last executing test programs: 16.670772725s ago: executing program 0 (id=61): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x0, &(0x7f0000000500)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) 16.599246521s ago: executing program 0 (id=63): clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x40, 0xb, 0x0, 0x8, 0x1, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0xf423f, 0x0, 0x8, 0x1, 0x0, 0x0, 0x6, 0x5, 0x3, 0x0, 0x6, 0x4}) r0 = fsopen(&(0x7f0000000080)='omfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {0x10, 0xd29}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, 0x0}], 0x1, 0x74, 0x0, 0xfffffcda) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000000000008504"]) setsockopt(r1, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000280)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306, @multicast}, 0x50, {0x2, 0x4e22, @rand_addr=0x64010100}, 'ip6gre0\x00'}) sigaltstack(&(0x7f0000000900)={&(0x7f0000000a80)=""/45, 0x2, 0x2d}, &(0x7f0000000a40)={&(0x7f0000000ac0)=""/125, 0x0, 0x7d}) socket$nl_generic(0x10, 0x3, 0x10) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) r10 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "38b80355cffb9334b84b18bacebf3d535c30219dcb950bffffffffffffffffa8ed4d5c0d4d9d945dea458da503ff3cb18f5326e1954664fa48745e1c7eef737a"}, 0x48, 0xffffffffffffffff) request_key(&(0x7f00000005c0)='pkcs7_test\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000640)='logon\x00', r10) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6, @remote, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1}}], 0x1, 0xc0) socket$inet6_sctp(0xa, 0x5, 0x84) 16.38783919s ago: executing program 0 (id=72): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000240)={0x13, 0x5, 0x5}) timerfd_create(0x7, 0x800) r1 = io_uring_setup(0x177f, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x0, 0x0, 0x2b4}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0xcf, 0x0, 0x0, 0xd, 0xfa, 0x6, 0x9, 0x3, 0x9, 0xd, 0x8, 0x6, 0x29, 0x7}, 0xe) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) 16.320062531s ago: executing program 0 (id=73): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c033, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000073000040"]) close_range(r2, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r1}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x28, 0x1, 0x4, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x8001}}]}, 0x28}}, 0x20040000) 16.127572006s ago: executing program 0 (id=75): mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) lseek(0xffffffffffffffff, 0x3, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010001102000000000000000028001100fa004ac2411e47060aefa5fa007f9f03e36c6e9817da299090c2617ab90000000000"], 0x28}}, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fstat(r0, &(0x7f0000000340)) mount$9p_rdma(&(0x7f00000001c0), &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000480)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@common=@privport}]}}) 16.124900836s ago: executing program 0 (id=76): r0 = fsopen(&(0x7f0000000040)='befs\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) bind$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @null, 0x6}, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r4, 0x4bfa, &(0x7f0000000080)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r1], 0x7c}}, 0x80) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000180)='iocharset', 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x2, [@ptr, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xfffffffc, [{0x0, 0x3}]}, @enum64={0xa, 0x3, 0x0, 0x13, 0x1, 0x2, [{0x7, 0x3, 0x8001}, {0x3, 0x3, 0xf47}, {0x6, 0xa, 0x4}]}]}}, &(0x7f0000001280)=""/226, 0x6e, 0xe2, 0x1}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x82, 0x42, 0x6, 0x2}]}) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000df250000000000000000000000007a5f69fc5da44c7837106a4c495d5c2f52dca9574208b5fc9b080965d7c628a9f993c4150000826fb50e2572b0de75c3c11c7d5e5b4a6620c87410298b3715b3538bc0a1a1ae7d7378eaaae704a0e856560557174d09db4d0d49d71402582299c200000000000000fc8ba606e7ec501b6fef025ccfb7903de97374d23a9418fee84d529451e2dbbbb3d1a88468eebbe3fbfbb7256d824865056b1afdaf7fe8e5e8be00a8eb888feb26f84d4ad3a8d42b86c6d567c25afad3a9f784cd946942af2bbbc35797797cbd2e040a5a39eb85fb4a1af5017cf56caf470000000000", @ANYRES32=0x0, @ANYBLOB="adffa888d22600001c0012800b00010067656e65766500000c0002800500090000000000"], 0x3c}}, 0xc080) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) write$binfmt_elf64(r7, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c4600080009f40800000000000003003e0001000000290100000000000040000000000000001502000000000000090000000c00380003008a00060000000700000000000080050000000000001000000080000000000200000000000000710c000000000000b80000000000000007000000080000000300000000000000010000000000000010000000000000000700000000000000ffffffffffffffff0000000000400000000000600000000001000000000000000004000000000000000000000000000009000000000000000000000000000000d085000000000000c138c91e6064e9c5b08badffbae584fb50ba139ac18b764189e2eb6c8a5159cc0abb3d650a43291afcef3b8cd8dcdccb9419a161cadd5bbc54d4bbfad106ba860b449156371153fa89c395bd494f31749f19bd753eceb1d95ee9d8c915f122483c4d64e5680bcc68bc39e77c64df93b4ad2917b3f824897572a6b03589f1f555868d24307c022e8bb88edfdc13dc3fa0d1ad33ba77a9e42f7826322ab9c32935822388565e8431f78499297592e4060dad2819d92d4e0702bdf335b3b7c167b600"/2216], 0x8a8) 2.770206299s ago: executing program 1 (id=251): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)={0x110, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_PEERS={0xe0, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1000}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00', 0x3}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x110}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={0x0}}, 0xfeb11bdd49a3dcc5) r7 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36b, 0x10100, 0x0, 0x155}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1b, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r7, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r11, 0x5437, 0x2) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r14, 0x4008ae89, &(0x7f0000002180)=ANY=[@ANYBLOB="0100000000000000c50100"]) capset(&(0x7f0000000ac0)={0x19980330}, &(0x7f0000000180)={0x0, 0x10000, 0xc898, 0x0, 0x0, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) waitid$P_PIDFD(0x3, r6, 0x0, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 2.690952948s ago: executing program 1 (id=252): r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r5, 0x4068aea3, &(0x7f00000000c0)={0xd5, 0x0, 0x48}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="0f01c8ba2000ed0f01ca0f0fd90dd19800000fc77300dbca36dcebbaf80c66b8fc4c6d8166efbafc0c66edba6100b80050ef", 0x32}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_PIT(r5, 0xc048ae65, &(0x7f00000002c0)) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010) 2.588402865s ago: executing program 3 (id=254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0xe8}}, 0x4004011) 2.587729157s ago: executing program 3 (id=255): r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000000c0)={0x2, 'vlan0\x00', {0x1008}, 0xdff8}) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f00000002c0)=""/229) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r3, 0x0, &(0x7f0000eaf000/0x3000)=nil, 0x3000, 0xfffffffffffffffa}) 2.587421139s ago: executing program 3 (id=256): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f00000000c0)=0xe8) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)={0x3b8, 0x33, 0x100, 0x70bd27, 0x25dfdbfc, "", [@nested={0x4, 0x5b}, @nested={0x14, 0x98, 0x0, 0x1, [@typed={0x8, 0x75, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x71, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @typed={0x14, 0x83, 0x0, 0x0, @ipv6=@remote}, @nested={0x105, 0x13a, 0x0, 0x1, [@typed={0x2d, 0x22, 0x0, 0x0, @str='/sys/kernel/debug/binder/transaction_log\x00'}, @generic="9a1a0cfd5796535cfbd545e70f067941b134548e4c43b7b02f0712b280c4fe83349ee70ccaf64300fecb88bd80fdbdb7f030dda95e9919bb96d4a0d46611b43cd5e172e3eccdfa16a3286247ec6f4efcd059cac0127e05cfd761716e3c718802e54df32dd194b9aa1113c9191040660f79637dcc03335dea93887fc72398e02281", @typed={0x14, 0x15, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x4, 0x14c}, @nested={0x4, 0x7d}, @typed={0x8, 0xed, 0x0, 0x0, @u32=0x6}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@local}, @typed={0xc, 0x25, 0x0, 0x0, @u64=0x10000}, @nested={0x4, 0x30}, @typed={0x8, 0x74, 0x0, 0x0, @fd=r1}]}, @nested={0x1b9, 0x68, 0x0, 0x1, [@nested={0x4, 0xd9}, @generic="aa70ebe9ce222c4a76af734f79ae3da31d3fccf134af9f3ab40945b8b930f88096e7725c70a3cb5617ee4e2a57df14491573e8770222381fd16059a781f3cf42721a088c63778173df0975154e974cbb4c9ec13e13ac584c4b242718b980769b5217272d553f0aaefaa043e1c2cdd71cd5b05a10fb69bc72476ae70bbe138f9a8269833b87ec36219b1638f0b38f234607909b6bf8e6e6ad3983d7b761a0d10a041784fa3ce8f3098535250e5e", @generic="50ab17059713a82e224176293fb0f9e2e7cc145800d3ce813fefdd680ea83fba3c5d357db20bfcf728a42aea6f6bbb42cd0dfdec9ab7da2332207d9b6399fd4fc0ff0fd4aa66fff8605ff82fc1efc43ae2c4c595e9ef393554f25ae2257258a99c7a2ad397a38028b7196a39a623e3ba7d13b7e680192788359225283d5db729b8694b672c29764052a7ad3acd4e1f1047889fc15c1d906b3dc8245532d9a060da2ca78957e4119b7fdc600b69ab93220134aec8b7555d8ca1d9706bd069af7eae0597eb2bd874a9", @nested={0x4, 0x3}, @typed={0x2d, 0xe6, 0x0, 0x0, @str='/sys/kernel/debug/binder/transaction_log\x00'}, @typed={0x8, 0x9a, 0x0, 0x0, @ipv4=@multicast2}]}, @generic="4078f99656bc3077337c7253f5823ecd40fdb207bac7094ad89169bb586ca68d0bacef45a9862a438262aeefac392255291ee4df5978b00324b7a9f171355d96d98a79d759e8222c1cf408811a3bcaa39ddf017a04bf18e8951179c483b9f8ae8c1ed920218a5d64216bf221dcb9f576d774b9ea7b6c5c697cdc3f58b413ce5bf910fb356decb71def7995127fc5789a1521cb6e620f0f57fa1a078a793722f56369972c3de6e20c5b61766015d6e0fcd1d6aec75b673e"]}, 0x3b8}], 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) close(0x3) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (rerun: 32) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) process_mrelease(r5, 0x0) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r4, @in={{0x2, 0x4e20, @empty}}, 0x200, 0x7}, &(0x7f0000000080)=0x90) 2.521047033s ago: executing program 3 (id=257): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0x1}, {0x16, 0x4, 0x6}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2) r5 = socket(0x22, 0x2, 0x2) syz_io_uring_setup(0x10e, &(0x7f00000006c0)={0x0, 0x1885, 0x4000, 0x2, 0x200}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000004c0)={0x1, 0x1, 0x80, 0x3, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}, 0x10) r9 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r9, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r4, 0x1b516, 0xc2de, 0x8, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r10, &(0x7f0000000180)=""/174, 0xae) ioctl$IMGETCOUNT(r5, 0x80044944, &(0x7f0000000000)) finit_module(r4, 0x0, 0x3) ioctl$MON_IOCQ_URB_LEN(r4, 0x9201) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, &(0x7f0000000040)) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000000c0)=0x0) write$cgroup_pid(r10, &(0x7f0000000140)=r11, 0x12) 2.260530143s ago: executing program 3 (id=258): r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82840) ioctl$CEC_ADAP_G_LOG_ADDRS(r1, 0x805c6103, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xb) r4 = memfd_secret(0x80000) fcntl$setlease(r4, 0x400, 0x0) close(r4) openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2001) close_range(r3, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r5, &(0x7f0000000080)=""/100, 0x64) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000002740)=0x401, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ptrace$pokeuser(0x6, 0x0, 0x87, 0xed73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 2.180793377s ago: executing program 1 (id=259): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0xfffffffd, 0x0, 0x8, 0xfffffffc, 0x0, "9512ddb357f7ad947afffff29647180800"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x6, 0x8000, 0x6, 0x1, 0x5}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0x4}, {0x7fff, 0xff, 0x0, 0x19a}]}) 2.178321355s ago: executing program 1 (id=260): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) poll(&(0x7f0000004200)=[{}], 0x1, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x90}}, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x3) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) poll(&(0x7f0000004200)=[{}], 0x1, 0x0) (async) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) chdir(&(0x7f0000000080)='./file0\x00') (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x90}}, 0x0) (async) umount2(&(0x7f00000000c0)='./file0\x00', 0x3) (async) 2.110700784s ago: executing program 1 (id=261): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x5c1042, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x9) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) (async) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000000)="660f3a22ff830f01cb66ba4000ec0f20c035100000000f22c0e000c4e159d9354369dfc00f01ca0f20d835080000000f22d80a2366b88f008ec8", 0x3a}], 0x1, 0x53, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="0a00f7ff080211000001000004002a0008009e0008"], 0x34}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) (async) sendmmsg(r6, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)="3682507c5deb83d6967fbf5426675c", 0xf}, {&(0x7f0000000380)="84187e26306e5c7c8680b8a9876265ca25b0f561c330df31e1143d911deb2b9880e3e451d16647faf3ec166cf697b26f565f6671b3038cf8cfdeb8d3f48abe39d27983ea014517a91f3a1b410c23b6c79c4996805d7bebeb2bbd7fdb23dba527aa5bf1d5e9b4b792aa1355c62f1c83eb3618a9d1a9d329edbb51909e9d1fad419be08c7d3a58aab613d2e31017122f9bd3286704cd3bdaa4554a229cf3d3029b6bd6d9770ad686bcab5c6f4f9a2334b660793e0905c51d298051e73e9cf16c6b10be6c7c0b29969283df1453431b91974b", 0xd1}, {&(0x7f0000000240)="c5067f91a5be282a6186c103823b772d8cfb42ad3f8ef5c7c69e101aee54e3f033bbbafb036b81f549d14852536d4ec80c944373ef5bedbb43707d5bd073983474f61a44e2ad6eec879c75ace54df6c0dd8922d241b2245b50034df9065dd855246da8751c3d99384d3e421f1078f084254d178f4981bc5f40fca04fe0f37e8de771062c24d343ae42d99a5c5626036330222870bce3319dffa551", 0x9b}, {&(0x7f0000000480)="ab5ab1e663f850e18d34ffb32120744bbff8c69d0a0f46d87458719c6e15e4b1038fb3bc1927", 0x26}], 0x4}}, {{&(0x7f0000000500)=@can, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000580)="506d9edebf2b28046e742a7ef8ec1764", 0x10}, {&(0x7f00000005c0)="49e9b959579e49d884f144b244873daf2c0295664913b157fcaea30441668616b6acdda4fefd975dbf3d7a5612c11cf08b0f4c3a634b1b11f2e946dbd04454e6cea03410fcbd9d954ede0d4246a4f059349b7e13102bb8a770fe2c87559aa949e03616d1ad12f2d1a4316c4df38171de8437d61562638e29adbd644f406f35d027d9ccbe7b7a3492a6489615331afcbfbc5d514784c0929b6e64735abbcdd7e370e91943bdce25685f19affc44ed8dacdd7cca10a7a4bf0c4c88c69410540a84fa754f882a3ed2d5e4787dc0f8e157e4674d84ccb1227880dabc72fc53", 0xdd}, {&(0x7f00000006c0)="feac68e32fd5418e689c05d4ca6539613b2412889dc7773298ae79dc53fc7c2b1ebae206ce2b19cf1c53e1a0cff6877a331019d6dd43d46181559a17dc31428f3fcb9fb4138baf91e379e9fcaff87a58f9c7c3efd399d1c0c5c40bb530b617671327031f3dfeb6f1eb6af31d618cf0b0551e3a5745b21d16d458e3d3606f24414173376f7f7c3c7714ec0a561de81d895e34793263445e4dff3ff672cc85263007af995cd766e6caa1db4a5f91eeaec3c6eea06acf95698876967b52cf2e1e6841b2a72290d61300ea3670089e2ebd32d02b2d89c1199e9800948da61789cf3b1bc904678553890d020d6550b6", 0xed}, {&(0x7f00000007c0)="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", 0x1000}], 0x4, &(0x7f0000001800)=[{0x20, 0x115, 0x4, "18f8ba6db9d1dd8ef692eed0e9"}, {0xf0, 0x10b, 0xd, "9e18d17b8bec1321a2aed06c3fa6c54ac448886ca2b8f20bf7d91423fba3189bf1e7f800a70111a72f9c2d9efd10cadd320da820cb891782122405dcde94b0126595933c7e08a424b7a244f76d63a0d59cd2100fd5bee18c4a886495aba15bf4213b4ff2b779d7aa6dc1fedd76d651d74ca9b6db94a7a4b6b924cb3d16742fc65cfbb38423046fd2f0251a08da130d9b042438cda22d1520893d75a20316fc2ee270b5880acb31c9faba98c98f088566eba3f7f6c3bb54a7d0779aa0229798ec7c9c676632dce938a2f36cfc8f8668187f97b26a702b6014be0a4a48e7f1"}, {0xf8, 0x10e, 0x80, "ee2657ebcdba154922b4f64202082acf5b503d545945d78eb689e46d3e4d64e884b366fb5ff33b44cc6e5ca6be992ba85c87328e13f822b580839ba124aa43e6b206242cf82d90bbffdfcbfec4e68da58fa852e5936ccf8fab282cffa665e4d78c5f217f455c0cf47a1eeecf70a693afc84b46db7212ca8ee78221c9b271b3088181c82296c6db166efdbb85b71d8164c20aef371e5f385a1689af79eb176df8459149f0970ec8553ceb85b99dd731a9d7f36201f024fb7b5d2d19e7b19b06f484f3a0933d38ff480118cd4b64e218717cf97abb79ba99810625f4ae9d2d901433b2"}, {0x38, 0xff, 0x8, "72492f187954f1a91c636b0aa6ca79a85713d25edc3e6eeb6e62fd569764b63173909fa2654e"}, {0xf8, 0x115, 0xaa9, "39783f5081828b4798ec8d7c1caebedf73a43b8db0bf4feb7d3fbc86a0cba8a16b53424470259cf563f1f1ed5b2aaaf55d4352b97ce3e407e15d63aad916bda0fb5e6085e1db255aa0787c49279149657391ce751a5ee475de70050b02f01254641c07f10c25375a53fa8a3b13d4aa4ac72c7c25e0be88aed31716fecc2de7b9af02bf1ab914506ce07be212c7fcfe3b72d52326fa02fda35c92bbf429dd557975a1445703d68df60c8a33ecfb74fc236a8a3095fc885e744e3bb892a5f6d2a3164ff3d0cc92c564505d9acd986557515b524a27c313cf372b979dd8edf8626e49215467fe45"}, {0x60, 0x6, 0x8, "4800df556a1950d2b3dfa230e8fa6d4a386bf556ea8ed7cc599f2623f0e6901280d99ad7e86dff27aefe1e6a655451b14b7033c2f6c93ee69ee7b0e7e7b589b3ecb33a34f8537ad005aac7323742a78d"}, {0x40, 0x0, 0x2, "299654a5ace1418cfc4c9bb5df26b3b411295ce98874f631ea26f7cad40e9928424cccacc99b1bbbb1ec4f9505"}], 0x3d8}}], 0x2, 0x20000000) (async) mknodat$loop(r2, &(0x7f00000001c0)='./file1\x00', 0x8, 0x0) 1.871146876s ago: executing program 1 (id=262): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x0, 0xb, 0x4, 0x0, 0x10}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@multiplanar_mmap={0x2b, 0x2, 0x4, 0x2000, 0xc3a, {r2, r3/1000+60000}, {0x1, 0xc, 0xa1, 0x8, 0x1, 0x2, "000de4eb"}, 0x6, 0x1, {&(0x7f0000000100)=[{0x5, 0x81, {0xc57e}, 0x2}, {0x20c0, 0x7, {0x12}}]}, 0x80000000, 0x0, r4}) 1.850882827s ago: executing program 32 (id=262): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x0, 0xb, 0x4, 0x0, 0x10}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@multiplanar_mmap={0x2b, 0x2, 0x4, 0x2000, 0xc3a, {r2, r3/1000+60000}, {0x1, 0xc, 0xa1, 0x8, 0x1, 0x2, "000de4eb"}, 0x6, 0x1, {&(0x7f0000000100)=[{0x5, 0x81, {0xc57e}, 0x2}, {0x20c0, 0x7, {0x12}}]}, 0x80000000, 0x0, r4}) 1.308729566s ago: executing program 2 (id=265): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') r1 = socket$kcm(0x10, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, &(0x7f0000000a00)) getdents64(r0, &(0x7f0000000240)=""/44, 0x7a) getdents64(r0, 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x4080) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000000)) 1.250722961s ago: executing program 2 (id=266): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000006800d50300000000000000000a0000000000000004000b000800010002"], 0x24}}, 0x0) socketpair(0x5, 0x3, 0x80000000, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)={0x14, r3, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x880) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd0, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfbc}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20040000}, 0x8003) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3731070d0773090acd3b78130daa61d8e804003f005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$KDMKTONE(r4, 0x4b30, 0x2) ioctl$TIOCL_SETVESABLANK(r4, 0x541c, &(0x7f0000000000)) ioctl$KIOCSOUND(r4, 0x4b2f, 0x7) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x89100) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000140)={0x1, 0x8, 0x0, 0xfffffffffffffffd, 0x3, 0x7, 0x5, 0x7, 0xa, 0x40, 0x1ff, 0x4}) 1.049775055s ago: executing program 33 (id=76): r0 = fsopen(&(0x7f0000000040)='befs\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) bind$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @null, 0x6}, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r4, 0x4bfa, &(0x7f0000000080)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r1], 0x7c}}, 0x80) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000180)='iocharset', 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x2, [@ptr, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xfffffffc, [{0x0, 0x3}]}, @enum64={0xa, 0x3, 0x0, 0x13, 0x1, 0x2, [{0x7, 0x3, 0x8001}, {0x3, 0x3, 0xf47}, {0x6, 0xa, 0x4}]}]}}, &(0x7f0000001280)=""/226, 0x6e, 0xe2, 0x1}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x82, 0x42, 0x6, 0x2}]}) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000df250000000000000000000000007a5f69fc5da44c7837106a4c495d5c2f52dca9574208b5fc9b080965d7c628a9f993c4150000826fb50e2572b0de75c3c11c7d5e5b4a6620c87410298b3715b3538bc0a1a1ae7d7378eaaae704a0e856560557174d09db4d0d49d71402582299c200000000000000fc8ba606e7ec501b6fef025ccfb7903de97374d23a9418fee84d529451e2dbbbb3d1a88468eebbe3fbfbb7256d824865056b1afdaf7fe8e5e8be00a8eb888feb26f84d4ad3a8d42b86c6d567c25afad3a9f784cd946942af2bbbc35797797cbd2e040a5a39eb85fb4a1af5017cf56caf470000000000", @ANYRES32=0x0, @ANYBLOB="adffa888d22600001c0012800b00010067656e65766500000c0002800500090000000000"], 0x3c}}, 0xc080) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) write$binfmt_elf64(r7, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/2216], 0x8a8) 1.010318644s ago: executing program 2 (id=268): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="2e000300010040", 0x7) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140040"], 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x2) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d00d3107f3ac21d0005000000", 0x29}], 0x1) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030400000d83fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800500190002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 891.202248ms ago: executing program 2 (id=269): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/3, 0x3, 0x0, 0x4, 0x9, 0x4, 0xc08}}, 0x120) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) 620.967077ms ago: executing program 3 (id=270): syz_emit_ethernet(0x76, &(0x7f00000008c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500fc91dc263cac6dd9536459699c00680000000000019078ac1e0001ac1414aa0500900578e00000e0430000000000000000110012511414aa00000000440c31610a01020000000eb8442c00030a01010000000000ac1414bb000000000000000000000000ac14"], 0x0) (async) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x840) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) (async) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async, rerun: 32) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 32) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) (rerun: 32) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x4) (async) recvfrom$l2tp(r0, &(0x7f0000000040)=""/13, 0xd, 0x2020, &(0x7f0000000080), 0x10) 1.098664ms ago: executing program 2 (id=271): mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) (async) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, &(0x7f0000000040)=[{}], 0x144, 0x1, 0x0, 0x2, 0x0, 0x2}) 0s ago: executing program 2 (id=272): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88c42, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x18) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x10) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TCFLSH(r7, 0x400455c8, 0x1) (async) ioctl$TIOCSETD(r7, 0x5412, &(0x7f0000000140)=0xffffffc0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="bc0000000000000000001000801a2e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) kernel console output (not intermixed with test programs): [ 44.048945][ T40] audit: type=1400 audit(1756094847.454:61): avc: denied { siginh } for pid=5932 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:16828' (ED25519) to the list of known hosts. [ 45.391228][ T40] audit: type=1400 audit(1756094848.814:62): avc: denied { name_bind } for pid=5950 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.407102][ T40] audit: type=1400 audit(1756094848.834:63): avc: denied { write } for pid=5951 comm="sh" path="pipe:[6549]" dev="pipefs" ino=6549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.419146][ T40] audit: type=1400 audit(1756094848.844:64): avc: denied { execute } for pid=5951 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.427767][ T40] audit: type=1400 audit(1756094848.844:65): avc: denied { execute_no_trans } for pid=5951 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.498437][ T5951] cgroup: Unknown subsys name 'net' [ 47.502482][ T40] audit: type=1400 audit(1756094850.924:66): avc: denied { mounton } for pid=5951 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.616045][ T5951] cgroup: Unknown subsys name 'cpuset' [ 47.621102][ T5951] cgroup: Unknown subsys name 'rlimit' [ 47.876220][ T5956] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.570701][ T5951] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.783393][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 51.783404][ T40] audit: type=1400 audit(1756094855.204:80): avc: denied { execmem } for pid=5960 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.011169][ T40] audit: type=1400 audit(1756094855.434:81): avc: denied { create } for pid=5965 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.020372][ T40] audit: type=1400 audit(1756094855.434:82): avc: denied { create } for pid=5964 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.027369][ T40] audit: type=1400 audit(1756094855.434:83): avc: denied { read write } for pid=5964 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.034825][ T40] audit: type=1400 audit(1756094855.434:84): avc: denied { read write } for pid=5965 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.041937][ T40] audit: type=1400 audit(1756094855.434:85): avc: denied { open } for pid=5964 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.049431][ T40] audit: type=1400 audit(1756094855.434:86): avc: denied { open } for pid=5965 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.056724][ T40] audit: type=1400 audit(1756094855.444:87): avc: denied { ioctl } for pid=5964 comm="syz-executor" path="socket:[2876]" dev="sockfs" ino=2876 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.061147][ T5970] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.068228][ T5970] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.070538][ T5970] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.073218][ T5974] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.074169][ T5970] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.075949][ T5974] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.078152][ T5979] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.079916][ T5974] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.082672][ T5979] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.084930][ T5974] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.086249][ T5978] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.087698][ T5978] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.087883][ T5979] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.092141][ T40] audit: type=1400 audit(1756094855.514:88): avc: denied { read } for pid=5965 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.093722][ T5974] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.094068][ T5978] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.094610][ T5978] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.095022][ T5978] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.096659][ T5970] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.097132][ T40] audit: type=1400 audit(1756094855.514:89): avc: denied { open } for pid=5965 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.130163][ T5970] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.133610][ T5970] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.306119][ T5965] chnl_net:caif_netlink_parms(): no params data found [ 52.356860][ T5972] chnl_net:caif_netlink_parms(): no params data found [ 52.402445][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.405236][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.407680][ T5965] bridge_slave_0: entered allmulticast mode [ 52.410365][ T5965] bridge_slave_0: entered promiscuous mode [ 52.416058][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.418331][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.420619][ T5965] bridge_slave_1: entered allmulticast mode [ 52.423416][ T5965] bridge_slave_1: entered promiscuous mode [ 52.494745][ T5965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.527595][ T5965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.590475][ T5975] chnl_net:caif_netlink_parms(): no params data found [ 52.595195][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.597544][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.599849][ T5972] bridge_slave_0: entered allmulticast mode [ 52.602573][ T5972] bridge_slave_0: entered promiscuous mode [ 52.608061][ T5965] team0: Port device team_slave_0 added [ 52.614110][ T5965] team0: Port device team_slave_1 added [ 52.629172][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.631556][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.634182][ T5972] bridge_slave_1: entered allmulticast mode [ 52.636841][ T5972] bridge_slave_1: entered promiscuous mode [ 52.705869][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.708377][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.717199][ T5965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.723406][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.730192][ T5964] chnl_net:caif_netlink_parms(): no params data found [ 52.735192][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.737408][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.745776][ T5965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.750677][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.797776][ T5972] team0: Port device team_slave_0 added [ 52.831083][ T5972] team0: Port device team_slave_1 added [ 52.893769][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.896081][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.898354][ T5975] bridge_slave_0: entered allmulticast mode [ 52.900979][ T5975] bridge_slave_0: entered promiscuous mode [ 52.924210][ T5965] hsr_slave_0: entered promiscuous mode [ 52.926621][ T5965] hsr_slave_1: entered promiscuous mode [ 52.929335][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.931503][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.939510][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.944100][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.946515][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.948908][ T5975] bridge_slave_1: entered allmulticast mode [ 52.951574][ T5975] bridge_slave_1: entered promiscuous mode [ 52.961731][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.964027][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.971953][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.055961][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.058285][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.060621][ T5964] bridge_slave_0: entered allmulticast mode [ 53.063363][ T5964] bridge_slave_0: entered promiscuous mode [ 53.103373][ T5975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.106714][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.109175][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.111467][ T5964] bridge_slave_1: entered allmulticast mode [ 53.115845][ T5964] bridge_slave_1: entered promiscuous mode [ 53.150790][ T5975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.205371][ T5972] hsr_slave_0: entered promiscuous mode [ 53.207600][ T5972] hsr_slave_1: entered promiscuous mode [ 53.209630][ T5972] debugfs: 'hsr0' already exists in 'hsr' [ 53.211501][ T5972] Cannot create hsr debugfs directory [ 53.247110][ T5964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.255599][ T5975] team0: Port device team_slave_0 added [ 53.261525][ T5975] team0: Port device team_slave_1 added [ 53.279411][ T5964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.331903][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.335204][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.345741][ T5975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.393315][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.396010][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.406649][ T5975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.427819][ T5964] team0: Port device team_slave_0 added [ 53.452602][ T5964] team0: Port device team_slave_1 added [ 53.498289][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.501235][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.509774][ T5964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.514184][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.516373][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.524463][ T5964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.569433][ T5975] hsr_slave_0: entered promiscuous mode [ 53.571725][ T5975] hsr_slave_1: entered promiscuous mode [ 53.574055][ T5975] debugfs: 'hsr0' already exists in 'hsr' [ 53.575800][ T5975] Cannot create hsr debugfs directory [ 53.713374][ T5964] hsr_slave_0: entered promiscuous mode [ 53.715709][ T5964] hsr_slave_1: entered promiscuous mode [ 53.718058][ T5964] debugfs: 'hsr0' already exists in 'hsr' [ 53.720125][ T5964] Cannot create hsr debugfs directory [ 53.753454][ T5965] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.771394][ T5965] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.831780][ T5965] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.842000][ T5965] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.906610][ T5972] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.914588][ T5972] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.929271][ T5972] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.965594][ T5972] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.009990][ T5975] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.015996][ T5975] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.020489][ T5975] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.032793][ T5975] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.093619][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.105745][ T5964] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.110523][ T5964] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.116746][ T5964] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.121928][ T5964] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.124137][ T5970] Bluetooth: hci0: command tx timeout [ 54.125315][ T5976] Bluetooth: hci1: command tx timeout [ 54.133305][ T5976] Bluetooth: hci2: command tx timeout [ 54.159007][ T5965] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.172055][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.175148][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.195446][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.198548][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.203555][ T5976] Bluetooth: hci3: command tx timeout [ 54.221165][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.242183][ T5975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.261503][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.273475][ T5975] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.278628][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.281493][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.296642][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.299643][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.315318][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.317708][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.333886][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.336285][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.370219][ T5964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.386466][ T5964] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.396255][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.398434][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.407562][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.409824][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.437942][ T5964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.459068][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.481856][ T5965] veth0_vlan: entered promiscuous mode [ 54.489250][ T5965] veth1_vlan: entered promiscuous mode [ 54.501139][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.516530][ T5965] veth0_macvtap: entered promiscuous mode [ 54.526103][ T5965] veth1_macvtap: entered promiscuous mode [ 54.540345][ T5975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.554127][ T5972] veth0_vlan: entered promiscuous mode [ 54.556978][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.561850][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.574572][ T61] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.581742][ T5972] veth1_vlan: entered promiscuous mode [ 54.584828][ T61] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.588305][ T61] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.596583][ T61] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.603410][ T5964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.654145][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.654154][ T5975] veth0_vlan: entered promiscuous mode [ 54.658836][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.659613][ T5972] veth0_macvtap: entered promiscuous mode [ 54.672603][ T5972] veth1_macvtap: entered promiscuous mode [ 54.678649][ T5964] veth0_vlan: entered promiscuous mode [ 54.690950][ T5975] veth1_vlan: entered promiscuous mode [ 54.696446][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.698355][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.700020][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.706244][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.712868][ T5964] veth1_vlan: entered promiscuous mode [ 54.721010][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.727085][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.734801][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.738262][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.754981][ T5965] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.781210][ T5964] veth0_macvtap: entered promiscuous mode [ 54.799439][ T5964] veth1_macvtap: entered promiscuous mode [ 54.805570][ T5975] veth0_macvtap: entered promiscuous mode [ 54.810853][ T5975] veth1_macvtap: entered promiscuous mode [ 54.817400][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.819836][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.827128][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.835363][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.849852][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.852668][ T6059] netlink: 'syz.3.6': attribute type 11 has an invalid length. [ 54.855701][ T6059] netlink: 149476 bytes leftover after parsing attributes in process `syz.3.6'. [ 54.862667][ T223] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.868423][ T223] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.872917][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.876031][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.878198][ T223] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.878529][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.881462][ T223] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.882550][ T6058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.902685][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.908610][ T61] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.919304][ T61] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.922173][ T61] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.974387][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.976876][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.999632][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.002741][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.017304][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.018052][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.020137][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.022403][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.070305][ T6074] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9'. [ 55.086240][ T6074] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6074 comm=syz.3.9 [ 55.256216][ T6113] netlink: 'syz.3.18': attribute type 4 has an invalid length. [ 55.317846][ T6131] capability: warning: `syz.0.21' uses deprecated v2 capabilities in a way that may be insecure [ 55.382813][ T6144] IPv6: Can't replace route, no match found [ 55.392570][ T6144] 9pnet_fd: Insufficient options for proto=fd [ 55.402580][ T6147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 55.438706][ T6155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=6155 comm=syz.3.27 [ 55.445578][ T6157] overlay: Unknown parameter 'obj_user' [ 55.551837][ T6174] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.601485][ T6180] affs: No valid root block on device nullb0 [ 55.723805][ T6190] macsec1: entered allmulticast mode [ 55.726523][ T6190] team0: Device macsec1 is already an upper device of the team interface [ 55.753553][ T6195] binder: 6194:6195 ioctl c0306201 200000000240 returned -14 [ 55.865415][ T6200] capability: warning: `syz.2.41' uses 32-bit capabilities (legacy support in use) [ 55.885875][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 55.906098][ T6202] IPv6: sit1: Disabled Multicast RS [ 55.911938][ T6202] sit1: entered allmulticast mode [ 56.001666][ T6211] Zero length message leads to an empty skb [ 56.039837][ T6213] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 56.043663][ T6213] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 56.204051][ T5976] Bluetooth: hci0: command tx timeout [ 56.205784][ T5976] Bluetooth: hci2: command tx timeout [ 56.207542][ T5976] Bluetooth: hci1: command tx timeout [ 56.293492][ T5976] Bluetooth: hci3: command tx timeout [ 56.333320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.337536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.447654][ T6266] bridge_slave_0: left allmulticast mode [ 56.449467][ T6266] bridge_slave_0: left promiscuous mode [ 56.452226][ T6266] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.476931][ T6266] bridge_slave_1: left allmulticast mode [ 56.479512][ T6266] bridge_slave_1: left promiscuous mode [ 56.481616][ T6266] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.492702][ T6266] bond0: (slave bond_slave_0): Releasing backup interface [ 56.498496][ T6266] bond0: (slave bond_slave_1): Releasing backup interface [ 56.507750][ T6266] team0: Port device team_slave_0 removed [ 56.515936][ T6266] team0: Port device team_slave_1 removed [ 56.518781][ T6266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.529231][ T6266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.548343][ T6266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.550885][ T6266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.596719][ T6269] vlan0: entered promiscuous mode [ 56.609048][ T6269] team0: Port device vlan0 added [ 56.635442][ T6276] fuse: Bad value for 'fd' [ 56.638825][ T6276] fuse: Bad value for 'fd' [ 56.793037][ T40] kauditd_printk_skb: 15116 callbacks suppressed [ 56.793048][ T40] audit: type=1326 audit(1756094860.214:15205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6194 comm="syz.0.40" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13238ebe9 code=0x50000 [ 56.802028][ T40] audit: type=1326 audit(1756094860.224:15208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6194 comm="syz.0.40" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe13238d69f code=0x50000 [ 56.809772][ T40] audit: type=1326 audit(1756094860.214:15207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6194 comm="syz.0.40" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13238ebe9 code=0x50000 [ 56.819206][ T40] audit: type=1326 audit(1756094860.224:15209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6194 comm="syz.0.40" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe13238d69f code=0x50000 [ 56.826813][ T40] audit: type=1326 audit(1756094860.224:15210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6194 comm="syz.0.40" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13238ebe9 code=0x50000 [ 56.834057][ T40] audit: type=1326 audit(1756094860.224:15211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6194 comm="syz.0.40" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe13238d69f code=0x50000 [ 56.840985][ T40] audit: type=1326 audit(1756094860.224:15213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6194 comm="syz.0.40" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe13238d69f code=0x50000 [ 56.849501][ T40] audit: type=1326 audit(1756094860.224:15212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6194 comm="syz.0.40" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13238ebe9 code=0x50000 [ 56.861255][ T40] audit: type=1326 audit(1756094860.224:15214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6194 comm="syz.0.40" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe13238d69f code=0x50000 [ 56.870211][ T40] audit: type=1326 audit(1756094860.224:15215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6194 comm="syz.0.40" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13238ebe9 code=0x50000 [ 58.283092][ T5976] Bluetooth: hci2: command tx timeout [ 58.284186][ T5974] Bluetooth: hci0: command tx timeout [ 58.364149][ T5974] Bluetooth: hci3: command tx timeout [ 58.683079][ T5974] Bluetooth: hci1: command 0x0419 tx timeout [ 58.683387][ T6268] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 59.453323][ T6268] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 59.459675][ T6268] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 59.464253][ T6268] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 59.466929][ T6268] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 59.470603][ T6268] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 59.476547][ T6268] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 59.479433][ T6268] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 59.485510][ T6268] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 59.489331][ T6268] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 59.491569][ T6268] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 59.496415][ T6268] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 59.596818][ T6289] netlink: 348 bytes leftover after parsing attributes in process `syz.2.59'. [ 59.669806][ T6296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=273 sclass=netlink_route_socket pid=6296 comm=syz.3.62 [ 59.754416][ T5974] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 59.756478][ T6306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.66'. [ 59.760432][ T6306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.66'. [ 59.763079][ T2296] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.809431][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.69'. [ 59.828760][ T6312] binder: 6310:6312 ioctl 4002f516 200000000000 returned -22 [ 59.954630][ T6327] block nbd1: Attempted send on invalid socket [ 59.956789][ T6327] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 59.959774][ T6327] hpfs: hpfs_map_sector(): read error [ 60.063148][ T60] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 60.072793][ T6335] netlink: 'syz.1.74': attribute type 1 has an invalid length. [ 60.135347][ T6341] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6341 comm=syz.0.75 [ 60.217124][ T60] usb 7-1: config 0 has an invalid interface number: 102 but max is 0 [ 60.220633][ T60] usb 7-1: config 0 has no interface number 0 [ 60.224956][ T60] usb 7-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=38.f5 [ 60.228843][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.237010][ T60] usb 7-1: config 0 descriptor?? [ 60.293473][ T6346] warning: `syz.1.78' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 60.309192][ T6346] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.503337][ T6355] overlayfs: conflicting lowerdir path [ 60.645632][ T6309] netlink: 'syz.2.68': attribute type 1 has an invalid length. [ 60.648995][ T6309] netlink: 224 bytes leftover after parsing attributes in process `syz.2.68'. [ 60.763137][ T5974] Bluetooth: hci1: command 0x0419 tx timeout [ 60.766500][ T60] asix 7-1:0.102 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 60.770950][ T60] asix 7-1:0.102: probe with driver asix failed with error -71 [ 60.776968][ T60] usb 7-1: USB disconnect, device number 2 [ 60.815868][ T6374] JFS: charset not found [ 61.094878][ T6416] netlink: 'syz.3.95': attribute type 1 has an invalid length. [ 61.097491][ T6416] netlink: 216 bytes leftover after parsing attributes in process `syz.3.95'. [ 61.103797][ T6414] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 61.174483][ T6422] evm: overlay not supported [ 61.493086][ T5974] Bluetooth: hci2: command 0x0c1a tx timeout [ 61.493107][ T5976] Bluetooth: hci0: command 0x0c1a tx timeout [ 61.573061][ T5974] Bluetooth: hci3: command 0x0c1a tx timeout [ 61.934866][ T40] kauditd_printk_skb: 73348 callbacks suppressed [ 61.934881][ T40] audit: type=1400 audit(1756094865.362:88564): avc: denied { unlink } for pid=5975 comm="syz-executor" name="file0" dev="tmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.001062][ T40] audit: type=1400 audit(1756094865.422:88565): avc: denied { create } for pid=6430 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 62.007431][ T40] audit: type=1400 audit(1756094865.422:88566): avc: denied { read } for pid=6430 comm="syz.1.99" path="socket:[11965]" dev="sockfs" ino=11965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 62.036278][ T40] audit: type=1400 audit(1756094865.462:88567): avc: denied { write } for pid=6432 comm="syz.3.100" name="2:0:0:0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 62.044587][ T40] audit: type=1400 audit(1756094865.462:88568): avc: denied { open } for pid=6432 comm="syz.3.100" path="/dev/bsg/2:0:0:0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 62.052132][ T40] audit: type=1400 audit(1756094865.462:88569): avc: denied { ioctl } for pid=6432 comm="syz.3.100" path="/dev/bsg/2:0:0:0" dev="devtmpfs" ino=728 ioctlcmd=0x5382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 62.101157][ T40] audit: type=1400 audit(1756094865.522:88570): avc: denied { create } for pid=6440 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 62.107047][ T6441] netlink: 830 bytes leftover after parsing attributes in process `syz.3.102'. [ 62.107571][ T40] audit: type=1400 audit(1756094865.522:88571): avc: denied { write } for pid=6440 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 62.234694][ T40] audit: type=1400 audit(1756094865.662:88572): avc: denied { create } for pid=6445 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 62.314251][ T40] audit: type=1400 audit(1756094865.742:88573): avc: denied { read } for pid=6454 comm="syz.3.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 62.338786][ T6460] dvmrp1: entered allmulticast mode [ 62.391796][ T6466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.110'. [ 62.400164][ T6466] bridge1: entered promiscuous mode [ 62.449347][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 62.498597][ T6478] IPv6: NLM_F_CREATE should be specified when creating new route [ 62.844509][ T5976] Bluetooth: hci1: command 0x0419 tx timeout [ 63.563224][ T5976] Bluetooth: hci2: command 0x0c1a tx timeout [ 63.563265][ T5970] Bluetooth: hci0: command 0x0c1a tx timeout [ 63.569352][ T6506] process 'syz.2.123' launched './file0' with NULL argv: empty string added [ 63.642990][ T5970] Bluetooth: hci3: command 0x0c1a tx timeout [ 64.008195][ T6523] bond1: entered allmulticast mode [ 64.015612][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 64.021638][ T6523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.127'. [ 64.052727][ T6526] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 64.056983][ T6526] netlink: 40 bytes leftover after parsing attributes in process `syz.2.128'. [ 64.082225][ T6528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'. [ 64.085873][ T6528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'. [ 64.120565][ T6530] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 64.123213][ T5970] Bluetooth: hci4: command 0x1003 tx timeout [ 64.124051][ T5974] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 64.144977][ T6431] mkiss: ax0: crc mode is auto. [ 64.195985][ T6538] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 64.200476][ T6538] overlayfs: overlapping lowerdir path [ 64.378465][ T6553] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=6553 comm=syz.2.136 [ 64.741844][ T6557] syz.1.138 uses obsolete (PF_INET,SOCK_PACKET) [ 64.894003][ T6565] netlink: 'syz.1.140': attribute type 10 has an invalid length. [ 64.898391][ T6565] hsr_slave_0: left promiscuous mode [ 64.900519][ T6565] hsr_slave_1: left promiscuous mode [ 64.923038][ T5974] Bluetooth: hci1: command 0x0419 tx timeout [ 65.019485][ T6574] 8021q: VLANs not supported on ip_vti0 [ 65.057409][ T6578] 8021q: VLANs not supported on ip_vti0 [ 65.473043][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 65.623102][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 65.626293][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 65.629407][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 65.632444][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 65.635836][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.639953][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 65.642757][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.643102][ T5974] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.653048][ T5974] Bluetooth: hci0: command 0x0c1a tx timeout [ 65.723149][ T5974] Bluetooth: hci3: command 0x0c1a tx timeout [ 65.849718][ T24] usb 6-1: GET_CAPABILITIES returned 0 [ 65.851549][ T24] usbtmc 6-1:16.0: can't read capabilities [ 65.940388][ T6606] syz.2.151 (6606): drop_caches: 2 [ 66.300956][ T6616] __nla_validate_parse: 21 callbacks suppressed [ 66.300969][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'. [ 66.308381][ T6616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.155'. [ 66.318753][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'. [ 66.319963][ T6123] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.321551][ T6616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.155'. [ 66.327520][ T6123] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.331492][ T6123] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.335584][ T6123] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.389451][ T6619] overlay: Unknown parameter 'obj_type' [ 66.392133][ T6619] No control pipe specified [ 66.395142][ T6619] ======================================================= [ 66.395142][ T6619] WARNING: The mand mount option has been deprecated and [ 66.395142][ T6619] and is ignored by this kernel. Remove the mand [ 66.395142][ T6619] option from the mount to silence this warning. [ 66.395142][ T6619] ======================================================= [ 66.561367][ T6627] syzkaller1: entered promiscuous mode [ 66.563913][ T6627] syzkaller1: entered allmulticast mode [ 66.938308][ T6642] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.031036][ T6646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6646 comm=syz.2.166 [ 67.256318][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 67.256330][ T40] audit: type=1400 audit(1756094870.682:88633): avc: denied { map } for pid=6658 comm="syz.2.170" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 67.267048][ T40] audit: type=1400 audit(1756094870.682:88634): avc: denied { execute } for pid=6658 comm="syz.2.170" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 67.569088][ T40] audit: type=1400 audit(1756094870.992:88635): avc: denied { bind } for pid=6676 comm="syz.2.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 67.570913][ T6677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6677 comm=syz.2.174 [ 67.577297][ T5970] Bluetooth: hci0: Malformed LE Event: 0x0b [ 67.586251][ T40] audit: type=1400 audit(1756094871.012:88636): avc: denied { ioctl } for pid=6676 comm="syz.2.174" path="socket:[14345]" dev="sockfs" ino=14345 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 67.610301][ T6679] afs: Unknown parameter 'dyn0211' [ 67.677190][ T40] audit: type=1400 audit(1756094871.102:88637): avc: denied { create } for pid=6680 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 67.678367][ T6682] netlink: 'syz.2.176': attribute type 1 has an invalid length. [ 67.683697][ T40] audit: type=1400 audit(1756094871.102:88638): avc: denied { write } for pid=6680 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 67.733438][ T6682] 8021q: adding VLAN 0 to HW filter on device bond3 [ 67.737232][ T6682] bond2: (slave bond3): making interface the new active one [ 67.740060][ T6682] bond2: (slave bond3): Enslaving as an active interface with an up link [ 67.755919][ T6682] bond2: (slave gretap2): Enslaving as a backup interface with an up link [ 67.761273][ T6682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.176'. [ 67.765710][ T6682] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.786246][ T6686] cgroup: release_agent respecified [ 67.788410][ T6686] netlink: 24 bytes leftover after parsing attributes in process `syz.3.177'. [ 67.809631][ T6688] cgroup: release_agent respecified [ 67.844572][ T40] audit: type=1400 audit(1756094871.272:88639): avc: denied { create } for pid=6690 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 67.852806][ T40] audit: type=1400 audit(1756094871.272:88640): avc: denied { write } for pid=6690 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 67.888254][ T6694] netlink: 24 bytes leftover after parsing attributes in process `syz.3.179'. [ 67.934858][ T40] audit: type=1400 audit(1756094871.362:88641): avc: denied { getopt } for pid=6695 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.979637][ T40] audit: type=1400 audit(1756094871.402:88642): avc: denied { create } for pid=6697 comm="syz.3.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 68.241106][ T1337] usb 6-1: USB disconnect, device number 3 [ 68.283810][ T6711] sp0: Synchronizing with TNC [ 68.343564][ T6712] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 68.485503][ T6720] netlink: 36 bytes leftover after parsing attributes in process `syz.2.187'. [ 68.519930][ T6723] netlink: 92 bytes leftover after parsing attributes in process `syz.2.188'. [ 68.629555][ T6734] syzkaller0: entered promiscuous mode [ 68.631535][ T6734] syzkaller0: entered allmulticast mode [ 68.763012][ T5970] Bluetooth: hci3: command 0x0c1a tx timeout [ 68.833435][ T6742] netlink: 'syz.2.193': attribute type 41 has an invalid length. [ 69.716204][ T6751] netlink: 'syz.2.195': attribute type 1 has an invalid length. [ 69.737929][ T6751] bond4: (slave geneve2): making interface the new active one [ 69.740931][ T6751] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 69.744637][ T6124] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 69.746663][ T6751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.195'. [ 69.748168][ T6124] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 69.754776][ T6124] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 69.758514][ T6124] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 70.398029][ T6786] Mount JFS Failure: -22 [ 70.426111][ T6790] Mount JFS Failure: -22 [ 70.690426][ T6799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=6799 comm=syz.1.207 [ 71.167284][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.215579][ T6832] ptrace attach of "/syz-executor exec"[5964] was attempted by "/syz-executor exec"[6832] [ 71.481968][ T6854] netlink: 'syz.2.226': attribute type 1 has an invalid length. [ 71.495863][ T6854] 8021q: adding VLAN 0 to HW filter on device bond5 [ 71.504660][ T6854] bond5: (slave geneve3): making interface the new active one [ 71.507825][ T6854] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 71.663723][ T5974] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 71.896144][ T6891] __nla_validate_parse: 4 callbacks suppressed [ 71.896155][ T6891] netlink: 68 bytes leftover after parsing attributes in process `syz.3.230'. [ 72.146858][ T6898] sg_write: data in/out 10438218/1 bytes for SCSI command 0x6b-- guessing data in; [ 72.146858][ T6898] program syz.1.239 not setting count and/or reply_len properly [ 73.028367][ T6911] Bluetooth: MGMT ver 1.23 [ 73.144145][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 73.144161][ T40] audit: type=1400 audit(1756094876.562:88668): avc: denied { create } for pid=6912 comm="syz.1.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 73.187743][ T1152] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.191568][ T1152] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.194976][ T1152] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.197867][ T1152] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.281734][ T5974] Bluetooth: hci0: unexpected event for opcode 0x204e [ 73.345937][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'. [ 73.346259][ T6924] netlink: 60 bytes leftover after parsing attributes in process `syz.2.246'. [ 73.495421][ T6941] netlink: 32 bytes leftover after parsing attributes in process `syz.1.250'. [ 73.565963][ T6946] mmap: syz.1.252 (6946) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.635654][ T6949] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 73.686232][ T40] audit: type=1400 audit(1756094877.112:88669): avc: denied { connect } for pid=6953 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.714608][ T40] audit: type=1400 audit(1756094877.142:88670): avc: denied { getopt } for pid=6958 comm="syz.3.256" lport=32832 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 73.826244][ T6962] dvmrp1: entered allmulticast mode [ 73.831481][ T40] audit: type=1400 audit(1756094877.252:88671): avc: denied { ioctl } for pid=6961 comm="syz.3.257" path="socket:[15336]" dev="sockfs" ino=15336 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 74.006765][ T40] audit: type=1400 audit(1756094877.432:88672): avc: denied { ioctl } for pid=6964 comm="syz.3.258" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 74.014785][ T40] audit: type=1400 audit(1756094877.432:88673): avc: denied { create } for pid=6964 comm="syz.3.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 74.021079][ T40] audit: type=1400 audit(1756094877.432:88674): avc: denied { lock } for pid=6964 comm="syz.3.258" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=13020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.121274][ T40] audit: type=1400 audit(1756094877.542:88675): avc: denied { mounton } for pid=6969 comm="syz.1.260" path="/65/file0/file0" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 74.390551][ T6115] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.395453][ T6115] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.445183][ T40] audit: type=1400 audit(1756094877.872:88676): avc: denied { execute } for pid=6975 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 74.453201][ T40] audit: type=1400 audit(1756094877.872:88677): avc: denied { execute_no_trans } for pid=6975 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 74.494545][ T6115] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.498220][ T6115] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.555513][ T6115] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.558734][ T6115] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.573619][ T5970] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.576755][ T5970] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.579998][ T5970] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.584289][ T5970] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.586798][ T5970] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.619525][ T6115] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.622737][ T6115] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.735512][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880337f3000: rx timeout, send abort [ 74.739248][ C0] vcan0: j1939_tp_rxtimer: 0xffff888047fbe800: rx timeout, send abort [ 74.741912][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880337f3000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 74.747739][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888047fbe800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 74.777194][ T6976] chnl_net:caif_netlink_parms(): no params data found [ 74.858432][ T6982] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20002 [ 74.880307][ T6985] dvmrp1: left allmulticast mode [ 74.913511][ T6982] random: crng reseeded on system resumption [ 75.198258][ T6115] bond0 (unregistering): Released all slaves [ 75.256688][ T6976] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.259026][ T6976] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.261359][ T6976] bridge_slave_0: entered allmulticast mode [ 75.264441][ T6976] bridge_slave_0: entered promiscuous mode [ 75.270739][ T6998] Bluetooth: MGMT ver 1.23 [ 75.276288][ T6976] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.278798][ T6976] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.280977][ T6976] bridge_slave_1: entered allmulticast mode [ 75.291156][ T6976] bridge_slave_1: entered promiscuous mode [ 75.333836][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'. [ 75.388935][ T24] hid-generic 0000:0004:0009.0002: item fetching failed at offset 0/3 [ 75.396156][ T24] hid-generic 0000:0004:0009.0002: probe with driver hid-generic failed with error -22 [ 75.409564][ T6976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.415136][ T6976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.415693][ T5970] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.422328][ T5970] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.429594][ T5970] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.432771][ T5970] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.436283][ T5970] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.478097][ T6976] team0: Port device team_slave_0 added [ 75.481229][ T6976] team0: Port device team_slave_1 added [ 75.547621][ T6976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.549796][ T6976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.559159][ T6976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.570708][ T6976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.572885][ T6976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.582008][ T6976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.617431][ T6115] veth1_macvtap: left promiscuous mode [ 75.619495][ T6115] veth0_macvtap: left promiscuous mode [ 75.621321][ T6115] veth1_vlan: left promiscuous mode [ 75.773460][ T6115] team0 (unregistering): Port device vlan0 removed [ 76.269631][ T7020] netlink: 20 bytes leftover after parsing attributes in process `syz.2.271'. [ 76.346679][ T7024] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN NOPTI [ 76.350422][ T7024] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 76.354746][ T7024] CPU: 1 UID: 0 PID: 7024 Comm: syz.2.272 Not tainted syzkaller #0 PREEMPT(full) [ 76.357602][ T7024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.360909][ T7024] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 76.362538][ T7024] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 4a 30 41 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 76.368495][ T7024] RSP: 0018:ffffc90005f37bf0 EFLAGS: 00010293 [ 76.370397][ T7024] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff887a5b6a [ 76.372982][ T7024] RDX: ffff888022a4a440 RSI: ffffffff887a5bb6 RDI: 0000000000000005 [ 76.375454][ T7024] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 76.377923][ T7024] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc90005f37d88 [ 76.380391][ T7024] R13: ffffc90005f37d88 R14: 0000000000000001 R15: ffff888048e1f400 [ 76.382853][ T7024] FS: 00007fefbfdd96c0(0000) GS:ffff8880d67b9000(0000) knlGS:0000000000000000 [ 76.385619][ T7024] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.387712][ T7024] CR2: 00007fefbfdd8f98 CR3: 000000003e642000 CR4: 0000000000352ef0 [ 76.390183][ T7024] Call Trace: [ 76.391266][ T7024] [ 76.392208][ T7024] ? __pfx_bcsp_recv+0x10/0x10 [ 76.393718][ T7024] hci_uart_tty_receive+0x251/0x7e0 [ 76.395362][ T7024] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 76.397148][ T7024] tty_ioctl+0x583/0x1680 [ 76.398520][ T7024] ? __pfx_tty_ioctl+0x10/0x10 [ 76.400040][ T7024] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 76.402167][ T7024] ? hook_file_ioctl_common+0x145/0x410 [ 76.403952][ T7024] ? selinux_file_ioctl+0x180/0x270 [ 76.405691][ T7024] ? selinux_file_ioctl+0xb4/0x270 [ 76.407371][ T7024] ? __pfx_tty_ioctl+0x10/0x10 [ 76.408839][ T7024] __x64_sys_ioctl+0x18b/0x210 [ 76.410315][ T7024] do_syscall_64+0xcd/0x4c0 [ 76.411835][ T7024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.413889][ T7024] RIP: 0033:0x7fefbef8ebe9 [ 76.415411][ T7024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.421508][ T7024] RSP: 002b:00007fefbfdd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.424104][ T7024] RAX: ffffffffffffffda RBX: 00007fefbf1b6090 RCX: 00007fefbef8ebe9 [ 76.426715][ T7024] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 000000000000000c [ 76.429239][ T7024] RBP: 00007fefbf011e19 R08: 0000000000000000 R09: 0000000000000000 [ 76.431961][ T7024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.434393][ T7024] R13: 00007fefbf1b6128 R14: 00007fefbf1b6090 R15: 00007ffd3e26f5a8 [ 76.436884][ T7024] [ 76.437895][ T7024] Modules linked in: [ 76.439262][ C1] vkms_vblank_simulate: vblank timer overrun [ 76.442399][ T7024] ---[ end trace 0000000000000000 ]--- [ 76.445969][ T7024] RIP: 0010:bcsp_recv+0x10a/0x17f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 76.447770][ T7024] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 4a 30 41 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 76.454551][ T7024] RSP: 0018:ffffc90005f37bf0 EFLAGS: 00010293 [ 76.456725][ T7024] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff887a5b6a [ 76.459295][ T7024] RDX: ffff888022a4a440 RSI: ffffffff887a5bb6 RDI: 0000000000000005 [ 76.461870][ T7024] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 76.464715][ T7024] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc90005f37d88 [ 76.467222][ T7024] R13: ffffc90005f37d88 R14: 0000000000000001 R15: ffff888048e1f400 [ 76.469786][ T7024] FS: 00007fefbfdd96c0(0000) GS:ffff8880d69b9000(0000) knlGS:0000000000000000 [ 76.472626][ T7024] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.474995][ T7024] CR2: 00007fefbfdb7f98 CR3: 000000003e642000 CR4: 0000000000352ef0 [ 76.477912][ T7024] Kernel panic - not syncing: Fatal exception [ 76.481042][ T7024] Kernel Offset: disabled [ 76.482412][ T7024] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:07:59 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a43b540 RCX=ffffffff81afa3c3 RDX=ffff88801e29c880 RSI=0000000000000000 RDI=0000000000000005 RBP=ffffc90000157d08 RSP=ffffc90000157bb8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1cb9816 R12=1ffff9200002af80 R13=0000000000000002 R14=0000000000000001 R15=ffffed100d4876a9 RIP=ffffffff81bb85c2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000003e642000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000fefce002 Opmask02=00000000fefcf800 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3e26fab6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3e26fab6 00007ffd3e26fabc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbf012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbf012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbf012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbf012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbf012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbf012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbf1874a8 00007fefbf1874a0 00007fefbf187498 00007fefbf187470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbfced100 00007fefbf187460 00007fefbf187478 00007fefbf1874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbf1874b8 00007fefbf1874b0 00007fefbf1874a8 00007fefbf1874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643c85 RDI=ffffffff9b1110a0 RBP=ffffffff9b111060 RSP=ffffc90005f375f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b111060 R15=ffffffff85643c20 RIP=ffffffff85643caf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fefbfdd96c0 ffffffff 00c00000 GS =0000 ffff8880d67b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fefbfdd8f98 CR3=000000003e642000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3e26fab6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3e26fab6 00007ffd3e26fabc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbf012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbf012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbf012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbf012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbf012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbf012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbf1874a8 00007fefbf1874a0 00007fefbf187498 00007fefbf187470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbfced100 00007fefbf187460 00007fefbf187478 00007fefbf1874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbf1874b8 00007fefbf1874b0 00007fefbf1874a8 00007fefbf1874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffffffff93d7a2a8 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff8c162880 RDI=ffffffff8df5ee70 RBP=0000000000000002 RSP=ffffc9000062f7f0 R8 =0000000000000000 R9 =0000000000000000 R10=00000000016001e9 R11=0000000000002c10 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81a0b176 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c318c4c CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 549a87d200d65cbe 4fe2da1fbf22a13b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e1835ad24d2bb047 1407d128142f0386 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dded88a32cb9ce86 3adfbdd1f855a3de ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 29eac0a13f59e677 9b09dc509b4d71ff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000540 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00002f0800002f09 373bc80086a3f400 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00002f0900000000 00002f0b00000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000082c6a400 046325007f182400 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000001478ec00 00002f09fcfbf400 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f64ca209cd28dc7 075399cc6d7fea58 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d8b0967f1859fdfd ee5fb77d244c5214 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbf1874a8 00007fefbf1874a0 00007fefbf187498 00007fefbf187470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbfced100 00007fefbf187460 00007fefbf180004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbf1874b8 00007fefbf1874b0 00007fefbf1874a8 00007fefbf1874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000004e094 RBX=0000000000000003 RCX=ffffffff8b93bc29 RDX=ffffed100d4e6656 RSI=ffffffff8c162880 RDI=ffffffff81913331 RBP=ffffed1003c57000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801e2b8000 R14=ffffffff90ab4b90 R15=0000000000000000 RIP=ffffffff8b93a78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fefbfdb7f98 CR3=000000003e642000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3e26fab6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3e26fab6 00007ffd3e26fabc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbf012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbf012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbf012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbf012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbf012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbf012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbf1874a8 00007fefbf1874a0 00007fefbf187498 00007fefbf187470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbfced100 00007fefbf187460 00007fefbf187478 0004000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefbf1874b8 00007fefbf1874b0 00007fefbf1874a8 00007fefbf1874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000