last executing test programs: 1.109809869s ago: executing program 3 (id=347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFULA_CFG_MODE={0xa, 0x2, {0xc92, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40028c1) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x100000000, 0x9, 0xffffffff, 0x8000, 0x7, 0x7f, 0x40, 0x8, 0x0, 0x8, 0x8, 0x7ff, 0xfffffffffffffffc, 0x0, 0x9, 0x321, 0x6f, 0x1ff, 0x6, 0x8, 0xffffffffffffffff, 0x8, 0x7, 0x7fffffffffffffff, 0x5, 0xa26f}) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc4c03d12, &(0x7f0000000380)={0x4, 0x1}) 1.039438212s ago: executing program 3 (id=349): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x8000, 0x7, 0x40, 0x5, {{0x5f, 0x4, 0x3, 0x7, 0x17c, 0x68, 0x0, 0x3, 0x29, 0x0, @remote, @remote, {[@rr={0x7, 0x23, 0xd7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x38}]}, @rr={0x7, 0x13, 0x12, [@loopback, @empty, @rand_addr=0x64010102, @loopback]}, @timestamp_prespec={0x44, 0x44, 0xf1, 0x3, 0x3, [{@local, 0x38ed}, {@rand_addr=0x64010102, 0xdd}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x1}, {@remote, 0x7}, {@broadcast, 0x2}, {@multicast1, 0x569}, {@empty, 0xfffffffb}, {@local, 0x7}]}, @timestamp_prespec={0x44, 0x34, 0x23, 0x3, 0xf, [{@empty, 0x1ff}, {@private=0xa010100, 0x9}, {@private=0xa010100, 0x80000001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}, {@private=0xa010102, 0xa81}, {@loopback, 0x8}]}, @end, @cipso={0x86, 0x33, 0x3, [{0x2, 0xe, "73de556473e53779af572f79"}, {0x2, 0x11, "1e9df5e0d5a16a51741bca95bb7ad5"}, {0x1, 0xb, "2dd2b1cee6aaf89981"}, {0x7, 0x3, "ad"}]}, @cipso={0x86, 0x4a, 0x3, [{0x3, 0xc, "807e964681789517024e"}, {0x7, 0x9, "fdc94f0d5a7a11"}, {0x1, 0xb, "5d7aef5ef92ce448f4"}, {0x7, 0x11, "bf5a0680bc05bd1fcdd1b23718931b"}, {0x6, 0x6, "2c94f923"}, {0x2, 0x9, "7918dc1b69b4e9"}, {0x0, 0x4, "81b0"}]}, @ssrr={0x89, 0x7, 0x7, [@rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x5a, 0x3, 0x9, [{@remote}, {@private=0xa010100, 0x2}, {@multicast1, 0x52}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@remote, 0x2}, {@rand_addr=0x64010102, 0x10}]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x9, 0x8, 0x0, 0x404, 0xffffffffffffffff, 0x6, '\x00', r1, 0xffffffffffffffff, 0x3, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) ioctl$KDGKBMETA(r0, 0x4b62, 0xffffffffffffffff) 1.036368252s ago: executing program 3 (id=352): gettid() r0 = syz_io_uring_setup(0x71e2, &(0x7f0000000140)={0x0, 0x0, 0x10180, 0x5, 0xfffffffd}, &(0x7f0000000100), &(0x7f0000000080)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="e4a5c6a58aba0be192b4453dbb3a3386ff523e878086642a518875bd81de5701", 0x20}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000170100000300000001"], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_io_uring_setup(0x1002943, &(0x7f0000001400)={0x0, 0x2000000, 0x10}, &(0x7f0000001480), &(0x7f00000014c0)) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r3 = syz_clone(0x85200c00, &(0x7f0000000040)="07ab0610a2f152a7b05b3e8a1fa8dba30c6ac81e0058fc1dd1cffc35aa8b138f311304d7941a73f85d197723ba469668718025d47d8475705b5744f19330a17b7dc88021ee705c29e4d28156fbee0421106d3b2113cbf0ee7a4300ab02c0fda53dc030c440280831bcfd1498c5fa07c5269ba02b4761db81a13d636497288926", 0x80, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)="7e8eff134caa16bb35c9bada9cc254cb8564d07c0236b13706f2ec257d13a462c302b85e89be662b362ff1141f2f445303e68bddf248ffa5234dad63b0e96c7e520305a3548bb90cb5bd62a4d153a8396658a89efb6ad7918a9fffa97d1bcc1a9315de45d9ab6fa69452c6ff52fb794573d31545e9e69e80b7d4aed6ea0bf1ad05d4c8613b01a637d087bfbe55c3bf96c9c5b8664ce736cebfd18ff604a2e904d7cab9e6289cdee4a0c4a3309c0637927759f3fd1c15") r4 = syz_open_procfs(r3, &(0x7f0000000000)='net/icmp\x00') pread64(r4, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) ioctl$NBD_SET_SIZE(r4, 0xab02, 0x7ff) 908.97424ms ago: executing program 3 (id=357): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) sendmsg$key(r1, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) (async) sendmsg$key(r1, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) 820.820993ms ago: executing program 3 (id=359): r0 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x4, 0x3}, 0x8) bind$bt_sco(r1, &(0x7f0000000400), 0x8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000140)={0x8f, 0x0, 0x7, 0x7, 0xe, "f8f73a09fbff1606f507f3ffff2100", 0x7, 0x9}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000340)=0x39) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x9) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x5c, r4, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a0d4e01051d6ff63"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="cb437b1ec31102799ec86372a23189a5"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="3340cb4998f0af8ab726463f51c5e2eaeabf7babd3990b96"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) listen(r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) shutdown(r1, 0x1) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), 0x4) 818.878608ms ago: executing program 3 (id=361): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) close(0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800"/14], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000240)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x100000000) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000600000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}, 0x0) 480.136955ms ago: executing program 0 (id=375): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000380), 0x80, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) connect$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = syz_open_dev$loop(&(0x7f0000000640), 0x47ffffa, 0x122c02) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xb, 0x0, 0xfffffffe, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x1}}, @TCA_CT_MARK={0x8, 0x10, 0xfffffffe}, @TCA_CT_LABELS={0x14, 0x7, "e3ccd1c5b8fbe60833617f2f4a63b45b"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x10000000) writev(r5, &(0x7f0000000600)=[{&(0x7f0000000480)="e2bbdade0dba43d8a48ec5e9753642dddc87eb37a9094a76c688fc8bf4dc0364a641589cc4a916b3044af596f934aa823eec9e026762a3d06733f4862bbf5cc487265139a5d9944ef579a6750bc35ced6820a45ea349bdeb9079b6ceab13f84f0df0", 0x62}, {&(0x7f0000000500)="ecd46381c8d04f6abd61ccb8dbd156ff8c130d4c51246fd0506e103b39258a8590de85819b39926cf131a081cdfd845c8749bc0a97fd965d6887a6f209ca71e3669bab5386a49262b6ad0a02a4c631427e9383b6f4e3fc10f4f2b42bf26a1daf80889d0719c2d4c61130c3f807b93b48e2e38b372f27d88c2492722f4e26bb6bbe9e7cd1c836fc6e6bfdbd892348f2322403247ce90eeb2808c70fda58e6594df5a83568b78102c5b8c84994398a267908b6ddaeb8a8f8311923a1fe4a87e3fa354130bdbd6f573f0c74e90b5861d729c0b996247e95ce3554f4060d65c3caa6c63ecd41ae206ad7e598d069e95a9e709e5e", 0xf2}, {&(0x7f0000000680)="206b58be959fe09a4fdf4459c646b036cd7ca6bbf6089fc5257ffe99b880faf4f4d78eaf01fa3a077e5f377339be5c8a25d9ee5400f4ddea194aa0384bd5c8f344c35b5f41d47cf7450bcefc0ea0a75e7b6c3077a13c0e5e8dec1a35944963c38b065839a076fc29c770408676f9325eac8e793e43b331c2b3f538e7503e204f3b12dc415c33f520e7dd0d189c0179bac5f5a018c71491ab3e15160bc0413bb830024ba4a279174401959cb9dce5aafbd84a6c320d90a2e6823dca5ff9b01d64edc2949a083c58f02d59c50e285a7fb066152ef75568e1b8c6b9b356c28eb03c99ee1b7c9dd08fdb12", 0xe9}], 0x3) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) r7 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r10, 0x0, r9, 0x0, 0x1, 0x0) read$FUSE(r8, &(0x7f0000001400)={0x2020}, 0x2020) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0x927c0}) r11 = memfd_create(&(0x7f0000000300)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) ftruncate(r11, 0x400000) finit_module(r11, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) r12 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r12, 0x402, 0x8000003d) fcntl$setsig(r12, 0xa, 0x11) 330.265398ms ago: executing program 1 (id=378): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f00000002c0)=0x23, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003d0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000024df6a0d0082006c327464726f7073000000000500870000175bceb19e3084f9e8561ce58f7788be320546c26d297be7232f88fba1efc5001e14c4a6633e5121bc2361bd81a271a7a3fa22a85ef9486e43d0ef70a1b5fb935c91fff6092d4326f86439fc4c444da3de9dd32795467a4043b218bf486be8171b55e932db558b706ad7c3cd732b09fa595c6e08670752fd3d98d75f4325c52540485634f590"], 0x4c}}, 0x0) 329.264963ms ago: executing program 0 (id=379): timer_create(0xb, 0x0, &(0x7f00000000c0)) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x77359400}}, 0x0) (async) clock_adjtime(0x0, &(0x7f0000000680)={0x19b1}) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0) 329.110706ms ago: executing program 1 (id=380): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 328.430888ms ago: executing program 0 (id=381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x144, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {}, {0x0, 0xa35c}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r3, 0x4}}]}, 0x144}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000082000040"]) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a01030000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000c0002"], 0x80}, 0x1, 0x0, 0x0, 0x4000002}, 0x0) 270.838278ms ago: executing program 2 (id=382): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0xf, 0x2, {{0x0, 0x0, 0x0, 0xfffffffd}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xe, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24040081}, 0x880) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000540)) (async) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x10000) 270.304089ms ago: executing program 2 (id=383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000000901050000000007000000000000000c0004800800014000000003080003400000004008000540000100000c0002000600034000000000e461fda404ed2a3319"], 0x3c}}, 0x0) 210.731339ms ago: executing program 1 (id=384): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = fsopen(&(0x7f0000000000)='msdos\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000000c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x1f\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'\xff6\x94\n\xa4\x9c\x97\xe5-\xaa\x05\xf5\x15\xaa\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f\xa7\xffx\xe5\x8a6\xcd\x1d\xe7\xd6\x9d\xde_lQ\x9f\xa8\xe5\x97c\xa5\xa1\x17u\x7f\xe3\xec\xf3g\x01?', 0x0) r2 = dup(r0) bind$l2tp(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1, 0x3}, 0x10) 210.354779ms ago: executing program 2 (id=385): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x1, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r1}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x16, 0x0, r5, 0x0, 0x0, 0x1, 0x0, 0x1, {0x0, r6}}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) 209.933324ms ago: executing program 2 (id=386): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="01000000ea985b28d9c7f873ba862e6d11904e80e9bcf3707d5153790a1f71972ba5db6a9c4683993b6e6fd613a586466cc2d4c52efb0e443e965471ff78cc747826a1872451ff453bad8419a2077d7b16a5c95762e88a7f64e317d29cb90c2d1db5b159afd6aadd8951cddea54d2cdf18a5938e5b19a82ace90d00295207e24293984dede01237856405d18acb513bec89ba565320a139a1545f65044c31174f25fb8c4d350ae4c404a9df21f62b808ab3fff005e589c6c5d4947d94f478adcf2527601b59303ff4fd51874", @ANYRES16=r1, @ANYBLOB="17090000000001000000010000000500070000000000080009000000000008000a0000000000060002000000000006001a004e200000"], 0x3c}, 0x1, 0x0, 0x0, 0x860}, 0x0) (async) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r2, &(0x7f00000040c0)={0x2020}, 0x2020) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xceaab517a8e596d4}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)={0x218, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5bef}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf4a7}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x901c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffc0000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x27}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1fc00000}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5e}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3fd}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4698}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8ec0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f5db54b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x16e7}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb3e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1721dab0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x880}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) writev(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000140)="d95485477bf78a6c7173b8209aaad42bfaded7eb2abd7b7c1a30d03913bf5dd27f7f6adfe19c1d22833399f14eaa116d08170990c7", 0x35}, {&(0x7f0000000000)="4c5b04008eb997faad6979d3a69f60e7767e0cf8113e553c1f05d5ca72ddaecc255488ff9c2b", 0x26}, {&(0x7f0000000080)}], 0x4) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000640)=0x4) (async) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x41, 0x3, 0x3, '\x00', 0x8}) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4801000041000701fcfffffffddbdf25017c0000040036802e010180"], 0x148}, 0x1, 0x0, 0x0, 0x4c8c0}, 0xc000) 207.95927ms ago: executing program 1 (id=387): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x80001) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x2, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0xc58, 0x0, 0x2, r2, 0x6}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000030000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000100), &(0x7f0000000140)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 130.491569ms ago: executing program 0 (id=388): lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) link(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, &(0x7f0000000240)=0x10) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x1, 0x2a6, [0x0, 0x2000000002c0, 0x2000000002f0, 0x200000000320], 0x0, &(0x7f0000000280), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x3, 0x0, 0x19, 'dvmrp1\x00', 'bond_slave_1\x00', 'veth0_vlan\x00', 'batadv0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @empty, [0x0, 0xff, 0xff], 0x11e, 0x16e, 0x1e6, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x2, 0x2, 0x3, 0x1}}}, @stp={{'stp\x00', 0x0, 0x48}, {{0x4, {0x1, 0x81, 0x81, @broadcast, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0x81, 0xfffff25d, 0x9, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x4e22, 0x4e22, 0x1, 0x5, 0x2, 0x1, 0x7ff, 0xf2, 0xc4f, 0x9e}, 0x901, 0x10}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x8, {0x3}}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x10, 0x7, 0x1, 0x1, 0x0, "dad83055ea52d197c5773a1b6d3351d1e16777a113fd3e06eea3fc78d10c48f50b07cf24cd7f860a0b3fab00891ae3062db550f922ab52bac1395f6ee0424181"}}}}]}]}, 0x31e) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000600)) r4 = creat(&(0x7f0000000640)='./file0\x00', 0x140) bind$inet6(r4, &(0x7f0000000680)={0xa, 0x4e20, 0x1, @private0, 0x1}, 0x1c) getxattr(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=@known='system.posix_acl_access\x00', &(0x7f0000000740)=""/241, 0xf1) unlinkat(r4, &(0x7f0000000840)='./file0\x00', 0x200) mount$9p_virtio(&(0x7f0000000880), &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900), 0x20000, &(0x7f0000000940)={'trans=virtio,', {[{@cache_none}, {@aname={'aname', 0x3d, '-'}}, {@debug={'debug', 0x3d, 0x19df}}, {@aname={'aname', 0x3d, 'dvmrp1\x00'}}, {@directio}], [{@func={'func', 0x3d, 'PATH_CHECK'}}]}}) fanotify_mark(r4, 0x200, 0x40001010, r4, &(0x7f00000009c0)='./file2\x00') setresuid(r1, r1, r0) utime(&(0x7f0000000a00)='./file2\x00', &(0x7f0000000a40)={0xfff, 0x17058}) unlinkat(r4, &(0x7f0000000a80)='./file0\x00', 0x5cba23f9bc59b45a) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r3}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r3, {r6}}, './file0\x00'}) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000bc0)=0x0) lchown(&(0x7f0000000b80)='./file0\x00', r8, r2) chdir(&(0x7f0000000c00)='./file0\x00') ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r7, 0x4008af23, &(0x7f0000000c40)={0x2, 0x7a2}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0xf504, 0x0) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000c80), 0x440280, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r6, {r0, r2}}, './file1\x00'}) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000d00)={0xffffffffffffffff, 0xd, '7\v(', 0x9, 0x2}) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000d40), &(0x7f0000000d80), 0x2, 0x1) r10 = accept$inet(r3, &(0x7f0000000dc0), &(0x7f0000000e00)=0x10) fcntl$setpipe(r10, 0x407, 0x7) 130.086205ms ago: executing program 0 (id=389): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4180, 0x11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x61, 0x0}, 0x4004004) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x3}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x2}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000180)={0x4000, r0}, 0x0) landlock_restrict_self(r3, 0x0) truncate(&(0x7f0000000280)='./file1\x00', 0x1) mkdir(&(0x7f0000000200)='./file0\x00', 0x110) mount$overlay(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000240)={[{@metacopy_off}, {@verity_on}]}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCL_SETSEL(r4, 0x5452, &(0x7f0000000100)) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f00000001c0)={0x2, 0x7}) setuid(0xee00) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) 129.850912ms ago: executing program 1 (id=390): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x10c}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000110000000800000000000000000000003000000000200000002"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4004550c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="30000000000000000000000300000095000000000000000608326000"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)='K', 0x1}, {&(0x7f0000000180)="e3", 0x1}, {&(0x7f0000000600)="d8fa34bdc826d6af9aa41cac16e1f9612c62d1f123f03d45e8a36cc182e90cf09cc0a4c4c5f7782fdaa6cfa48d009279a91997fce49c6bcd3b718cf290ab1a0af72eac5fb91deb4e383eb4885668cb31dec03c8757f48c2a9e0ee78f9886861055b92a55137f5f8d0f112d156da242115cf538d5467efb894d8e38", 0x7b}, {&(0x7f00000002c0)="b6db60518905d2d3a1d1848f67cae7aa98f670fd3a23f9242d7fc58648b9f7ad8d69cd5f82ca086db8138de47f21b1a7edb1a05ce8f2d98752aca87a510ad53edd9952583e303d59d28c4afefee259f0f243b07ff07fbaecd40aa4a22b2cd34c0c958e9d36eeecef34448ae2d8d2a1", 0x6f}, {&(0x7f0000000000)="576e284ccce6a44a9d3907d5bd90fdbf6c31d0c2b385e8baf03db67513e9d8a07629570d4c12fb88e32117f1f5dd93048df92515cdc8a87c8d9de271d8", 0x3d}, {&(0x7f0000000440)='6', 0x1}], 0x6}}], 0x1, 0x8000) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 60.625367ms ago: executing program 0 (id=391): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000040)={'netdevsim0\x00', 0x200}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc513, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfd, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) 60.223614ms ago: executing program 1 (id=392): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) (async) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)) (async) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f00000000c0)={0x3a, @private=0xa010101, 0x4e20, 0x3, 'wlc\x00', 0x8, 0x4, 0x5a}, 0x2c) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (async, rerun: 64) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) (rerun: 64) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x7000000) (async) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) (async, rerun: 64) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x5e) (async, rerun: 32) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) (rerun: 32) r8 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465) ioctl$SNDRV_PCM_IOCTL_REWIND(r8, 0xc0884123, &(0x7f0000000000)=0x85) 633.503µs ago: executing program 2 (id=393): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000080)={{0xc, @multicast2, 0x0, 0x0, 'ovf\x00'}}, 0x44) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x1890a0, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000440)='./bus\x00', 0x0, 0x8c7c88, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x42203, 0x13d) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e22}, 0x6e) getpeername$packet(r3, 0x0, &(0x7f0000000040)) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f00000000c0)={0x578, 0xf0, 0xa0, 0x400, 0x0, 0x2, 0x2, 0x1, {0x0, 0x80000000, 0x2}, {0x0, 0x7fffffff}, {0x3, 0x0, 0x1}, {0xb, 0x0, 0x1}, 0x6, 0x1, 0xfffff001, 0x155, 0x1, 0x8, 0x0, 0x10000, 0x9, 0x0, 0xff, 0x40000002, 0x0, 0x9f06360662c05544, 0x2, 0x9}) 0s ago: executing program 2 (id=394): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000080)=0x3ff, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="050000"], 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e3000006b8f4c0551de021e5e727b473164d033e43bef0adccb35b62794555229bbaa59ea0f30931772d0f3304cc3a7ec6657973fe366a486c768354d3a12f4ebf80eaeca24799d171c6d2bee15294d94cebfdfbbe6dc3e3d91cfc65c35d4764483600000000000000", @ANYRES16=r7, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="29003300b0840400080211000001080211000000ffffffffffff0500020049c0000001004c001001cd000000"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000006}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf253000000008000300", @ANYRES32=r6, @ANYBLOB="0c00c6ba349000000000004d8d33006f9c945867ef9c872d861a839f08e5b120a90c6853e698be92f2fa7863fa964008a74671df5d49d63437655b36eeaf407b71076d983af3c89ef36dde68c196fa5387ce946f4b52c0d0e3beb8126ec95c3fd19712f47598075c0fa1e270be6159f2ece6b7f7930a6c"], 0x28}, 0x1, 0x0, 0x0, 0x4044000}, 0x4000) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8937, &(0x7f0000000040)={'ip6_vti0\x00', @random="0103002000"}) r9 = syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, &(0x7f0000000100)=0x0, &(0x7f0000000580)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000001811000012654bd74eea49ce3cdb169b2b8f0b05edc88a5f200d00182c7ea97d0015aebd3e7c4362", @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000003f000000aa0000000033000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001400"], 0x184}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd_index=0x1, 0xffffffffffffffff, 0xfffffffffffffab2, 0x7, 0x5, 0x1}) ioctl$BTRFS_IOC_DEFRAG(r9, 0x50009402, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000800)=[{0x0}], 0x1) io_uring_enter(r9, 0x54, 0x0, 0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x28, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_CARRIER={0x5, 0x21, 0x97}]}, 0x28}}, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000022c0)=""/223, 0xdf}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe000}}], 0x68000, 0x0) 0s ago: executing program 2 (id=396): socket(0x2b, 0x1, 0x1) (async) r0 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async) socket$inet6(0xa, 0x1, 0x100) (async, rerun: 32) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x4b52, &(0x7f0000000000)) (async) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90a90d2b", 0x11}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) kernel console output (not intermixed with test programs): [ 38.125339][ T40] audit: type=1400 audit(1745699358.377:81): avc: denied { rlimitinh } for pid=5837 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.131211][ T40] audit: type=1400 audit(1745699358.377:82): avc: denied { siginh } for pid=5837 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.072353][ T40] audit: type=1400 audit(1745699359.347:83): avc: denied { read } for pid=5326 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.079261][ T40] audit: type=1400 audit(1745699359.347:84): avc: denied { append } for pid=5326 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.086184][ T40] audit: type=1400 audit(1745699359.347:85): avc: denied { open } for pid=5326 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.093042][ T40] audit: type=1400 audit(1745699359.347:86): avc: denied { getattr } for pid=5326 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:63476' (ED25519) to the list of known hosts. [ 39.235192][ T40] audit: type=1400 audit(1745699359.507:87): avc: denied { name_bind } for pid=5841 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.133277][ T5849] cgroup: Unknown subsys name 'net' [ 41.255269][ T5849] cgroup: Unknown subsys name 'cpuset' [ 41.259119][ T5849] cgroup: Unknown subsys name 'rlimit' [ 41.464694][ T5902] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.073657][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.766804][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 44.766814][ T40] audit: type=1400 audit(1745699365.037:105): avc: denied { execmem } for pid=5923 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.917757][ T40] audit: type=1400 audit(1745699365.187:106): avc: denied { create } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.924029][ T40] audit: type=1400 audit(1745699365.187:107): avc: denied { read write } for pid=5927 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.934269][ T40] audit: type=1400 audit(1745699365.187:108): avc: denied { open } for pid=5927 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.942945][ T40] audit: type=1400 audit(1745699365.197:109): avc: denied { ioctl } for pid=5927 comm="syz-executor" path="socket:[1952]" dev="sockfs" ino=1952 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.970587][ T5937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.970588][ T5938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.973705][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.975452][ T5938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.977780][ T5935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.977863][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.978084][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.978283][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.978638][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.979031][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.980408][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.982101][ T5935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.983064][ T5937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.983473][ T5937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.984034][ T5943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.984554][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.984801][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.986966][ T5935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.990463][ T5943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.991037][ T5935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.992130][ T40] audit: type=1400 audit(1745699365.257:110): avc: denied { read } for pid=5927 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.992154][ T40] audit: type=1400 audit(1745699365.257:111): avc: denied { open } for pid=5927 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.992174][ T40] audit: type=1400 audit(1745699365.257:112): avc: denied { mounton } for pid=5927 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.154226][ T40] audit: type=1400 audit(1745699365.427:113): avc: denied { module_request } for pid=5928 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.206615][ T5928] chnl_net:caif_netlink_parms(): no params data found [ 45.251363][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 45.258354][ T5927] chnl_net:caif_netlink_parms(): no params data found [ 45.390982][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.393639][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.395928][ T5928] bridge_slave_0: entered allmulticast mode [ 45.398470][ T5928] bridge_slave_0: entered promiscuous mode [ 45.457157][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 45.464424][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.466710][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.469028][ T5928] bridge_slave_1: entered allmulticast mode [ 45.471539][ T5928] bridge_slave_1: entered promiscuous mode [ 45.518530][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.521309][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.524694][ T5940] bridge_slave_0: entered allmulticast mode [ 45.528086][ T5940] bridge_slave_0: entered promiscuous mode [ 45.559440][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.562156][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.564427][ T5927] bridge_slave_0: entered allmulticast mode [ 45.566948][ T5927] bridge_slave_0: entered promiscuous mode [ 45.585354][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.587646][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.589884][ T5940] bridge_slave_1: entered allmulticast mode [ 45.593476][ T5940] bridge_slave_1: entered promiscuous mode [ 45.597454][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.600508][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.602878][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.605080][ T5927] bridge_slave_1: entered allmulticast mode [ 45.607688][ T5927] bridge_slave_1: entered promiscuous mode [ 45.657635][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.717058][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.736415][ T5928] team0: Port device team_slave_0 added [ 45.739923][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.746163][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.749079][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.751354][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.754330][ T5934] bridge_slave_0: entered allmulticast mode [ 45.756878][ T5934] bridge_slave_0: entered promiscuous mode [ 45.759716][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.762113][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.764205][ T5934] bridge_slave_1: entered allmulticast mode [ 45.766791][ T5934] bridge_slave_1: entered promiscuous mode [ 45.770353][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.789692][ T5928] team0: Port device team_slave_1 added [ 45.883876][ T5927] team0: Port device team_slave_0 added [ 45.900621][ T5940] team0: Port device team_slave_0 added [ 45.903122][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.905165][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.913007][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.918049][ T5927] team0: Port device team_slave_1 added [ 45.921609][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.926488][ T5940] team0: Port device team_slave_1 added [ 45.928788][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.930924][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.938708][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.958197][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.004301][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.006539][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.014335][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.032005][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.034197][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.043241][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.048501][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.050618][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.058432][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.077036][ T5934] team0: Port device team_slave_0 added [ 46.092230][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.094642][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.103131][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.114792][ T5934] team0: Port device team_slave_1 added [ 46.132774][ T5928] hsr_slave_0: entered promiscuous mode [ 46.134899][ T5928] hsr_slave_1: entered promiscuous mode [ 46.164839][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.167216][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.175533][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.180063][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.183344][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.191510][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.261454][ T5927] hsr_slave_0: entered promiscuous mode [ 46.263694][ T5927] hsr_slave_1: entered promiscuous mode [ 46.265671][ T5927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.268124][ T5927] Cannot create hsr debugfs directory [ 46.299733][ T5940] hsr_slave_0: entered promiscuous mode [ 46.301867][ T5940] hsr_slave_1: entered promiscuous mode [ 46.304103][ T5940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.306370][ T5940] Cannot create hsr debugfs directory [ 46.424975][ T5934] hsr_slave_0: entered promiscuous mode [ 46.427160][ T5934] hsr_slave_1: entered promiscuous mode [ 46.429209][ T5934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.431592][ T5934] Cannot create hsr debugfs directory [ 46.656666][ T5928] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.674952][ T5928] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.679314][ T5928] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.689440][ T5928] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.713527][ T5934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.718786][ T5934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.724526][ T5934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.729797][ T5934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.767419][ T5940] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.774029][ T5940] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.781781][ T5940] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.789335][ T5940] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.835863][ T5927] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.839788][ T5927] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.844147][ T5927] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.849639][ T5927] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.887989][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.902371][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.919398][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.932026][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.937131][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.939406][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.951053][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.953467][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.957146][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.959361][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.981440][ T803] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.983784][ T803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.017629][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.022534][ T5935] Bluetooth: hci0: command tx timeout [ 47.023133][ T5284] Bluetooth: hci3: command tx timeout [ 47.032322][ T5284] Bluetooth: hci1: command tx timeout [ 47.040358][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.048638][ T5934] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.052542][ T5934] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.062065][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.064294][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.068279][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.070489][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.078647][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.097307][ T5927] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.102017][ T5284] Bluetooth: hci2: command tx timeout [ 47.110763][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.110936][ T40] audit: type=1400 audit(1745699367.377:114): avc: denied { sys_module } for pid=5934 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.113109][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.114593][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.124781][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.196116][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.200864][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.239905][ T5928] veth0_vlan: entered promiscuous mode [ 47.246283][ T5934] veth0_vlan: entered promiscuous mode [ 47.255981][ T5934] veth1_vlan: entered promiscuous mode [ 47.259324][ T5928] veth1_vlan: entered promiscuous mode [ 47.268719][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.284323][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.293123][ T5934] veth0_macvtap: entered promiscuous mode [ 47.299542][ T5934] veth1_macvtap: entered promiscuous mode [ 47.316467][ T5940] veth0_vlan: entered promiscuous mode [ 47.318708][ T5928] veth0_macvtap: entered promiscuous mode [ 47.325158][ T5928] veth1_macvtap: entered promiscuous mode [ 47.330867][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.336076][ T5940] veth1_vlan: entered promiscuous mode [ 47.343474][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.351127][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.354997][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.358814][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.364290][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.367514][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.371214][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.376104][ T5934] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.378838][ T5934] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.381536][ T5934] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.384445][ T5934] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.391036][ T5927] veth0_vlan: entered promiscuous mode [ 47.398666][ T5928] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.401393][ T5928] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.404372][ T5928] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.407138][ T5928] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.415762][ T5927] veth1_vlan: entered promiscuous mode [ 47.439516][ T5940] veth0_macvtap: entered promiscuous mode [ 47.448789][ T5940] veth1_macvtap: entered promiscuous mode [ 47.468328][ T5927] veth0_macvtap: entered promiscuous mode [ 47.488566][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.490479][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.491817][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.495090][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.498364][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.504087][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.507795][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.510212][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.511079][ T5927] veth1_macvtap: entered promiscuous mode [ 47.512885][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.528867][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.533299][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.536345][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.539501][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.543474][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.558767][ T5940] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.561342][ T5940] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.564805][ T5940] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.567438][ T5940] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.575144][ T5927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.578973][ T5927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.583585][ T5927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.587072][ T5927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.590550][ T5927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.594259][ T5927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.598471][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.602479][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.604464][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.604819][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.607619][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.613681][ T5927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.617163][ T5927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.620395][ T5927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.624026][ T5927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.626926][ T5927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.630078][ T5927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.635200][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.641578][ T5927] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.644539][ T5927] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.647384][ T5927] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.650891][ T5927] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.691298][ T5934] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.695046][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.698375][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.719028][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.721689][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.743120][ T5998] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 47.746594][ T5999] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 47.748719][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.749798][ T5999] netlink: 'syz.1.2': attribute type 2 has an invalid length. [ 47.755517][ T5999] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.2'. [ 47.759577][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.765379][ T5997] team0: Device gtp0 is of different type [ 47.797921][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.799802][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 47.800391][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.824122][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 47.835152][ T6002] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 47.870377][ T6008] process 'syz.3.7' launched './file0' with NULL argv: empty string added [ 47.945191][ T6016] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 47.955613][ T6013] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9'. [ 48.017810][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'. [ 48.020095][ T6018] syz_tun: entered allmulticast mode [ 48.024172][ T6017] syz_tun: left allmulticast mode [ 48.081772][ T6033] evm: overlay not supported [ 48.084644][ T6033] ======================================================= [ 48.084644][ T6033] WARNING: The mand mount option has been deprecated and [ 48.084644][ T6033] and is ignored by this kernel. Remove the mand [ 48.084644][ T6033] option from the mount to silence this warning. [ 48.084644][ T6033] ======================================================= [ 48.097481][ T6033] overlay: ./bus is not a directory [ 48.104912][ T6033] Zero length message leads to an empty skb [ 48.131673][ T6037] ata1.00: invalid multi_count 1 ignored [ 48.182942][ T6038] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=43 sclass=netlink_tcpdiag_socket pid=6038 comm=syz.0.14 [ 48.183012][ T6043] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=43 sclass=netlink_tcpdiag_socket pid=6043 comm=syz.0.14 [ 48.183291][ T6035] overlayfs: failed to resolve './bus': -2 [ 48.186845][ T6038] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=59 sclass=netlink_tcpdiag_socket pid=6038 comm=syz.0.14 [ 48.192429][ T6043] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=59 sclass=netlink_tcpdiag_socket pid=6043 comm=syz.0.14 [ 48.192443][ T6043] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=62 sclass=netlink_tcpdiag_socket pid=6043 comm=syz.0.14 [ 48.192452][ T6043] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pid=6043 comm=syz.0.14 [ 48.192462][ T6043] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=41 sclass=netlink_tcpdiag_socket pid=6043 comm=syz.0.14 [ 48.192471][ T6043] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=51 sclass=netlink_tcpdiag_socket pid=6043 comm=syz.0.14 [ 48.192481][ T6043] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=54 sclass=netlink_tcpdiag_socket pid=6043 comm=syz.0.14 [ 48.192490][ T6043] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32 sclass=netlink_tcpdiag_socket pid=6043 comm=syz.0.14 [ 48.229434][ T6048] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 48.240736][ T6048] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 48.246219][ T6048] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 48.246274][ T6047] cgroup: name respecified [ 48.248899][ T6048] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 48.253433][ T6048] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 48.256078][ T6048] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 48.258692][ T6048] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 48.261346][ T6048] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 48.272640][ T6047] kvm: pic: single mode not supported [ 48.292564][ T6047] program syz.2.17 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.294325][ T6059] loop7: detected capacity change from 0 to 524255232 [ 48.472496][ T6092] block nbd0: not configured, cannot reconfigure [ 48.555176][ T6107] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 48.666415][ T6088] bridge1: entered promiscuous mode [ 48.894822][ T6145] bond1 (unregistering): Released all slaves [ 49.013947][ T6175] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3603611205 (115315558560 ns) > initial count (47460852352 ns). Using initial count to start timer. [ 49.026404][ T6183] netlink: 96 bytes leftover after parsing attributes in process `syz.2.49'. [ 49.103075][ T5284] Bluetooth: hci1: command tx timeout [ 49.104868][ T5284] Bluetooth: hci3: command tx timeout [ 49.106573][ T5935] Bluetooth: hci0: command tx timeout [ 49.182179][ T5284] Bluetooth: hci2: command tx timeout [ 49.354851][ T6222] overlayfs: cannot append lower layer [ 49.972984][ T40] kauditd_printk_skb: 152 callbacks suppressed [ 49.972995][ T40] audit: type=1400 audit(1745699370.247:267): avc: denied { mounton } for pid=6249 comm="syz.2.67" path="mnt:[4026532878]" dev="nsfs" ino=4026532878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 50.195180][ T40] audit: type=1400 audit(1745699370.467:268): avc: denied { mount } for pid=6258 comm="syz.2.70" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 50.204554][ T40] audit: type=1400 audit(1745699370.477:269): avc: denied { unmount } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 50.236442][ T40] audit: type=1400 audit(1745699370.507:270): avc: denied { connect } for pid=6262 comm="syz.2.71" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.247644][ T40] audit: type=1400 audit(1745699370.507:271): avc: denied { write } for pid=6262 comm="syz.2.71" path="socket:[11500]" dev="sockfs" ino=11500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.261533][ T40] audit: type=1400 audit(1745699370.527:272): avc: denied { unmount } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 50.299628][ T40] audit: type=1400 audit(1745699370.567:273): avc: denied { bind } for pid=6273 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 50.326497][ T40] audit: type=1400 audit(1745699370.567:274): avc: denied { accept } for pid=6273 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 50.334712][ T40] audit: type=1400 audit(1745699370.577:275): avc: denied { setopt } for pid=6273 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 50.419170][ T40] audit: type=1400 audit(1745699370.687:276): avc: denied { shutdown } for pid=6293 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.632164][ T58] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.785283][ T58] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 50.788363][ T58] usb 8-1: config 0 interface 0 has no altsetting 0 [ 50.792753][ T58] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 50.795575][ T58] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.798037][ T58] usb 8-1: Product: syz [ 50.799354][ T58] usb 8-1: Manufacturer: syz [ 50.800827][ T58] usb 8-1: SerialNumber: syz [ 50.810255][ T58] usb 8-1: config 0 descriptor?? [ 50.817265][ T58] usb 8-1: selecting invalid altsetting 0 [ 50.871713][ T6314] Bluetooth: MGMT ver 1.23 [ 50.878155][ T6314] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 50.941974][ T836] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 50.987386][ T6316] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.040171][ T6280] netlink: 'syz.3.76': attribute type 1 has an invalid length. [ 51.094027][ T836] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 51.097463][ T836] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 51.100518][ T836] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 51.103490][ T836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.108552][ T6311] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 51.118611][ T836] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 51.129966][ T6323] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.182442][ T5935] Bluetooth: hci1: command tx timeout [ 51.184745][ T5935] Bluetooth: hci3: command tx timeout [ 51.186936][ T5943] Bluetooth: hci0: command tx timeout [ 51.258864][ T5968] usb 8-1: USB disconnect, device number 2 [ 51.272595][ T5935] Bluetooth: hci2: command tx timeout [ 51.317411][ T9] usb 6-1: USB disconnect, device number 2 [ 51.817630][ T6349] overlayfs: missing 'lowerdir' [ 51.851034][ T6351] No control pipe specified [ 51.878709][ T6358] usb usb8: usbfs: process 6358 (syz.2.97) did not claim interface 0 before use [ 51.975267][ T6379] netlink: 24 bytes leftover after parsing attributes in process `syz.1.105'. [ 51.975300][ T6380] netlink: 24 bytes leftover after parsing attributes in process `syz.1.105'. [ 52.082247][ T6398] syz.2.110 uses obsolete (PF_INET,SOCK_PACKET) [ 52.177313][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 52.178848][ T6410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.113'. [ 52.327664][ T6420] xt_hashlimit: size too large, truncated to 1048576 [ 52.332018][ T6422] random: crng reseeded on system resumption [ 52.432075][ T59] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 52.478572][ T6429] vxcan1: tx address claim with dest, not broadcast [ 52.515555][ T6438] unsupported nla_type 14345 [ 52.582066][ T59] usb 6-1: Using ep0 maxpacket: 8 [ 52.585566][ T59] usb 6-1: config 0 has no interfaces? [ 52.587349][ T59] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 52.590519][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.599394][ T59] usb 6-1: config 0 descriptor?? [ 52.622326][ T5284] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 52.623180][ T5935] Bluetooth: hci4: command 0x1003 tx timeout [ 52.634055][ T6443] usb 1-1: USB disconnect, device number 2 [ 52.808782][ T29] usb 6-1: USB disconnect, device number 3 [ 53.172652][ T6468] __nla_validate_parse: 4 callbacks suppressed [ 53.172662][ T6468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.132'. [ 53.262405][ T5935] Bluetooth: hci3: command tx timeout [ 53.262449][ T5284] Bluetooth: hci0: command tx timeout [ 53.262464][ T5938] Bluetooth: hci1: command tx timeout [ 53.336731][ T6471] fuse: Bad value for 'fd' [ 53.352040][ T5284] Bluetooth: hci2: command tx timeout [ 53.593272][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 53.596483][ T6486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.140'. [ 53.599292][ T6486] netlink: 'syz.2.140': attribute type 11 has an invalid length. [ 53.790907][ T6498] trusted_key: syz.2.144 sent an empty control message without MSG_MORE. [ 54.022047][ T1230] bond0: (slave bond_slave_0): interface is now down [ 54.024825][ T1230] bond0: (slave bond_slave_1): interface is now down [ 54.043027][ T78] bond0: (slave bond_slave_0): interface is now down [ 54.045573][ T78] bond0: (slave bond_slave_1): interface is now down [ 54.049374][ T78] bond0: now running without any active interface! [ 54.090198][ T6525] warning: `syz.2.150' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 54.090696][ T6521] ref_ctr_offset mismatch. inode: 0xca offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 54.117509][ T6528] xt_hashlimit: size too large, truncated to 1048576 [ 54.126807][ T6528] syz.0.153: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 54.132746][ T6528] CPU: 2 UID: 0 PID: 6528 Comm: syz.0.153 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 54.132761][ T6528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.132767][ T6528] Call Trace: [ 54.132771][ T6528] [ 54.132775][ T6528] dump_stack_lvl+0x16c/0x1f0 [ 54.132790][ T6528] warn_alloc+0x248/0x3a0 [ 54.132809][ T6528] ? __pfx_warn_alloc+0x10/0x10 [ 54.132830][ T6528] ? __get_vm_area_node+0x1b9/0x300 [ 54.132843][ T6528] ? __get_vm_area_node+0x1e5/0x300 [ 54.132859][ T6528] __vmalloc_node_range_noprof+0x1110/0x1540 [ 54.132878][ T6528] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 54.132895][ T6528] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 54.132915][ T6528] __kvmalloc_node_noprof+0x2ff/0x600 [ 54.132931][ T6528] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 54.132943][ T6528] ? net_generic+0xea/0x2a0 [ 54.132958][ T6528] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 54.132977][ T6528] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 54.132989][ T6528] hashlimit_mt_check_common+0x8bb/0x1460 [ 54.133004][ T6528] hashlimit_mt_check+0x71/0x90 [ 54.133015][ T6528] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 54.133027][ T6528] xt_check_match+0x283/0xa50 [ 54.133038][ T6528] ? is_mmconf_reserved+0x192/0x500 [ 54.133049][ T6528] ? __pfx_xt_check_match+0x10/0x10 [ 54.133062][ T6528] ? xt_find_target+0x1f2/0x290 [ 54.133073][ T6528] ? xt_find_match+0x1f6/0x290 [ 54.133094][ T6528] find_check_entry.constprop.0+0x34e/0xa20 [ 54.133110][ T6528] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 54.133126][ T6528] ? kasan_quarantine_put+0x10a/0x240 [ 54.133142][ T6528] ? lockdep_hardirqs_on+0x7c/0x110 [ 54.133155][ T6528] ? kfree+0x2b6/0x4d0 [ 54.133168][ T6528] ? translate_table+0xc0e/0x17b0 [ 54.133181][ T6528] translate_table+0xd0b/0x17b0 [ 54.133197][ T6528] ? __pfx_translate_table+0x10/0x10 [ 54.133207][ T6528] ? xt_alloc_table_info+0x3e/0xa0 [ 54.133221][ T6528] do_ip6t_set_ctl+0x570/0xb00 [ 54.133232][ T6528] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 54.133245][ T6528] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 54.133257][ T6528] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 54.133277][ T6528] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 54.133288][ T6528] nf_setsockopt+0x8a/0xf0 [ 54.133299][ T6528] ipv6_setsockopt+0x135/0x170 [ 54.133311][ T6528] rawv6_setsockopt+0xc2/0x510 [ 54.133328][ T6528] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 54.133344][ T6528] ? selinux_socket_setsockopt+0x6a/0x80 [ 54.133357][ T6528] ? sock_common_setsockopt+0x2e/0xf0 [ 54.133369][ T6528] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 54.133380][ T6528] do_sock_setsockopt+0x221/0x470 [ 54.133391][ T6528] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 54.133409][ T6528] __sys_setsockopt+0x1a0/0x230 [ 54.133427][ T6528] __x64_sys_setsockopt+0xbd/0x160 [ 54.133441][ T6528] ? do_syscall_64+0x91/0x260 [ 54.133453][ T6528] ? lockdep_hardirqs_on+0x7c/0x110 [ 54.133464][ T6528] do_syscall_64+0xcd/0x260 [ 54.133477][ T6528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.133488][ T6528] RIP: 0033:0x7f0874b8e969 [ 54.133497][ T6528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.133507][ T6528] RSP: 002b:00007f0875ac8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 54.133516][ T6528] RAX: ffffffffffffffda RBX: 00007f0874db5fa0 RCX: 00007f0874b8e969 [ 54.133523][ T6528] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 54.133529][ T6528] RBP: 00007f0874c10ab1 R08: 0000000000000588 R09: 0000000000000000 [ 54.133535][ T6528] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 54.133541][ T6528] R13: 0000000000000000 R14: 00007f0874db5fa0 R15: 00007ffe30677178 [ 54.133553][ T6528] [ 54.133557][ T6528] Mem-Info: [ 54.251418][ T6528] active_anon:6049 inactive_anon:0 isolated_anon:0 [ 54.251418][ T6528] active_file:9721 inactive_file:38452 isolated_file:0 [ 54.251418][ T6528] unevictable:1768 dirty:68 writeback:0 [ 54.251418][ T6528] slab_reclaimable:11123 slab_unreclaimable:70592 [ 54.251418][ T6528] mapped:23667 shmem:2498 pagetables:891 [ 54.251418][ T6528] sec_pagetables:302 bounce:0 [ 54.251418][ T6528] kernel_misc_reclaimable:0 [ 54.251418][ T6528] free:478912 free_pcp:1261 free_cma:0 [ 54.265174][ T6528] Node 0 active_anon:24196kB inactive_anon:0kB active_file:38884kB inactive_file:153732kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:94668kB dirty:272kB writeback:0kB shmem:6456kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11760kB pagetables:3564kB sec_pagetables:1208kB all_unreclaimable? no Balloon:0kB [ 54.275266][ T6528] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 54.284891][ T6528] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 54.293235][ T6528] lowmem_reserve[]: 0 1238 1238 1238 1238 [ 54.295079][ T6528] Node 0 DMA32 free:309916kB boost:0kB min:27576kB low:34468kB high:41360kB reserved_highatomic:0KB active_anon:24320kB inactive_anon:0kB active_file:38884kB inactive_file:153732kB unevictable:3536kB writepending:272kB present:2080628kB managed:1268600kB mlocked:0kB bounce:0kB free_pcp:2712kB local_pcp:804kB free_cma:0kB [ 54.304372][ T6528] lowmem_reserve[]: 0 0 0 0 0 [ 54.305965][ T6528] Node 1 Normal free:1591368kB boost:0kB min:39660kB low:49572kB high:59484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781964kB mlocked:0kB bounce:0kB free_pcp:1524kB local_pcp:176kB free_cma:0kB [ 54.318512][ T6528] lowmem_reserve[]: 0 0 0 0 0 [ 54.320144][ T6528] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 54.325055][ T6528] Node 0 DMA32: 39*4kB (UM) 321*8kB (ME) 273*16kB (UME) 306*32kB (UME) 350*64kB (UME) 33*128kB (UME) 37*256kB (UME) 13*512kB (UME) 5*1024kB (UME) 3*2048kB (ME) 58*4096kB (UM) = 308468kB [ 54.331478][ T6528] Node 1 Normal: 5*4kB (UME) 8*8kB (UME) 9*16kB (UME) 131*32kB (UME) 56*64kB (UME) 24*128kB (UME) 7*256kB (UE) 5*512kB (UME) 1*1024kB (U) 3*2048kB (UME) 383*4096kB (M) = 1591364kB [ 54.337938][ T6528] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 54.341063][ T6528] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 54.344684][ T6528] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 54.347772][ T6528] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 54.351038][ T6528] 50673 total pagecache pages [ 54.352758][ T6528] 0 pages in swap cache [ 54.354051][ T6528] Free swap = 124996kB [ 54.355350][ T6528] Total swap = 124996kB [ 54.356664][ T6528] 1048443 pages RAM [ 54.357879][ T6528] 0 pages HighMem/MovableOnly [ 54.359328][ T6528] 281962 pages reserved [ 54.360607][ T6528] 0 pages cma reserved [ 54.393023][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.158'. [ 54.395947][ T6547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.158'. [ 54.518414][ T6566] netlink: 24 bytes leftover after parsing attributes in process `syz.0.165'. [ 54.521282][ T6566] netlink: 60 bytes leftover after parsing attributes in process `syz.0.165'. [ 54.652762][ T6587] selinux_netlink_send: 11 callbacks suppressed [ 54.652772][ T6587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=6587 comm=syz.0.172 [ 54.806232][ T6607] syz.3.179: attempt to access beyond end of device [ 54.806232][ T6607] nbd3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 54.811382][ T6607] EXT4-fs (nbd3): unable to read superblock [ 54.827267][ T6601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.176'. [ 54.830853][ T6601] netlink: 696 bytes leftover after parsing attributes in process `syz.1.176'. [ 54.917676][ T6623] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 54.958411][ T6626] No source specified [ 54.964078][ T6626] nbd: must specify a size in bytes for the device [ 55.072160][ T960] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 55.084281][ T6631] syz.2.186: attempt to access beyond end of device [ 55.084281][ T6631] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 55.089027][ T6631] syz.2.186: attempt to access beyond end of device [ 55.089027][ T6631] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 55.093465][ T6631] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 55.096485][ T6631] syz.2.186: attempt to access beyond end of device [ 55.096485][ T6631] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 55.100604][ T6631] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 55.105013][ T6631] syz.2.186: attempt to access beyond end of device [ 55.105013][ T6631] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 55.109310][ T6631] syz.2.186: attempt to access beyond end of device [ 55.109310][ T6631] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 55.113359][ T6631] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 55.116435][ T6631] syz.2.186: attempt to access beyond end of device [ 55.116435][ T6631] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 55.120411][ T6631] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 55.124260][ T6631] syz.2.186: attempt to access beyond end of device [ 55.124260][ T6631] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 55.128564][ T6631] syz.2.186: attempt to access beyond end of device [ 55.128564][ T6631] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 55.134576][ T6631] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 55.138501][ T6631] syz.2.186: attempt to access beyond end of device [ 55.138501][ T6631] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 55.141490][ T40] kauditd_printk_skb: 81 callbacks suppressed [ 55.141499][ T40] audit: type=1400 audit(1745699375.407:358): avc: denied { ioctl } for pid=6630 comm="syz.2.186" path="/dev/input/event0" dev="devtmpfs" ino=941 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 55.143748][ T6631] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 55.144373][ T6631] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 55.146175][ T40] audit: type=1400 audit(1745699375.417:359): avc: denied { read append } for pid=6630 comm="syz.2.186" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 55.156206][ T6631] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 55.159805][ T40] audit: type=1400 audit(1745699375.417:360): avc: denied { open } for pid=6630 comm="syz.2.186" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 55.162679][ T6631] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 55.188578][ T40] audit: type=1400 audit(1745699375.417:361): avc: denied { ioctl } for pid=6630 comm="syz.2.186" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x460f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 55.242042][ T960] usb 5-1: Using ep0 maxpacket: 8 [ 55.246285][ T960] usb 5-1: config 1 has an invalid interface number: 246 but max is 2 [ 55.249005][ T960] usb 5-1: config 1 has an invalid interface number: 219 but max is 2 [ 55.251937][ T40] audit: type=1400 audit(1745699375.517:362): avc: denied { write } for pid=6633 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.252686][ T960] usb 5-1: config 1 has an invalid descriptor of length 137, skipping remainder of the config [ 55.263560][ T960] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 55.267757][ T960] usb 5-1: config 1 has no interface number 0 [ 55.270614][ T960] usb 5-1: config 1 has no interface number 1 [ 55.273330][ T960] usb 5-1: config 1 interface 246 altsetting 3 bulk endpoint 0xC has invalid maxpacket 16 [ 55.277392][ T960] usb 5-1: config 1 interface 246 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 55.281802][ T960] usb 5-1: config 1 interface 246 altsetting 3 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 55.285392][ T960] usb 5-1: config 1 interface 246 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 55.288728][ T960] usb 5-1: config 1 interface 246 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 55.292372][ T960] usb 5-1: config 1 interface 246 altsetting 3 endpoint 0x8 has an invalid bInterval 185, changing to 7 [ 55.295716][ T960] usb 5-1: config 1 interface 246 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 55.299244][ T960] usb 5-1: config 1 interface 246 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 55.302926][ T960] usb 5-1: config 1 interface 246 altsetting 3 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 55.304459][ T40] audit: type=1400 audit(1745699375.577:363): avc: denied { setopt } for pid=6633 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.306484][ T960] usb 5-1: config 1 interface 246 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 55.306506][ T960] usb 5-1: config 1 interface 246 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 55.306540][ T960] usb 5-1: config 1 interface 219 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 55.324386][ T960] usb 5-1: config 1 interface 246 has no altsetting 0 [ 55.326577][ T960] usb 5-1: config 1 interface 219 has no altsetting 0 [ 55.330833][ T960] usb 5-1: New USB device found, idVendor=0403, idProduct=fd49, bcdDevice=3e.c4 [ 55.333891][ T960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.337195][ T960] usb 5-1: Product: ఉ [ 55.338068][ T6634] kvm: pic: non byte read [ 55.338561][ T960] usb 5-1: SerialNumber: 㴛̺竀冄ၛ嵇ĭ㷼現粧힧ஷꄉ蹵䵅ꐮ墼朐ᐗඝ槽❺迀⪃ೱ긯欝㤉䋻㇁걙釋듑脱놫㶶쿏굗䥍哠 [ 55.341224][ T6634] kvm: pic: non byte read [ 55.349174][ T6634] kvm: pic: non byte read [ 55.350465][ T6612] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 55.351835][ T6634] kvm: pic: non byte read [ 55.354209][ T6612] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 55.356757][ T6634] kvm: pic: non byte read [ 55.360857][ T6634] kvm: pic: non byte read [ 55.363590][ T6634] kvm: pic: non byte read [ 55.366148][ T6634] kvm: pic: non byte read [ 55.368802][ T6634] kvm: pic: non byte read [ 55.509000][ T40] audit: type=1400 audit(1745699375.777:364): avc: denied { write } for pid=6640 comm="syz.2.188" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 55.561372][ T40] audit: type=1400 audit(1745699375.827:365): avc: denied { read } for pid=6611 comm="syz.0.180" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 55.571997][ T40] audit: type=1400 audit(1745699375.827:366): avc: denied { open } for pid=6611 comm="syz.0.180" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 55.579584][ T40] audit: type=1400 audit(1745699375.827:367): avc: denied { ioctl } for pid=6611 comm="syz.0.180" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 55.620165][ T6646] netlink: 'syz.2.190': attribute type 1 has an invalid length. [ 55.623896][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 55.635601][ T960] ftdi_sio 5-1:1.246: FTDI USB Serial Device converter detected [ 55.639821][ T960] ftdi_sio ttyUSB0: unknown device type: 0x3ec4 [ 55.648310][ T960] ftdi_sio 5-1:1.219: FTDI USB Serial Device converter detected [ 55.651287][ T960] ftdi_sio ttyUSB1: unknown device type: 0x3ec4 [ 55.654747][ T960] usb 5-1: USB disconnect, device number 2 [ 55.662250][ T960] ftdi_sio 5-1:1.246: device disconnected [ 55.668919][ T960] ftdi_sio 5-1:1.219: device disconnected [ 56.188346][ T6689] qnx4: no qnx4 filesystem (no root dir). [ 56.278118][ T6701] net_ratelimit: 28 callbacks suppressed [ 56.278128][ T6701] openvswitch: netlink: Flow key attr not present in new flow. [ 56.865258][ T6725] afs: Unknown parameter 'r[Ƨ 뼔7ƗzӉe9vtߢ4Ӊ%2h%6CL>j_kZۖB4%% 5x' [ 57.182424][ T6750] tipc: Started in network mode [ 57.184458][ T6750] tipc: Node identity ac1414aa, cluster identity 4711 [ 57.189631][ T6750] tipc: Enabled bearer , priority 10 [ 57.207506][ T960] IPVS: starting estimator thread 0... [ 57.312269][ T6753] IPVS: using max 44 ests per chain, 105600 per kthread [ 57.394138][ T6719] syz.1.215 (6719): drop_caches: 2 [ 57.541243][ T6719] ISOFS: Unable to identify CD-ROM format. [ 57.656102][ T6773] autofs4:pid:6773:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294934528.1), cmd(0xc0189374) [ 57.660197][ T6773] autofs4:pid:6773:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 57.686456][ T6773] tipc: MTU too low for tipc bearer [ 57.688428][ T6773] syzkaller1: entered promiscuous mode [ 57.690347][ T6773] syzkaller1: entered allmulticast mode [ 58.208887][ T6801] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 58.217116][ T6801] CIFS mount error: No usable UNC path provided in device string! [ 58.217116][ T6801] [ 58.224362][ T6801] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 58.243903][ T6799] bond0: (slave bond_slave_0): Releasing backup interface [ 58.270812][ T5284] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 58.312954][ T29] tipc: Node number set to 2886997162 [ 58.340189][ T6813] ufs: Invalid option: "grpquota" or missing value [ 58.342910][ T6813] ufs: wrong mount options [ 58.363517][ T6807] __nla_validate_parse: 7 callbacks suppressed [ 58.363527][ T6807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.245'. [ 58.367587][ T6813] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 58.383601][ T6813] infiniband s9z1: RDMA CMA: cma_listen_on_dev, error -98 [ 58.412865][ T6820] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 58.416697][ T6820] overlayfs: missing 'lowerdir' [ 58.518728][ T6835] netlink: 'syz.0.254': attribute type 1 has an invalid length. [ 58.536375][ T6837] xt_hashlimit: invalid rate [ 58.562571][ T6840] xt_socket: unknown flags 0xc [ 58.610581][ T6850] program syz.2.260 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.668862][ T6855] /dev/nullb0: Can't open blockdev [ 58.777201][ T6867] ip6t_srh: unknown srh match flags 4000 [ 58.779795][ T6867] xt_l2tp: invalid flags combination: c [ 58.864689][ T6880] openvswitch: netlink: Flow actions attr not present in new flow. [ 59.017103][ T6897] netlink: 'syz.0.275': attribute type 4 has an invalid length. [ 59.102315][ T6903] netlink: 'syz.1.278': attribute type 1 has an invalid length. [ 59.291993][ T836] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 59.439096][ T6920] syz.3.283 (6920): drop_caches: 2 [ 59.442672][ T836] usb 5-1: Using ep0 maxpacket: 8 [ 59.454217][ T836] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 59.457629][ T836] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 59.461629][ T836] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 59.466400][ T836] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 59.470446][ T836] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.479668][ T836] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 59.483729][ T836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.598684][ T6920] ISOFS: Unable to identify CD-ROM format. [ 59.674214][ T6940] xt_hashlimit: size too large, truncated to 1048576 [ 59.699552][ T836] usb 5-1: usb_control_msg returned -32 [ 59.701407][ T836] usbtmc 5-1:16.0: can't read capabilities [ 60.069158][ T6956] batadv_slave_1: entered promiscuous mode [ 60.071212][ T6955] batadv_slave_1: left promiscuous mode [ 60.145601][ T40] kauditd_printk_skb: 55 callbacks suppressed [ 60.145615][ T40] audit: type=1326 audit(1745699380.417:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.1.297" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f207f58e969 code=0x0 [ 60.247002][ T6962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.297'. [ 60.386895][ T40] audit: type=1400 audit(1745699380.657:424): avc: denied { read } for pid=6969 comm="syz.3.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.444086][ T40] audit: type=1400 audit(1745699380.717:425): avc: denied { getopt } for pid=6969 comm="syz.3.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.698777][ T40] audit: type=1400 audit(1745699380.967:426): avc: denied { ioctl } for pid=6986 comm="syz.2.304" path="socket:[14614]" dev="sockfs" ino=14614 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 60.700216][ T6986] delete_channel: no stack [ 60.719003][ T40] audit: type=1400 audit(1745699380.987:427): avc: denied { read } for pid=6988 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.777343][ T40] audit: type=1400 audit(1745699381.047:428): avc: denied { getopt } for pid=6988 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.789444][ T40] audit: type=1400 audit(1745699381.057:429): avc: denied { write } for pid=6992 comm="syz.2.307" name="mcfilter6" dev="proc" ino=4026533200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 61.197429][ T5284] Bluetooth: hci1: Malformed LE Event: 0x0d [ 61.652288][ T7010] syz.1.310 (7010): drop_caches: 1 [ 61.716940][ T7014] netlink: 'syz.1.311': attribute type 1 has an invalid length. [ 61.762285][ T7014] 8021q: adding VLAN 0 to HW filter on device bond2 [ 61.790364][ T7016] bond2: (slave gretap2): making interface the new active one [ 61.800649][ T7016] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 61.843540][ T40] audit: type=1400 audit(1745699382.117:430): avc: denied { connect } for pid=7020 comm="syz.1.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.997623][ T7032] No source specified [ 62.078330][ T960] usb 5-1: USB disconnect, device number 3 [ 62.644932][ T7044] ipvlan2: entered allmulticast mode [ 62.646658][ T7044] macvlan0: entered allmulticast mode [ 62.648323][ T7044] veth1_vlan: entered allmulticast mode [ 62.732251][ T7047] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.320'. [ 62.736557][ T7047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.320'. [ 63.098700][ T7050] netlink: 'syz.0.321': attribute type 2 has an invalid length. [ 63.321769][ T40] audit: type=1400 audit(1745699383.587:431): avc: denied { read write } for pid=7052 comm="syz.0.322" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 63.331072][ T40] audit: type=1400 audit(1745699383.587:432): avc: denied { open } for pid=7052 comm="syz.0.322" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 63.571692][ T7078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.330'. [ 63.643826][ T7078] hsr_slave_1 (unregistering): left promiscuous mode [ 63.740335][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'. [ 63.895465][ T7101] sctp: [Deprecated]: syz.1.340 (pid 7101) Use of int in max_burst socket option. [ 63.895465][ T7101] Use struct sctp_assoc_value instead [ 63.925939][ T7105] overlayfs: missing 'lowerdir' [ 63.954654][ T7107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.341'. [ 64.087374][ T7135] xt_hashlimit: size too large, truncated to 1048576 [ 64.309701][ T7164] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 64.317517][ T7164] Error validating options; rc = [-22] [ 64.393257][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 64.397318][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 64.409406][ T7178] xt_hashlimit: overflow, rate too high: 0 [ 64.450991][ T7180] sp0: Synchronizing with TNC [ 64.511300][ T7185] netlink: 20 bytes leftover after parsing attributes in process `syz.1.365'. [ 64.545235][ T7187] netlink: 276 bytes leftover after parsing attributes in process `syz.2.368'. [ 64.585996][ T7199] netlink: 64 bytes leftover after parsing attributes in process `syz.1.371'. [ 64.654734][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'. [ 64.706587][ T5968] kernel read not supported for file /zero (pid: 5968 comm: kworker/0:3) [ 64.736315][ T7209] bond0: (slave bond_slave_0): Releasing backup interface [ 64.967157][ T7242] netlink: zone id is out of range [ 64.968883][ T7242] netlink: zone id is out of range [ 64.970495][ T7242] netlink: zone id is out of range [ 64.973631][ T7242] netlink: zone id is out of range [ 64.975326][ T7242] netlink: zone id is out of range [ 64.976963][ T7242] netlink: zone id is out of range [ 64.978683][ T7242] netlink: zone id is out of range [ 64.980312][ T7242] netlink: zone id is out of range [ 64.982027][ T7242] netlink: zone id is out of range [ 64.983625][ T7242] netlink: zone id is out of range [ 65.001456][ T7241] kvm: pic: non byte write [ 65.144674][ T7264] netlink: 72 bytes leftover after parsing attributes in process `syz.2.394'. [ 65.205426][ T7269] Oops: general protection fault, probably for non-canonical address 0xdffffc00000a2403: 0000 [#1] SMP KASAN NOPTI [ 65.208829][ T7269] KASAN: probably user-memory-access in range [0x0000000000512018-0x000000000051201f] [ 65.212709][ T7269] CPU: 2 UID: 0 PID: 7269 Comm: syz.2.396 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 65.216084][ T7269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.219052][ T7269] RIP: 0010:__smc_diag_dump.constprop.0+0x3cd/0x24f0 [ 65.220938][ T7269] Code: 4c 8b b3 60 05 00 00 4d 85 f6 0f 84 f6 02 00 00 e8 48 c3 9f f6 49 8d 7e 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 c7 1e 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 65.226429][ T7269] RSP: 0018:ffffc9000391f168 EFLAGS: 00010206 [ 65.228170][ T7269] RAX: dffffc0000000000 RBX: ffff88802dd3b000 RCX: ffffffff89583374 [ 65.230375][ T7269] RDX: 00000000000a2403 RSI: ffffffff8b1b6df8 RDI: 0000000000512018 [ 65.232621][ T7269] RBP: ffff888038618000 R08: 0000000000000005 R09: 0000000000000000 [ 65.234793][ T7269] R10: 0000000080000001 R11: 0000000000000001 R12: ffff88804edc95e8 [ 65.237036][ T7269] R13: ffff888025844780 R14: 0000000000512000 R15: ffff88802dd3b560 [ 65.239245][ T7269] FS: 00007fae4f3786c0(0000) GS:ffff8880d6be4000(0000) knlGS:0000000000000000 [ 65.241792][ T7269] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.243668][ T7269] CR2: 000020000000e000 CR3: 000000004fb10000 CR4: 0000000000352ef0 [ 65.245898][ T7269] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.248009][ T7269] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.250158][ T7269] Call Trace: [ 65.251103][ T7269] [ 65.252116][ T7269] ? __pfx___smc_diag_dump.constprop.0+0x10/0x10 [ 65.254100][ T7269] ? stack_trace_save+0x8e/0xc0 [ 65.255490][ T7269] ? __pfx_stack_trace_save+0x10/0x10 [ 65.257006][ T7269] ? check_path.constprop.0+0x24/0x50 [ 65.258502][ T7269] ? save_trace+0x4e/0x380 [ 65.259778][ T7269] ? add_lock_to_list+0x9d/0x130 [ 65.261180][ T7269] ? lockdep_unlock+0x64/0xe0 [ 65.262597][ T7269] ? __lock_acquire+0xf7f/0x1ba0 [ 65.264025][ T7269] ? lock_acquire+0x179/0x350 [ 65.265399][ T7269] ? smc_diag_dump_proto+0x2ce/0x420 [ 65.266903][ T7269] smc_diag_dump_proto+0x26d/0x420 [ 65.268365][ T7269] smc_diag_dump+0x84/0x90 [ 65.269633][ T7269] netlink_dump+0x53b/0xd00 [ 65.270928][ T7269] ? __pfx_netlink_dump+0x10/0x10 [ 65.272623][ T7269] ? __rhashtable_lookup.constprop.0+0x3a5/0x760 [ 65.274904][ T7269] ? __pfx_netlink_lookup+0x10/0x10 [ 65.276796][ T7269] __netlink_dump_start+0x6d6/0x990 [ 65.278679][ T7269] smc_diag_handler_dump+0x1f9/0x240 [ 65.280594][ T7269] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 65.282682][ T7269] ? __pfx_smc_diag_dump+0x10/0x10 [ 65.284155][ T7269] ? sock_diag_lock_handler+0x10f/0x2e0 [ 65.285728][ T7269] sock_diag_rcv_msg+0x437/0x790 [ 65.287139][ T7269] netlink_rcv_skb+0x16a/0x440 [ 65.288509][ T7269] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 65.290079][ T7269] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 65.291652][ T7269] ? netlink_deliver_tap+0x1ae/0xd30 [ 65.293270][ T7269] netlink_unicast+0x53a/0x7f0 [ 65.294636][ T7269] ? __pfx_netlink_unicast+0x10/0x10 [ 65.296167][ T7269] ? __build_skb_around+0x278/0x3b0 [ 65.297646][ T7269] netlink_sendmsg+0x8d1/0xdd0 [ 65.299015][ T7269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.300516][ T7269] ____sys_sendmsg+0xa95/0xc70 [ 65.301968][ T7269] ? copy_msghdr_from_user+0x10a/0x160 [ 65.303524][ T7269] ? __pfx_____sys_sendmsg+0x10/0x10 [ 65.305030][ T7269] ? try_to_wake_up+0xa2f/0x1680 [ 65.306439][ T7269] ___sys_sendmsg+0x134/0x1d0 [ 65.307785][ T7269] ? __pfx____sys_sendmsg+0x10/0x10 [ 65.309272][ T7269] __sys_sendmsg+0x16d/0x220 [ 65.310598][ T7269] ? __pfx___sys_sendmsg+0x10/0x10 [ 65.312103][ T7269] ? __x64_sys_futex+0x1e0/0x4c0 [ 65.313512][ T7269] ? rcu_is_watching+0x12/0xc0 [ 65.314869][ T7269] do_syscall_64+0xcd/0x260 [ 65.316183][ T7269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.317848][ T7269] RIP: 0033:0x7fae4e58e969 [ 65.319115][ T7269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.324525][ T7269] RSP: 002b:00007fae4f378038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.326868][ T7269] RAX: ffffffffffffffda RBX: 00007fae4e7b5fa0 RCX: 00007fae4e58e969 [ 65.329093][ T7269] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000033 [ 65.331560][ T7269] RBP: 00007fae4e610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 65.334013][ T7269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.336218][ T7269] R13: 0000000000000000 R14: 00007fae4e7b5fa0 R15: 00007fff15799a58 [ 65.338525][ T7269] [ 65.339427][ T7269] Modules linked in: [ 65.340982][ T7269] ---[ end trace 0000000000000000 ]--- [ 65.342781][ T7269] RIP: 0010:__smc_diag_dump.constprop.0+0x3cd/0x24f0 [ 65.344693][ T7269] Code: 4c 8b b3 60 05 00 00 4d 85 f6 0f 84 f6 02 00 00 e8 48 c3 9f f6 49 8d 7e 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 c7 1e 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 65.350044][ T7269] RSP: 0018:ffffc9000391f168 EFLAGS: 00010206 [ 65.351794][ T7269] RAX: dffffc0000000000 RBX: ffff88802dd3b000 RCX: ffffffff89583374 [ 65.354226][ T7269] RDX: 00000000000a2403 RSI: ffffffff8b1b6df8 RDI: 0000000000512018 [ 65.356457][ T7269] RBP: ffff888038618000 R08: 0000000000000005 R09: 0000000000000000 [ 65.358710][ T7269] R10: 0000000080000001 R11: 0000000000000001 R12: ffff88804edc95e8 [ 65.361048][ T7269] R13: ffff888025844780 R14: 0000000000512000 R15: ffff88802dd3b560 [ 65.363499][ T7269] FS: 00007fae4f3786c0(0000) GS:ffff8880d6be4000(0000) knlGS:0000000000000000 [ 65.366013][ T7269] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.367896][ T7269] CR2: 000020000000e000 CR3: 000000004fb10000 CR4: 0000000000352ef0 [ 65.370198][ T7269] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.372582][ T7269] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.375082][ T7269] Kernel panic - not syncing: Fatal exception [ 65.377579][ T7269] Kernel Offset: disabled [ 65.378809][ T7269] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:29:45 Registers: info registers vcpu 0 CPU#0 RAX=00000000000541dc RBX=0000000000000000 RCX=ffffffff8b6c4419 RDX=ffffed100d4865be RSI=ffffffff8bf47d60 RDI=ffffffff81919751 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000000 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff9084f010 R15=0000000000000000 RIP=ffffffff8b6c2caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69e4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000013270000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0070234423436d63 702f646e732f7665 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f207f611a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f207f611a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f207f611a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f207f611aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f207f611b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f207f611c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f207f783488 00007f207f783480 00007f207f783478 00007f207f783450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20802ed100 00007f207f783440 00007f207f783458 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f207f783498 00007f207f783490 00007f207f783488 00007f207f783480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000300 RBX=ffffffff905a7280 RCX=fffffbfff20b4e50 RDX=0000000000000003 RSI=0000000000000004 RDI=ffffffff905a7280 RBP=1ffff92000961f79 RSP=ffffc90004b0fbb8 R8 =0000000000000001 R9 =fffffbfff20b4e50 R10=ffffffff905a7283 R11=0000000000000001 R12=ffffffff905a7284 R13=00000000000000ff R14=fffffbfff20b4e50 R15=ffffc90004b0fbf8 RIP=ffffffff8b6f00ee RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fae4f3576c0 ffffffff 00c00000 GS =0000 ffff8880d6ae4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2ee164 CR3=000000004fb10000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae4e611a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae4e611a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae4e611a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae4e611aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae4e611b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae4e611c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae4e783488 00007fae4e783480 00007fae4e783478 00007fae4e783450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae4f2ed100 00007fae4e783440 00007fae4e783458 00007fae4e7834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae4e783498 00007fae4e783490 00007fae4e783488 00007fae4e783480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854f2375 RDI=ffffffff9adf44a0 RBP=ffffffff9adf4460 RSP=ffffc9000391eb60 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=70203a4e4153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9adf4460 R15=ffffffff854f2310 RIP=ffffffff854f239f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fae4f3786c0 ffffffff 00c00000 GS =0000 ffff8880d6be4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000020000000e000 CR3=000000004fb10000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae4e611a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae4e611a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae4e611a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae4e611aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae4e611b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae4e611c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae4e783488 00007fae4e783480 00007fae4e783478 00007fae4e783450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae4f2ed100 00007fae4e783440 00007fae4e783458 00007fae4e7834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae4e783498 00007fae4e783490 00007fae4e783488 00007fae4e783480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff8880363ae680 RCX=ffffffff816b649c RDX=ffff88801e2d2440 RSI=ffffffff816b64a6 RDI=0000000000000007 RBP=ffffc900006cfc50 RSP=ffffc900006cfbf0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000d8eb80 R11=0000000000000000 R12=ffff88801b44cb40 R13=ffffffff81a25227 R14=ffffea0000d8eb00 R15=0000000000000007 RIP=ffffffff82162617 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ce4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fae4f335f98 CR3=000000002766e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1cbfaf579385471b 65a7ece6bc287fc2 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 834d0e86e600ddaa 2df45d980adce592 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1ea2660feea930f5 afa5de5520bc1678 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cb01b5d0ea61a3a9 ec60d22318c9df98 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000680 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c577000063ec0000 0028ad250028ad3b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 af620000c4a00000 0028aec501510000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ec5800000028ad0f 0028acbf000000cc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0028adb3f8b40000 037400000028ac1a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d9b912ef3b80cb36 e709184ace2f8dfe ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a7fdf48da76703cf 5b0fe208544ac718 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000