last executing test programs: 4.763144493s ago: executing program 3 (id=337): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x10}}], 0x10}, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x6a) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e0003000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000006c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008502000083000000bf0900000500000055090100000000009500000000000000bf98000000000000b7020000000000008500000000000000b70000000000000095000000000000002f9471bb345d8899a43209c3fc105814fa6eb784590eec3bd36510a2dac5e1d735f837b3b410063835d0396cd5213341416dad2f17efab9572a0dc81ca68c270f1ad2174b9744222daddd3b9efd48cd77cb68e92274179dc76c25c89859d4dc4612d6cc48081904a767b854c854a25324650eca6d5c7bd5f658357210a68d1a2016ff19a9b8d69382bf64e9ee75b857bb7f539e0176c4d9ab80d0f656a8ea7c0c24ee17dd7bff8b430e497851d8daa76a9f97fbb6a0765f05f0c504a01d24dcf7f1758bcc2ae"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018000280140003"], 0x50}}, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket(0x2, 0x80805, 0x0) r7 = socket(0x10, 0x3, 0xfffffffe) socket$inet6(0xa, 0xc, 0x7) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xfffffffffffffe04, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) futex(&(0x7f0000000140)=0x2, 0x9, 0x1, &(0x7f0000000300)={r9, r10+60000000}, &(0x7f0000000340), 0x2) 3.903229454s ago: executing program 3 (id=352): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000002100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000680)="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", 0x578}, {&(0x7f0000000100)="b080e260a70c65abd8d879f4a4062030a874df37a76cd223b2376d724aa9c2d09053af04d0c94e7bf8aeeba3de9143ccdf7df1a0b310badec0011a5449f5dc7715215f", 0x43}, {&(0x7f0000000200)="0b0918f3b38b", 0x6}], 0x3}}], 0x2, 0x240080a0) sendmmsg$inet(r1, &(0x7f00000036c0)=[{{0x0, 0x60, 0x0}}], 0x1, 0x12) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) munmap(&(0x7f0000b04000/0x4000)=nil, 0x4000) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) mremap(&(0x7f0000ccc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000b0e000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r2 = syz_open_pts(r0, 0x5ac40) r3 = dup3(r2, r0, 0x0) io_setup(0xbc, &(0x7f0000000280)=0x0) io_submit(r4, 0x2, &(0x7f0000000b80)=[&(0x7f0000000380)={0x503, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) 2.913351246s ago: executing program 3 (id=364): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x3) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x7, 0x40, 0x2, 0x0, {{0xf, 0x4, 0x1, 0x1e, 0x3c, 0x65, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@noop, @timestamp={0x44, 0x18, 0x7a, 0x0, 0x8, [0x0, 0x8, 0x9, 0x5, 0x10]}, @timestamp_addr={0x44, 0xc, 0xc9, 0x1, 0x8, [{@loopback}]}]}}}}}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x10, &(0x7f0000001040)=ANY=[@ANYBLOB="18000000010000000000000000040000181100009b3bd5ca27106c682cd3044ed1470245c321e05026c040e1ed6efc4e9889de90efa516", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000019000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0xe, 0x3b, &(0x7f0000000380)=""/59, 0x41000, 0x72, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000500)=[{0x5, 0x1, 0x6, 0x2}, {0x5, 0x1, 0xd, 0x4}, {0x5, 0x5, 0xc, 0x9}, {0x4, 0x5, 0xe, 0xa}, {0x3, 0x4, 0xfffffffe, 0x4}, {0x1, 0x1, 0x0, 0x4ec1cde236031429}, {0x4, 0x3, 0xf, 0x3}, {0x4, 0x4, 0x0, 0x7}, {0x1, 0x5, 0x2, 0xc}], 0x10, 0x8, @void, @value}, 0x94) read(r1, 0x0, 0x2006) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r4, &(0x7f0000000e80)=[{&(0x7f0000000ac0)=""/18, 0x12}, {&(0x7f0000000b00)=""/25, 0x19}, {&(0x7f0000000b40)=""/231, 0xe7}, {&(0x7f0000000c40)=""/69, 0x45}, {&(0x7f0000000cc0)=""/32, 0x20}, {&(0x7f0000000d00)=""/253, 0xfd}, {&(0x7f0000000e00)=""/88, 0x58}], 0x7) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000f00)='.pending_reads\x00', 0x0, 0x80) sendmsg$nl_generic(r7, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x30, 0x32, 0x10, 0x70bd28, 0x25dfdbfb, {0x4}, [@typed={0x4, 0x25}, @nested={0x18, 0x7e, 0x0, 0x1, [@typed={0x14, 0x10e, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES8=r6, @ANYBLOB="582e384f18d99994dc390979dd1cc86d67ebcba0128ebc5b914a0ef631a676290dfc11115a0b441e0d28a749f1795816777e5817f615e565fb732cf6490f04727342f50151b0c6981a05642d044e9d7459145b4fb431093f2506f0626414dcb4da1f3d314107fef0", @ANYBLOB="0000130000000000300012800b00010065727370616e00002000028006000f00000000000e00120006000e"], 0x50}, 0x1, 0x0, 0x0, 0x24000840}, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000a80)={0x1, 0x0, 0x13, 0x1e, 0x134, &(0x7f0000000680)}) 2.912523117s ago: executing program 3 (id=365): r0 = socket(0x10, 0x3, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000f00c00000000", 0x14) recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x4000000}, {{0x0, 0x0, 0x0}}], 0x2, 0x122, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) preadv2(r3, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/233, 0xe9}], 0x1, 0xfff, 0x80000000, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, {&(0x7f0000000300)=""/57, 0x39, &(0x7f0000000400)=""/25, 0x3, 0x2}}, 0x48) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r4, 0x3) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) recvmmsg(r5, &(0x7f0000007940), 0x55, 0x30, 0x0) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x0) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000040)="58f088a82cc419d26ec6151fda32b1bd4e790902112dfbf7d1b50cab31aa9d79d51497c6f924a2663ed2cacb1833980ecb35b65b967effd34279d4b879413ad4b5c629d0f6e1ad7723a33b687ef690b52e7c7611fe85a1d1c967dbd88ab17b8d6c1ecffbcf48d3edd41b83b1c7a419103e8c73232965990816e2288e7f4bd171ae28dfaa07359a66db23deeb366fc4bc0cbd7fa63f14cfeef33e2e027d0ec6c0546e1127f74ae9c1302b6d757980e092f8bde19a80dc17730f3da5", 0xbb}, {&(0x7f0000000140)="77ca3944382b3e4b36452b7e479d17ed624fb647308cbd38ab28dbcae9f427233bb442de4242f73158d2b7cff6d916f4a8930e7cf9b3f4215cc5eeb3d0b4d69b1a139fdc935889d87957b285b506d1a7f743c6b9e60fd5c00ad8673e817e6f513332c0b4dfafb37fa51a570422b1d89be2303db7f417fb1bdbf7eb1b7099d036bdf8d20ff16ae576e8b244fa0ecbc5a1155dae85940a8ccbcc7438b6bb8300f0e33b9ba12e2b8374674b8a4eb444e9821bb9efb43cefacd6d5bfeeaf36ee327da63957be7cea3a1bd3272cffc1033c351b7dc9aff4cf3797c5eda0ef736bf6e57ccf04dddf557c20bfdbf08e3ae27c72a1", 0xf1}, {&(0x7f0000000240)="e1", 0x1}, {&(0x7f0000000280)="585f4be438acb23850ba5be6ae1271f29b48c40345b52da41f825da69d627c342c1c265979b17edac4e55ad5330f38555c918b7b35642d93351728a1823e241393dd00d08ff4c438df1baa63d8f4d477f1019e51ea60a8c7663ad05b0f89ddffa0a32a5bc854000003e338213016ae76bea80d38000000", 0x77}, {&(0x7f0000000340)="270d79bf77e9a41006885c9e1f4d6981820a2ad164efc06b10c84e730cb6bd505c6d4d372dc0cfa69e3b3b4ed595b6b1ad31b5a5a440587f6c390197f9e6ee86fbf0ce867b36144f3d1491b87b4f21ca8b716e0e1a13683aee15a000b83b457709d043f37febb1e40fe891dc57f261879bab4b7beededb1df18843cc67c594f8000e9209fdb0b157722c7bce960051", 0x8f}, {&(0x7f00000006c0)="46cf0ad7780afab22bec92c401fe15ceaad4cf9165cec6df807922fa057aaa036283756a641d09bc657065276b4a29d688773f2f32f781cd7df9fa8688fe00f5b645bf8cf3f8c2225e559823d182aa05816b8e716354d6a1232b1aa370483b69d8c2f87dae6b5d18473405db6a8d1f9ceb90cced4827e1257a19626f812d8d9fe64e98b922358973726c0b00d5f43b2c", 0x90}], 0x6, &(0x7f0000000540)="2aeec73ac3c34d0379dd5eb593232733460281d97f067abccc45e7e9e46de6955458c0fd99c33d2349d282d1b738a8c29e7651f046283001524b86dfc25e816079008a51ed3310aecc7ddc5ad4b856d7fd0cb67d59479f4c5f57e344c3374c7aa6715242687cd6f7105047afb1efc2cef9a987871660dcb2bcc87ef705a14dc3b945f24c3226b2ecf0cffa1c7bdf7d9fa407292abb67e979e6a1e9de527a47447385dc244b56b6a62da54929ec793014600552d658456ac0abb22e06ff1b", 0xbe, 0x4000814}, 0x4000014) 2.792991472s ago: executing program 0 (id=367): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f00000006c0)=""/212, 0xd4}, {&(0x7f00000004c0)=""/228, 0xe4}, {&(0x7f0000000a00)=""/247, 0xf7}, {&(0x7f00000007c0)=""/185, 0xb9}, {&(0x7f0000000400)=""/29, 0x1d}, {&(0x7f0000000940)=""/183, 0xb7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000005680)=""/4099, 0x1003}], 0x8}, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0xe, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) 2.792363692s ago: executing program 0 (id=368): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x40, 0xa, 0x0, 0x80, 0x87}, {0x0, 0x5}, {}, 0x1ff, 0x0, 0x1, 0x1}, {{@in6=@remote, 0x0, 0x6c}, 0x0, @in6=@mcast2, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) listen(r2, 0x0) r3 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000200)={0x1, 'dummy0\x00', {}, 0xff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000620700000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f000000a200)='afs_cell\x00', r5}, 0x10) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%(,:', 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001100010000000000000000000000000068d786df62eeb370bd1acc1e0b9f73f072d76532bfc0d74b252b03eda588b2bd998dabd1fef4ed317c67fab80fb87b539e1ab44c59405793433cf96f46ea4279c7b61dd85c8de14527bc79836591db159719d8a1bcdfb395f9a5073dd1895b6f4ec4fcf55cb746eaee74ae16058b0dcd87874e2efa0411222431e0423a71c59e978115e7053c662f66f206f42b57707557ce2c8df2ce5aa58a977175717842033e71d0a9ee05bf30890fe6afdf3a8df2086c18c7eb2cb93df6af7c1030419d0422330e55299925d1fd04a6013145bcffe53c4fe5692f", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0xfffffffffffffffe, 0x0, 0x200003f0, 0x36, 0x7], 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES16=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYRES8=r0]}, 0xaa) 2.733442473s ago: executing program 0 (id=369): lstat(0x0, &(0x7f0000000880)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000000c0)={r6, &(0x7f0000000200)="0643b10e6fea3e6180dffcc7eb243a955fcfcb533964658119c31a6c27687e3c13110f446b32b16f0efbad43ac2001cc75f2ed4fdf2b9e19fc1c728dd60f0c39a69b6876e50330283400db060000afcb0a129d60b415c1c8e05e77b99d09bab28ce7d018a4c2db802a662875fb6c2c13ca1b62cfea96a7ffffa49af77123f9ae77f7d76de492a55a8831a6b133ba242a00000000", 0x0}, 0x20) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}}, 0x0) unshare(0x60480) r7 = open(&(0x7f0000000100)='./bus\x00', 0x121040, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r8, &(0x7f0000000200)=""/209, 0xd1) unlink(&(0x7f0000000080)='./bus\x00') ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, 0x0, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x84) read$FUSE(r9, 0x0, 0x0) r10 = syz_open_dev$swradio(&(0x7f00000048c0), 0x0, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r10, 0xc0205649, &(0x7f0000004940)={0x9f0000, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0}) r11 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)={0x2c, 0x0, 0x1, 0x0, 0x4000000, {{0xa}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4, 0xa}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r7, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}]}, 0x40}}, 0x40) setresgid(0x0, 0xffffffffffffffff, r12) 2.533255916s ago: executing program 1 (id=373): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd2c, 0x25dfdbff, {0xa, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000140)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[], 0x0, 0x80200}) keyctl$negate(0xd, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) capset(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) clock_gettime(0x6, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000a80)=0x3ff, 0x4) recvmmsg(r7, &(0x7f0000007bc0)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x40000000, 0x0) r8 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="06edf9c887307c15015f6a28000000100001040100"/31, @ANYRES32=r9, @ANYBLOB="891000000000000008000a00", @ANYRES32=r9, @ANYBLOB], 0x28}}, 0x40) ioctl$sock_proto_private(r8, 0x89e5, &(0x7f0000000040)="0e4dcd2b293226341996258e1d4966dfb4b7d1b5df") 2.034381983s ago: executing program 3 (id=374): r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) (async) setresuid(0xee01, 0xee01, 0x0) (async) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) open$dir(&(0x7f0000000500)='./file0\x00', 0x3f, 0x0) (async) bind$alg(r0, &(0x7f0000002ec0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) (async) chdir(&(0x7f0000000380)='./file1\x00') (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="c5deb316", 0x4) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) (async) r3 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r5, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000"]) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) (async) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x36, 0x0, 0x36, 0x0, 0x0, 0x33, 0x65, 0x7f, 0x0, 0x35]}, &(0x7f0000000540)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) r6 = accept$alg(r0, 0x0, 0x0) syz_emit_ethernet(0x114, &(0x7f0000000700)=ANY=[@ANYRES8=r2], 0x0) (async) ioctl$SNDCTL_MIDI_INFO(r5, 0xc074510c, &(0x7f0000000600)={"555be593bc0f067194d87457a688a2f341bf88a8c0f5d956839d153fafd3", 0xd5, 0x0, 0x97, [0x7, 0x80, 0x10000, 0x23, 0x3f, 0x3, 0x3, 0xff, 0x4, 0x8, 0x2, 0x9, 0x2c, 0x1, 0x2, 0x2, 0x3, 0x2]}) (async) sendmmsg$alg(r6, &(0x7f0000001fc0)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="48bff237c38060ff", 0xffffffda}], 0x1, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) recvmmsg(r6, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/207, 0x34000}], 0x1}}], 0x1, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000003fc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000100)=@sg0, r8, 0x0) (async) syz_open_dev$sg(&(0x7f00000005c0), 0x0, 0x0) 1.97347159s ago: executing program 3 (id=375): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000fc0), 0x20000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000001000)=@s={0x5, @SEQ_MIDIPUTC=0xa2, 0x13, 0x7}) open(&(0x7f0000000180)='./file2\x00', 0x1cd842, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) gettid() mkdir(0x0, 0x0) rt_sigsuspend(0x0, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000180)=""/199) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0xf87, &(0x7f0000001a80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a60f510000fc020000000000000000000000000000fe8000000000000000000000000000aa8400000011000000223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1de1ec4a053059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336936f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9018000000000000071a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac0b08eb4dcec6fd424dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c19634b5ca2df742fe69d84275f754213dbcf2e5f6a47b0f7c78871e976814e324260862a45f4dc0ed57d2ef6414cf1b5986597eeaf4d468e1b9dec2ae91c93bd78884dc780e4342529292e37d6390dd086ee0bd8344719b845296e1be12009b4f14c8699a0273b24c1a484b424b7ec64392c460e3de557b8a7673bdd012eafbc04b1dfceae40e713b5404548aed306e39f8a9c9a438f81f0781fda4dd1759b0d5ceac5685a95367d234ba8f98b8c92ec3102276bcc0946c7a006040703f9e88229fe6722b700f3e2cdc0f0010dc5e5881d8c8c77f3874eb62a7df0d96253be3ab9536074b938e8f8dbcb694d1671ae8866295fda50f38eb77f5bf7f6b8bf363d66f902c6ad9ae59d78"], 0x0) 1.870483853s ago: executing program 0 (id=376): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) bind$nfc_llcp(r2, &(0x7f0000000240)={0x27, r4, 0x800, 0x2, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760bee11e88509de7f1939e8abff005597c8ef039a5be42200", 0x40000000000038}, 0x60) close_range(r0, 0xffffffffffffffff, 0x0) 1.79286976s ago: executing program 0 (id=377): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff000000000000080045000027000000000090780300000045000000000000000000000000000000ffffffff00"/62], 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000580)=""/71, 0x47}], 0x100000000000017a, 0x7, 0x8000000a) (async) r4 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='#%::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<+\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[\a\x00\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce5<\x0e\xd25\fo\x8f^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0, &(0x7f00000001c0)=0x4) r6 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) ioctl$LOOP_SET_FD(r6, 0x80044df9, 0xffffffffffffffff) sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@bridge_newvlan={0x70, 0x70, 0xb01, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xe}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x45, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x5}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x200000000000009, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r8, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x4, 0x8ed9, "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", 0xff, 0xc, 0x4, 0x32, 0x8, 0xe, 0x2, 0x1}, r9}}, 0x120) bind$alg(r7, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(camellia-asm)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000000c0)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6", 0x18) (async) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000c58749dd391a247b750b0000000085000000110000009500000000000000c39d94d16c9449c6b3f5f14c7d4b46d870ec2d9580ee359816b1a4fcc25b1d6053dd7ece3811e94a5d49d0c79b6bd56a9cf675e41154386ea8f7f55fd420a2bd8131fb849d431b9dcc865106aba59e48758cc030a2454477ba60326bc2111f29484e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async, rerun: 64) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=0x0, @ANYBLOB="18005a80140001a7cf000100300000000600020000000000"], 0x34}}, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (rerun: 32) 1.643460725s ago: executing program 0 (id=378): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x800) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x208000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000187470000c000280080001000000000000", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x40}}, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x4000000cb8, 0x232c40) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r9, &(0x7f0000010140)={0x2020}, 0x2036) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000040)={'veth1\x00', @random="31aaa49fe800"}) 1.643052842s ago: executing program 1 (id=379): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) keyctl$session_to_parent(0x12) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='gadgetfs\x00', 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @local, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x77, 0x1, 0x0, [{@multicast1}, {}, {}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) umount2(&(0x7f0000000240)='./file0\x00', 0x1f) keyctl$session_to_parent(0x12) 1.563407591s ago: executing program 1 (id=380): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) ioctl$FIOCLEX(r0, 0x5451) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, 0x1}) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x9, 0x2) writev(r2, &(0x7f0000000600)=[{&(0x7f00000001c0)="d9c0c6473147a6f06ef6053d79a2ea8180895e7b1fc9a4371003533f818790d4331782964a07c1b5e4b3ee96f57c12b2fb85b84411a4071bb7e1884288013855d4ad7613f5370dd442059f8981985a01b099afc6f7409fbd09205884cb7b2241109a8a4082ecb6e65c1a2cf898ced86fcacb22d8a7278f61c6f1bd4843523cfcc3784a0b6535cd5d387ae8bf89fb8569f91807dfd14b6436be0e0fa2221afbf2318c434207f03e2731d9b8199f7631cec9d7db4d0f69d9b2d39f4d5385f70137c2b1", 0xc2}, {&(0x7f00000002c0)="b00534c960cf6824a76c71a6fa8f24dff3b26d5de2e1cc426248086ef449cb9cb33a49a4efda0c5ebc95a2a577a1ac1f52e95946b58937f132dd2c99de6ee5e196e86ece55125b16ff75cf99a29129ec8b6ed159d8c3a493642dea51e18562e46ccb8eaadd2b1cd0", 0x68}, {&(0x7f0000000340)="06fd0eb86346b00984385ab0c6b18e2fe9207877e65933aecb5b559e6689400cf880093d3142930f63934e2fa5cdc4dd1d34a921aafa4f482153a8c557b8f95a6706e02c3ab6f39c7380d07b93e3040876ab0f755910a2608def9f", 0x5b}, {&(0x7f00000003c0)="ca692005815b27017d673023b32e093a7e1eba3244d8f0a73db25625da426550f25786af69f9359634819e28bd744a632a91e5ddf82cb18531d094ca02d4d0a27f3e8311b4047be00d7df7cbd189507ac0f23244968dfce86546c34f2d8e26f58a6cabfeb57095bb042a722e6ad92369504b58598942363fef34b4c98c116291b3e270430d5ff0bc5ebc2aa92b4fef2c84d79ba3ab71064b1dfb0579ff029f5049b9654097dc6be0154ff00158d7c19f75d60c421640fe", 0xb7}, {&(0x7f0000000480)="b8ce47f3d4b09d9db0e5cd99d57013caa8329b4ab7dc4b1accbec73a84d832020669d0c8d1904f45667bb0", 0x2b}, {&(0x7f00000004c0)="32604b7593294de78d2d72e99d2a34fc6cd74f6216c6f8a595008e2ef0211a602b5a42163127c8210c9f179618779335d6bf6dd0ac34c6633c2eb76af83b198f6546d2aea9a5bd889102f111f0ece6", 0x4f}, {&(0x7f0000000540)="9cca21554323d2f55c08b69f5441e7f8c1521246260c9f43b6ce1c193a483d45f8e08a5a84d5e3b90b3a2368d8611e2455d3f24fa921e7bbf8ef40bd61d4e235042b470a5054371a2233a699ac10f1c3d4021c120964c975930fcc7510f6f1271df9114ff65b9e2bd22bc78b65b9b87bdee7464165e859b7adae0b338fa62aba3ecb0eb79356421b4eadef3592e7c24b", 0x90}], 0x7) read$dsp(r1, &(0x7f0000000680)=""/202, 0xca) ioctl$CDROMEJECT(r1, 0x5309) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x9, 0x8}, 0x90) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000840)={{0xa, 0x4e24, 0x30c, @remote}, {0xa, 0x4e23, 0xc000000, @mcast1, 0xfffff800}, 0x0, {[0x0, 0x3, 0x10001, 0x0, 0xfff, 0x5, 0x96, 0x259]}}, 0x5c) write$binfmt_elf32(r1, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x3, 0x7, 0x7, 0x80000000, 0x3, 0x3e, 0x0, 0x306, 0x38, 0xcb, 0x6000, 0x58a0, 0x20, 0x1, 0x9, 0x9, 0xf800}, [{0x3, 0xfffffffc, 0x7, 0x6, 0x400, 0xca, 0x7, 0xb41}], "bb6b8f7a0a8b4a0a7ddecf05478868d0ef00e3efaf06dacdadb475b7e1e1bdc849764a06cede964e5303d6384ed740c19f6a7510bebf579de78e15238664eda07a478e18b72851e26c74fd23fac3e75a5923eb294ba32384d0e350d0a7d5142977f368c923fb2ea4c1e7ece455e2a6fb71260fb1d85228323e5ace48ba7791", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6d7) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000fc0)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000001040)={0x5, 0x0, &(0x7f0000ffb000/0x2000)=nil}) write$dsp(r1, &(0x7f0000001080)="704325adbbb49807d6a1d8a01dfdfa54cb581ca3604f9093636bc87d490737ae70590a93d1922592ef5550bc5b1f8d1eab4df3f61f8075d1c9d4c830b3f68658", 0x40) write$dsp(r1, 0xfffffffffffffffe, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000010c0)=0x0, &(0x7f0000001100)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000011c0)={'ip6_vti0\x00', &(0x7f0000001140)={'ip6gre0\x00', r5, 0x2f, 0x9, 0x8, 0x8, 0x0, @mcast1, @rand_addr=' \x01\x00', 0x40, 0x7, 0xc, 0x1}}) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001200)=0x53, 0x4) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000001240)={0x5, 0xffffffffffffffff, 0x1}) readv(r7, &(0x7f00000014c0)=[{&(0x7f0000001280)=""/193, 0xc1}, {&(0x7f0000001380)=""/9, 0x9}, {&(0x7f00000013c0)=""/210, 0xd2}], 0x3) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000001500)=0x2000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r8, &(0x7f0000001540)="957cfbf86098f4338bc22aa73bbc85f1a8ecc1375e9233502ce18911afa4bd6bab397cbe02f19b1aee7013149146e87c074001cd16d611df092b4d5caa1da7e1a9390739846614fcba068c16b0dc6d7416cb53269668c220716c75f6e02f71907917ecd2c7501e35e66fe1d66f728e55ad2544aa8686fe64b8274e69412c156700a9352ad90db85223ec11e3c7b08ee0ebc03deced3e1f6fc64ce0665debecead6a4a4d45e552e5a9c2db8c62924eb0760b331fa817e33e2fb9f686b48299b9c043b", 0xc2, 0x40000, &(0x7f0000001640)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(0xffffffffffffffff, 0x40044104, &(0x7f0000001740)=0x7ff) 1.562494048s ago: executing program 1 (id=381): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x9, r0, 0x2}) write$char_usb(r1, &(0x7f0000000040)="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", 0xfa) ioctl$KDGKBDIACR(r0, 0x4b4b, &(0x7f0000001300)=""/193) 1.499852317s ago: executing program 1 (id=382): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000140009052bbd70000000000002180d00", @ANYRES32=r6, @ANYBLOB="08000100ac1414aa08000200e0000002080009000e0000000df5de7dd2ac90c2a9a939759b9eafcef7e8e52ba02695f9f4893e"], 0x30}}, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='rxrpc_call_complete\x00', r1}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r9 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000010000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r11, r10, 0x7, 0x0, 0x0, @void, @value}, 0x10) close(r11) write(r9, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r9, 0x0) readlinkat(r8, &(0x7f0000000040)='./file0\x00', &(0x7f0000019240)=""/102393, 0x18ff9) 593.493433ms ago: executing program 1 (id=383): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x5411) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_dellink={0x28, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r8, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r9, &(0x7f0000000080)={0x18, 0x0, r10, {0x7}}, 0x18) statx(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1000, 0x8, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x0, 0xffffff81, 0x1, 0x1, 0x1, 0x6c, 0x8001, {0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x6, 0xb79, 0x7fffffff, 0x0, 0xa}}, &(0x7f0000000500)=0xb0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], 0x0, [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd], [0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x5c, 0x5}}]}, 0xac}}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r11, 0x404c534a, &(0x7f0000001280)) socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000000040)=0x3) 418.782155ms ago: executing program 2 (id=386): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/41, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000240)={@broadcast, @empty, @val={@val={0x88a8, 0x2}, {0x8100, 0x2, 0x1, 0x4}}, {@llc_tr={0x11, {@snap={0xaa, 0xaa, "9ec2", "723ca7", 0x200, "00f06e94fd49135d7f455454fc8a76a6473f041d71a9b95d6be23b77f81ed597fd5523462cce926c7c9c4aaf3f8668d518825d636b50067d3d337fd2e53e40a3bf2ce8624cc7ef"}}}}}, &(0x7f00000000c0)={0x1, 0x4, [0x221, 0x732, 0x6d7, 0xb9c]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)={0x1, 0x0, [{0x731768fd63b79847, 0xd5, &(0x7f00000002c0)=""/213}]}) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3ff}}], 0x18}}], 0x1, 0x1) 343.128302ms ago: executing program 2 (id=387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r3, 0x0, &(0x7f0000004500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="b9bd0300000f320f32980fc71f0f20058a19a2f4860000362e0f013766bad004b8e7000000ef36670f22c4", 0x2b}], 0x1, 0x18, 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={0x38, 0x0, 0x7, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x43}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async, rerun: 64) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="f00000001000010000000000fcdbdf25fe8000000000000000000000000000bb0000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000000000000000000000000000000000019c03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011ccf4e067000000000000000000000000000000000000000082080000000000000000000000000000000000000000000000000000000000000000000003000000000000000a000000ad00000000000000"], 0xf0}}, 0x0) (async, rerun: 32) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01080000000000000000bfdec08abc75880a", @ANYRES32=r11, @ANYBLOB="0a000600080211000001000028005080110001005a080039084eeef16f162471f400000005000200000000000800030005ac0f00"], 0x50}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00004982", @ANYRES16=r9, @ANYBLOB="200029bd7000fcdbdf25350000000c00990007000000620000001400fe00d0b94b12b25414e3619558d3311bb12b1400fe0061235c3a309f8f6daf4ee477e89d3eca"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c091) (async, rerun: 32) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) (rerun: 32) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="178c4dc7feafe847a6af5273e8f9a16e010d007d5d530180160026bd0900fedbdf25070000000800010085c7f8578dee2f37b08b2c31d5c05634204e8229badd3507dd6822745eed15287ddad7c8d1ca86ac6e57f752a0f57a9290affb2bfeda43e2f3137dde8d44657f2fbd9a9a2e9d292f27112eae4811fcccded0bea7aca16dc2f6206d89f562c774812773208031b7002cb3190d6aa5b5828a92b9ac4930123f06e4f14bdbc6658bf7e6ed161e0900e945d06b1f9a6b034f595ec147a7b2025196f71cd987", @ANYRES32=r7, @ANYRES8=r6], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x10) 182.624329ms ago: executing program 2 (id=388): r0 = socket$netlink(0x10, 0x3, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) (async) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r3, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r3, r1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62040200) (async) r4 = gettid() (async) r5 = syz_open_dev$video(&(0x7f0000000000), 0xffffffffffffff01, 0x0) (async) socket$inet6(0xa, 0x80002, 0x0) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x11, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100000000000000000000390000", @ANYRES32=r7, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r4], 0x28}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'veth1_vlan\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) (async) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000300)) 102.400115ms ago: executing program 2 (id=389): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_IO_FLUSHER(0x4a, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r3, @ANYBLOB="00410000000000001c002b80080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000001c0)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) r5 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a181, 0x0) r7 = dup(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f00000000c0)={0x600, 0x32200}) r8 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62040200) r9 = gettid() syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) socket$inet6(0xa, 0x80002, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100000000000000000000390000", @ANYRES32=r10, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r9], 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x5}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000003c0)) 3.461547ms ago: executing program 2 (id=390): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) (async) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0x541b, 0x0) (async) shutdown(r3, 0x2) (async) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002d40)=ANY=[@ANYRESHEX], &(0x7f0000000140)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x6, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r5 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffb000/0x1000)=nil) (async, rerun: 64) r6 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r7, 0x0) shmctl$SHM_LOCK(r5, 0xb) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 0s ago: executing program 2 (id=391): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001500)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x8}, @alu={0x7, 0x1, 0x4, 0x6, 0x5, 0x40, 0x10}]}, &(0x7f0000000240)='syzkaller\x00', 0x7ff, 0x0, &(0x7f0000000280), 0x41100, 0x41, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x1c26a, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x2, 0x1, 0x1, 0x3}], 0x10, 0xb917, @void, @value}, 0x94) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000400)) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd12000000000000850000007d000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r3 = socket(0x10, 0x3, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) (async) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$inet(r4, &(0x7f00000006c0)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000000)="93", 0x34000}], 0x1}, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc) (async) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) (async) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014003500776730"], 0x34}}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x769}) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r5, 0x0, 0x0, 0x0, 0x0) (async) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) (async) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) r8 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x100000000, 0x1000000000000}) socket(0x2b, 0x805, 0x2e000000) (async) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x4047, 0x700}, {r8, 0x441}], 0x2, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x6559, 0x13580, 0x3}, &(0x7f0000000040), &(0x7f00000001c0)) kernel console output (not intermixed with test programs): [ 31.518780][ T39] audit: type=1400 audit(1732491796.406:81): avc: denied { rlimitinh } for pid=5858 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.523800][ T39] audit: type=1400 audit(1732491796.406:82): avc: denied { siginh } for pid=5858 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 32.114484][ T39] audit: type=1400 audit(1732491797.016:83): avc: denied { read } for pid=5347 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 32.120185][ T39] audit: type=1400 audit(1732491797.016:84): avc: denied { append } for pid=5347 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.125988][ T39] audit: type=1400 audit(1732491797.016:85): avc: denied { open } for pid=5347 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.132278][ T39] audit: type=1400 audit(1732491797.016:86): avc: denied { getattr } for pid=5347 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:5272' (ED25519) to the list of known hosts. [ 33.081910][ T39] audit: type=1400 audit(1732491797.986:87): avc: denied { name_bind } for pid=5868 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 34.718220][ T5870] cgroup: Unknown subsys name 'net' [ 34.847956][ T5870] cgroup: Unknown subsys name 'cpuset' [ 34.850928][ T5870] cgroup: Unknown subsys name 'rlimit' [ 35.021875][ T5930] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 35.600365][ T5870] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.982120][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 36.982131][ T39] audit: type=1400 audit(1732491801.886:105): avc: denied { execmem } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.135554][ T39] audit: type=1400 audit(1732491802.036:106): avc: denied { create } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.140720][ T39] audit: type=1400 audit(1732491802.036:107): avc: denied { read write } for pid=5945 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.146933][ T39] audit: type=1400 audit(1732491802.036:108): avc: denied { open } for pid=5945 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.153015][ T39] audit: type=1400 audit(1732491802.056:109): avc: denied { ioctl } for pid=5945 comm="syz-executor" path="socket:[6104]" dev="sockfs" ino=6104 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.165831][ T5949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.168933][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.176513][ T5956] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.176530][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.180326][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.182184][ T5950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.184962][ T5955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.187095][ T5950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.188736][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.190215][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.192190][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.193974][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.194404][ T5956] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.195080][ T5956] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.195599][ T5955] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 37.195791][ T5956] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 37.195942][ T5956] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.198039][ T5950] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 37.199253][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.200930][ T5950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.205379][ T39] audit: type=1400 audit(1732491802.106:110): avc: denied { read } for pid=5945 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.205586][ T5959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.219573][ T39] audit: type=1400 audit(1732491802.106:111): avc: denied { open } for pid=5945 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.224989][ T5949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.226248][ T39] audit: type=1400 audit(1732491802.106:112): avc: denied { mounton } for pid=5945 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.228467][ T5949] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.236007][ T5949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.350373][ T39] audit: type=1400 audit(1732491802.256:113): avc: denied { module_request } for pid=5957 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.370466][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 37.375395][ T5957] chnl_net:caif_netlink_parms(): no params data found [ 37.480137][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 37.497782][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.500135][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.502159][ T5957] bridge_slave_0: entered allmulticast mode [ 37.504214][ T5957] bridge_slave_0: entered promiscuous mode [ 37.539669][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.541586][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.543454][ T5945] bridge_slave_0: entered allmulticast mode [ 37.545488][ T5945] bridge_slave_0: entered promiscuous mode [ 37.548010][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.549877][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.551810][ T5957] bridge_slave_1: entered allmulticast mode [ 37.553804][ T5957] bridge_slave_1: entered promiscuous mode [ 37.576912][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.578797][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.580618][ T5945] bridge_slave_1: entered allmulticast mode [ 37.582571][ T5945] bridge_slave_1: entered promiscuous mode [ 37.601848][ T5957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.605966][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 37.622163][ T5957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.650353][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.664315][ T5957] team0: Port device team_slave_0 added [ 37.666484][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.668357][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.670227][ T5951] bridge_slave_0: entered allmulticast mode [ 37.673112][ T5951] bridge_slave_0: entered promiscuous mode [ 37.684310][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.688502][ T5957] team0: Port device team_slave_1 added [ 37.690143][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.692561][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.694795][ T5951] bridge_slave_1: entered allmulticast mode [ 37.696856][ T5951] bridge_slave_1: entered promiscuous mode [ 37.781366][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.783186][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.789960][ T5957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.794478][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.809777][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.812473][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.815114][ T5946] bridge_slave_0: entered allmulticast mode [ 37.817479][ T5946] bridge_slave_0: entered promiscuous mode [ 37.821360][ T5945] team0: Port device team_slave_0 added [ 37.823213][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.825021][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.831678][ T5957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.835814][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.845623][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.847507][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.849736][ T5946] bridge_slave_1: entered allmulticast mode [ 37.852764][ T5946] bridge_slave_1: entered promiscuous mode [ 37.856842][ T5945] team0: Port device team_slave_1 added [ 37.870480][ T5951] team0: Port device team_slave_0 added [ 37.920890][ T5951] team0: Port device team_slave_1 added [ 37.923397][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.926893][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.929893][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.932392][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.939835][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.971498][ T5957] hsr_slave_0: entered promiscuous mode [ 37.974218][ T5957] hsr_slave_1: entered promiscuous mode [ 37.994409][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.997573][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.004723][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.041209][ T5946] team0: Port device team_slave_0 added [ 38.047440][ T5946] team0: Port device team_slave_1 added [ 38.049329][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.051623][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.060458][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.090906][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.093277][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.102014][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.117888][ T5945] hsr_slave_0: entered promiscuous mode [ 38.119820][ T5945] hsr_slave_1: entered promiscuous mode [ 38.122242][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.124326][ T5945] Cannot create hsr debugfs directory [ 38.158975][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.160796][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.167692][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.189358][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.191179][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.197777][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.202683][ T5951] hsr_slave_0: entered promiscuous mode [ 38.204556][ T5951] hsr_slave_1: entered promiscuous mode [ 38.206408][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.208382][ T5951] Cannot create hsr debugfs directory [ 38.280576][ T5946] hsr_slave_0: entered promiscuous mode [ 38.282482][ T5946] hsr_slave_1: entered promiscuous mode [ 38.284917][ T5946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.287171][ T5946] Cannot create hsr debugfs directory [ 38.396460][ T5957] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.408072][ T5957] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.413504][ T5957] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.417910][ T5957] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.456299][ T5945] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.459568][ T5945] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.462847][ T5945] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.467360][ T5945] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.496630][ T5951] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.501512][ T5951] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.505295][ T5951] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.509767][ T5951] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.529395][ T5946] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.532616][ T5946] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.536466][ T5946] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.545720][ T5946] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.564827][ T5957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.590410][ T5957] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.603165][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.605066][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.609920][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.612274][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.632131][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.653047][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.668620][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.673225][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.677848][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.682755][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.685388][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.692708][ T5957] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.698971][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.700852][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.708155][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.709891][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.712698][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.714420][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.727951][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.737892][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.740338][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.743705][ T39] audit: type=1400 audit(1732491803.646:114): avc: denied { sys_module } for pid=5957 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 38.754504][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.756491][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.794308][ T5957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.818791][ T5957] veth0_vlan: entered promiscuous mode [ 38.824678][ T5957] veth1_vlan: entered promiscuous mode [ 38.842381][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.853636][ T5957] veth0_macvtap: entered promiscuous mode [ 38.862828][ T5957] veth1_macvtap: entered promiscuous mode [ 38.880528][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.887365][ T5945] veth0_vlan: entered promiscuous mode [ 38.891001][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.897061][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.901983][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.907842][ T5957] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.910905][ T5957] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.913774][ T5957] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.916947][ T5957] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.922688][ T5945] veth1_vlan: entered promiscuous mode [ 38.959914][ T5951] veth0_vlan: entered promiscuous mode [ 38.961535][ T5946] veth0_vlan: entered promiscuous mode [ 38.969816][ T5945] veth0_macvtap: entered promiscuous mode [ 38.979413][ T5946] veth1_vlan: entered promiscuous mode [ 38.982637][ T5945] veth1_macvtap: entered promiscuous mode [ 38.987786][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.989950][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.994930][ T5951] veth1_vlan: entered promiscuous mode [ 39.001442][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.005018][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.008890][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.016415][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.018904][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.019012][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.022399][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.023087][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.032532][ T5946] veth0_macvtap: entered promiscuous mode [ 39.036601][ T5946] veth1_macvtap: entered promiscuous mode [ 39.041066][ T5945] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.043339][ T5945] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.045825][ T5945] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.048085][ T5945] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.058530][ T5951] veth0_macvtap: entered promiscuous mode [ 39.061486][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.064193][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.067001][ T5957] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.067118][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.073494][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.077156][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.081091][ T5951] veth1_macvtap: entered promiscuous mode [ 39.086911][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.089662][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.092178][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.095680][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.098866][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.108788][ T5946] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.111409][ T5946] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.113701][ T5946] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.116282][ T5946] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.121282][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.124000][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.127785][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.130599][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.133175][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.136603][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.140829][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.150051][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.152731][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.155197][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.158005][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.160548][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.163200][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.166854][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.173763][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.175890][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.176921][ T5951] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.180166][ T5951] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.182374][ T5951] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.184548][ T5951] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.207610][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.209778][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.230357][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.232541][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.236437][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.238503][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.246233][ T5949] Bluetooth: hci3: command tx timeout [ 39.247953][ T5949] Bluetooth: hci1: command tx timeout [ 39.255669][ T5949] Bluetooth: hci2: command tx timeout [ 39.257393][ T66] Bluetooth: hci0: command tx timeout [ 39.261121][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.263181][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.268612][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.273287][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.314232][ T6019] Zero length message leads to an empty skb [ 39.317534][ T6017] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.393183][ T6030] raw_sendmsg: syz.1.2 forgot to set AF_INET. Fix it! [ 39.446211][ T6017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 39.450696][ T6032] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7'. [ 39.481468][ T6038] can0: slcan on ptm0. [ 39.645873][ T6038] can0 (unregistered): slcan off ptm0. [ 39.709469][ T6055] fuse: Unknown parameter '0x00000000000000030x000000000000000300000000000000000000' [ 39.885204][ T6063] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 39.889135][ T6063] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 39.947503][ T6071] warning: `syz.3.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 39.975952][ T6073] xt_hashlimit: size too large, truncated to 1048576 [ 40.023353][ T6076] hpfs: hpfs_map_sector(): read error [ 40.037575][ T5989] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 40.185513][ T5989] usb 6-1: Using ep0 maxpacket: 8 [ 40.188631][ T5989] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 40.192246][ T5989] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 40.197236][ T5989] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 40.197251][ T5989] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 40.197270][ T5989] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 40.197281][ T5989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.223722][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'. [ 40.271639][ T6088] ptrace attach of "/syz-executor exec"[6089] was attempted by "/syz-executor exec"[6088] [ 40.403239][ T5989] usb 6-1: GET_CAPABILITIES returned 0 [ 40.404759][ T5989] usbtmc 6-1:16.0: can't read capabilities [ 40.608945][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 40.612747][ T6061] mmap: syz.1.12 (6061) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.618010][ T6061] binder_alloc: binder_alloc_mmap_handler: 6060 20ffc000-20ffd000 already mapped failed -16 [ 40.626822][ T5992] usb 6-1: USB disconnect, device number 2 [ 40.651321][ T6101] overlay: ./file0 is not a directory [ 40.777877][ T6114] random: crng reseeded on system resumption [ 40.961194][ T6118] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.131935][ T6123] Trying to write to read-only block-device nullb0 [ 41.199639][ T6131] capability: warning: `+}[@' uses deprecated v2 capabilities in a way that may be insecure [ 41.231397][ T6133] ªªªªª: renamed from hsr0 (while UP) [ 41.235873][ T6133] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 41.242716][ T6133] CIFS mount error: No usable UNC path provided in device string! [ 41.242716][ T6133] [ 41.246589][ T6133] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 41.325963][ T66] Bluetooth: hci0: command tx timeout [ 41.326076][ T5949] Bluetooth: hci2: command tx timeout [ 41.326097][ T5950] Bluetooth: hci1: command tx timeout [ 41.326137][ T5950] Bluetooth: hci3: command tx timeout [ 41.448202][ T6142] xt_hashlimit: invalid rate [ 41.895719][ T6175] [U] ^vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 41.897947][ T6175] [U] J"—e:ÀÆ" [ 42.014474][ T39] kauditd_printk_skb: 126 callbacks suppressed [ 42.014484][ T39] audit: type=1400 audit(1732491806.916:241): avc: denied { mount } for pid=6179 comm="syz.0.56" name="/" dev="gadgetfs" ino=9025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 42.024076][ T39] audit: type=1400 audit(1732491806.926:242): avc: denied { unmount } for pid=6179 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 42.034938][ T39] audit: type=1400 audit(1732491806.936:243): avc: denied { read write } for pid=6179 comm="syz.0.56" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 42.043201][ T39] audit: type=1400 audit(1732491806.936:244): avc: denied { open } for pid=6179 comm="syz.0.56" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 42.051061][ T39] audit: type=1400 audit(1732491806.936:245): avc: denied { ioctl } for pid=6179 comm="syz.0.56" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 42.110491][ T39] audit: type=1400 audit(1732491807.016:246): avc: denied { mounton } for pid=6190 comm="syz.3.51" path="/12/bus" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 42.136811][ T39] audit: type=1400 audit(1732491807.046:247): avc: denied { unmount } for pid=5957 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 42.158242][ T39] audit: type=1400 audit(1732491807.066:248): avc: denied { ioctl } for pid=6194 comm="syz.0.52" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10656 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.167244][ T39] audit: type=1400 audit(1732491807.066:249): avc: denied { watch_reads } for pid=6198 comm="syz.3.53" path="/13" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 42.271176][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'. [ 42.285723][ T5992] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 42.321096][ T39] audit: type=1400 audit(1732491807.226:250): avc: denied { append } for pid=6211 comm="syz.3.55" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 42.357479][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.58'. [ 42.366074][ T6212] netlink: 'syz.3.55': attribute type 11 has an invalid length. [ 42.368217][ T6212] netlink: 224 bytes leftover after parsing attributes in process `syz.3.55'. [ 42.412228][ T6229] netlink: 188 bytes leftover after parsing attributes in process `syz.3.61'. [ 42.436240][ T5992] usb 7-1: Using ep0 maxpacket: 16 [ 42.448438][ T5992] usb 7-1: config 1 interface 0 altsetting 66 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.451633][ T5992] usb 7-1: config 1 interface 0 altsetting 66 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 42.455975][ T5992] usb 7-1: config 1 interface 0 has no altsetting 0 [ 42.470319][ T5992] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c0a, bcdDevice= 0.40 [ 42.472798][ T5992] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.474875][ T5992] usb 7-1: Product: à Œ [ 42.476099][ T5992] usb 7-1: Manufacturer: Ñ• [ 42.477299][ T5992] usb 7-1: SerialNumber: አ[ 42.555287][ T6244] kvm: emulating exchange as write [ 42.775683][ T830] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 42.925524][ T830] usb 5-1: Using ep0 maxpacket: 8 [ 42.930511][ T830] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 42.933506][ T830] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 42.938499][ T830] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 42.941052][ T830] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 42.944345][ T830] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 42.947061][ T830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.154067][ T830] usb 5-1: GET_CAPABILITIES returned 0 [ 43.155946][ T830] usbtmc 5-1:16.0: can't read capabilities [ 43.309212][ T5992] usbhid 7-1:1.0: can't add hid device: -71 [ 43.310831][ T5992] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 43.315382][ T5992] usb 7-1: USB disconnect, device number 2 [ 43.355030][ C2] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 43.357576][ C2] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 43.360178][ C2] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 43.400272][ T6260] netlink: 'syz.1.71': attribute type 4 has an invalid length. [ 43.406939][ T5949] Bluetooth: hci2: command tx timeout [ 43.415712][ T5949] Bluetooth: hci3: command tx timeout [ 43.415737][ T5959] Bluetooth: hci1: command tx timeout [ 43.706012][ T6278] syz.1.75: attempt to access beyond end of device [ 43.706012][ T6278] loop1: rw=0, sector=6, nr_sectors = 2 limit=0 [ 43.710338][ T6278] ADFS-fs (loop1): error: unable to read block 3, try 0 [ 43.805880][ T5959] Bluetooth: hci0: command tx timeout [ 43.910344][ T6295] Cannot find add_set index 2 as target [ 43.925211][ T6297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.80'. [ 43.929523][ T6297] netlink: 'syz.2.80': attribute type 12 has an invalid length. [ 43.935605][ T6297] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.939042][ T6297] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.941939][ T6297] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.944910][ T6297] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.948859][ T6297] vxlan0: entered promiscuous mode [ 44.155562][ T830] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 44.305519][ T830] usb 6-1: Using ep0 maxpacket: 8 [ 44.308604][ T830] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 44.311519][ T830] usb 6-1: config 179 has no interface number 0 [ 44.313658][ T830] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 44.317553][ T830] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 44.320900][ T830] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 51, changing to 9 [ 44.323828][ T830] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8292, setting to 1024 [ 44.326807][ T830] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 44.330184][ T830] usb 6-1: config 179 interface 65 has no altsetting 0 [ 44.331965][ T830] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 44.334331][ T830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.338797][ T6295] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 44.346751][ T830] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input6 [ 44.396325][ T5350] input input6: unable to receive magic message: -110 [ 44.402069][ T5350] input input6: unable to receive magic message: -32 [ 44.406756][ T5350] input input6: unable to receive magic message: -32 [ 44.411293][ T5350] input input6: unable to receive magic message: -32 [ 44.423369][ T5350] input input6: unable to receive magic message: -32 [ 44.426521][ T5350] input input6: unable to receive magic message: -32 [ 44.431167][ T5350] input input6: unable to receive magic message: -32 [ 44.434003][ T5350] input input6: unable to receive magic message: -32 [ 44.541917][ T6295] input input6: unable to receive magic message: -32 [ 44.545185][ T5992] usb 6-1: USB disconnect, device number 3 [ 44.545187][ C2] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 44.549041][ T5992] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 44.773065][ T6304] netlink: 'syz.2.83': attribute type 1 has an invalid length. [ 44.775206][ T6304] netlink: 224 bytes leftover after parsing attributes in process `syz.2.83'. [ 44.898231][ T6307] Bluetooth: MGMT ver 1.23 [ 45.486355][ T5949] Bluetooth: hci3: command tx timeout [ 45.486483][ T66] Bluetooth: hci2: command tx timeout [ 45.486513][ T5950] Bluetooth: hci1: command tx timeout [ 45.550648][ T6013] usb 5-1: USB disconnect, device number 2 [ 45.763002][ T6338] tipc: Started in network mode [ 45.764408][ T6338] tipc: Node identity ac1414aa, cluster identity 4711 [ 45.767378][ T6338] tipc: Enabled bearer , priority 10 [ 45.934876][ T6358] fuse: Unknown parameter 'Hd' [ 45.993573][ T6361] SELinux: security policydb version 18 (MLS) not backwards compatible [ 45.996379][ T6361] SELinux: failed to load policy [ 46.130097][ T6370] overlayfs: invalid redirect ((null)) [ 46.685907][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 46.689094][ T6383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.107'. [ 46.766438][ T6007] tipc: Node number set to 2886997162 [ 46.815343][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.112'. [ 46.844112][ T6406] netlink: 'syz.3.114': attribute type 9 has an invalid length. [ 46.925628][ T66] Bluetooth: hci0: command 0x0401 tx timeout [ 46.925724][ T5959] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 47.047334][ T6417] netlink: 32 bytes leftover after parsing attributes in process `syz.2.117'. [ 47.052358][ T39] kauditd_printk_skb: 81 callbacks suppressed [ 47.052369][ T39] audit: type=1400 audit(1732491811.956:332): avc: denied { relabelfrom } for pid=6414 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 47.059345][ T39] audit: type=1400 audit(1732491811.956:333): avc: denied { relabelto } for pid=6414 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 47.064562][ T39] audit: type=1400 audit(1732491811.966:334): avc: denied { mounton } for pid=6414 comm="syz.0.116" path="/34/file0/file0" dev="9p" ino=35922426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.070757][ T39] audit: type=1400 audit(1732491811.966:335): avc: denied { read } for pid=6414 comm="syz.0.116" name="file0" dev="9p" ino=35922426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.076568][ T39] audit: type=1400 audit(1732491811.966:336): avc: denied { open } for pid=6414 comm="syz.0.116" path="/34/file0/file0" dev="9p" ino=35922426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.084039][ T6416] erofs (device erofs): cannot find valid erofs superblock [ 47.147128][ T39] audit: type=1400 audit(1732491812.056:337): avc: denied { shutdown } for pid=6424 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 47.150650][ T6422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1418 sclass=netlink_route_socket pid=6422 comm=syz.2.118 [ 47.152438][ T39] audit: type=1400 audit(1732491812.056:338): avc: denied { read } for pid=6421 comm="syz.2.118" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 47.156131][ T6422] netlink: 'syz.2.118': attribute type 10 has an invalid length. [ 47.162559][ T39] audit: type=1400 audit(1732491812.056:339): avc: denied { open } for pid=6421 comm="syz.2.118" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 47.165116][ T6425] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 47.170620][ T39] audit: type=1400 audit(1732491812.056:340): avc: denied { shutdown } for pid=6421 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.182118][ T6422] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.187459][ T6422] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.195357][ T6422] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.197807][ T6422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.200661][ T6422] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.202339][ T6422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.206404][ T6422] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 47.217725][ T6430] can: request_module (can-proto-0) failed. [ 47.220365][ T39] audit: type=1400 audit(1732491812.126:341): avc: denied { map } for pid=6429 comm="syz.0.119" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 47.588694][ T6452] process 'syz.2.125' launched '/dev/fd/4' with NULL argv: empty string added [ 47.605575][ T6013] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 47.704765][ T6460] netlink: 80 bytes leftover after parsing attributes in process `syz.1.128'. [ 47.775525][ T6013] usb 5-1: Using ep0 maxpacket: 16 [ 47.780274][ T6013] usb 5-1: config 7 has an invalid interface number: 234 but max is 2 [ 47.782450][ T6013] usb 5-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 47.784812][ T6013] usb 5-1: config 7 has an invalid interface number: 242 but max is 2 [ 47.787355][ T6013] usb 5-1: config 7 has an invalid interface number: 143 but max is 2 [ 47.789720][ T6013] usb 5-1: config 7 has no interface number 0 [ 47.791324][ T6013] usb 5-1: config 7 has no interface number 1 [ 47.792755][ T6475] input: syz1 as /devices/virtual/input/input7 [ 47.792908][ T6013] usb 5-1: config 7 has no interface number 2 [ 47.792938][ T6013] usb 5-1: config 7 interface 234 altsetting 0 endpoint 0x7 has an invalid bInterval 226, changing to 7 [ 47.801423][ T6013] usb 5-1: config 7 interface 234 altsetting 0 endpoint 0x7 has invalid maxpacket 58773, setting to 1024 [ 47.804372][ T6013] usb 5-1: config 7 interface 234 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 47.814969][ T6013] usb 5-1: config 7 interface 234 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 47.821048][ T6013] usb 5-1: config 7 interface 234 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 47.825031][ T6013] usb 5-1: config 7 interface 234 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 47.831211][ T6013] usb 5-1: config 7 interface 242 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 47.833957][ T6013] usb 5-1: config 7 interface 242 altsetting 7 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 47.838923][ T6013] usb 5-1: config 7 interface 242 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 47.841735][ T6013] usb 5-1: config 7 interface 242 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 47.845044][ T6013] usb 5-1: config 7 interface 143 altsetting 128 has a duplicate endpoint with address 0xA, skipping [ 47.848170][ T6013] usb 5-1: config 7 interface 143 altsetting 128 has a duplicate endpoint with address 0x7, skipping [ 47.851049][ T6013] usb 5-1: config 7 interface 143 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 47.856962][ T6013] usb 5-1: config 7 interface 143 altsetting 128 has a duplicate endpoint with address 0xE, skipping [ 47.859974][ T6013] usb 5-1: config 7 interface 143 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 47.862812][ T6013] usb 5-1: config 7 interface 143 altsetting 128 has a duplicate endpoint with address 0x7, skipping [ 47.866041][ T6013] usb 5-1: config 7 interface 143 altsetting 128 has a duplicate endpoint with address 0xB, skipping [ 47.868919][ T6013] usb 5-1: config 7 interface 143 altsetting 128 has a duplicate endpoint with address 0xD, skipping [ 47.871702][ T6013] usb 5-1: config 7 interface 143 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 47.874507][ T6013] usb 5-1: config 7 interface 143 altsetting 128 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 47.879845][ T6013] usb 5-1: config 7 interface 143 altsetting 128 has a duplicate endpoint with address 0x8D, skipping [ 47.883696][ T6013] usb 5-1: config 7 interface 143 altsetting 128 has a duplicate endpoint with address 0x2, skipping [ 47.887891][ T6013] usb 5-1: config 7 interface 143 altsetting 128 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 47.891376][ T6013] usb 5-1: config 7 interface 242 has no altsetting 0 [ 47.893124][ T6013] usb 5-1: config 7 interface 143 has no altsetting 0 [ 47.897380][ T6013] usb 5-1: New USB device found, idVendor=06be, idProduct=d001, bcdDevice=5a.79 [ 47.899874][ T6013] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.902141][ T6013] usb 5-1: Product: syz [ 47.903261][ T6013] usb 5-1: Manufacturer: 鸷܀䛃ä†ãœî¡êŒ£æ”Šê‘¤å•“℞᱈儮䪰注쓱亻鿑뛌޲ᆅ隓샿鎲髶絨렂狛馾ᦣ蠉댃ì‹ï¦²ì°­é€ â«»é…ç•à¤­ï“¤á«¿ä—½ã™¶ç½Šï»¶æ‚­ïˆ†â¢¨ä·‘뚫켳䳩啭ﻩ㒳侶ì皑녉봤엑뎡æ®ï–µîƒ¼äžšîš†ì§½á™‰æ¡½ë…¬æ¯‰è½¹é©ƒê¡šï“¾é—¦ë†½íšœè™”䬚鵶怬∥ᯊ觫ã«å¸½ï£šç­‚媯ဲ烺罶໥䒽黎ì¶ç£€ê—§à»±Ü© [ 47.912287][ T6013] usb 5-1: SerialNumber: syz [ 47.940447][ T6487] sp0: Synchronizing with TNC [ 47.944232][ T6487] 9pnet_fd: Insufficient options for proto=fd [ 47.952555][ T6489] netlink: 'syz.3.135': attribute type 2 has an invalid length. [ 48.037521][ T6502] netlink: 'syz.1.139': attribute type 1 has an invalid length. [ 48.039975][ T6502] netlink: 224 bytes leftover after parsing attributes in process `syz.1.139'. [ 48.046359][ T6504] netlink: 'syz.1.139': attribute type 1 has an invalid length. [ 48.048648][ T6504] netlink: 224 bytes leftover after parsing attributes in process `syz.1.139'. [ 48.060461][ T6507] netlink: 'syz.2.140': attribute type 32 has an invalid length. [ 48.138915][ T6013] usb 5-1: USB disconnect, device number 3 [ 48.159013][ T6518] overlay: Unknown parameter 'measure' [ 48.168389][ T6518] overlay: Unknown parameter 'measure' [ 48.229498][ T6525] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 48.335617][ T830] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 48.444809][ T6532] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 48.465685][ T830] usb 6-1: device descriptor read/64, error -71 [ 48.705818][ T830] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 48.836041][ T830] usb 6-1: device descriptor read/64, error -71 [ 48.949893][ T830] usb usb6-port1: attempt power cycle [ 49.055548][ T5953] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 49.216772][ T5953] usb 5-1: too many endpoints for config 1 interface 0 altsetting 255: 128, using maximum allowed: 30 [ 49.219625][ T5953] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 49.222953][ T5953] usb 5-1: config 1 interface 0 has no altsetting 0 [ 49.226985][ T5953] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 49.229331][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.231391][ T5953] usb 5-1: Product: syz [ 49.232483][ T5953] usb 5-1: Manufacturer: syz [ 49.233689][ T5953] usb 5-1: SerialNumber: syz [ 49.305580][ T830] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 49.330714][ T830] usb 6-1: device descriptor read/8, error -71 [ 49.439194][ T5959] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 49.445699][ T5953] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 49.446455][ T5953] usb 5-1: USB disconnect, device number 4 [ 49.450203][ T5953] usblp0: removed [ 49.578535][ T830] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 49.598658][ T830] usb 6-1: device descriptor read/8, error -71 [ 49.705746][ T830] usb usb6-port1: unable to enumerate USB device [ 49.852066][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'. [ 49.960878][ T6584] netlink: 64 bytes leftover after parsing attributes in process `syz.0.162'. [ 49.963442][ T6584] tipc: Invalid UDP bearer configuration [ 49.963460][ T6584] tipc: Enabling of bearer rejected, failed to enable media [ 50.759242][ T6615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.174'. [ 50.766487][ T6617] netlink: zone id is out of range [ 50.768340][ T6617] netlink: del zone limit has 4 unknown bytes [ 50.771137][ T6618] random: crng reseeded on system resumption [ 50.786490][ T6615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.174'. [ 50.969917][ T5946] cgroup: fork rejected by pids controller in /syz0 [ 51.184007][ T6637] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 51.185839][ T6637] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 51.189835][ T6637] vhci_hcd vhci_hcd.0: Device attached [ 51.196988][ T6641] binder: 6640:6641 ioctl c0306201 20000480 returned -22 [ 51.372001][ T6650] ======================================================= [ 51.372001][ T6650] WARNING: The mand mount option has been deprecated and [ 51.372001][ T6650] and is ignored by this kernel. Remove the mand [ 51.372001][ T6650] option from the mount to silence this warning. [ 51.372001][ T6650] ======================================================= [ 51.385952][ T5992] vhci_hcd: vhci_device speed not set [ 51.401284][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.404417][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.408305][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.410823][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.412992][ T66] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 51.415042][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.445654][ T30] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 51.448113][ T5992] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 51.497120][ T6651] chnl_net:caif_netlink_parms(): no params data found [ 51.546984][ T6651] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.548878][ T6651] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.550755][ T6651] bridge_slave_0: entered allmulticast mode [ 51.552759][ T6651] bridge_slave_0: entered promiscuous mode [ 51.555396][ T6651] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.558053][ T6651] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.560252][ T6651] bridge_slave_1: entered allmulticast mode [ 51.562345][ T6651] bridge_slave_1: entered promiscuous mode [ 51.585350][ T6651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.591141][ T6651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.610650][ T30] usb 6-1: config 0 has no interfaces? [ 51.612159][ T30] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 51.614561][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.614649][ T6651] team0: Port device team_slave_0 added [ 51.617807][ T30] usb 6-1: config 0 descriptor?? [ 51.620404][ T6651] team0: Port device team_slave_1 added [ 51.630069][ T6667] ALSA: mixer_oss: invalid OSS volume 'u' [ 51.640070][ T6651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.641972][ T6651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.649471][ T6651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.653059][ T6651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.654921][ T6651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.662614][ T6651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.675533][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 51.696980][ T6651] hsr_slave_0: entered promiscuous mode [ 51.698993][ T6651] hsr_slave_1: entered promiscuous mode [ 51.768994][ T6651] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.776745][ T6673] ptrace attach of "/syz-executor exec"[6674] was attempted by " [ 51.777169][ T6672] ptrace attach of "/syz-executor exec"[6674] was attempted by " [ 51.821189][ T30] usb 6-1: USB disconnect, device number 8 [ 51.825529][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 51.848751][ T6638] vhci_hcd: connection reset by peer [ 51.854440][ T70] vhci_hcd: stop threads [ 51.856810][ T70] vhci_hcd: release socket [ 51.861357][ T70] vhci_hcd: disconnect device [ 51.861473][ T9] usb 7-1: config 53 has an invalid interface number: 2 but max is 0 [ 51.864781][ T9] usb 7-1: config 53 contains an unexpected descriptor of type 0x1, skipping [ 51.867160][ T9] usb 7-1: config 53 has an invalid descriptor of length 201, skipping remainder of the config [ 51.870138][ T9] usb 7-1: config 53 has no interface number 0 [ 51.872419][ T9] usb 7-1: config 53 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 51.876895][ T9] usb 7-1: config 53 interface 2 has no altsetting 0 [ 51.880874][ T9] usb 7-1: New USB device found, idVendor=19d2, idProduct=1428, bcdDevice=47.fa [ 51.883928][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.886752][ T9] usb 7-1: Product: 省澉ѣá¥îŸ„ň힨ᘸ悫锺⃱腢咥櫀屗퓢⥾렿팿 [ 51.889859][ T9] usb 7-1: Manufacturer: à ‡ [ 51.891463][ T9] usb 7-1: SerialNumber: éœì•žá·´åž“⚹䖱棩쯣砊뇡⚔픎é½îµœî£¦ã©ºé±¯ì“Šî‰¦î¾¾î²‹ç‘šå²è­â¢¯â³ç¨žæ¶¿ï§¹î€”ៃ댈᱌ê‚弋쌼⸠îƒå®”㮰픴秷櫘鑽係ጔꋗ건ïœé„“ì““Ñì‘™å™î—‰ç»žá¨Žå³†ë©Žäˆ…糿嬪á›ê”’愠ᯛᴉ퓗舂걕ç–用å³å ›ìž¦ë©Žè¡—諲䫼輤௞è®íœ§ÂºåŸ²é¡œáŒŒçƒªä¯¡ê¨¼ã눼ᬓ׌텥姴♶é¾å—ŽäŽžæŸ½ëŸ æ³ã²½â‰žæ“•å’£á¹¸æŒƒÏªíŒ™ì”…㧿 [ 51.918162][ T6651] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.935576][ T6012] hid-generic 0000:0000:0000.0002: item fetching failed at offset 1/2 [ 51.938165][ T6012] hid-generic 0000:0000:0000.0002: probe with driver hid-generic failed with error -22 [ 52.012360][ T6651] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.144994][ T6651] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.223856][ T9] usb 7-1: USB disconnect, device number 3 [ 52.245900][ T6689] netlink: 124 bytes leftover after parsing attributes in process `syz.3.195'. [ 52.250555][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'. [ 52.314928][ T39] kauditd_printk_skb: 66 callbacks suppressed [ 52.314938][ T39] audit: type=1400 audit(1732491817.216:408): avc: denied { write } for pid=6690 comm="syz.2.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.372480][ T39] audit: type=1400 audit(1732491817.276:409): avc: denied { write } for pid=6695 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.378756][ T39] audit: type=1400 audit(1732491817.286:410): avc: denied { rmdir } for pid=6695 comm="syz.1.197" name="file2" dev="9p" ino=35922605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.433214][ T6697] netlink: 'syz.1.197': attribute type 21 has an invalid length. [ 52.435644][ T6697] netlink: 156 bytes leftover after parsing attributes in process `syz.1.197'. [ 52.438846][ T39] audit: type=1400 audit(1732491817.346:411): avc: denied { create } for pid=6695 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 53.057661][ T6685] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 53.062605][ T6651] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.073069][ T6651] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.077145][ T6651] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.086394][ T6651] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.123127][ T6651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.130121][ T6651] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.135478][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.137546][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.142021][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.143907][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.242696][ T6651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.258826][ T6651] veth0_vlan: entered promiscuous mode [ 53.264196][ T6651] veth1_vlan: entered promiscuous mode [ 53.283268][ T6651] veth0_macvtap: entered promiscuous mode [ 53.287638][ T6651] veth1_macvtap: entered promiscuous mode [ 53.294456][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.297831][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.300745][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.304385][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.308072][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.311613][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.314649][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.318634][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.323135][ T6651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.323821][ T39] audit: type=1400 audit(1732491818.226:412): avc: denied { mounton } for pid=6724 comm="syz.3.203" path="/proc/153/task" dev="proc" ino=13631 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 53.327935][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.335870][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.336253][ T39] audit: type=1400 audit(1732491818.226:413): avc: denied { read } for pid=6724 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.339385][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.339399][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.339407][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.339417][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.339425][ T6651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.339436][ T6651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.340144][ T6651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.346945][ T39] audit: type=1400 audit(1732491818.226:414): avc: denied { write } for pid=6724 comm="syz.3.203" path="socket:[13623]" dev="sockfs" ino=13623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.352598][ T6651] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.366776][ T6730] input: syz1 as /devices/virtual/input/input9 [ 53.367321][ T6651] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.370720][ T39] audit: type=1400 audit(1732491818.266:415): avc: denied { append } for pid=6736 comm="syz.3.207" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 53.377526][ T6651] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.377545][ T6651] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.440545][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.442831][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.471534][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.474054][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.481704][ T39] audit: type=1400 audit(1732491818.386:416): avc: denied { mounton } for pid=6651 comm="syz-executor" path="/syzkaller.N8FY4n/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 53.489737][ T5959] Bluetooth: hci0: command tx timeout [ 53.519851][ T39] audit: type=1400 audit(1732491818.426:417): avc: denied { connect } for pid=6752 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.528738][ T6757] xt_cgroup: xt_cgroup: no path or classid specified [ 53.674870][ T6778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.727239][ T35] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 53.877238][ T35] usb 7-1: Using ep0 maxpacket: 32 [ 53.880248][ T35] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 53.882941][ T35] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 53.886522][ T35] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 53.889800][ T35] usb 7-1: config 1 has no interface number 0 [ 53.891992][ T35] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 53.896365][ T35] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 53.901003][ T35] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 53.904189][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.912927][ T35] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 54.085538][ T6012] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 54.215505][ T6012] usb 6-1: device descriptor read/64, error -71 [ 54.455638][ T6012] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 54.464444][ T35] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 54.585551][ T6012] usb 6-1: device descriptor read/64, error -71 [ 54.628353][ T6809] netlink: 40 bytes leftover after parsing attributes in process `syz.0.228'. [ 54.631003][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.228'. [ 54.695667][ T6012] usb usb6-port1: attempt power cycle [ 54.721393][ T35] usb 7-1: USB disconnect, device number 4 [ 54.724939][ T35] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 54.838972][ T830] libceph: connect (1)[c::]:6789 error -99 [ 54.841028][ T830] libceph: mon0 (1)[c::]:6789 connect error [ 54.928459][ T830] libceph: connect (1)[c::]:6789 error -101 [ 54.930165][ T830] libceph: mon0 (1)[c::]:6789 connect error [ 55.035926][ T6012] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 55.055920][ T6012] usb 6-1: device descriptor read/8, error -71 [ 55.108722][ T830] libceph: connect (1)[c::]:6789 error -99 [ 55.110951][ T830] libceph: mon0 (1)[c::]:6789 connect error [ 55.186030][ T830] libceph: connect (1)[c::]:6789 error -101 [ 55.188252][ T830] libceph: mon0 (1)[c::]:6789 connect error [ 55.197128][ T6828] /dev/sr0: Can't open blockdev [ 55.253028][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 55.295547][ T6012] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 55.316278][ T6012] usb 6-1: device descriptor read/8, error -71 [ 55.327598][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.238'. [ 55.332990][ T6846] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 55.425649][ T6012] usb usb6-port1: unable to enumerate USB device [ 55.454906][ T6858] netlink: 'syz.2.243': attribute type 62 has an invalid length. [ 55.525591][ T6815] ceph: No mds server is up or the cluster is laggy [ 55.525717][ T6813] ceph: No mds server is up or the cluster is laggy [ 55.567939][ T5959] Bluetooth: hci0: command tx timeout [ 55.713377][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 55.944564][ T6904] cgroup: subsys name conflicts with all [ 55.999108][ T6908] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 56.000849][ T6908] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 56.003273][ T6908] vhci_hcd vhci_hcd.0: Device attached [ 56.012519][ T6911] vhci_hcd: connection closed [ 56.013166][ T1145] vhci_hcd: stop threads [ 56.017809][ T1145] vhci_hcd: release socket [ 56.018995][ T1145] vhci_hcd: disconnect device [ 56.207374][ T6921] syz.0.260 uses obsolete (PF_INET,SOCK_PACKET) [ 56.209411][ T6921] syzkaller1: entered promiscuous mode [ 56.210887][ T6921] syzkaller1: entered allmulticast mode [ 56.242686][ T6923] tipc: Started in network mode [ 56.244059][ T6923] tipc: Node identity aaaaaaaaaa1b, cluster identity 4711 [ 56.246368][ T6923] tipc: Enabled bearer , priority 10 [ 56.594599][ T6953] netlink: 'syz.2.269': attribute type 2 has an invalid length. [ 56.596727][ T6953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.269'. [ 56.599531][ T6953] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 56.605828][ T5992] vhci_hcd: vhci_device speed not set [ 56.628961][ T6956] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.674390][ T6959] netlink: 580 bytes leftover after parsing attributes in process `syz.3.272'. [ 56.933621][ T6976] xt_hashlimit: size too large, truncated to 1048576 [ 57.028359][ T6980] netlink: 'syz.1.275': attribute type 3 has an invalid length. [ 57.033726][ T6980] netlink: 44 bytes leftover after parsing attributes in process `syz.1.275'. [ 57.071885][ T6984] evm: overlay not supported [ 57.079224][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'. [ 57.267057][ T6990] bridge0: port 3(syz_tun) entered blocking state [ 57.269226][ T6990] bridge0: port 3(syz_tun) entered disabled state [ 57.271168][ T6990] syz_tun: entered allmulticast mode [ 57.273451][ T6990] syz_tun: entered promiscuous mode [ 57.275199][ T6990] bridge0: port 3(syz_tun) entered blocking state [ 57.277817][ T6990] bridge0: port 3(syz_tun) entered forwarding state [ 57.284586][ T6990] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 57.288820][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'. [ 57.372867][ T6998] 9pnet_fd: Insufficient options for proto=fd [ 57.375535][ T30] tipc: Node number set to 11643562 [ 57.394439][ T7000] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 57.586545][ T39] kauditd_printk_skb: 29 callbacks suppressed [ 57.586556][ T39] audit: type=1400 audit(1732491822.496:447): avc: denied { create } for pid=7007 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 57.646349][ T5959] Bluetooth: hci0: command tx timeout [ 57.668663][ T7018] netlink: 44 bytes leftover after parsing attributes in process `syz.0.289'. [ 57.670771][ T7018] netlink: 33 bytes leftover after parsing attributes in process `syz.0.289'. [ 57.672828][ T7018] netlink: 33 bytes leftover after parsing attributes in process `syz.0.289'. [ 57.689637][ T39] audit: type=1400 audit(1732491822.596:448): avc: denied { setopt } for pid=7019 comm="syz.3.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.709194][ T39] audit: type=1400 audit(1732491822.616:449): avc: denied { bind } for pid=7021 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.710515][ T7022] netlink: 'syz.0.291': attribute type 10 has an invalid length. [ 57.721040][ T7022] team0: Failed to send options change via netlink (err -105) [ 57.721056][ T7022] team0: Port device netdevsim0 added [ 57.832536][ T70] nci: nci_rsp_packet: unknown rsp opcode 0x404 [ 57.833409][ T39] audit: type=1400 audit(1732491822.736:450): avc: denied { block_suspend } for pid=7023 comm="syz.0.293" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.890619][ T7024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 57.973784][ T7046] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 58.022711][ T39] audit: type=1400 audit(1732491822.926:451): avc: denied { listen } for pid=7054 comm="syz.3.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 58.029103][ T39] audit: type=1400 audit(1732491822.936:452): avc: denied { accept } for pid=7054 comm="syz.3.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 58.103216][ T7071] Illegal XDP return value 4294967274 on prog (id 37) dev syz_tun, expect packet loss! [ 58.106080][ T39] audit: type=1400 audit(1732491823.016:453): avc: denied { read } for pid=7055 comm="syz.2.300" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 58.251315][ T7071] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 58.252939][ T7071] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 58.261906][ T7071] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 58.268599][ T7071] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 58.270254][ T7071] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 58.274121][ T7071] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 58.279441][ T7071] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 58.281043][ T7071] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.283218][ T7071] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.287800][ T7071] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 58.289870][ T7071] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 58.291962][ T7071] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 58.407421][ T7088] overlayfs: disabling nfs_export due to verity=on [ 58.522463][ T39] audit: type=1400 audit(1732491823.426:454): avc: denied { append } for pid=7100 comm="syz.2.311" name="nvme-fabrics" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.653888][ T5959] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 58.763346][ T39] audit: type=1400 audit(1732491823.666:455): avc: denied { getopt } for pid=7108 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 58.764039][ T7109] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 58.770894][ T7109] TCP: tcp_parse_options: Illegal window scaling value 23 > 14 received [ 58.877138][ T39] audit: type=1400 audit(1732491823.786:456): avc: denied { setopt } for pid=7111 comm="syz.2.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.908823][ T7115] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 58.925398][ T7115] kvm: pic: non byte read [ 58.928145][ T7115] kvm: pic: non byte read [ 58.930207][ T7115] kvm: pic: single mode not supported [ 58.930320][ T7115] kvm: pic: level sensitive irq not supported [ 58.932380][ T7115] kvm: pic: non byte read [ 58.943942][ T7115] kvm: pic: level sensitive irq not supported [ 58.944182][ T7115] kvm: pic: non byte read [ 58.948726][ T7115] kvm: pic: non byte read [ 58.950757][ T7115] kvm: pic: single mode not supported [ 58.951983][ T7115] kvm: pic: non byte read [ 58.955269][ T7115] kvm: pic: level sensitive irq not supported [ 58.955561][ T7115] kvm: pic: non byte read [ 58.959892][ T7115] kvm: pic: single mode not supported [ 58.960130][ T7115] kvm: pic: non byte read [ 58.964706][ T7115] kvm: pic: non byte read [ 58.967337][ T7115] kvm: pic: non byte read [ 58.970216][ T7115] kvm: pic: level sensitive irq not supported [ 58.972076][ T7115] kvm: pic: single mode not supported [ 58.973655][ T7115] kvm: pic: level sensitive irq not supported [ 59.002004][ T7121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7121 comm=syz.1.318 [ 59.069661][ T7136] netlink: 'syz.2.322': attribute type 15 has an invalid length. [ 59.214620][ T7154] netlink: 'syz.1.328': attribute type 11 has an invalid length. [ 59.462542][ T7182] sp0: Synchronizing with TNC [ 59.587948][ T7189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.689861][ T7194] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 59.697029][ T7188] netlink: 'syz.3.337': attribute type 3 has an invalid length. [ 60.095563][ T7213] fuse: root generation should be zero [ 60.158316][ T7215] smc: net device bond0 applied user defined pnetid SYZ0 [ 60.205565][ T5959] Bluetooth: hci1: command 0x0c1a tx timeout [ 60.295571][ T5959] Bluetooth: hci3: command 0x0c1a tx timeout [ 60.296283][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 60.365560][ T66] Bluetooth: hci0: command 0x0405 tx timeout [ 60.505526][ T830] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 60.645513][ T5953] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 60.665473][ T830] usb 7-1: Using ep0 maxpacket: 8 [ 60.668047][ T830] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 60.670898][ T830] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 60.673555][ T830] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 60.676450][ T830] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.679790][ T830] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 60.682128][ T830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.795473][ T5953] usb 5-1: Using ep0 maxpacket: 8 [ 60.797951][ T5953] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.800532][ T5953] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 60.802790][ T5953] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 60.808912][ T5953] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 60.811231][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.813260][ T5953] usb 5-1: Product: syz [ 60.814339][ T5953] usb 5-1: Manufacturer: syz [ 60.815762][ T5953] usb 5-1: SerialNumber: syz [ 60.890731][ T830] usb 7-1: GET_CAPABILITIES returned 0 [ 60.892271][ T830] usbtmc 7-1:16.0: can't read capabilities [ 61.024111][ T5953] usb 5-1: USB disconnect, device number 5 [ 61.028592][ T6012] usb 7-1: USB disconnect, device number 5 [ 61.108228][ T7248] Bluetooth: MGMT ver 1.23 [ 61.126656][ T7250] tipc: Can't bind to reserved service type 3 [ 61.153920][ T7254] __nla_validate_parse: 5 callbacks suppressed [ 61.153935][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.357'. [ 61.158477][ T7254] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 61.555603][ T7286] netlink: 'syz.0.367': attribute type 29 has an invalid length. [ 61.558542][ T7286] netlink: 'syz.0.367': attribute type 29 has an invalid length. [ 61.637982][ T5988] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 61.649891][ T7291] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.677071][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'. [ 61.717825][ T7295] netlink: 16 bytes leftover after parsing attributes in process `syz.1.371'. [ 61.770932][ T7291] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.796091][ T5988] usb 7-1: Using ep0 maxpacket: 32 [ 61.800444][ T5988] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 61.802626][ T5988] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 61.814999][ T5988] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 61.817866][ T5988] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 61.820597][ T5988] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 61.823187][ T5988] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 61.828075][ T5988] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 61.830522][ T5988] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.833443][ T7291] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.836163][ T5988] usb 7-1: config 0 descriptor?? [ 61.908961][ T7291] team0: Port device netdevsim0 removed [ 61.911253][ T7291] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.038500][ T5988] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 62.042344][ T5988] usb 7-1: USB disconnect, device number 6 [ 62.044924][ T5988] usblp0: removed [ 62.071040][ T7291] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.076403][ T7291] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.082470][ T7291] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.087999][ T7291] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.295576][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 62.365531][ T66] Bluetooth: hci3: command 0x0c1a tx timeout [ 62.365572][ T5959] Bluetooth: hci2: command 0x0c1a tx timeout [ 62.455587][ T5959] Bluetooth: hci0: command 0x0405 tx timeout [ 62.485518][ T6007] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 62.635652][ T6007] usb 7-1: Using ep0 maxpacket: 32 [ 62.645898][ T6007] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 62.648084][ T6007] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 62.650506][ T6007] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 62.652901][ T6007] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 62.655580][ T6007] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 62.658170][ T6007] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 62.661556][ T6007] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 62.663928][ T6007] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.667086][ T6007] usb 7-1: config 0 descriptor?? [ 62.713060][ T7330] netlink: 32 bytes leftover after parsing attributes in process `syz.0.378'. [ 62.785251][ T7330] syzkaller0: entered promiscuous mode [ 62.786840][ T7330] syzkaller0: entered allmulticast mode [ 62.871574][ T6007] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 63.071075][ T39] kauditd_printk_skb: 29 callbacks suppressed [ 63.071086][ T39] audit: type=1400 audit(1732491827.976:486): avc: denied { read write } for pid=7266 comm="syz.2.362" name="lp0" dev="devtmpfs" ino=2857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 63.079058][ T39] audit: type=1400 audit(1732491827.976:487): avc: denied { open } for pid=7266 comm="syz.2.362" path="/dev/usb/lp0" dev="devtmpfs" ino=2857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 63.128331][ T74] usb 7-1: USB disconnect, device number 7 [ 63.131040][ C1] usblp0: nonzero read bulk status received: -108 [ 63.133509][ T7267] usblp0: error -108 reading from printer [ 63.332964][ T7266] usblp0: removed [ 64.269217][ T7367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.272909][ T7367] batadv_slave_1: entered promiscuous mode [ 64.279828][ T7367] netlink: 16 bytes leftover after parsing attributes in process `syz.2.389'. [ 64.365522][ T5959] Bluetooth: hci1: command 0x0c1a tx timeout [ 64.375018][ T7375] xt_hashlimit: size too large, truncated to 1048576 [ 64.379563][ T7375] syz.2.391: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 64.387499][ T7375] CPU: 1 UID: 0 PID: 7375 Comm: syz.2.391 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 64.390610][ T7375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.394018][ T7375] Call Trace: [ 64.395062][ T7375] [ 64.395981][ T7375] dump_stack_lvl+0x16c/0x1f0 [ 64.397593][ T7375] warn_alloc+0x24d/0x3a0 [ 64.398990][ T7375] ? __pfx_warn_alloc+0x10/0x10 [ 64.400556][ T7375] ? __get_vm_area_node+0x1b0/0x2f0 [ 64.402296][ T7375] ? __get_vm_area_node+0x1dc/0x2f0 [ 64.403806][ T7375] __vmalloc_node_range_noprof+0x1105/0x1530 [ 64.405818][ T7375] ? __pfx___lock_acquire+0x10/0x10 [ 64.407351][ T7375] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 64.408883][ T7375] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 64.410971][ T7375] ? __pfx_lock_release+0x10/0x10 [ 64.412676][ T7375] ? trace_lock_acquire+0x146/0x1e0 [ 64.414444][ T7375] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 64.416440][ T7375] vmalloc_noprof+0x6b/0x90 [ 64.417980][ T7375] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 64.419980][ T7375] hashlimit_mt_check_common+0x8b0/0x1450 [ 64.421884][ T7375] hashlimit_mt_check+0x71/0x90 [ 64.423531][ T7375] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 64.425043][ T7375] xt_check_match+0x284/0xa50 [ 64.426281][ T7375] ? __schedule+0x5212/0x5ad0 [ 64.427520][ T7375] ? __pfx_xt_check_match+0x10/0x10 [ 64.428865][ T7375] ? xt_find_target+0x1ee/0x290 [ 64.430139][ T7375] ? xt_find_match+0x1f2/0x290 [ 64.431405][ T7375] find_check_entry.constprop.0+0x34d/0xa20 [ 64.432945][ T7375] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 64.434606][ T7375] ? kvfree+0x47/0x50 [ 64.435593][ T7375] translate_table+0xd06/0x17b0 [ 64.437149][ T7375] ? __pfx_translate_table+0x10/0x10 [ 64.438914][ T7375] ? __might_fault+0xe3/0x190 [ 64.440539][ T7375] do_ip6t_set_ctl+0x605/0xc40 [ 64.442173][ T7375] ? __mutex_lock+0x1cc/0xa60 [ 64.443756][ T7375] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 64.445541][ T7375] ? __mutex_unlock_slowpath+0x164/0x690 [ 64.445552][ T5959] Bluetooth: hci2: command 0x0c1a tx timeout [ 64.449458][ T7375] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 64.451450][ T7375] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 64.453079][ T7375] nf_setsockopt+0x8a/0xf0 [ 64.454602][ T7375] ipv6_setsockopt+0x135/0x170 [ 64.456243][ T7375] rawv6_setsockopt+0xd7/0x680 [ 64.457862][ T7375] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 64.459687][ T7375] ? selinux_socket_setsockopt+0x6a/0x80 [ 64.461581][ T7375] ? sock_common_setsockopt+0x2e/0xf0 [ 64.463402][ T7375] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 64.465309][ T7375] do_sock_setsockopt+0x222/0x480 [ 64.467027][ T7375] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 64.468891][ T7375] ? lock_acquire+0x2f/0xb0 [ 64.470450][ T7375] __sys_setsockopt+0x1a0/0x230 [ 64.472106][ T7375] __x64_sys_setsockopt+0xbd/0x160 [ 64.473740][ T7375] ? do_syscall_64+0x91/0x250 [ 64.475343][ T7375] ? lockdep_hardirqs_on+0x7c/0x110 [ 64.477086][ T7375] do_syscall_64+0xcd/0x250 [ 64.478610][ T7375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.480620][ T7375] RIP: 0033:0x7f25a697e819 [ 64.482113][ T7375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.488497][ T7375] RSP: 002b:00007f25a47f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 64.491270][ T7375] RAX: ffffffffffffffda RBX: 00007f25a6b35fa0 RCX: 00007f25a697e819 [ 64.493826][ T7375] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000008 [ 64.496456][ T7375] RBP: 00007f25a69f175e R08: 0000000000000588 R09: 0000000000000000 [ 64.499077][ T7375] R10: 00000000200014c0 R11: 0000000000000246 R12: 0000000000000000 [ 64.501714][ T7375] R13: 0000000000000000 R14: 00007f25a6b35fa0 R15: 00007ffff4e94398 [ 64.503925][ T7375] [ 64.505016][ T5959] Bluetooth: hci3: command 0x0c1a tx timeout [ 64.505450][ T7375] Mem-Info: [ 64.507585][ T7375] active_anon:5606 inactive_anon:0 isolated_anon:0 [ 64.507585][ T7375] active_file:5723 inactive_file:46644 isolated_file:0 [ 64.507585][ T7375] unevictable:2792 dirty:171 writeback:0 [ 64.507585][ T7375] slab_reclaimable:11461 slab_unreclaimable:74339 [ 64.507585][ T7375] mapped:24508 shmem:3489 pagetables:764 [ 64.507585][ T7375] sec_pagetables:302 bounce:0 [ 64.507585][ T7375] kernel_misc_reclaimable:0 [ 64.507585][ T7375] free:465624 free_pcp:2572 free_cma:0 [ 64.519414][ T7375] Node 0 active_anon:22424kB inactive_anon:0kB active_file:22860kB inactive_file:186504kB unevictable:7632kB isolated(anon):0kB isolated(file):0kB mapped:97992kB dirty:656kB writeback:0kB shmem:10420kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12080kB pagetables:3056kB sec_pagetables:1208kB all_unreclaimable? no [ 64.530882][ T7375] Node 1 active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:72kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:28kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 64.535525][ T5959] Bluetooth: hci0: command 0x0405 tx timeout [ 64.539182][ T7375] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 64.549574][ T7375] lowmem_reserve[]: 0 1212 0 0 0 [ 64.551106][ T7375] Node 0 DMA32 free:262424kB boost:0kB min:27608kB low:34508kB high:41408kB reserved_highatomic:0KB active_anon:22408kB inactive_anon:0kB active_file:22860kB inactive_file:186504kB unevictable:7632kB writepending:656kB present:2080628kB managed:1269928kB mlocked:0kB bounce:0kB free_pcp:8108kB local_pcp:1852kB free_cma:0kB [ 64.558921][ T7375] lowmem_reserve[]: 0 0 0 0 0 [ 64.560236][ T7375] Node 1 Normal free:1584616kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:72kB unevictable:3536kB writepending:28kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:2476kB local_pcp:720kB free_cma:0kB [ 64.569816][ T7375] lowmem_reserve[]: 0 0 0 0 0 [ 64.571147][ T7375] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 64.574324][ T7375] Node 0 DMA32: 110*4kB (ME) 54*8kB (UME) 307*16kB (UME) 218*32kB (UME) 347*64kB (UME) 59*128kB (UME) 39*256kB (ME) 22*512kB (M) 16*1024kB (UME) 5*2048kB (UME) 42*4096kB (M) = 262424kB [ 64.579130][ T7375] Node 1 Normal: 3*4kB (UME) 20*8kB (UME) 22*16kB (UME) 153*32kB (UE) 67*64kB (UME) 28*128kB (UME) 4*256kB (U) 5*512kB (UM) 1*1024kB (E) 1*2048kB (M) 382*4096kB (UM) = 1584620kB [ 64.583833][ T7375] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 64.586614][ T7375] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 64.589115][ T7375] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 64.591562][ T7375] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 64.594145][ T7375] 55834 total pagecache pages [ 64.595477][ T7375] 3 pages in swap cache [ 64.596888][ T7375] Free swap = 124524kB [ 64.598025][ T7375] Total swap = 124996kB [ 64.599163][ T7375] 1048443 pages RAM [ 64.600196][ T7375] 0 pages HighMem/MovableOnly [ 64.601425][ T7375] 281640 pages reserved [ 64.602509][ T7375] 0 pages cma reserved [ 64.616751][ C3] ================================================================== [ 64.618811][ C3] BUG: KASAN: slab-out-of-bounds in selinux_ip_output+0x1e0/0x1f0 [ 64.620845][ C3] Read of size 8 at addr ffff8880296085f8 by task syz.2.391/7375 [ 64.624861][ C3] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 64.625773][ C3] CPU: 3 UID: 0 PID: 7375 Comm: syz.2.391 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 64.628949][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.631930][ C3] Call Trace: [ 64.632811][ C3] [ 64.633566][ C3] dump_stack_lvl+0x116/0x1f0 [ 64.634810][ C3] print_report+0xc3/0x620 [ 64.635997][ C3] ? __virt_addr_valid+0x5e/0x590 [ 64.637485][ C3] ? __phys_addr+0xc6/0x150 [ 64.638758][ C3] kasan_report+0xd9/0x110 [ 64.639960][ C3] ? selinux_ip_output+0x1e0/0x1f0 [ 64.641304][ C3] ? selinux_ip_output+0x1e0/0x1f0 [ 64.642644][ C3] selinux_ip_output+0x1e0/0x1f0 [ 64.643961][ C3] ? __pfx_selinux_ip_output+0x10/0x10 [ 64.645500][ C3] nf_hook_slow+0xbb/0x200 [ 64.646687][ C3] nf_hook+0x474/0x7d0 [ 64.647820][ C3] ? __pfx_dst_output+0x10/0x10 [ 64.649456][ C3] ? __pfx_nf_hook+0x10/0x10 [ 64.651022][ C3] ? __pfx_lock_release+0x10/0x10 [ 64.652730][ C3] ? __pfx_dst_output+0x10/0x10 [ 64.654384][ C3] ip6_xmit+0xd44/0x2130 [ 64.655841][ C3] ? __pfx_dst_output+0x10/0x10 [ 64.657486][ C3] ? __pfx_ip6_xmit+0x10/0x10 [ 64.659198][ C3] ? xfrm_lookup_route+0x6a/0x200 [ 64.660938][ C3] ? ip6_dst_lookup_flow+0x164/0x1d0 [ 64.662738][ C3] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 64.664649][ C3] tcp_v6_send_response+0x11d9/0x25e0 [ 64.666494][ C3] ? __pfx_tcp_v6_send_response+0x10/0x10 [ 64.668430][ C3] ? mark_held_locks+0x9f/0xe0 [ 64.670053][ C3] tcp_v6_rcv+0x2c9c/0x3fd0 [ 64.671602][ C3] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 64.673250][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 64.675002][ C3] ? find_held_lock+0x2d/0x110 [ 64.676636][ C3] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 64.678281][ C3] ip6_protocol_deliver_rcu+0x180/0x1510 [ 64.680187][ C3] ip6_input_finish+0x14f/0x2f0 [ 64.681835][ C3] ip6_input+0xa1/0xd0 [ 64.683213][ C3] ? __pfx_ip6_input+0x10/0x10 [ 64.684877][ C3] ipv6_rcv+0x265/0x680 [ 64.686303][ C3] ? __pfx_ipv6_rcv+0x10/0x10 [ 64.687909][ C3] __netif_receive_skb_one_core+0x12e/0x1e0 [ 64.689895][ C3] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 64.692063][ C3] ? rcu_is_watching+0x12/0xc0 [ 64.693687][ C3] ? process_backlog+0x3f1/0x15f0 [ 64.695517][ C3] ? process_backlog+0x3f1/0x15f0 [ 64.696846][ C3] __netif_receive_skb+0x1d/0x160 [ 64.698166][ C3] process_backlog+0x443/0x15f0 [ 64.699484][ C3] __napi_poll.constprop.0+0xb7/0x550 [ 64.700901][ C3] net_rx_action+0xa94/0x1010 [ 64.702157][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 64.703516][ C3] ? __pfx_mark_lock+0x10/0x10 [ 64.704784][ C3] ? trace_rcu_utilization+0x102/0x160 [ 64.706221][ C3] ? kvm_sched_clock_read+0x11/0x20 [ 64.707612][ C3] ? sched_clock+0x38/0x60 [ 64.708811][ C3] ? sched_clock_cpu+0x6d/0x4d0 [ 64.710097][ C3] ? mark_held_locks+0x9f/0xe0 [ 64.711372][ C3] handle_softirqs+0x213/0x8f0 [ 64.712638][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 64.714022][ C3] ? irqtime_account_irq+0x18d/0x2e0 [ 64.715426][ C3] ? __dev_queue_xmit+0x89b/0x43e0 [ 64.716774][ C3] do_softirq+0xb2/0xf0 [ 64.717879][ C3] [ 64.718660][ C3] [ 64.719453][ C3] __local_bh_enable_ip+0x100/0x120 [ 64.720824][ C3] ? __dev_queue_xmit+0x89b/0x43e0 [ 64.722173][ C3] __dev_queue_xmit+0x8b0/0x43e0 [ 64.723490][ C3] ? __lock_acquire+0x2077/0x3c40 [ 64.724817][ C3] ? __pfx___dev_queue_xmit+0x10/0x10 [ 64.726241][ C3] ? hlock_class+0x4e/0x130 [ 64.727452][ C3] ? mark_lock+0xb5/0xc60 [ 64.728593][ C3] ? __pfx_mark_lock+0x10/0x10 [ 64.729858][ C3] ? find_held_lock+0x2d/0x110 [ 64.731125][ C3] ? ip6_finish_output+0x3f9/0x1360 [ 64.732504][ C3] ? __pfx_lock_release+0x10/0x10 [ 64.733831][ C3] ? mark_held_locks+0x9f/0xe0 [ 64.735094][ C3] ip6_finish_output2+0x1801/0x2070 [ 64.736503][ C3] ip6_finish_output+0x3f9/0x1360 [ 64.737834][ C3] ip6_output+0x1f8/0x540 [ 64.738973][ C3] ? __pfx_ip6_output+0x10/0x10 [ 64.740258][ C3] ip6_xmit+0x1234/0x2130 [ 64.741402][ C3] ? __pfx_ip6_xmit+0x10/0x10 [ 64.742640][ C3] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 64.744112][ C3] ? rcu_is_watching+0x12/0xc0 [ 64.745370][ C3] ? trace_lock_acquire+0x146/0x1e0 [ 64.746738][ C3] ? __pfx_mptcp_established_options+0x10/0x10 [ 64.748352][ C3] ? inet6_csk_xmit+0x18a/0x740 [ 64.749631][ C3] inet6_csk_xmit+0x3ce/0x740 [ 64.750857][ C3] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 64.752230][ C3] ? csum_ipv6_magic+0x296/0x310 [ 64.753523][ C3] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 64.754885][ C3] __tcp_transmit_skb+0x1b02/0x3df0 [ 64.756253][ C3] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 64.757696][ C3] ? __pfx_lock_release+0x10/0x10 [ 64.759024][ C3] ? ktime_get+0x206/0x300 [ 64.760206][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 64.761572][ C3] tcp_write_xmit+0x12b1/0x8560 [ 64.762853][ C3] ? tcp_current_mss+0x27e/0x500 [ 64.764163][ C3] __tcp_push_pending_frames+0xaf/0x390 [ 64.765607][ C3] tcp_send_fin+0x154/0xc70 [ 64.766833][ C3] ? __pfx_tcp_send_fin+0x10/0x10 [ 64.768166][ C3] ? mark_held_locks+0x9f/0xe0 [ 64.769429][ C3] tcp_shutdown+0x12b/0x170 [ 64.770633][ C3] mptcp_subflow_shutdown+0x1c3/0x380 [ 64.772051][ C3] mptcp_check_send_data_fin+0x24a/0x450 [ 64.773521][ C3] __mptcp_close+0x8cb/0xb90 [ 64.774745][ C3] ? __pfx_lock_release+0x10/0x10 [ 64.776073][ C3] ? __pfx___mptcp_close+0x10/0x10 [ 64.777416][ C3] ? __local_bh_enable_ip+0xa4/0x120 [ 64.778807][ C3] mptcp_close+0x28/0xe0 [ 64.779937][ C3] inet_release+0x13c/0x280 [ 64.781120][ C3] inet6_release+0x4f/0x70 [ 64.782287][ C3] __sock_release+0xb0/0x270 [ 64.783509][ C3] ? __pfx_sock_close+0x10/0x10 [ 64.784782][ C3] sock_close+0x1c/0x30 [ 64.785896][ C3] __fput+0x3f8/0xb60 [ 64.786942][ C3] ? _raw_spin_unlock_irq+0x23/0x50 [ 64.788311][ C3] task_work_run+0x14e/0x250 [ 64.789514][ C3] ? __pfx_task_work_run+0x10/0x10 [ 64.790833][ C3] ? do_raw_spin_unlock+0x172/0x230 [ 64.792193][ C3] do_exit+0xadd/0x2d70 [ 64.793289][ C3] ? get_signal+0x8f7/0x26c0 [ 64.794506][ C3] ? __pfx_do_exit+0x10/0x10 [ 64.795711][ C3] ? do_raw_spin_lock+0x12d/0x2c0 [ 64.797027][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 64.798442][ C3] do_group_exit+0xd3/0x2a0 [ 64.799653][ C3] get_signal+0x24ed/0x26c0 [ 64.800851][ C3] ? rcu_is_watching+0x12/0xc0 [ 64.802104][ C3] ? selinux_socket_setsockopt+0x6a/0x80 [ 64.803563][ C3] ? sock_common_setsockopt+0x2e/0xf0 [ 64.804964][ C3] ? __pfx_get_signal+0x10/0x10 [ 64.806240][ C3] ? do_sock_setsockopt+0x23e/0x480 [ 64.807609][ C3] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 64.809056][ C3] arch_do_signal_or_restart+0x90/0x7e0 [ 64.810502][ C3] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 64.812112][ C3] ? __sys_setsockopt+0x1cd/0x230 [ 64.813423][ C3] syscall_exit_to_user_mode+0x150/0x2a0 [ 64.814890][ C3] do_syscall_64+0xda/0x250 [ 64.816116][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.817662][ C3] RIP: 0033:0x7f25a697e819 [ 64.818836][ C3] Code: Unable to access opcode bytes at 0x7f25a697e7ef. [ 64.820640][ C3] RSP: 002b:00007f25a47f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 64.822810][ C3] RAX: fffffffffffffff4 RBX: 00007f25a6b35fa0 RCX: 00007f25a697e819 [ 64.824899][ C3] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000008 [ 64.826956][ C3] RBP: 00007f25a69f175e R08: 0000000000000588 R09: 0000000000000000 [ 64.829019][ C3] R10: 00000000200014c0 R11: 0000000000000246 R12: 0000000000000000 [ 64.831068][ C3] R13: 0000000000000000 R14: 00007f25a6b35fa0 R15: 00007ffff4e94398 [ 64.833131][ C3] [ 64.833948][ C3] [ 64.834581][ C3] The buggy address belongs to the object at ffff888029608580 [ 64.834581][ C3] which belongs to the cache tw_sock_TCPv6 of size 288 [ 64.838210][ C3] The buggy address is located 120 bytes inside of [ 64.838210][ C3] allocated 288-byte region [ffff888029608580, ffff8880296086a0) [ 64.841820][ C3] [ 64.842452][ C3] The buggy address belongs to the physical page: [ 64.844111][ C3] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29608 [ 64.846367][ C3] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 64.848541][ C3] memcg:ffff88802de29f01 [ 64.849645][ C3] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 64.851707][ C3] page_type: f5(slab) [ 64.852781][ C3] raw: 00fff00000000040 ffff8881061952c0 dead000000000122 0000000000000000 [ 64.855002][ C3] raw: 0000000000000000 0000000080170017 00000001f5000000 ffff88802de29f01 [ 64.857228][ C3] head: 00fff00000000040 ffff8881061952c0 dead000000000122 0000000000000000 [ 64.859474][ C3] head: 0000000000000000 0000000080170017 00000001f5000000 ffff88802de29f01 [ 64.861696][ C3] head: 00fff00000000001 ffffea0000a58201 ffffffffffffffff 0000000000000000 [ 64.863936][ C3] head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 64.866205][ C3] page dumped because: kasan: bad access detected [ 64.867884][ C3] page_owner tracks the page as allocated [ 64.869369][ C3] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6524, tgid 6524 (syz.3.144), ts 48233798539, free_ts 48151779240 [ 64.874206][ C3] post_alloc_hook+0x2d1/0x350 [ 64.875473][ C3] get_page_from_freelist+0xfce/0x2f80 [ 64.876896][ C3] __alloc_pages_noprof+0x223/0x25a0 [ 64.878269][ C3] alloc_pages_mpol_noprof+0x2c9/0x610 [ 64.879697][ C3] new_slab+0x2c9/0x410 [ 64.880790][ C3] ___slab_alloc+0xdac/0x1880 [ 64.882020][ C3] __slab_alloc.constprop.0+0x56/0xb0 [ 64.883379][ C3] kmem_cache_alloc_noprof+0x2a7/0x2f0 [ 64.884792][ C3] inet_twsk_alloc+0x120/0x970 [ 64.886058][ C3] tcp_time_wait+0x5f/0xe10 [ 64.887251][ C3] tcp_rcv_state_process+0x1fda/0x4c40 [ 64.888669][ C3] tcp_v6_do_rcv+0x492/0x1730 [ 64.889907][ C3] __release_sock+0x14c/0x400 [ 64.891142][ C3] __tcp_close+0x4f3/0xff0 [ 64.892328][ C3] tcp_close+0x28/0x120 [ 64.893421][ C3] inet_release+0x13c/0x280 [ 64.894613][ C3] page last free pid 5929 tgid 5929 stack trace: [ 64.896257][ C3] free_unref_page+0x661/0x1080 [ 64.897533][ C3] qlist_free_all+0x4e/0x120 [ 64.898746][ C3] kasan_quarantine_reduce+0x195/0x1e0 [ 64.900174][ C3] __kasan_slab_alloc+0x69/0x90 [ 64.901446][ C3] kmem_cache_alloc_noprof+0x121/0x2f0 [ 64.902871][ C3] getname_flags.part.0+0x4c/0x550 [ 64.904223][ C3] getname+0x8d/0xe0 [ 64.905260][ C3] vfs_fstatat+0xdf/0xf0 [ 64.906386][ C3] __do_sys_newfstatat+0xa2/0x130 [ 64.907708][ C3] do_syscall_64+0xcd/0x250 [ 64.908907][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.910536][ C3] [ 64.911172][ C3] Memory state around the buggy address: [ 64.912635][ C3] ffff888029608480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 64.914727][ C3] ffff888029608500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 64.916829][ C3] >ffff888029608580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 64.918900][ C3] ^ [ 64.920966][ C3] ffff888029608600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 64.923038][ C3] ffff888029608680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 64.925120][ C3] ================================================================== [ 64.927291][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 64.929168][ C3] CPU: 3 UID: 0 PID: 7375 Comm: syz.2.391 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 64.931806][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.934578][ C3] Call Trace: [ 64.935484][ C3] [ 64.936243][ C3] dump_stack_lvl+0x3d/0x1f0 [ 64.937463][ C3] panic+0x71d/0x800 [ 64.938501][ C3] ? __pfx_panic+0x10/0x10 [ 64.939732][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 64.941100][ C3] check_panic_on_warn+0xab/0xb0 [ 64.942404][ C3] end_report+0x117/0x180 [ 64.943557][ C3] kasan_report+0xe9/0x110 [ 64.944735][ C3] ? selinux_ip_output+0x1e0/0x1f0 [ 64.946111][ C3] ? selinux_ip_output+0x1e0/0x1f0 [ 64.947471][ C3] selinux_ip_output+0x1e0/0x1f0 [ 64.948778][ C3] ? __pfx_selinux_ip_output+0x10/0x10 [ 64.950201][ C3] nf_hook_slow+0xbb/0x200 [ 64.951376][ C3] nf_hook+0x474/0x7d0 [ 64.952457][ C3] ? __pfx_dst_output+0x10/0x10 [ 64.953740][ C3] ? __pfx_nf_hook+0x10/0x10 [ 64.954966][ C3] ? __pfx_lock_release+0x10/0x10 [ 64.956298][ C3] ? __pfx_dst_output+0x10/0x10 [ 64.957578][ C3] ip6_xmit+0xd44/0x2130 [ 64.958701][ C3] ? __pfx_dst_output+0x10/0x10 [ 64.959994][ C3] ? __pfx_ip6_xmit+0x10/0x10 [ 64.961234][ C3] ? xfrm_lookup_route+0x6a/0x200 [ 64.962551][ C3] ? ip6_dst_lookup_flow+0x164/0x1d0 [ 64.963954][ C3] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 64.965419][ C3] tcp_v6_send_response+0x11d9/0x25e0 [ 64.966835][ C3] ? __pfx_tcp_v6_send_response+0x10/0x10 [ 64.968327][ C3] ? mark_held_locks+0x9f/0xe0 [ 64.969589][ C3] tcp_v6_rcv+0x2c9c/0x3fd0 [ 64.970797][ C3] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 64.972083][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 64.973443][ C3] ? find_held_lock+0x2d/0x110 [ 64.974707][ C3] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 64.975993][ C3] ip6_protocol_deliver_rcu+0x180/0x1510 [ 64.977471][ C3] ip6_input_finish+0x14f/0x2f0 [ 64.978756][ C3] ip6_input+0xa1/0xd0 [ 64.979842][ C3] ? __pfx_ip6_input+0x10/0x10 [ 64.981101][ C3] ipv6_rcv+0x265/0x680 [ 64.982199][ C3] ? __pfx_ipv6_rcv+0x10/0x10 [ 64.983443][ C3] __netif_receive_skb_one_core+0x12e/0x1e0 [ 64.984988][ C3] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 64.986678][ C3] ? rcu_is_watching+0x12/0xc0 [ 64.987958][ C3] ? process_backlog+0x3f1/0x15f0 [ 64.989278][ C3] ? process_backlog+0x3f1/0x15f0 [ 64.990598][ C3] __netif_receive_skb+0x1d/0x160 [ 64.991928][ C3] process_backlog+0x443/0x15f0 [ 64.993215][ C3] __napi_poll.constprop.0+0xb7/0x550 [ 64.994623][ C3] net_rx_action+0xa94/0x1010 [ 64.995869][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 64.997213][ C3] ? __pfx_mark_lock+0x10/0x10 [ 64.998490][ C3] ? trace_rcu_utilization+0x102/0x160 [ 64.999944][ C3] ? kvm_sched_clock_read+0x11/0x20 [ 65.001278][ C3] ? sched_clock+0x38/0x60 [ 65.002465][ C3] ? sched_clock_cpu+0x6d/0x4d0 [ 65.003758][ C3] ? mark_held_locks+0x9f/0xe0 [ 65.005026][ C3] handle_softirqs+0x213/0x8f0 [ 65.006299][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 65.007670][ C3] ? irqtime_account_irq+0x18d/0x2e0 [ 65.009041][ C3] ? __dev_queue_xmit+0x89b/0x43e0 [ 65.010379][ C3] do_softirq+0xb2/0xf0 [ 65.011472][ C3] [ 65.012250][ C3] [ 65.013034][ C3] __local_bh_enable_ip+0x100/0x120 [ 65.014401][ C3] ? __dev_queue_xmit+0x89b/0x43e0 [ 65.015744][ C3] __dev_queue_xmit+0x8b0/0x43e0 [ 65.017049][ C3] ? __lock_acquire+0x2077/0x3c40 [ 65.018375][ C3] ? __pfx___dev_queue_xmit+0x10/0x10 [ 65.019800][ C3] ? hlock_class+0x4e/0x130 [ 65.020996][ C3] ? mark_lock+0xb5/0xc60 [ 65.022129][ C3] ? __pfx_mark_lock+0x10/0x10 [ 65.023386][ C3] ? find_held_lock+0x2d/0x110 [ 65.024645][ C3] ? ip6_finish_output+0x3f9/0x1360 [ 65.026021][ C3] ? __pfx_lock_release+0x10/0x10 [ 65.027347][ C3] ? mark_held_locks+0x9f/0xe0 [ 65.028600][ C3] ip6_finish_output2+0x1801/0x2070 [ 65.029966][ C3] ip6_finish_output+0x3f9/0x1360 [ 65.031294][ C3] ip6_output+0x1f8/0x540 [ 65.032432][ C3] ? __pfx_ip6_output+0x10/0x10 [ 65.033717][ C3] ip6_xmit+0x1234/0x2130 [ 65.034863][ C3] ? __pfx_ip6_xmit+0x10/0x10 [ 65.036106][ C3] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 65.037569][ C3] ? rcu_is_watching+0x12/0xc0 [ 65.038827][ C3] ? trace_lock_acquire+0x146/0x1e0 [ 65.040220][ C3] ? __pfx_mptcp_established_options+0x10/0x10 [ 65.041901][ C3] ? inet6_csk_xmit+0x18a/0x740 [ 65.043335][ C3] inet6_csk_xmit+0x3ce/0x740 [ 65.044605][ C3] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 65.046013][ C3] ? csum_ipv6_magic+0x296/0x310 [ 65.047352][ C3] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 65.048737][ C3] __tcp_transmit_skb+0x1b02/0x3df0 [ 65.050126][ C3] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 65.051600][ C3] ? __pfx_lock_release+0x10/0x10 [ 65.052936][ C3] ? ktime_get+0x206/0x300 [ 65.054127][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 65.055510][ C3] tcp_write_xmit+0x12b1/0x8560 [ 65.056714][ C3] ? tcp_current_mss+0x27e/0x500 [ 65.058021][ C3] __tcp_push_pending_frames+0xaf/0x390 [ 65.059493][ C3] tcp_send_fin+0x154/0xc70 [ 65.060706][ C3] ? __pfx_tcp_send_fin+0x10/0x10 [ 65.062045][ C3] ? mark_held_locks+0x9f/0xe0 [ 65.063324][ C3] tcp_shutdown+0x12b/0x170 [ 65.064531][ C3] mptcp_subflow_shutdown+0x1c3/0x380 [ 65.065963][ C3] mptcp_check_send_data_fin+0x24a/0x450 [ 65.067452][ C3] __mptcp_close+0x8cb/0xb90 [ 65.068676][ C3] ? __pfx_lock_release+0x10/0x10 [ 65.070009][ C3] ? __pfx___mptcp_close+0x10/0x10 [ 65.071374][ C3] ? __local_bh_enable_ip+0xa4/0x120 [ 65.072776][ C3] mptcp_close+0x28/0xe0 [ 65.073911][ C3] inet_release+0x13c/0x280 [ 65.075126][ C3] inet6_release+0x4f/0x70 [ 65.076323][ C3] __sock_release+0xb0/0x270 [ 65.077552][ C3] ? __pfx_sock_close+0x10/0x10 [ 65.078841][ C3] sock_close+0x1c/0x30 [ 65.079959][ C3] __fput+0x3f8/0xb60 [ 65.081023][ C3] ? _raw_spin_unlock_irq+0x23/0x50 [ 65.082393][ C3] task_work_run+0x14e/0x250 [ 65.083627][ C3] ? __pfx_task_work_run+0x10/0x10 [ 65.084992][ C3] ? do_raw_spin_unlock+0x172/0x230 [ 65.086370][ C3] do_exit+0xadd/0x2d70 [ 65.087485][ C3] ? get_signal+0x8f7/0x26c0 [ 65.088711][ C3] ? __pfx_do_exit+0x10/0x10 [ 65.089940][ C3] ? do_raw_spin_lock+0x12d/0x2c0 [ 65.091276][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 65.092686][ C3] do_group_exit+0xd3/0x2a0 [ 65.093893][ C3] get_signal+0x24ed/0x26c0 [ 65.095101][ C3] ? rcu_is_watching+0x12/0xc0 [ 65.096376][ C3] ? selinux_socket_setsockopt+0x6a/0x80 [ 65.097856][ C3] ? sock_common_setsockopt+0x2e/0xf0 [ 65.099289][ C3] ? __pfx_get_signal+0x10/0x10 [ 65.100580][ C3] ? do_sock_setsockopt+0x23e/0x480 [ 65.101952][ C3] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 65.103414][ C3] arch_do_signal_or_restart+0x90/0x7e0 [ 65.104884][ C3] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 65.106715][ C3] ? __sys_setsockopt+0x1cd/0x230 [ 65.108103][ C3] syscall_exit_to_user_mode+0x150/0x2a0 [ 65.109636][ C3] do_syscall_64+0xda/0x250 [ 65.110908][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.112511][ C3] RIP: 0033:0x7f25a697e819 [ 65.113716][ C3] Code: Unable to access opcode bytes at 0x7f25a697e7ef. [ 65.115583][ C3] RSP: 002b:00007f25a47f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 65.117854][ C3] RAX: fffffffffffffff4 RBX: 00007f25a6b35fa0 RCX: 00007f25a697e819 [ 65.120022][ C3] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000008 [ 65.122140][ C3] RBP: 00007f25a69f175e R08: 0000000000000588 R09: 0000000000000000 [ 65.124250][ C3] R10: 00000000200014c0 R11: 0000000000000246 R12: 0000000000000000 [ 65.126372][ C3] R13: 0000000000000000 R14: 00007f25a6b35fa0 R15: 00007ffff4e94398 [ 65.128478][ C3] [ 65.129753][ C3] Kernel Offset: disabled [ 65.130919][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:43:49 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a944a40 RCX=ffffffff8182a93c RDX=ffff88802709a440 RSI=ffffffff8182a916 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900036d7a80 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100d528949 R13=0000000000000001 R14=ffff88806a944a48 R15=ffff88806a63fe40 RIP=ffffffff8182a91d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000049c20000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff4e94730 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25a69f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25a69f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25a69f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25a69f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25a69f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25a69f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff90ff7726 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000001 RBP=ffffc90003e47a50 RSP=ffffc90003e47998 R8 =ffffc90003e47a3c R9 =ffffffff90ff772a R10=ffffc90003e47a08 R11=000000000000f165 R12=ffffc90003e47a58 R13=ffffc90003e47a08 R14=ffffc90003e47d68 R15=ffffc90003e47d60 RIP=ffffffff813e0af5 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f46644b0280 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb7953062d8 CR3=00000000300d8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fc000000 Opmask01=0000000000290410 Opmask02=00000000ffffffef Opmask03=0104100080810010 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055eae6e8dd00 000055eae6efba90 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe39842200 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe39841820 0000003000000010 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff0000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1f115c435d4316 10120300161e121d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5c431d1c1a141601 5c43000611171d5c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f646e756f732f00 682e6c6974752f64 65726168732f6372 732f2e2e2f2e2e00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f716d2f31706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003575 70632f302f716d2f 31706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d3b74ba201ac4c67 000055efb8439794 0000000000000061 000000000000302e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000062b1 0000000000000000 0000000000000000 306d656d702f6b63 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a263b383a3a263a 383a3a26493b3a3a 26483b3a3a264b3b 3a0a00307f617930 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 2 CPU#2 RAX=1ffffffff350c79c RBX=1ffff9200089ef00 RCX=ffffffff81fd60e9 RDX=dffffc0000000000 RSI=ffffffff81fd60f7 RDI=0000000000000007 RBP=00000000000368dc RSP=ffffc900044f7800 R8 =0000000000000007 R9 =000000000007ffff R10=0000000000000006 R11=0000000000000003 R12=0000000000000006 R13=00000000000368dc R14=0000000000000000 R15=ffffc900044f7cc8 RIP=ffffffff81fd610f RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f09df667d60 CR3=000000000df7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09deb0c6a3 00007f09deb0c6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd55db23e0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555f7f4e70 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555f7e9490 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555f85b9cf 000055555f85b390 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000038323935 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02080003800401c7 100008142ebc006c 6c756e2f7665642f 01ffffffffffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01408092100003ff ffffff0401000006 0806010000140806 080135ae00040002 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080003800401c710 0008142ebc006c6c 756e2f7665642f01 ffffffffffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 eb08038003001000 0480040100000808 06060144b2000800 04e00300100004d0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300100004c00302 100004b003681000 0390030100001008 0606e00300050008 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85067b60 RDI=ffffffff9ab05bc0 RBP=ffffffff9ab05b80 RSP=ffffc90000707d20 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000060 R14=fffffbfff3560bca R15=dffffc0000000000 RIP=ffffffff85067b87 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000000df7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5539d3f15ef86ca8 ae584ee8d2014b6e ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 24d2acaf5c489835 e256ec3b156ce346 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f58a5fadb5f8e4f 86aa008b04c1684a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8dbddd07105f2c2f 0308b3a05bfab773 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000068 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000028 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 daff5014a3aab6b8 0000000100000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 74c17da000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a201cc423c0c8d7 05e3e2de8845fc90 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000003856447c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cdd0d484a8de72c5 52b7a4ff3eecd4a8 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 86a736ac51cef587 da91ef7daa339dd1 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb795e6d100 00007fb79530c440 00007fb795300004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb79530c498 00007fb79530c490 00007fb79530c488 00007fb79530c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 00000000000000c4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000