe9/0x250 [ 61.464972][ T6718] ? __pfx___mutex_trylock_common+0x10/0x10 [ 61.464983][ T6718] ? __pfx___might_resched+0x10/0x10 [ 61.464998][ T6718] ? __snd_dma_alloc_pages+0x50/0x90 [ 61.465010][ T6718] ? do_alloc_pages+0xd7/0x280 [ 61.465020][ T6718] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 61.465036][ T6718] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 61.465053][ T6718] ? __snd_dma_alloc_pages+0x50/0x90 [ 61.465064][ T6718] vmalloc_noprof+0x6b/0x90 [ 61.465078][ T6718] ? __snd_dma_alloc_pages+0x50/0x90 [ 61.465088][ T6718] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 61.465099][ T6718] __snd_dma_alloc_pages+0x50/0x90 [ 61.465110][ T6718] snd_dma_alloc_dir_pages+0x151/0x240 [ 61.465122][ T6718] do_alloc_pages+0x115/0x280 [ 61.465133][ T6718] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 61.465146][ T6718] snd_pcm_hw_params+0x15e1/0x1b40 [ 61.465159][ T6718] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 61.465170][ T6718] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 61.465188][ T6718] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 61.465204][ T6718] ? __asan_memset+0x23/0x50 [ 61.465220][ T6718] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 61.465231][ T6718] snd_pcm_oss_change_params_locked+0x1432/0x3b40 [ 61.465253][ T6718] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 61.465279][ T6718] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 61.465296][ T6718] snd_pcm_oss_read+0x39b/0x760 [ 61.465305][ T6718] ? security_file_permission+0x71/0x210 [ 61.465322][ T6718] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 61.465332][ T6718] vfs_read+0x1de/0xc70 [ 61.465350][ T6718] ? __pfx_vfs_read+0x10/0x10 [ 61.465364][ T6718] ? find_held_lock+0x2b/0x80 [ 61.465377][ T6718] ? __fget_files+0x204/0x3c0 [ 61.465389][ T6718] ? __fget_files+0x20e/0x3c0 [ 61.465401][ T6718] ksys_read+0x12a/0x240 [ 61.465409][ T6718] ? __pfx_ksys_read+0x10/0x10 [ 61.465417][ T6718] ? rcu_is_watching+0x12/0xc0 [ 61.465433][ T6718] do_syscall_64+0xcd/0x260 [ 61.465448][ T6718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.465458][ T6718] RIP: 0033:0x7fabf338d169 [ 61.465466][ T6718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.465475][ T6718] RSP: 002b:00007fabf41ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.465485][ T6718] RAX: ffffffffffffffda RBX: 00007fabf35a5fa0 RCX: 00007fabf338d169 [ 61.465491][ T6718] RDX: 0000000000001009 RSI: 0000200000003200 RDI: 0000000000000005 [ 61.465497][ T6718] RBP: 00007fabf41ca090 R08: 0000000000000000 R09: 0000000000000000 [ 61.465502][ T6718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 61.465508][ T6718] R13: 0000000000000000 R14: 00007fabf35a5fa0 R15: 00007ffc61d154f8 [ 61.465520][ T6718] [ 61.465782][ T6720] input: syz0 as /devices/virtual/input/input8 [ 61.663547][ T6726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.217'. [ 61.677501][ T6726] vlan2: entered promiscuous mode [ 61.679025][ T6726] bridge0: entered promiscuous mode [ 61.680811][ T6726] vlan2: entered allmulticast mode [ 61.682240][ T6726] bridge0: entered allmulticast mode [ 61.685256][ T6726] bridge0: port 1(vlan2) entered blocking state [ 61.687080][ T6726] bridge0: port 1(vlan2) entered disabled state [ 62.074126][ T5295] Bluetooth: hci0: command 0x040f tx timeout [ 62.084188][ T5295] Bluetooth: hci3: command 0x040f tx timeout [ 62.085337][ T6751] random: crng reseeded on system resumption [ 62.086175][ T5295] Bluetooth: hci2: command 0x040f tx timeout [ 62.086194][ T5295] Bluetooth: hci1: command 0x040f tx timeout [ 62.200245][ T6759] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.316956][ T6775] FAULT_INJECTION: forcing a failure. [ 62.316956][ T6775] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 62.320629][ T6775] CPU: 2 UID: 0 PID: 6775 Comm: syz.0.234 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) [ 62.320644][ T6775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.320650][ T6775] Call Trace: [ 62.320654][ T6775] [ 62.320658][ T6775] dump_stack_lvl+0x16c/0x1f0 [ 62.320676][ T6775] should_fail_ex+0x512/0x640 [ 62.320689][ T6775] should_fail_alloc_page+0xe7/0x130 [ 62.320703][ T6775] prepare_alloc_pages+0x3c2/0x610 [ 62.320718][ T6775] ? rcu_is_watching+0x12/0xc0 [ 62.320733][ T6775] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 62.320744][ T6775] ? __kernel_text_address+0xd/0x40 [ 62.320756][ T6775] ? unwind_get_return_address+0x59/0xa0 [ 62.320772][ T6775] ? arch_stack_walk+0xa6/0x100 [ 62.320789][ T6775] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 62.320800][ T6775] ? stack_trace_save+0x8e/0xc0 [ 62.320814][ T6775] ? __pfx_stack_trace_save+0x10/0x10 [ 62.320827][ T6775] ? stack_depot_save_flags+0x28/0xa50 [ 62.320838][ T6775] ? find_held_lock+0x2b/0x80 [ 62.320852][ T6775] ? kasan_save_stack+0x42/0x60 [ 62.320864][ T6775] ? __lock_acquire+0xaa4/0x1ba0 [ 62.320872][ T6775] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 62.320884][ T6775] ? policy_nodemask+0xea/0x4e0 [ 62.320896][ T6775] alloc_pages_mpol+0x1fb/0x550 [ 62.320920][ T6775] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 62.320931][ T6775] ? __page_table_check_ptes_set+0x1ae/0x420 [ 62.320948][ T6775] ? find_held_lock+0x2b/0x80 [ 62.320962][ T6775] alloc_pages_noprof+0x131/0x390 [ 62.320974][ T6775] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 62.320989][ T6775] get_free_pages_noprof+0xc/0x40 [ 62.321001][ T6775] kasan_populate_vmalloc_pte+0x2d/0x160 [ 62.321017][ T6775] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 62.321033][ T6775] __apply_to_page_range+0x5f9/0xd30 [ 62.321049][ T6775] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 62.321067][ T6775] ? __pfx___apply_to_page_range+0x10/0x10 [ 62.321082][ T6775] ? alloc_vmap_area+0x872/0x2970 [ 62.321097][ T6775] alloc_vmap_area+0x919/0x2970 [ 62.321116][ T6775] ? __pfx_alloc_vmap_area+0x10/0x10 [ 62.321133][ T6775] __get_vm_area_node+0x1a7/0x300 [ 62.321149][ T6775] __vmalloc_node_range_noprof+0x277/0x1540 [ 62.321165][ T6775] ? __snd_dma_alloc_pages+0x50/0x90 [ 62.321176][ T6775] ? __mutex_trylock_common+0xe9/0x250 [ 62.321186][ T6775] ? __pfx___mutex_trylock_common+0x10/0x10 [ 62.321196][ T6775] ? __pfx___might_resched+0x10/0x10 [ 62.321212][ T6775] ? __snd_dma_alloc_pages+0x50/0x90 [ 62.321224][ T6775] ? do_alloc_pages+0xd7/0x280 [ 62.321234][ T6775] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 62.321250][ T6775] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 62.321267][ T6775] ? __snd_dma_alloc_pages+0x50/0x90 [ 62.321278][ T6775] vmalloc_noprof+0x6b/0x90 [ 62.321292][ T6775] ? __snd_dma_alloc_pages+0x50/0x90 [ 62.321302][ T6775] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 62.321313][ T6775] __snd_dma_alloc_pages+0x50/0x90 [ 62.321324][ T6775] snd_dma_alloc_dir_pages+0x151/0x240 [ 62.321336][ T6775] do_alloc_pages+0x115/0x280 [ 62.321347][ T6775] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 62.321360][ T6775] snd_pcm_hw_params+0x15e1/0x1b40 [ 62.321373][ T6775] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 62.321384][ T6775] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 62.321402][ T6775] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 62.321419][ T6775] ? __asan_memset+0x23/0x50 [ 62.321435][ T6775] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 62.321446][ T6775] snd_pcm_oss_change_params_locked+0x1432/0x3b40 [ 62.321470][ T6775] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 62.321496][ T6775] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 62.321513][ T6775] snd_pcm_oss_read+0x39b/0x760 [ 62.321523][ T6775] ? security_file_permission+0x71/0x210 [ 62.321539][ T6775] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 62.321550][ T6775] vfs_read+0x1de/0xc70 [ 62.321568][ T6775] ? __pfx_vfs_read+0x10/0x10 [ 62.321583][ T6775] ? find_held_lock+0x2b/0x80 [ 62.321595][ T6775] ? __fget_files+0x204/0x3c0 [ 62.321614][ T6775] ? __fget_files+0x20e/0x3c0 [ 62.321627][ T6775] ksys_read+0x12a/0x240 [ 62.321635][ T6775] ? __pfx_ksys_read+0x10/0x10 [ 62.321643][ T6775] ? rcu_is_watching+0x12/0xc0 [ 62.321659][ T6775] do_syscall_64+0xcd/0x260 [ 62.321678][ T6775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.321688][ T6775] RIP: 0033:0x7f992c38d169 [ 62.321696][ T6775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.321707][ T6775] RSP: 002b:00007f992d10e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 62.321718][ T6775] RAX: ffffffffffffffda RBX: 00007f992c5a5fa0 RCX: 00007f992c38d169 [ 62.321724][ T6775] RDX: 0000000000001009 RSI: 0000200000003200 RDI: 0000000000000005 [ 62.321730][ T6775] RBP: 00007f992d10e090 R08: 0000000000000000 R09: 0000000000000000 [ 62.321736][ T6775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 62.321741][ T6775] R13: 0000000000000000 R14: 00007f992c5a5fa0 R15: 00007fff5ece5288 [ 62.321754][ T6775] [ 62.458518][ C2] vkms_vblank_simulate: vblank timer overrun [ 62.471129][ T6783] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 62.475114][ T6783] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 62.478532][ T6783] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 62.481236][ T6783] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 62.486904][ T6783] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 62.489659][ T6783] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 62.493059][ T6783] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 62.497490][ T6783] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 62.500116][ T6783] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 62.502637][ T6783] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 62.615871][ T6788] netlink: 'syz.2.239': attribute type 10 has an invalid length. [ 62.625696][ T6788] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 62.668631][ T6805] delete_channel: no stack [ 63.035274][ T6819] syz.1.248: attempt to access beyond end of device [ 63.035274][ T6819] loop1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 63.038907][ T6819] qnx4: unable to read the superblock [ 63.042311][ T6819] netlink: 'syz.1.248': attribute type 16 has an invalid length. [ 63.341600][ T6835] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 63.347286][ T6835] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 63.349742][ T6835] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 63.353530][ T6835] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 63.358277][ T6835] geneve2: entered promiscuous mode [ 63.360682][ T6835] geneve2: entered allmulticast mode [ 63.370334][ T6837] BUG: sleeping function called from invalid context at ./include/linux/sched/mm.h:321 [ 63.374485][ T6837] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 6837, name: syz.0.256 [ 63.380135][ T6837] preempt_count: 0, expected: 0 [ 63.381516][ T6837] RCU nest depth: 1, expected: 0 [ 63.382917][ T6837] 4 locks held by syz.0.256/6837: [ 63.384424][ T6837] #0: ffff8880123e57b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 63.386901][ T6837] #1: ffff8880505d0cf8 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: wrap_directory_iterator+0x54/0xe0 [ 63.389958][ T6837] #2: ffff888053550148 (&type->i_mutex_dir_key#9){++++}-{4:4}, at: iterate_dir+0x18b/0xb40 [ 63.392806][ T6837] #3: ffffffff8e3c15c0 (rcu_read_lock){....}-{1:3}, at: afs_dynroot_readdir+0x619/0xf50 [ 63.395551][ T6837] CPU: 3 UID: 0 PID: 6837 Comm: syz.0.256 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) [ 63.395569][ T6837] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.395579][ T6837] Call Trace: [ 63.395585][ T6837] [ 63.395591][ T6837] dump_stack_lvl+0x16c/0x1f0 [ 63.395614][ T6837] __might_resched+0x3c0/0x5e0 [ 63.395629][ T6837] ? find_held_lock+0x2b/0x80 [ 63.395645][ T6837] ? __pfx___might_resched+0x10/0x10 [ 63.395662][ T6837] ? ovl_cache_entry_new+0x3d/0x730 [ 63.395676][ T6837] __kmalloc_noprof+0x386/0x510 [ 63.395694][ T6837] ovl_cache_entry_new+0x3d/0x730 [ 63.395710][ T6837] ovl_fill_merge+0x601/0xa90 [ 63.395726][ T6837] afs_dynroot_readdir+0x9bb/0xf50 [ 63.395740][ T6837] ? __pfx_ovl_fill_merge+0x10/0x10 [ 63.395755][ T6837] ? __pfx_afs_dynroot_readdir+0x10/0x10 [ 63.395770][ T6837] ? selinux_file_permission+0x11f/0x580 [ 63.395791][ T6837] iterate_dir+0x293/0xb40 [ 63.395808][ T6837] ovl_dir_read_merged+0x21c/0x5d0 [ 63.395822][ T6837] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 63.395838][ T6837] ? __pfx_ovl_fill_merge+0x10/0x10 [ 63.395856][ T6837] ? kasan_save_track+0x14/0x30 [ 63.395868][ T6837] ovl_iterate+0x86c/0xe40 [ 63.395882][ T6837] ? __pfx_down_read_killable+0x10/0x10 [ 63.395900][ T6837] ? __pfx_ovl_iterate+0x10/0x10 [ 63.395913][ T6837] wrap_directory_iterator+0x9f/0xe0 [ 63.395929][ T6837] iterate_dir+0x293/0xb40 [ 63.395947][ T6837] __x64_sys_getdents+0x14d/0x2c0 [ 63.395961][ T6837] ? __x64_sys_futex+0x1e9/0x4c0 [ 63.395977][ T6837] ? __pfx___x64_sys_getdents+0x10/0x10 [ 63.395991][ T6837] ? xfd_validate_state+0x5d/0x180 [ 63.396002][ T6837] ? __pfx_filldir+0x10/0x10 [ 63.396017][ T6837] ? rcu_is_watching+0x12/0xc0 [ 63.396033][ T6837] do_syscall_64+0xcd/0x260 [ 63.396049][ T6837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.396060][ T6837] RIP: 0033:0x7f992c38d169 [ 63.396070][ T6837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.396080][ T6837] RSP: 002b:00007f992d10e038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 63.396089][ T6837] RAX: ffffffffffffffda RBX: 00007f992c5a5fa0 RCX: 00007f992c38d169 [ 63.396096][ T6837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 63.396102][ T6837] RBP: 00007f992c40e990 R08: 0000000000000000 R09: 0000000000000000 [ 63.396107][ T6837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.396113][ T6837] R13: 0000000000000000 R14: 00007f992c5a5fa0 R15: 00007fff5ece5288 [ 63.396126][ T6837] [ 63.764476][ T77] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.859679][ T77] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.975645][ T77] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.056057][ T77] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.141659][ T77] bridge_slave_1: left allmulticast mode [ 64.143431][ T77] bridge_slave_1: left promiscuous mode [ 64.145741][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.150320][ T77] bridge_slave_0: left allmulticast mode [ 64.152058][ T77] bridge_slave_0: left promiscuous mode [ 64.153729][ T5295] Bluetooth: hci1: command 0x040f tx timeout [ 64.154002][ T5951] Bluetooth: hci3: command 0x040f tx timeout [ 64.155455][ T5295] Bluetooth: hci0: command 0x040f tx timeout [ 64.155482][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.488630][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.492445][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.497580][ T77] bond0 (unregistering): (slave bond1): Releasing backup interface [ 64.500219][ T77] bond0 (unregistering): Released all slaves [ 64.557566][ T77] bond1 (unregistering): Released all slaves [ 64.656486][ T77] tipc: Disabling bearer [ 64.658781][ T77] tipc: Left network mode [ 64.879790][ T77] hsr_slave_0: left promiscuous mode [ 64.882331][ T77] hsr_slave_1: left promiscuous mode [ 64.887056][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.889600][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.892968][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.895701][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.911639][ T77] veth1_macvtap: left promiscuous mode [ 64.916640][ T77] veth0_macvtap: left promiscuous mode [ 64.918843][ T77] veth1_vlan: left promiscuous mode [ 64.921014][ T77] veth0_vlan: left promiscuous mode [ 65.420269][ T77] team0 (unregistering): Port device team_slave_1 removed [ 65.470529][ T77] team0 (unregistering): Port device team_slave_0 removed [ 66.243583][ T5295] Bluetooth: hci3: command 0x040f tx timeout [ 66.715192][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 66.715204][ T40] audit: type=1400 audit(1744469261.241:430): avc: denied { sys_chroot } for pid=6898 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 66.723104][ T40] audit: type=1400 audit(1744469261.241:431): avc: denied { setgid } for pid=6898 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 66.729417][ T40] audit: type=1400 audit(1744469261.241:432): avc: denied { setrlimit } for pid=6898 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 71.036666][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.039180][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 VM DIAGNOSIS: 14:47:38 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff911b59ce RBX=0000000000000002 RCX=0000000000013353 RDX=0000000000013353 RSI=00000000000a761d RDI=0000000000013353 RBP=ffffc90000007a90 RSP=ffffc900000079d8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000007cc9 R12=ffffc90000007a98 R13=ffffc90000007a48 R14=ffffc90000007a7d R15=ffffffff817cc9a5 RIP=ffffffff8169dbcc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00005555877ea500 ffffffff 00c00000 GS =0000 ffff8880d69b3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f02d8d772d8 CR3=0000000025000000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020000040 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd8d8e560 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f02d8c0f972 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f02d8c0f97f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f02d8c0f979 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f02d8c0f98d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f02d8c0fa13 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f02d8c0faf1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffff88802b868b68 RBX=ffff88807ffd7c58 RCX=ffffc900043df744 RDX=0000000000000000 RSI=ffff88807ffd7c58 RDI=ffff88802b868b68 RBP=0000000000000003 RSP=ffffc900043df738 R8 =4f9b7a051bfbfb7c R9 =0000000000000001 R10=0000000000000003 R11=0000000000000000 R12=ffffffff8212c9fd R13=0000000000000002 R14=ffff88802b868000 R15=0000000000000004 RIP=ffffffff819817f8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f80ddd7dd00 ffffffff 00c00000 GS =0000 ffff8880d6ab3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f290f43cfb8 CR3=00000000321c0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000003400003 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 697270203a732500 7325207461206465 7269707865207972 746e65203a732500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c5755051f560000 5600055144054140 574c555d40055c57 514b40051f560000 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=4d337ec24d337ec2 4d337ec24d337ec2 4d337ec24d337ec2 4d337ec24d337ec2 4d337ec24d337ec2 4d337ec24d337ec2 4d337ec24d337ec2 4d337ec24d337ec2 ZMM22=fc3ad5d1fc3ad5d1 fc3ad5d1fc3ad5d1 fc3ad5d1fc3ad5d1 fc3ad5d1fc3ad5d1 fc3ad5d1fc3ad5d1 fc3ad5d1fc3ad5d1 fc3ad5d1fc3ad5d1 fc3ad5d1fc3ad5d1 ZMM23=1293b1981293b198 1293b1981293b198 1293b1981293b198 1293b1981293b198 1293b1981293b198 1293b1981293b198 1293b1981293b198 1293b1981293b198 ZMM24=ce58485cce58485c ce58485cce58485c ce58485cce58485c ce58485cce58485c ce58485cce58485c ce58485cce58485c ce58485cce58485c ce58485cce58485c ZMM25=d67ac7a1d67ac7a1 d67ac7a1d67ac7a1 d67ac7a1d67ac7a1 d67ac7a1d67ac7a1 d67ac7a1d67ac7a1 d67ac7a1d67ac7a1 d67ac7a1d67ac7a1 d67ac7a1d67ac7a1 ZMM26=8d8ad1f68d8ad1f6 8d8ad1f68d8ad1f6 8d8ad1f68d8ad1f6 8d8ad1f68d8ad1f6 8d8ad1f68d8ad1f6 8d8ad1f68d8ad1f6 8d8ad1f68d8ad1f6 8d8ad1f68d8ad1f6 ZMM27=62905c5362905c53 62905c5362905c53 62905c5362905c53 62905c5362905c53 62905c5362905c53 62905c5362905c53 62905c5362905c53 62905c5362905c53 ZMM28=000000900000008f 0000008e0000008d 0000008c0000008b 0000008a00000089 0000008800000087 0000008600000085 0000008400000083 0000008200000081 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=3302000033020000 3302000033020000 3302000033020000 3302000033020000 3302000033020000 3302000033020000 3302000033020000 3302000033020000 info registers vcpu 2 CPU#2 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854e01a5 RDI=ffffffff9ae254e0 RBP=ffffffff9ae254a0 RSP=ffffc900038bf458 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000063 R14=ffffffff9ae254a0 R15=ffffffff854e0140 RIP=ffffffff854e01cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f992d10e6c0 ffffffff 00c00000 GS =0000 ffff8880d6bb3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f992c370f20 CR3=0000000033b4c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff5ece5610 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f992c40f972 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f992c40f97f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f992c40f979 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f992c40f98d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f992c40fa13 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f992c40faf1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff888040dd4d00 RCX=ffffffff8b70783c RDX=ffff88802c8ea440 RSI=ffffffff8b707847 RDI=0000000000000007 RBP=ffffc9000437f9b8 RSP=ffffc9000437f940 R8 =0000000000000007 R9 =0000000000000002 R10=0000000000000000 R11=0000000000000000 R12=0000000000000005 R13=ffff888036bb2c00 R14=0000000000000000 R15=0000000000000001 RIP=ffffffff81bb3d78 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555666df500 ffffffff 00c00000 GS =0000 ffff8880d6cb3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fabf344b603 CR3=0000000053e48000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008200029 Opmask01=0000000000010100 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc61d15880 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabf340f972 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabf340f97f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabf340f979 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabf340f98d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabf340fa13 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabf340faf1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7720647a253d6461 6572007269646b6d 206f742064656c69 61660064252f2e00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5205415f00184144 405700574c414e48 054a51054140494c 44430041000a0b00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000038 0000000000000001 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000