last executing test programs: 42.646500467s ago: executing program 0 (id=20): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x40) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x4, &(0x7f00000000c0)={0x0, "af5405a7b1818f4a097d9a9f2996a3177cef40e38b874823e38090260074bf2cb6"}}) 42.48555833s ago: executing program 0 (id=22): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000110000000800000000000000000000003000000000200000002"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xf5, 0xe8, &(0x7f0000000180)="82eb3a557fdec607e31e825b09d36d7b7c196546d2a934a457099ba7174ba486c0a8920a68d20f4117405ac86bdd9e38a47c3e1595bb9670462236aba89405a3ab6968471dd02bf4af60285548f71f38e1dce52cac858b2568af102ad3307c4678cde8f72165a6556e4fac2868c8264468899cb0ce8dd8549634a9b51ac1e5c78048e80abbcf30d800f4ef650ad12355b278e25759aa88cb17bb426f9153a5023a4b275b4c3715f4a335e835714810737e301282a69066d85d6f9829cda0b82c7be76377e80359f32f826d63da99f4187c9e5014d94d1bc989f5052d01eb31e43eb650f1ddc969eaafdadc2ac504ec7e9ad94be22f", &(0x7f0000000280)=""/232, 0xb601, 0x0, 0x55, 0xe9, &(0x7f0000000380)="921a3c8da8b9a32e097abb9c9579e1fa921745a259543572f7be25a1e20221d4623ddb798df8ae17d0cd02fe2e0050b04f4b6ef984b4e18223a7615f23b9dda574685d4f17429beb822f7be47d38f270ed01dd85bf", &(0x7f0000000400)="240943ba77da18390361552cfef29a8430a5032fc6fa0692cb5b00e4fd1538210884d5f6588699ed38f782a7dd90dc3eb3aa4c8e9d83030123ca0dc686056a36bf1442916373c5326f359e2c11acfe90d00a85ab625a11494be248cbc71a127b4281434965096f68f94522ce5cb61862d883f2ba5c2b24a04722d8718b4ae8dc9852a9353d8bda5d19395d70dd145ec7b15fbaefa7de87e869c5d370f103a024ea1246944c273b79cbad8b7e1f3ceb3cc411edb58318a13910339b67ce2b72999a5f0cc96ec7b04158002a0447c232da98bc0ef64fa5721c3cc1e09bb13baf29a899e6f509a31d3151", 0x4, 0x0, 0xa}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1010000, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 42.484558973s ago: executing program 0 (id=23): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 41.576670348s ago: executing program 0 (id=38): r0 = socket(0x840000000002, 0x3, 0xff) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x5d80, "300b7832ceefd131b8e6498c250000ad91e74392c700bd18cf501922de974a27"}) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000180)=0x800) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e62, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000580)="240000001e005f0314200000000000000000000001000400040008000875084013000000", 0x24) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r4}, 0x8) ioctl$SIOCSIFHWADDR(r3, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) futex(0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r6) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) sendmmsg$inet(r6, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000044) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 41.455007674s ago: executing program 0 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x1, 0x4) openat(r1, &(0x7f0000000340)='./file1\x00', 0x2d41, 0x0) 41.404721126s ago: executing program 0 (id=42): unshare(0x6a040000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1000}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10122, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) syslog(0x9, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000008c0)={0xc0}) creat(&(0x7f0000000080)='./bus\x00', 0xa) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'veth0_to_bridge\x00'}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_usb_disconnect(r5) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r7 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0) syz_usb_disconnect(r7) syz_usb_disconnect(r6) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$uac1(r8, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x40, 0x6, 0x1d, {0x1d, 0xf, "dd945fd6e62ab1b0ede29cf583554d50ee366af3d0e675d9340e45"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400a}}}, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x20, 0x17, 0xad, "de8c880a0ec35d220c7edec74b2d735cb7d998b8c0808e44223cf4f6ca9fff59b3c3382cb6eeadfdf3eaeaf4fc1346c344d15219ce0bf9e442d85bd2032cb548195568018b41dbef4d323f4799f768cd9d0af739e0572d74eaf67dae9c9b59ebde8c61c88d29a555e2bcfb80d1e48d73f6c02705554e7656bb4883500baf273c500acfb204e6bcdc1c612eba2226b2d212c1faa128e4da43fc669c87e1a8f7a1b5a0044cd612fd8365438430c0"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000340)={0x20, 0x81, 0x1, "b6"}, &(0x7f0000000380)={0x20, 0x82, 0x2, "2e14"}, &(0x7f00000003c0)={0x20, 0x83, 0x1, 'H'}, &(0x7f0000000400)={0x20, 0x84, 0x1, "03"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "683703"}}) syz_usb_disconnect(r7) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000000c0)={0x1a, 0xa, 0x0, "b75cbb1844038d2cd97c945462f31638b5394c00"}) 41.398786253s ago: executing program 1 (id=45): r0 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@deltclass={0x24, 0x29, 0x300, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x10, 0x7}, {0x4, 0xd}, {0x9, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000850}, 0x88044) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0x405, 0xfffffffd, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 41.32087871s ago: executing program 1 (id=47): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) (async) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r2, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) epoll_create(0x8) (async) r3 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x14}) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x14}) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) syz_usb_connect$cdc_ecm(0x2, 0x1d9, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c7, 0x1, 0x1, 0x40, 0x20, 0xfc, [{{0x9, 0x4, 0x0, 0x10, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x1ff, 0x5, 0x9}, [@ncm={0x6, 0x24, 0x1a, 0x100, 0x4}, @mdlm_detail={0xc6, 0x24, 0x13, 0x1, "6767c8ecaf42a9bf03c7b239ab6a45082bfefe776e0280e1f07b8e0e9277ef5d27239db3dc3f8abf7b57f0eed87d5a3452041a8f8edbe789b8c5db90a41a92b1dd2e227650c671c6165ec9efb30cfe7e4a06cac2ba3d279929e3e2d69bd0daf9f79cac56c3a1fadf1e49644fe0d9aff57b9911a1ce0f275e9a97035d260e086aae063e09a918621d40e0629f19d828b2a91da6caf1c5a6ccbc6aebcd4b625db39d07bd61df1a0884cfbd1d8dc7e11abbb921d6a580ece03e768454f06f17cde0eb4d"}, @call_mgmt={0x5, 0x24, 0x1, 0x4, 0x7}, @mdlm_detail={0xac, 0x24, 0x13, 0x0, "80adcb4706b0cdaec1d8f4e4d222a60c8e6566c63f5a7955e4534d64bdd9532c5bda3ac16977edb8bb9fd73e89ca4adb1b10577e0e0a2f596b3cecec65abb7f9958308a350e9d0f16bf04ab7e95b0926bf0ece028a98dd2a7d32b053781115abab87e140306fb2d1e0e457d69ab86cf51e17e502f0af2a4d8aa92053aaa84a9a07306a41fef5dd4e016f293e1eccb0262ee2be9a432f69452bdd7c68cdbac4f44dabe31de634b374"}, @ncm={0x6, 0x24, 0x1a, 0xffff, 0xa}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x40, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x8, 0x3, 0xf9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0xff, 0x6}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x50, 0x8, 0x4, 0xff, 0x40, 0x3}, 0x10f, &(0x7f0000000300)={0x5, 0xf, 0x10f, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x9, 0x9, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x9, 0x200}, @generic={0xe5, 0x10, 0xb, "1c9c3124df8da18de95afce4096b60371995e72c766a577816fdcc53e057725a84467175736dfdf454bd03ef0a2f995bbfb8a6d11cc167cc1c226a683ce424aab3cdca051870eb4f4303b4255e0b6ca3ba9088b34fa4f0c7bf45956eb5b1c2b0a86e0cb49442ae357df86f79e01fe38315fb6db5e8ac66c547628a6bbdda64658e1cff0f47beb18a4984e4a829d41a7f861ce88282fc55c37952b0b826f0bbe1ac27745661adc73740afd780c92ede3bff496b299fdaee3508d08bb4e6a9dc20ed70ee5c446f6b16e371e629a1bb251f218bdeb56a0aef6a4d6a64f07bf7f9009408"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0xa, 0xf8, 0x8}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xa, 0x1, 0x5}]}, 0x5, [{0x43, &(0x7f0000000440)=@string={0x43, 0x3, "14c65c3eef604407bbd96638c01acd86a95cb49e91494fd3bee04df9cf553aae0b358723bc30275b8bbf177862c2d2768ba4ffce3e516966e9185efc5db8d9d94d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4ff}}, {0xa6, &(0x7f0000000500)=@string={0xa6, 0x3, "09b2f7ba07f91715abf024def338779f58b339ff1df57c72266387593850f1fe07eea7baaf4427454b9276404b1d0da976e1613c6dfecd68056a92f7cd806a6d3ed9db371ff3b7cb8d1e78ae47cfe7e817474cc23074bd1822eb643c20ac1ee41bfa9aa32c04f07b9802a37314cafa04069dc2b783960e92f7c5e40901fb72c008d929ee25ec459ed3059f23d237df3f3bedfd665fd244323aa39f6be5df07ef40f1bb81"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x43e}}, {0x1b, &(0x7f0000000600)=@string={0x1b, 0x3, "68cbdde51f31d54a13c03ced01696488adce942aac8e26f393"}}]}) listen(r1, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000001140)=0x4) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000006c0), 0x210001, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000000700)) (async) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000000700)) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000040)=0x3) 39.006124438s ago: executing program 2 (id=75): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x7ac}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15) mincore(&(0x7f0000fef000/0xe000)=nil, 0xe000, &(0x7f0000000080)=""/40) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000140)={0x2, 0x5, 0x81, 0x0, 0x6}) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000100)={0x6, 0x0, @value=0x5}) 38.9375028s ago: executing program 2 (id=76): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x20, 0x70bd28, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async, rerun: 64) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="610d0609de77fd15417631084c5a711f4928ea"], 0x13) (rerun: 64) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000200)='./bus\x00', 0x0, 0x101091, 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) r4 = open$dir(&(0x7f0000000400)='./file0\x00', 0x60080, 0x120) mknodat$null(r4, &(0x7f0000000480)='./file0\x00', 0x10, 0x103) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, 0x0, 0x400000, 0x2) umount2(0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) (async, rerun: 32) mkdirat(r6, 0x0, 0x140) (async, rerun: 32) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) (async) connect$pptp(r7, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 32) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r8, 0x4004743a, &(0x7f0000000300)) (async) pwritev(r5, &(0x7f0000000180), 0x0, 0xfffffffe, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010003b15000000000012000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b000100697036746e6c00002000028014000200ff02000000000000000000000000000106000f0003"], 0x50}}, 0x0) 38.81760468s ago: executing program 2 (id=77): r0 = socket(0x22, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010209000000fdbf16a9600000000c000300", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x40040) r5 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="88a8", 0x2}], 0x1}}], 0x1, 0x0) bind$inet(r0, &(0x7f0000000340)={0x22, 0x4e20, @loopback}, 0x57) 38.75700582s ago: executing program 2 (id=78): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:apt_lock_t:s0\x00', 0x20, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x40}}, 0x0) 38.756732597s ago: executing program 2 (id=79): unshare(0x62040200) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000140)=0xa80, 0x4) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x12020, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0xb, 0xa4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001100)={'nat\x00', 0x0, 0x0, 0x90, [], 0x2, 0x0, 0x0}, &(0x7f0000001180)=0x108) 38.687376001s ago: executing program 2 (id=80): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value={0x0, 0x8}, 0x8) r1 = socket(0x40000000015, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'ip6_vti0\x00', @remote}) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f0000000100)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000002980)=[{&(0x7f00000003c0)="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", 0xff}, {&(0x7f00000004c0)="7af9ea267eaabb5a5f1870d7e346656f03ba0f1bff3647561b0cd5f55dcf9a1dc459fc3a8f8661a1bb38c8083f39f6d0a029a241d5cffac35a0011b71e733f9c93701c25e908083b2d37fb16bac219430eb03dd9f530f20390c0206d2262d4cd0fb7971897c7a3e93365da920ef9760d1c262d7f16fb33ea75f5b75d4c52df65fa65beec0587d7a563871c37ba1a74c53c935532f22ff3bc98d61b83bef59a121636fb72371029e9aea56a70b5937cfb04e8403f791cf54215ed7e1548cfbe67ea47b8c913b1669c254890a2235e10eafa9c10d882bd69fd3b34662edb646b092350c1ca58202f2ad4b394d63cd6516c1592cadcfa1259ce", 0xf8}, {&(0x7f0000000200)="7174a08448e293a0abf14efb5f71e9bed001", 0x12}, {&(0x7f0000000640)="ba2657e583cff54fd972aae24b5b3f6ef60a9b5984162f154fd92fef6827a33e93cc141cdc06e940e3a03c72680f8d3a6fdbaaeca13db72b36f9c2a2af0ff3049bd6b7a7afc547a141d2c7ef1596e8bfe1f0f73e29991bd7498d145dc72a5008b53598aa8b31ae8e793bd3b34732a58c1211344f027d58c58487f5b563c6107a486db5f8b06fbf17100d1b22cd95e7123098e463f61285", 0x97}, {&(0x7f0000000700)="0bd321d58af3a2b18caf0e1b55891d4d7f899abcfc65b19d3d682d9c2548035f231fe64b3d0f3751bf1d39c78b5f5a34dd29476f28351725dbcc507fe290ae13696f6c09395c7718a6660d9e7bd26b93c9b468e866af74da8a9d4fc322f1f7af969dbd4fc6939cdef08b193e5f8ea77bb746c03ab4847a2577cc2d5d", 0x7c}, {&(0x7f0000002800)="5af69435e5a2ef3a2189600d80e44af165b83fdd83b9342bf5682c06d82bd59fe8c4e412364fa8ffee962f3c57851fcd2a82d3d9c1076efe85fd36516b20a7bab1a9aa357b05eb79f10bf77470f037e41f83722c61471461b26f2731ecd369c7424412ec3d0346b5b5530a1ffc41b3c6963f1329a263a3ea65939e01b8abed4e0b23d5e4e7d8f5c26e72d993e915163b0cea2e36f5a399ab39ca2476b10589eff8e08d8310c9188bdf1d546361879a3ebbbc7072c6b13774f53dc5a4116defe6776c9844bb3564c86c58cefc433b7b66ca962765061c4f93738bde7637872a77d5", 0xe1}, {&(0x7f0000002900)="e4e36b98b41903ba440537de76c5de6c7cb7b0db54a7043c7fdb85d6381ddaa5d124ae218bfdfa89965bb9b04789d2f9a0eec640fcebe2813dabb8fe853cf5162ff0cec6f6d2623f", 0x48}], 0x7}, 0x10) write$tun(r2, &(0x7f0000002a00)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa810000000800450000290200000000069078ac141403e000000200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780004683b847e7b26fe40468a07e3debd7a9786f575098a058a44"], 0x3b) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) unshare(0x8040480) bpf$MAP_CREATE_TAIL_CALL(0x24, 0x0, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) pwritev(r4, &(0x7f0000002b80)=[{&(0x7f0000002bc0)="5663750e3059fc701d234c3881f3b3faaa9cffbcb3b08583e9c82d898910579e0f8770453889eb571e45506908cb9423f1707e676a9423e76a72ff44c35ef2953d6c0e9bb1d447a35dd4947f065c9dbd7d2c3f32caf59314238a24af3fbf61d05d13adc0d6d4e722a4e9784dd2af05df1a7d61928ecef394b6bd066bdb5fb787fed500d656585ca0f1fe91801f675191a146cc0133ec4f7669f86994d7d1a04618b86971ca3bbf7a9fb939a3", 0xac}, {&(0x7f0000002a80)="88e3a23a3d081652fa1f5bfb9002fa9694aa5fa28210c4015f5c6542d98e676f2452c6d9cb48e7a6612f47591864514fa5844afd8a4a29db0fefb3e477f82151cf39cfb2ba0e6aa8dc3d49b24a4898f2abb306e05a985b54d4f0e2384c0727c753008b6ee16e43dd4900da7f7b11bd94dee7fec3012cef510563bfe1c95588d4cfe0111c475e4cc36931fedfb953cda48dc9b5636a165b89b6f4fb956321dbcd6d9d71629fd2ef40c842580582cd19cdbf671d06c329df7c4a800beaa2cd083e1012713a924416e0", 0xc8}], 0x2, 0x0, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = memfd_secret(0x80000) connect$pppl2tp(r6, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x4, 0x0, {0xa, 0xfffc, 0x7, @local}}}, 0x32) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r7, &(0x7f00000007c0)={0x2020}, 0x2020) ioctl$KVM_CAP_PTP_KVM(r7, 0x4068aea3, 0xfffffffffffffffc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x100800, 0x0) chdir(&(0x7f0000000380)='./file0\x00') symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0\x00') bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 38.45681264s ago: executing program 3 (id=84): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000005000000000000000100000408"], 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000080)) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x100000001) (async) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@filter={'filter\x00', 0xe, 0x3, 0x412, [0x0, 0x20000440, 0x20000470, 0x200005ee], 0x0, &(0x7f0000000400), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x5, 0x9, 0x8863, 'netdevsim0\x00', 'netpci0\x00', 'macvlan0\x00', 'ip_vti0\x00', @multicast, [0xff, 0xff, 0xff, 0xff, 0xff], @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x11e, 0x14e, [], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x5, 0x7, 0x800, 0x0, 0x0, "215bc5e8935a1a671fc3e3b7c47db535e1c5791173e30f1eeb3b930933e3c67ca4bbcf5e69ccd4672d24d6865e9317a017453cab276dd780084f94a2d9505b5e"}}}, @common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xfffffffffffffffe}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x5, 0x1, 0x8906, 'bond0\x00', 'geneve1\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x6, 'syz0\x00', {0x58}}}}}, {0x9, 0x1, 0x9, 'bond0\x00', 'xfrm0\x00', 'veth0_vlan\x00', 'pim6reg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], @random="ebcec9ce8241", [0x0, 0x0, 0xff], 0xee, 0x13e, 0x176, [@quota={{'quota\x00', 0x0, 0x18}, {{0x1, 0x0, 0x9, {0xfffffffffffffff8}}}}, @devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x8, 0xc8be, 0x8, 0x9, 0x7}}}], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x0, {0x7}}}}], @common=@dnat={'dnat\x00', 0x10, {{@random="bfc21d3a593c", 0xa9bcc6c879cc7c22}}}}]}]}, 0x48a) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) (async) close(r1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) (async) unshare(0x60600) (async) mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f93024fc60040f10", 0x17}], 0x1}, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x7fdfffffffffffff, 0x8080) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000001000), 0xe09) write$char_usb(r5, &(0x7f0000002e80)="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", 0x3f7) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8cae108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992807ac0000000000000000000000000200", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x6, 0x3, [0x3, 0x7880, 0x2]}, &(0x7f00000001c0)=0xe) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={r6, 0xa8, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x7, @remote, 0x4}, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0xffffff81}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e21, @private=0xa010102}, @in={0x2, 0x4e23, @remote}]}, &(0x7f0000000240)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 38.37657978s ago: executing program 3 (id=85): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x6, r2, 0x1, 0x9, 0x6, @multicast}, 0x14) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x4b2f, 0x3) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffffffffd21, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x24084040) 38.340963839s ago: executing program 3 (id=86): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x38}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x2, 0x414000) 38.338023958s ago: executing program 1 (id=87): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) socket$kcm(0x29, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x98, 0x30, 0x9, 0x0, 0x0, {}, [{0x84, 0x1, [@m_bpf={0x80, 0x17, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x0, 0x0, 0x0, 0x3}, {}, {0x3}, {}, {}, {0x0, 0xfd}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x1, 0x0, 0x0, 0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4003b9, 'syz0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'virt_wifi0\x00', 'pimreg\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000002800018014000400fe8800006f0000000000000000dd0001060001000a0000000800060082"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r5, 0x20, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x4) 38.286759322s ago: executing program 3 (id=88): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x6c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_TYPENAME={0x60, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000805}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x6c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_TYPENAME={0x60, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000805}, 0x800) (async) 38.284323747s ago: executing program 1 (id=89): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) read$hiddev(r1, &(0x7f0000000080)=""/102, 0x66) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x30, r2, 0x101, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}], @NL80211_ATTR_SSID={0x5, 0x34, @random="86"}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x30}}, 0x0) 38.2838195s ago: executing program 3 (id=90): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000740)=@framed={{}, [@alu={0x4, 0x1, 0xb, 0x0, 0x0, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) mount(0x0, 0x0, 0x0, 0x41000, 0x0) rt_sigsuspend(&(0x7f0000000400)={[0x10]}, 0x8) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newlink={0x4c, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, 0x27bae304562a63e, 0x400}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x5}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}, @IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 38.126577889s ago: executing program 1 (id=91): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x4, 0x4, 0x3b0, 0xffffffff, 0x1a0, 0x1a0, 0x1a0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @remote, [], [], 'bridge_slave_1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xfbff}, 0xfffffffffffffd7b) (async) getsockname(r1, 0x0, &(0x7f0000000040)) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000000)=0x8000, 0x4) (async) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) (async) recvmmsg(r2, &(0x7f0000007e40)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) (async) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x2000000, 0x0, 0xb3550aa4ba878396}, 0x9c) 37.842904082s ago: executing program 1 (id=92): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="fcff7f712b1af800", @ANYRES16=r1, @ANYBLOB="010000000000000000000400000004000180"], 0x18}}, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x2, 0xeeef0000, 0x1000, &(0x7f0000ec4000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) (async) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000060005000d101000", 0x24) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x0, 0x19005000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x5000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x6) 28.132142816s ago: executing program 3 (id=93): add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="660f72d4013e440f09de3ec4e1fa16c9b9c80258000f322e65400f01c20f300f07460f30c4c1316c0e", 0x29}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000440)={@val, @val={0x3, 0x80, 0x3, 0x4, 0x7f, 0x1}, @ipv6=@dccp_packet={0x0, 0x6, "16762a", 0x1a1, 0x21, 0x1, @rand_addr=' \x01\x00', @loopback, {[@hopopts={0x2c, 0x3, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xfffc}, @ra={0x5, 0x2, 0x3}, @padn={0x1, 0x1, [0x0]}, @ra, @pad1, @enc_lim={0x4, 0x1, 0x3d}]}, @dstopts={0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x8}]}, @fragment={0x62, 0x0, 0x1, 0x1, 0x0, 0x0, 0x64}, @hopopts={0x87, 0x18, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x81, 0x6, [0x776]}}, @enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x20, {0x3, 0x6, 0x1, 0xa, [0xfffffffffffffff9, 0x0, 0x0]}}, @calipso={0x7, 0x48, {0x1, 0x10, 0xdb, 0x7fb, [0x2, 0x1430ebfe, 0x4, 0x8, 0x8, 0x8, 0x8000000000000000, 0x6]}}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x28, {0x2, 0x8, 0x1, 0x7, [0x1, 0x10000, 0x9, 0x7]}}]}], {{0x4e20, 0x4e21, 0x4, 0x1, 0x4, 0x0, 0x0, 0x5, 0x5, "6d9584", 0x25, "d74536"}, "6f903a42ccad9e7ff106f095dc3c9ac36b00bec802a501e9158d44872dee55b056830a801532310391c2fcb1d7cb86a2c37a3308ba28d176866c95d6cac86c19558356b4a27a12b77f652aa2bf64401d7bcd9add272b622c6f2dbaf27b25856b431d786bcd17e52fd39f5a86b2d8487084fb6fabbeb0d0f939c03d76eef74e0e37e5cfdeb420d9ab3d"}}}}, 0x1d7) 1.474674625s ago: executing program 32 (id=42): unshare(0x6a040000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1000}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10122, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) syslog(0x9, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000008c0)={0xc0}) creat(&(0x7f0000000080)='./bus\x00', 0xa) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'veth0_to_bridge\x00'}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_usb_disconnect(r5) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r7 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0) syz_usb_disconnect(r7) syz_usb_disconnect(r6) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$uac1(r8, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x40, 0x6, 0x1d, {0x1d, 0xf, "dd945fd6e62ab1b0ede29cf583554d50ee366af3d0e675d9340e45"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400a}}}, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x20, 0x17, 0xad, "de8c880a0ec35d220c7edec74b2d735cb7d998b8c0808e44223cf4f6ca9fff59b3c3382cb6eeadfdf3eaeaf4fc1346c344d15219ce0bf9e442d85bd2032cb548195568018b41dbef4d323f4799f768cd9d0af739e0572d74eaf67dae9c9b59ebde8c61c88d29a555e2bcfb80d1e48d73f6c02705554e7656bb4883500baf273c500acfb204e6bcdc1c612eba2226b2d212c1faa128e4da43fc669c87e1a8f7a1b5a0044cd612fd8365438430c0"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000340)={0x20, 0x81, 0x1, "b6"}, &(0x7f0000000380)={0x20, 0x82, 0x2, "2e14"}, &(0x7f00000003c0)={0x20, 0x83, 0x1, 'H'}, &(0x7f0000000400)={0x20, 0x84, 0x1, "03"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "683703"}}) syz_usb_disconnect(r7) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000000c0)={0x1a, 0xa, 0x0, "b75cbb1844038d2cd97c945462f31638b5394c00"}) 1.328888963s ago: executing program 33 (id=92): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="fcff7f712b1af800", @ANYRES16=r1, @ANYBLOB="010000000000000000000400000004000180"], 0x18}}, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x2, 0xeeef0000, 0x1000, &(0x7f0000ec4000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) (async) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000060005000d101000", 0x24) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x0, 0x19005000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x5000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x6) 188.900063ms ago: executing program 34 (id=80): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value={0x0, 0x8}, 0x8) r1 = socket(0x40000000015, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'ip6_vti0\x00', @remote}) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f0000000100)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000002980)=[{&(0x7f00000003c0)="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", 0xff}, {&(0x7f00000004c0)="7af9ea267eaabb5a5f1870d7e346656f03ba0f1bff3647561b0cd5f55dcf9a1dc459fc3a8f8661a1bb38c8083f39f6d0a029a241d5cffac35a0011b71e733f9c93701c25e908083b2d37fb16bac219430eb03dd9f530f20390c0206d2262d4cd0fb7971897c7a3e93365da920ef9760d1c262d7f16fb33ea75f5b75d4c52df65fa65beec0587d7a563871c37ba1a74c53c935532f22ff3bc98d61b83bef59a121636fb72371029e9aea56a70b5937cfb04e8403f791cf54215ed7e1548cfbe67ea47b8c913b1669c254890a2235e10eafa9c10d882bd69fd3b34662edb646b092350c1ca58202f2ad4b394d63cd6516c1592cadcfa1259ce", 0xf8}, {&(0x7f0000000200)="7174a08448e293a0abf14efb5f71e9bed001", 0x12}, {&(0x7f0000000640)="ba2657e583cff54fd972aae24b5b3f6ef60a9b5984162f154fd92fef6827a33e93cc141cdc06e940e3a03c72680f8d3a6fdbaaeca13db72b36f9c2a2af0ff3049bd6b7a7afc547a141d2c7ef1596e8bfe1f0f73e29991bd7498d145dc72a5008b53598aa8b31ae8e793bd3b34732a58c1211344f027d58c58487f5b563c6107a486db5f8b06fbf17100d1b22cd95e7123098e463f61285", 0x97}, {&(0x7f0000000700)="0bd321d58af3a2b18caf0e1b55891d4d7f899abcfc65b19d3d682d9c2548035f231fe64b3d0f3751bf1d39c78b5f5a34dd29476f28351725dbcc507fe290ae13696f6c09395c7718a6660d9e7bd26b93c9b468e866af74da8a9d4fc322f1f7af969dbd4fc6939cdef08b193e5f8ea77bb746c03ab4847a2577cc2d5d", 0x7c}, {&(0x7f0000002800)="5af69435e5a2ef3a2189600d80e44af165b83fdd83b9342bf5682c06d82bd59fe8c4e412364fa8ffee962f3c57851fcd2a82d3d9c1076efe85fd36516b20a7bab1a9aa357b05eb79f10bf77470f037e41f83722c61471461b26f2731ecd369c7424412ec3d0346b5b5530a1ffc41b3c6963f1329a263a3ea65939e01b8abed4e0b23d5e4e7d8f5c26e72d993e915163b0cea2e36f5a399ab39ca2476b10589eff8e08d8310c9188bdf1d546361879a3ebbbc7072c6b13774f53dc5a4116defe6776c9844bb3564c86c58cefc433b7b66ca962765061c4f93738bde7637872a77d5", 0xe1}, {&(0x7f0000002900)="e4e36b98b41903ba440537de76c5de6c7cb7b0db54a7043c7fdb85d6381ddaa5d124ae218bfdfa89965bb9b04789d2f9a0eec640fcebe2813dabb8fe853cf5162ff0cec6f6d2623f", 0x48}], 0x7}, 0x10) write$tun(r2, &(0x7f0000002a00)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa810000000800450000290200000000069078ac141403e000000200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780004683b847e7b26fe40468a07e3debd7a9786f575098a058a44"], 0x3b) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) unshare(0x8040480) bpf$MAP_CREATE_TAIL_CALL(0x24, 0x0, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) pwritev(r4, &(0x7f0000002b80)=[{&(0x7f0000002bc0)="5663750e3059fc701d234c3881f3b3faaa9cffbcb3b08583e9c82d898910579e0f8770453889eb571e45506908cb9423f1707e676a9423e76a72ff44c35ef2953d6c0e9bb1d447a35dd4947f065c9dbd7d2c3f32caf59314238a24af3fbf61d05d13adc0d6d4e722a4e9784dd2af05df1a7d61928ecef394b6bd066bdb5fb787fed500d656585ca0f1fe91801f675191a146cc0133ec4f7669f86994d7d1a04618b86971ca3bbf7a9fb939a3", 0xac}, {&(0x7f0000002a80)="88e3a23a3d081652fa1f5bfb9002fa9694aa5fa28210c4015f5c6542d98e676f2452c6d9cb48e7a6612f47591864514fa5844afd8a4a29db0fefb3e477f82151cf39cfb2ba0e6aa8dc3d49b24a4898f2abb306e05a985b54d4f0e2384c0727c753008b6ee16e43dd4900da7f7b11bd94dee7fec3012cef510563bfe1c95588d4cfe0111c475e4cc36931fedfb953cda48dc9b5636a165b89b6f4fb956321dbcd6d9d71629fd2ef40c842580582cd19cdbf671d06c329df7c4a800beaa2cd083e1012713a924416e0", 0xc8}], 0x2, 0x0, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = memfd_secret(0x80000) connect$pppl2tp(r6, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x4, 0x0, {0xa, 0xfffc, 0x7, @local}}}, 0x32) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r7, &(0x7f00000007c0)={0x2020}, 0x2020) ioctl$KVM_CAP_PTP_KVM(r7, 0x4068aea3, 0xfffffffffffffffc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x100800, 0x0) chdir(&(0x7f0000000380)='./file0\x00') symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0\x00') bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 0s ago: executing program 35 (id=93): add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="660f72d4013e440f09de3ec4e1fa16c9b9c80258000f322e65400f01c20f300f07460f30c4c1316c0e", 0x29}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000440)={@val, @val={0x3, 0x80, 0x3, 0x4, 0x7f, 0x1}, @ipv6=@dccp_packet={0x0, 0x6, "16762a", 0x1a1, 0x21, 0x1, @rand_addr=' \x01\x00', @loopback, {[@hopopts={0x2c, 0x3, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xfffc}, @ra={0x5, 0x2, 0x3}, @padn={0x1, 0x1, [0x0]}, @ra, @pad1, @enc_lim={0x4, 0x1, 0x3d}]}, @dstopts={0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x8}]}, @fragment={0x62, 0x0, 0x1, 0x1, 0x0, 0x0, 0x64}, @hopopts={0x87, 0x18, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x81, 0x6, [0x776]}}, @enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x20, {0x3, 0x6, 0x1, 0xa, [0xfffffffffffffff9, 0x0, 0x0]}}, @calipso={0x7, 0x48, {0x1, 0x10, 0xdb, 0x7fb, [0x2, 0x1430ebfe, 0x4, 0x8, 0x8, 0x8, 0x8000000000000000, 0x6]}}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x28, {0x2, 0x8, 0x1, 0x7, [0x1, 0x10000, 0x9, 0x7]}}]}], {{0x4e20, 0x4e21, 0x4, 0x1, 0x4, 0x0, 0x0, 0x5, 0x5, "6d9584", 0x25, "d74536"}, "6f903a42ccad9e7ff106f095dc3c9ac36b00bec802a501e9158d44872dee55b056830a801532310391c2fcb1d7cb86a2c37a3308ba28d176866c95d6cac86c19558356b4a27a12b77f652aa2bf64401d7bcd9add272b622c6f2dbaf27b25856b431d786bcd17e52fd39f5a86b2d8487084fb6fabbeb0d0f939c03d76eef74e0e37e5cfdeb420d9ab3d"}}}}, 0x1d7) kernel console output (not intermixed with test programs): [ 38.346754][ T39] audit: type=1400 audit(1732514666.080:82): avc: denied { siginh } for pid=5933 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:34746' (ED25519) to the list of known hosts. [ 39.304467][ T39] audit: type=1400 audit(1732514667.060:83): avc: denied { read } for pid=5351 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.310167][ T39] audit: type=1400 audit(1732514667.060:84): avc: denied { append } for pid=5351 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.316801][ T39] audit: type=1400 audit(1732514667.060:85): avc: denied { open } for pid=5351 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.322675][ T39] audit: type=1400 audit(1732514667.060:86): avc: denied { getattr } for pid=5351 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.328600][ T39] audit: type=1400 audit(1732514667.070:87): avc: denied { name_bind } for pid=5937 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.875394][ T5939] cgroup: Unknown subsys name 'net' [ 41.056657][ T5939] cgroup: Unknown subsys name 'cpuset' [ 41.059811][ T5939] cgroup: Unknown subsys name 'rlimit' [ 41.252527][ T5942] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 41.825669][ T5939] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 43.684383][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 43.684399][ T39] audit: type=1400 audit(1732514671.430:105): avc: denied { execmem } for pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.862653][ T39] audit: type=1400 audit(1732514671.610:106): avc: denied { create } for pid=5949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.869024][ T39] audit: type=1400 audit(1732514671.610:107): avc: denied { create } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.874276][ T39] audit: type=1400 audit(1732514671.610:108): avc: denied { read write } for pid=5948 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 43.880980][ T39] audit: type=1400 audit(1732514671.610:109): avc: denied { read write } for pid=5949 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 43.887184][ T39] audit: type=1400 audit(1732514671.610:110): avc: denied { open } for pid=5948 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 43.893148][ T39] audit: type=1400 audit(1732514671.610:111): avc: denied { open } for pid=5949 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 43.898685][ T5960] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 43.899275][ T39] audit: type=1400 audit(1732514671.620:112): avc: denied { ioctl } for pid=5950 comm="syz-executor" path="socket:[7283]" dev="sockfs" ino=7283 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.900755][ T5961] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 43.902585][ T5960] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 43.902866][ T5961] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 43.903122][ T5961] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 43.903434][ T5961] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 43.903643][ T5961] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 43.903780][ T5961] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 43.909541][ T5959] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 43.910552][ T5960] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 43.910672][ T5962] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 43.912513][ T39] audit: type=1400 audit(1732514671.670:113): avc: denied { read } for pid=5949 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 43.913238][ T5959] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 43.913541][ T5959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 43.913889][ T5959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 43.914577][ T5959] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 43.915150][ T5960] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 43.915417][ T5960] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 43.915583][ T5960] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 43.915815][ T39] audit: type=1400 audit(1732514671.670:114): avc: denied { open } for pid=5949 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 43.916133][ T66] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 43.919938][ T5960] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 43.922072][ T66] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 43.924789][ T5960] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 43.958323][ T5960] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 43.960612][ T5960] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.064896][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 44.069323][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 44.180259][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 44.203653][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.205918][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.207886][ T5948] bridge_slave_0: entered allmulticast mode [ 44.210048][ T5948] bridge_slave_0: entered promiscuous mode [ 44.221467][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.223311][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.225620][ T5949] bridge_slave_0: entered allmulticast mode [ 44.227609][ T5949] bridge_slave_0: entered promiscuous mode [ 44.231989][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.233825][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.235924][ T5949] bridge_slave_1: entered allmulticast mode [ 44.237891][ T5949] bridge_slave_1: entered promiscuous mode [ 44.250465][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.252360][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.254415][ T5948] bridge_slave_1: entered allmulticast mode [ 44.256282][ T5948] bridge_slave_1: entered promiscuous mode [ 44.319555][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.353307][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.356632][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.367828][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.369548][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.371258][ T5950] bridge_slave_0: entered allmulticast mode [ 44.373180][ T5950] bridge_slave_0: entered promiscuous mode [ 44.392119][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.403463][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 44.407443][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.409170][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.410845][ T5950] bridge_slave_1: entered allmulticast mode [ 44.412728][ T5950] bridge_slave_1: entered promiscuous mode [ 44.416132][ T5949] team0: Port device team_slave_0 added [ 44.428540][ T5948] team0: Port device team_slave_0 added [ 44.431372][ T5948] team0: Port device team_slave_1 added [ 44.459822][ T5949] team0: Port device team_slave_1 added [ 44.476774][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.478419][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.484546][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.498595][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.510334][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.512204][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.519873][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.528625][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.531344][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.533147][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.539764][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.576247][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.578060][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.585560][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.598512][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.600394][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.602261][ T5951] bridge_slave_0: entered allmulticast mode [ 44.604569][ T5951] bridge_slave_0: entered promiscuous mode [ 44.608312][ T5950] team0: Port device team_slave_0 added [ 44.634456][ T5949] hsr_slave_0: entered promiscuous mode [ 44.636469][ T5949] hsr_slave_1: entered promiscuous mode [ 44.648233][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.650059][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.651915][ T5951] bridge_slave_1: entered allmulticast mode [ 44.654352][ T5951] bridge_slave_1: entered promiscuous mode [ 44.664183][ T5950] team0: Port device team_slave_1 added [ 44.674638][ T5948] hsr_slave_0: entered promiscuous mode [ 44.676568][ T5948] hsr_slave_1: entered promiscuous mode [ 44.678352][ T5948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.680978][ T5948] Cannot create hsr debugfs directory [ 44.713344][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.715838][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.723495][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.729897][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.735291][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.737251][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.744558][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.749249][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.792208][ T5951] team0: Port device team_slave_0 added [ 44.795006][ T5951] team0: Port device team_slave_1 added [ 44.852619][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.854743][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.861255][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.869705][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.871541][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.878072][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.882832][ T5950] hsr_slave_0: entered promiscuous mode [ 44.887248][ T5950] hsr_slave_1: entered promiscuous mode [ 44.889724][ T5950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.892493][ T5950] Cannot create hsr debugfs directory [ 45.004045][ T5951] hsr_slave_0: entered promiscuous mode [ 45.005951][ T5951] hsr_slave_1: entered promiscuous mode [ 45.007807][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.009765][ T5951] Cannot create hsr debugfs directory [ 45.075545][ T5949] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.085385][ T5949] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.092988][ T5949] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.099598][ T5949] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.150657][ T5950] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.153701][ T5950] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.158164][ T5950] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.161438][ T5950] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.185251][ T5948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.188860][ T5948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.192531][ T5948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.195678][ T5948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.224162][ T5951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.227644][ T5951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.231385][ T5951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.235448][ T5951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.283458][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.287858][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.291838][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.309398][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.318107][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.325447][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.328372][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.330319][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.335983][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.338102][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.343316][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.349131][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.350987][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.353551][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.355443][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.363498][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.365445][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.369769][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.371615][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.390172][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.410210][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.411998][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.434454][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.436342][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.487658][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.493586][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.506969][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.526481][ T5950] veth0_vlan: entered promiscuous mode [ 45.532846][ T5949] veth0_vlan: entered promiscuous mode [ 45.543355][ T5950] veth1_vlan: entered promiscuous mode [ 45.549176][ T5949] veth1_vlan: entered promiscuous mode [ 45.555565][ T5948] veth0_vlan: entered promiscuous mode [ 45.563485][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.569134][ T5950] veth0_macvtap: entered promiscuous mode [ 45.571205][ T5948] veth1_vlan: entered promiscuous mode [ 45.578949][ T5950] veth1_macvtap: entered promiscuous mode [ 45.595367][ T5949] veth0_macvtap: entered promiscuous mode [ 45.599300][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.603335][ T5951] veth0_vlan: entered promiscuous mode [ 45.605332][ T5949] veth1_macvtap: entered promiscuous mode [ 45.612274][ T5951] veth1_vlan: entered promiscuous mode [ 45.615369][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.618985][ T5950] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.621369][ T5950] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.623633][ T5950] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.626300][ T5950] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.633262][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.636263][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.639268][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.645827][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.648540][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.651460][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.660678][ T5949] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.662956][ T5949] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.665677][ T5949] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.667948][ T5949] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.677358][ T5948] veth0_macvtap: entered promiscuous mode [ 45.684400][ T5951] veth0_macvtap: entered promiscuous mode [ 45.695243][ T5951] veth1_macvtap: entered promiscuous mode [ 45.698373][ T5948] veth1_macvtap: entered promiscuous mode [ 45.710123][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.713408][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.716379][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.719043][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.722250][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.731817][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.734660][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.737176][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.739839][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.742945][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.750161][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.752904][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.757536][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.760500][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.763121][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.766298][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.769483][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.776573][ T5951] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.778829][ T5951] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.781090][ T5951] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.783324][ T5951] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.798361][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.801160][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.803831][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.807649][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.811003][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.814977][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.819044][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.823396][ T5948] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.823817][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.823821][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.823858][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.826833][ T5948] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.829718][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.832106][ T5948] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.843819][ T5948] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.867651][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.870129][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.885954][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.888060][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.909583][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.911637][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.926813][ T5950] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 45.934618][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.936696][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.948655][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.950894][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.954699][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.956747][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.974945][ T5960] Bluetooth: hci3: command tx timeout [ 45.975403][ T5957] Bluetooth: hci2: command tx timeout [ 45.977233][ T5960] Bluetooth: hci0: command tx timeout [ 45.978915][ T5957] Bluetooth: hci1: command tx timeout [ 46.012471][ T6016] Zero length message leads to an empty skb [ 46.148882][ T6039] program syz.2.8 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.185221][ T6044] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9'. [ 46.191957][ T6044] pim6reg: entered allmulticast mode [ 46.388800][ T6065] process 'syz.2.17' launched '/dev/fd/6' with NULL argv: empty string added [ 46.442524][ T6068] (syz.2.18,6068,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "usrquota" or missing value [ 46.443469][ T6072] ALSA: mixer_oss: invalid OSS volume 'DIGIÿ' [ 46.446287][ T6068] (syz.2.18,6068,2):ocfs2_fill_super:1178 ERROR: status = -22 [ 46.639791][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 46.643453][ T6082] warning: `syz.2.21' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 47.249019][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 47.527989][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'. [ 47.589735][ T6133] bridge0: port 3(veth0_to_bridge) entered blocking state [ 47.591657][ T6133] bridge0: port 3(veth0_to_bridge) entered disabled state [ 47.593581][ T6133] veth0_to_bridge: entered allmulticast mode [ 47.595710][ T6133] veth0_to_bridge: entered promiscuous mode [ 47.597263][ T6133] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 47.601179][ T6133] bridge0: port 3(veth0_to_bridge) entered blocking state [ 47.603096][ T6133] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 47.617892][ T6135] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.657859][ T6143] overlayfs: failed to resolve './file0': -2 [ 47.891401][ T6173] netlink: 'syz.2.48': attribute type 1 has an invalid length. [ 47.927636][ T6175] syz.2.49: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 47.932711][ T6175] CPU: 1 UID: 0 PID: 6175 Comm: syz.2.49 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 47.935874][ T6175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.938632][ T6175] Call Trace: [ 47.939514][ T6175] [ 47.940299][ T6175] dump_stack_lvl+0x16c/0x1f0 [ 47.941541][ T6175] warn_alloc+0x24d/0x3a0 [ 47.942690][ T6175] ? __pfx_warn_alloc+0x10/0x10 [ 47.943997][ T6175] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 47.945509][ T6175] ? kasan_save_stack+0x42/0x60 [ 47.946767][ T6175] ? kasan_save_stack+0x33/0x60 [ 47.948042][ T6175] ? kasan_save_track+0x14/0x30 [ 47.949313][ T6175] ? __kasan_kmalloc+0xaa/0xb0 [ 47.950654][ T6175] ? xskq_create+0x52/0x1d0 [ 47.951868][ T6175] ? do_sock_setsockopt+0x222/0x480 [ 47.953646][ T6175] ? __sys_setsockopt+0x1a0/0x230 [ 47.955492][ T6175] ? __x64_sys_setsockopt+0xbd/0x160 [ 47.956989][ T6175] __vmalloc_node_range_noprof+0x10df/0x1530 [ 47.958559][ T6175] ? xskq_create+0xfb/0x1d0 [ 47.959768][ T6175] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 47.961426][ T6175] ? xskq_create+0xfb/0x1d0 [ 47.962633][ T6175] vmalloc_user_noprof+0x6b/0x90 [ 47.963967][ T6175] ? xskq_create+0xfb/0x1d0 [ 47.965155][ T6175] xskq_create+0xfb/0x1d0 [ 47.966355][ T6175] xsk_setsockopt+0x757/0xa10 [ 47.967596][ T6175] ? __pfx_xsk_setsockopt+0x10/0x10 [ 47.968975][ T6175] ? selinux_socket_setsockopt+0x6a/0x80 [ 47.970271][ T6175] ? __pfx_xsk_setsockopt+0x10/0x10 [ 47.971628][ T6175] do_sock_setsockopt+0x222/0x480 [ 47.972959][ T6175] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 47.974468][ T6175] ? lock_acquire+0x2f/0xb0 [ 47.975660][ T6175] __sys_setsockopt+0x1a0/0x230 [ 47.977075][ T6175] __x64_sys_setsockopt+0xbd/0x160 [ 47.978935][ T6175] ? do_syscall_64+0x91/0x250 [ 47.980563][ T6175] ? lockdep_hardirqs_on+0x7c/0x110 [ 47.982426][ T6175] do_syscall_64+0xcd/0x250 [ 47.983893][ T6175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.985766][ T6175] RIP: 0033:0x7f5336b7e819 [ 47.986939][ T6175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.991933][ T6175] RSP: 002b:00007f533791a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 47.994161][ T6175] RAX: ffffffffffffffda RBX: 00007f5336d35fa0 RCX: 00007f5336b7e819 [ 47.996275][ T6175] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 47.998321][ T6175] RBP: 00007f5336bf175e R08: 0000000000000020 R09: 0000000000000000 [ 48.000390][ T6175] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 48.002457][ T6175] R13: 0000000000000000 R14: 00007f5336d35fa0 R15: 00007ffd898d0678 [ 48.004583][ T6175] [ 48.007062][ T6175] Mem-Info: [ 48.008479][ T6175] active_anon:6070 inactive_anon:0 isolated_anon:0 [ 48.008479][ T6175] active_file:1114 inactive_file:38330 isolated_file:0 [ 48.008479][ T6175] unevictable:1768 dirty:525 writeback:0 [ 48.008479][ T6175] slab_reclaimable:11132 slab_unreclaimable:69069 [ 48.008479][ T6175] mapped:23360 shmem:2489 pagetables:758 [ 48.008479][ T6175] sec_pagetables:304 bounce:0 [ 48.008479][ T6175] kernel_misc_reclaimable:0 [ 48.008479][ T6175] free:489441 free_pcp:2438 free_cma:0 [ 48.014022][ T5980] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 48.021387][ T6175] Node 0 active_anon:24280kB inactive_anon:0kB active_file:4456kB inactive_file:153244kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:93440kB dirty:2092kB writeback:0kB shmem:6420kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:11952kB pagetables:3032kB sec_pagetables:1216kB all_unreclaimable? no [ 48.023333][ T63] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 48.033328][ T6175] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 48.045865][ T6175] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 48.054229][ T6175] lowmem_reserve[]: 0 1212 0 0 0 [ 48.054833][ T5957] Bluetooth: hci0: command tx timeout [ 48.054936][ T5960] Bluetooth: hci2: command tx timeout [ 48.054967][ T5960] Bluetooth: hci3: command tx timeout [ 48.055056][ T5314] Bluetooth: hci1: command tx timeout [ 48.055584][ T6175] Node 0 DMA32 free:351544kB boost:0kB min:27608kB low:34508kB high:41408kB reserved_highatomic:0KB active_anon:24280kB inactive_anon:0kB active_file:4456kB inactive_file:153244kB unevictable:3536kB writepending:2092kB present:2080628kB managed:1269928kB mlocked:0kB bounce:0kB free_pcp:2784kB local_pcp:0kB free_cma:0kB [ 48.070111][ T6175] lowmem_reserve[]: 0 0 0 0 0 [ 48.071440][ T6175] Node 1 Normal free:1595916kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:3536kB writepending:8kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:2260kB local_pcp:868kB free_cma:0kB [ 48.079164][ T6175] lowmem_reserve[]: 0 0 0 0 0 [ 48.080456][ T6175] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 48.083805][ T6175] Node 0 DMA32: 34*4kB (UME) 50*8kB (UME) 73*16kB (UE) 66*32kB (UME) 25*64kB (UME) 16*128kB (UME) 12*256kB (UM) 12*512kB (UME) 11*1024kB (UME) 6*2048kB (UME) 76*4096kB (M) = 351528kB [ 48.088582][ T6175] Node 1 Normal: 3*4kB (UME) 6*8kB (UME) 9*16kB (ME) 96*32kB (UME) 51*64kB (UME) 23*128kB (UME) 3*256kB (UE) 7*512kB (UME) 1*1024kB (E) 2*2048kB (UM) 385*4096kB (UM) = 1595916kB [ 48.093078][ T6175] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 48.095600][ T6175] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 48.097976][ T6175] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 48.100382][ T6175] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 48.102730][ T6175] 41935 total pagecache pages [ 48.104084][ T6175] 0 pages in swap cache [ 48.105172][ T6175] Free swap = 124984kB [ 48.106254][ T6175] Total swap = 124996kB [ 48.107337][ T6175] 1048443 pages RAM [ 48.108346][ T6175] 0 pages HighMem/MovableOnly [ 48.109566][ T6175] 281640 pages reserved [ 48.110651][ T6175] 0 pages cma reserved [ 48.163732][ T6180] sp0: Synchronizing with TNC [ 48.184468][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 48.194225][ T5980] usb 5-1: Using ep0 maxpacket: 32 [ 48.198802][ T5980] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 48.201259][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.204727][ T63] usb 6-1: not running at top speed; connect to a high speed hub [ 48.208234][ T5980] usb 5-1: config 0 descriptor?? [ 48.211424][ T63] usb 6-1: config 1 interface 0 altsetting 16 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 48.214352][ T63] usb 6-1: config 1 interface 0 has no altsetting 0 [ 48.220842][ T5980] as10x_usb: device has been detected [ 48.223065][ T5980] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 48.224586][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.52'. [ 48.227859][ T6186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.52'. [ 48.235399][ T63] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.237749][ T63] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.240902][ T63] usb 6-1: Product: 눉뫷龜ᔗ㣳齷ë˜ï¼¹ï”牼挦妇倸ﻱ몧䒯䔧鉋ä¶áµ‹ê¤î…¶ã±¡ï¹­æ£æ¨…ïž’èƒæµªãŸ›ïŒŸì®·áºê¹¸ì½‡î£§äœ—쉌ç°á¢½î¬¢ã±¤ê° îžï¨›êŽšÐ¬ç¯°Ê˜çŽ£ì¨”Ӻ鴆럂隃鈎엷৤ï¬ì²î¸©î°¥é¹…ד⎟㟒㿟曽퉟㉄ꌺ殟膻 [ 48.247363][ T63] usb 6-1: Manufacturer: Ó¿ [ 48.248580][ T63] usb 6-1: SerialNumber: о [ 48.250460][ T5980] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 48.254705][ T63] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 48.257218][ T63] usb 6-1: no configuration chosen from 1 choice [ 48.265785][ T5980] as10x_usb: error during firmware upload part1 [ 48.267611][ T5980] Registered device nBox DVB-T Dongle [ 48.363260][ T6197] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.372543][ T6197] xt_hashlimit: size too large, truncated to 1048576 [ 48.382433][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.54'. [ 48.413808][ T6013] usb 5-1: USB disconnect, device number 2 [ 48.425293][ T6013] Unregistered device nBox DVB-T Dongle [ 48.427894][ T6013] as10x_usb: device has been disconnected [ 48.453468][ T6198] sch_tbf: burst 6758 is lower than device lo mtu (65550) ! [ 48.576041][ T6207] netlink: 165 bytes leftover after parsing attributes in process `syz.2.59'. [ 48.630902][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60'. [ 48.874075][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 48.926008][ T39] kauditd_printk_skb: 169 callbacks suppressed [ 48.926018][ T39] audit: type=1400 audit(1732514676.680:284): avc: denied { watch watch_reads } for pid=6228 comm="syz.2.65" path="/26/control" dev="tmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 48.982818][ T39] audit: type=1400 audit(1732514676.730:285): avc: denied { read } for pid=6234 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.990205][ T39] audit: type=1400 audit(1732514676.740:286): avc: denied { open } for pid=6234 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.999180][ T39] audit: type=1400 audit(1732514676.740:287): avc: denied { getattr } for pid=6234 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.999199][ T39] audit: type=1400 audit(1732514676.740:288): avc: denied { write } for pid=6233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.999236][ T39] audit: type=1400 audit(1732514676.740:289): avc: denied { add_name } for pid=6233 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.025372][ T39] audit: type=1400 audit(1732514676.780:290): avc: denied { remove_name } for pid=6236 comm="rm" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=2159 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.033798][ T9] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 49.035792][ T9] usb 5-1: config 0 has no interfaces? [ 49.040117][ T9] usb 5-1: config 0 has no interfaces? [ 49.048299][ T39] audit: type=1400 audit(1732514676.800:291): avc: denied { write } for pid=6238 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 49.050979][ T9] usb 5-1: config 0 has no interfaces? [ 49.052159][ T9] usb 5-1: config 0 has no interfaces? [ 49.061959][ T9] usb 5-1: config 0 has no interfaces? [ 49.063528][ T9] usb 5-1: config 0 has no interfaces? [ 49.068471][ T9] usb 5-1: config 0 has no interfaces? [ 49.073486][ T9] usb 5-1: config 0 has no interfaces? [ 49.075180][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.079302][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.079314][ T9] usb 5-1: Product: syz [ 49.079321][ T9] usb 5-1: Manufacturer: syz [ 49.079328][ T9] usb 5-1: SerialNumber: syz [ 49.080735][ T9] usb 5-1: config 0 descriptor?? [ 49.111618][ T39] audit: type=1400 audit(1732514676.860:292): avc: denied { append } for pid=6249 comm="syz.3.68" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 49.161111][ T39] audit: type=1400 audit(1732514676.910:293): avc: denied { mounton } for pid=6253 comm="syz.3.69" path="/19/file0" dev="tmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.165998][ T6255] syz.3.69: attempt to access beyond end of device [ 49.165998][ T6255] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 49.170328][ T6255] syz.3.69: attempt to access beyond end of device [ 49.170328][ T6255] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 49.174945][ T6255] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 49.177623][ T6255] syz.3.69: attempt to access beyond end of device [ 49.177623][ T6255] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 49.180910][ T6255] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 49.183508][ T6255] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 49.186971][ T6255] UDF-fs: Scanning with blocksize 512 failed [ 49.189159][ T6255] syz.3.69: attempt to access beyond end of device [ 49.189159][ T6255] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 49.192561][ T6255] syz.3.69: attempt to access beyond end of device [ 49.192561][ T6255] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 49.196201][ T6255] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 49.198696][ T6255] syz.3.69: attempt to access beyond end of device [ 49.198696][ T6255] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 49.202108][ T6255] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 49.205553][ T6255] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 49.208322][ T6255] UDF-fs: Scanning with blocksize 1024 failed [ 49.210905][ T6255] syz.3.69: attempt to access beyond end of device [ 49.210905][ T6255] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 49.215712][ T6255] syz.3.69: attempt to access beyond end of device [ 49.215712][ T6255] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 49.220113][ T6262] pim6reg: entered allmulticast mode [ 49.220316][ T6255] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 49.222735][ T6262] pim6reg: left allmulticast mode [ 49.226646][ T6255] syz.3.69: attempt to access beyond end of device [ 49.226646][ T6255] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 49.232523][ T6255] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 49.236177][ T6255] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 49.238953][ T6255] UDF-fs: Scanning with blocksize 2048 failed [ 49.241504][ T6255] syz.3.69: attempt to access beyond end of device [ 49.241504][ T6255] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 49.246758][ T6255] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 49.250286][ T6255] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 49.253718][ T6255] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 49.256887][ T6255] UDF-fs: Scanning with blocksize 4096 failed [ 49.259092][ T6255] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 49.291938][ T829] usb 5-1: USB disconnect, device number 3 [ 49.414516][ T1135] wlan1: Trigger new scan to find an IBSS to join [ 49.684072][ T6013] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 49.834064][ T6013] usb 8-1: Using ep0 maxpacket: 8 [ 49.836578][ T6013] usb 8-1: config 0 has no interfaces? [ 49.837991][ T6013] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 49.840350][ T6013] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.844103][ T6013] usb 8-1: config 0 descriptor?? [ 49.934158][ T830] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 50.048755][ T6013] usb 8-1: USB disconnect, device number 2 [ 50.084194][ T830] usb 5-1: Using ep0 maxpacket: 32 [ 50.086662][ T830] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 50.088979][ T830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.092300][ T830] usb 5-1: config 0 descriptor?? [ 50.096448][ T830] as10x_usb: device has been detected [ 50.098481][ T830] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 50.105849][ T830] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 50.109615][ T830] as10x_usb: error during firmware upload part1 [ 50.111381][ T830] Registered device nBox DVB-T Dongle [ 50.138920][ T5957] Bluetooth: hci0: command tx timeout [ 50.144520][ T5957] Bluetooth: hci3: command tx timeout [ 50.144685][ T5314] Bluetooth: hci2: command tx timeout [ 50.214689][ T6282] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 50.304766][ T6295] netlink: 'syz.2.77': attribute type 3 has an invalid length. [ 50.331721][ T6300] SELinux: Context system_u:object_r:apt_lock_t:s0 is not valid (left unmapped). [ 50.461364][ T6306] syz.2.80 uses obsolete (PF_INET,SOCK_PACKET) [ 50.626130][ T6316] ======================================================= [ 50.626130][ T6316] WARNING: The mand mount option has been deprecated and [ 50.626130][ T6316] and is ignored by this kernel. Remove the mand [ 50.626130][ T6316] option from the mount to silence this warning. [ 50.626130][ T6316] ======================================================= [ 50.683613][ T6324] netlink: 'syz.3.85': attribute type 10 has an invalid length. [ 50.693932][ T6324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.694859][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 50.696631][ T6324] team0: Port device batadv0 added [ 50.699422][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 50.703869][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 50.707186][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 50.710325][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 50.713660][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 50.713747][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 50.713861][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 50.713991][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 50.714109][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 50.773343][ T5980] usb 6-1: USB disconnect, device number 2 [ 50.929279][ T6340] xt_CONNSECMARK: invalid mode: 0 [ 52.747354][ T1134] wlan1: Trigger new scan to find an IBSS to join [ 55.653966][ C0] sched: DL replenish lagged too much [ 55.703994][ C1] net_ratelimit: 147227 callbacks suppressed [ 55.704007][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 55.704019][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 55.704061][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 55.704179][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 55.704305][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 55.704431][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 55.704589][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 55.704763][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 55.704928][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 55.705086][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 60.631099][ T56] usb 5-1: USB disconnect, device number 4 [ 60.714004][ C2] net_ratelimit: 151090 callbacks suppressed [ 60.714015][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 60.714037][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 60.714053][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 60.714168][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 60.714272][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 60.714377][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 60.714480][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 60.714587][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 60.714691][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 60.714795][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 60.788098][ T5957] Bluetooth: hci3: command tx timeout [ 60.789542][ T5957] Bluetooth: hci0: command tx timeout [ 60.790952][ T5957] Bluetooth: hci2: command tx timeout [ 60.792459][ T5957] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 60.797951][ T5957] Bluetooth: hci1: Injecting HCI hardware error event [ 60.803300][ T5957] Bluetooth: hci1: hardware error 0x00 [ 65.723970][ C3] net_ratelimit: 153814 callbacks suppressed [ 65.723982][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 65.724024][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 65.724074][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 65.724183][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 65.724304][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 65.724407][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 65.724494][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 65.724603][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 65.724724][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 65.724827][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 70.734029][ C1] net_ratelimit: 152510 callbacks suppressed [ 70.734042][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 70.734067][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 70.734126][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 70.734228][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 70.734332][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 70.734430][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 70.734533][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 70.734638][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 70.734737][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 70.734835][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 75.743994][ C1] net_ratelimit: 151012 callbacks suppressed [ 75.744007][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 75.744015][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 75.744030][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 75.744133][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 75.744230][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 75.744331][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 75.744429][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 75.744532][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 75.744630][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 75.744727][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 80.754023][ C2] net_ratelimit: 159543 callbacks suppressed [ 80.754037][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 80.754074][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 80.754113][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 80.754215][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 80.754318][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 80.754416][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 80.754519][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 80.754615][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 80.754713][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 80.754814][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 85.764032][ C2] net_ratelimit: 157614 callbacks suppressed [ 85.764045][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 85.764058][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.764058][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 85.764164][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 85.764270][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 85.764367][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 85.764465][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 85.764576][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 85.764675][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 85.764779][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:da:7e:2b:8e:2a, vlan:0) [ 87.354578][ C2] ksoftirqd/2: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 87.354881][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 87.354933][ C3] SLUB: Unable to allocate memory on CPU 3 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 87.354948][ C3] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 1, min order: 0 [ 87.354958][ C3] node 0: slabs: 23211, objs: 580275, free: 0 [ 87.354966][ C3] node 1: slabs: 86842, objs: 2170972, free: 100 [ 87.355037][ C3] SLUB: Unable to allocate memory on CPU 3 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 87.355047][ C3] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 1, min order: 0 [ 87.355056][ C3] node 0: slabs: 23211, objs: 580275, free: 0 [ 87.355064][ C3] node 1: slabs: 86842, objs: 2170972, free: 100 [ 87.355120][ C3] SLUB: Unable to allocate memory on CPU 3 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 87.355130][ C3] cache: skbuff_ext_cache, object size: 184, buffer size: 256, default order: 0, min order: 0 [ 87.355140][ C3] node 0: slabs: 50133, objs: 802128, free: 0 [ 87.355148][ C3] node 1: slabs: 189678, objs: 3034848, free: 0 [ 87.355243][ T1413] SLUB: Unable to allocate memory on CPU 3 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 87.355256][ T1413] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 1, min order: 0 [ 87.355266][ T1413] node 0: slabs: 23211, objs: 580275, free: 0 [ 87.355273][ T1413] node 1: slabs: 86842, objs: 2170972, free: 100 [ 87.355395][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 87.355411][ C0] cache: skbuff_ext_cache, object size: 184, buffer size: 256, default order: 0, min order: 0 [ 87.355421][ C0] node 0: slabs: 50133, objs: 802128, free: 0 [ 87.355428][ C0] node 1: slabs: 189678, objs: 3034848, free: 0 [ 87.355449][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 87.355452][ T1413] SLUB: Unable to allocate memory on CPU 3 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 87.355459][ C0] cache: skbuff_ext_cache, object size: 184, buffer size: 256, default order: 0, min order: 0 [ 87.355468][ C0] node 0: slabs: 50133, objs: 802128, free: 0 [ 87.355476][ C0] node 1: slabs: 189678, objs: 3034848, free: 0 [ 87.355483][ T1413] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 1, min order: 0 [ 87.355505][ T1413] node 0: slabs: 23211, objs: 580275, free: 0 [ 87.355513][ T1413] node 1: slabs: 86842, objs: 2170972, free: 100 [ 87.355536][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 87.355538][ T1413] SLUB: Unable to allocate memory on CPU 3 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 87.355546][ C0] cache: skbuff_ext_cache, object size: 184, buffer size: 256, default order: 0, min order: 0 [ 87.355548][ T1413] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 1, min order: 0 [ 87.355555][ C0] node 0: slabs: 50133, objs: 802128, free: 0 [ 87.355557][ T1413] node 0: slabs: 23211, objs: 580275, free: 0 [ 87.355562][ C0] node 1: slabs: 189678, objs: 3034848, free: 0 [ 87.355564][ T1413] node 1: slabs: 86842, objs: 2170972, free: 100 [ 87.355774][ T5314] Bluetooth: hci0: command tx timeout [ 87.355848][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 87.358267][ C2] CPU: 2 UID: 0 PID: 24 Comm: ksoftirqd/2 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 87.358283][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.358290][ C2] Call Trace: [ 87.358295][ C2] [ 87.358301][ C2] dump_stack_lvl+0x16c/0x1f0 [ 87.358338][ C2] warn_alloc+0x24d/0x3a0 [ 87.358351][ C2] ? __pfx_warn_alloc+0x10/0x10 [ 87.358366][ C2] ? wakeup_kswapd+0x169/0x640 [ 87.358377][ C2] ? __pfx_get_page_from_freelist+0x10/0x10 [ 87.358389][ C2] ? wake_all_kswapds+0x182/0x2e0 [ 87.360959][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 1, min order: 0 [ 87.363502][ C2] __alloc_pages_noprof+0x159c/0x25a0 [ 87.366235][ C1] node 0: slabs: 23211, objs: 580275, free: 0 [ 87.367767][ C2] ? __pfx_nf_hook+0x10/0x10 [ 87.369431][ C1] node 1: slabs: 86842, objs: 2170972, free: 100 [ 87.372022][ C2] ? __pfx___lock_acquire+0x10/0x10 [ 87.465026][ C2] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 87.466519][ C2] ? __lock_acquire+0x15a9/0x3c40 [ 87.467843][ C2] ? __pfx_lock_release+0x10/0x10 [ 87.469178][ C2] ? __pfx___lock_acquire+0x10/0x10 [ 87.470562][ C2] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 87.472106][ C2] ? policy_nodemask+0xea/0x4e0 [ 87.473400][ C2] alloc_pages_mpol_noprof+0x2c9/0x610 [ 87.474822][ C2] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 87.476403][ C2] ? __pfx_lock_release+0x10/0x10 [ 87.477719][ C2] ? get_freelist+0x1b2/0x1e0 [ 87.478958][ C2] new_slab+0x2e7/0x410 [ 87.480056][ C2] ___slab_alloc+0xdac/0x1880 [ 87.481284][ C2] ? nf_hook_slow+0x132/0x200 [ 87.482476][ C2] ? skb_clone+0x190/0x3f0 [ 87.483606][ C2] ? __pfx_br_forward_finish+0x10/0x10 [ 87.485040][ C2] ? __pfx_nf_hook+0x10/0x10 [ 87.486256][ C2] ? skb_clone+0x190/0x3f0 [ 87.487427][ C2] ? __slab_alloc.constprop.0+0x56/0xb0 [ 87.488852][ C2] __slab_alloc.constprop.0+0x56/0xb0 [ 87.490282][ C2] kmem_cache_alloc_noprof+0x2a7/0x2f0 [ 87.491694][ C2] ? skb_clone+0x190/0x3f0 [ 87.492858][ C2] skb_clone+0x190/0x3f0 [ 87.493968][ C2] deliver_clone+0x3f/0xa0 [ 87.495131][ C2] br_flood+0x493/0x5c0 [ 87.496196][ C2] br_handle_frame_finish+0xda5/0x1c80 [ 87.497600][ C2] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 87.499148][ C2] ? ip6t_do_table+0xd20/0x1d40 [ 87.500408][ C2] ? __local_bh_enable_ip+0xa4/0x120 [ 87.501782][ C2] ? ip6t_do_table+0xd50/0x1d40 [ 87.503055][ C2] ? __pfx_ip6t_do_table+0x10/0x10 [ 87.504398][ C2] ? nf_hook_slow+0x132/0x200 [ 87.505630][ C2] br_nf_hook_thresh+0x303/0x410 [ 87.506928][ C2] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 87.508465][ C2] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 87.509912][ C2] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 87.511451][ C2] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 87.512960][ C2] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 87.514490][ C2] br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 [ 87.516002][ C2] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 87.517729][ C2] br_nf_pre_routing_ipv6+0x3ce/0x8c0 [ 87.519143][ C2] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 87.520689][ C2] ? __pfx_lock_release+0x10/0x10 [ 87.522023][ C2] ? trace_lock_acquire+0x146/0x1e0 [ 87.523389][ C2] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 87.525085][ C2] br_nf_pre_routing+0x860/0x15b0 [ 87.526408][ C2] br_handle_frame+0x9eb/0x1490 [ 87.527675][ C2] ? __pfx_br_handle_frame+0x10/0x10 [ 87.529025][ C2] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 87.530671][ C2] ? mark_lock+0xb5/0xc60 [ 87.531812][ C2] ? __pfx_br_handle_frame+0x10/0x10 [ 87.533190][ C2] __netif_receive_skb_core.constprop.0+0xa76/0x4470 [ 87.534907][ C2] ? kasan_quarantine_put+0xd0/0x240 [ 87.536271][ C2] ? kmem_cache_free+0x152/0x4b0 [ 87.537461][ C2] ? kfree_skbmem+0x1a4/0x1f0 [ 87.538645][ C2] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 87.540337][ C2] ? hlock_class+0x4e/0x130 [ 87.541501][ C2] ? __lock_acquire+0xcc5/0x3c40 [ 87.542758][ C2] ? __pfx_ip6_mc_input+0x10/0x10 [ 87.544033][ C2] ? __pfx___lock_acquire+0x10/0x10 [ 87.545379][ C2] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 87.546682][ C2] ? process_backlog+0x3f1/0x15f0 [ 87.547899][ C2] __netif_receive_skb_one_core+0xb1/0x1e0 [ 87.549333][ C2] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 87.550875][ C2] ? rcu_is_watching+0x12/0xc0 [ 87.552106][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 87.553476][ C2] ? process_backlog+0x3f1/0x15f0 [ 87.554750][ C2] ? process_backlog+0x3f1/0x15f0 [ 87.556040][ C2] __netif_receive_skb+0x1d/0x160 [ 87.557355][ C2] process_backlog+0x443/0x15f0 [ 87.558586][ C2] __napi_poll.constprop.0+0xb7/0x550 [ 87.559926][ C2] net_rx_action+0xa94/0x1010 [ 87.561161][ C2] ? __pfx_net_rx_action+0x10/0x10 [ 87.562468][ C2] ? sched_balance_domains+0x285/0xec0 [ 87.563821][ C2] ? kvm_sched_clock_read+0x11/0x20 [ 87.565112][ C2] ? sched_clock+0x38/0x60 [ 87.566230][ C2] ? sched_clock_cpu+0x6d/0x4d0 [ 87.567491][ C2] handle_softirqs+0x213/0x8f0 [ 87.568720][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 87.570094][ C2] ? rcu_is_watching+0x12/0xc0 [ 87.571320][ C2] ? __pfx_run_ksoftirqd+0x10/0x10 [ 87.572641][ C2] ? smpboot_thread_fn+0x59d/0xa30 [ 87.573940][ C2] run_ksoftirqd+0x3a/0x60 [ 87.575070][ C2] smpboot_thread_fn+0x661/0xa30 [ 87.576325][ C2] ? __kthread_parkme+0x148/0x220 [ 87.577608][ C2] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 87.578939][ C2] kthread+0x2c1/0x3a0 [ 87.580189][ C2] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.581541][ C2] ? __pfx_kthread+0x10/0x10 [ 87.582711][ C2] ret_from_fork+0x45/0x80 [ 87.583848][ C2] ? __pfx_kthread+0x10/0x10 [ 87.585032][ C2] ret_from_fork_asm+0x1a/0x30 [ 87.586266][ C2] [ 87.587273][ C2] Mem-Info: [ 87.588115][ C2] active_anon:5164 inactive_anon:0 isolated_anon:0 [ 87.588115][ C2] active_file:1889 inactive_file:37458 isolated_file:0 [ 87.588115][ C2] unevictable:1768 dirty:517 writeback:10 [ 87.588115][ C2] slab_reclaimable:10999 slab_unreclaimable:513362 [ 87.588115][ C2] mapped:23180 shmem:2480 pagetables:621 [ 87.588115][ C2] sec_pagetables:298 bounce:0 [ 87.588115][ C2] kernel_misc_reclaimable:0 [ 87.588115][ C2] free:47901 free_pcp:68 free_cma:0 [ 87.599303][ C2] Node 0 active_anon:20656kB inactive_anon:0kB active_file:7556kB inactive_file:149756kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:92720kB dirty:2060kB writeback:40kB shmem:6384kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11664kB pagetables:2484kB sec_pagetables:1192kB all_unreclaimable? no [ 87.607625][ C2] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 87.615242][ C2] Node 0 DMA free:14996kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 87.621941][ C2] lowmem_reserve[]: 0 1212 0 0 0 [ 87.623172][ C2] Node 0 DMA32 free:136820kB boost:16384kB min:43992kB low:50892kB high:57792kB reserved_highatomic:14336KB active_anon:20656kB inactive_anon:0kB active_file:7556kB inactive_file:149756kB unevictable:3536kB writepending:2100kB present:2080628kB managed:1269928kB mlocked:0kB bounce:0kB free_pcp:204kB local_pcp:0kB free_cma:0kB [ 87.630874][ C2] lowmem_reserve[]: 0 0 0 0 0 [ 87.632151][ C2] Node 1 Normal free:68188kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:18432KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:3536kB writepending:8kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:132kB local_pcp:0kB free_cma:0kB [ 87.639201][ C2] lowmem_reserve[]: 0 0 0 0 0 [ 87.640457][ C2] Node 0 DMA: 1*4kB (U) 3*8kB (U) 2*16kB (U) 4*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 3*1024kB (U) 1*2048kB (U) 2*4096kB (U) = 14972kB [ 87.644496][ C2] Node 0 DMA32: 579*4kB (UMH) 368*8kB (UMEH) 242*16kB (UMEH) 1161*32kB (UMEH) 411*64kB (UMEH) 177*128kB (UMEH) 69*256kB (UMH) 24*512kB (UMH) 8*1024kB (UH) 4*2048kB (U) 5*4096kB (U) = 162060kB [ 87.649677][ C2] Node 1 Normal: 13*4kB (UE) 45*8kB (UEH) 61*16kB (UEH) 162*32kB (UE) 80*64kB (UEH) 49*128kB (UEH) 22*256kB (UH) 25*512kB (UH) 15*1024kB (UH) 2*2048kB (U) 3*4096kB (U) = 68140kB [ 87.654296][ C2] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 87.656730][ C2] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 87.659110][ C2] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 87.661559][ C2] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 87.663976][ C2] 41827 total pagecache pages [ 87.665217][ C2] 0 pages in swap cache [ 87.666295][ C2] Free swap = 124372kB [ 87.667380][ C2] Total swap = 124996kB [ 87.668460][ C2] 1048443 pages RAM [ 87.669455][ C2] 0 pages HighMem/MovableOnly [ 87.670672][ C2] 281640 pages reserved [ 87.671761][ C2] 0 pages cma reserved [ 87.904212][ T30] cfg80211: failed to load regulatory.db [ 87.934763][ T56] Unregistered device nBox DVB-T Dongle [ 87.953596][ T56] as10x_usb: device has been disconnected [ 88.805431][ T39] kauditd_printk_skb: 25 callbacks suppressed [ 88.805440][ T39] audit: type=1400 audit(1732514716.560:319): avc: denied { rename } for pid=5351 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.820540][ T39] audit: type=1400 audit(1732514716.560:320): avc: denied { unlink } for pid=5351 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.826671][ T39] audit: type=1400 audit(1732514716.570:321): avc: denied { create } for pid=5351 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.045403][ T5314] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.048963][ T5314] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.051984][ T5314] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.056259][ T5314] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.059772][ T5962] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.061967][ T5962] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.070651][ T39] audit: type=1400 audit(1732514716.820:322): avc: denied { mounton } for pid=6370 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 89.077057][ T5962] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.081420][ T5962] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.082466][ T5959] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.083741][ T5962] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.087907][ T5962] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.090169][ T5962] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.091299][ T5959] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.092105][ T5962] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.094700][ T5959] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.097995][ T5959] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.100805][ T5959] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.102779][ T5959] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.138242][ T1413] ================================================================== [ 89.140345][ T1413] BUG: KASAN: slab-use-after-free in handle_tx+0x5a5/0x630 [ 89.142219][ T1413] Read of size 8 at addr ffff88804f380020 by task aoe_tx0/1413 [ 89.145267][ T1413] [ 89.146245][ T1413] CPU: 3 UID: 0 PID: 1413 Comm: aoe_tx0 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 89.148822][ T1413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.151569][ T1413] Call Trace: [ 89.152441][ T1413] [ 89.153211][ T1413] dump_stack_lvl+0x116/0x1f0 [ 89.154449][ T1413] print_report+0xc3/0x620 [ 89.155627][ T1413] ? __virt_addr_valid+0x5e/0x590 [ 89.156926][ T1413] ? __phys_addr+0xc6/0x150 [ 89.158109][ T1413] kasan_report+0xd9/0x110 [ 89.159280][ T1413] ? handle_tx+0x5a5/0x630 [ 89.160458][ T1413] ? handle_tx+0x5a5/0x630 [ 89.161638][ T1413] handle_tx+0x5a5/0x630 [ 89.162762][ T1413] dev_hard_start_xmit+0x9a/0x7b0 [ 89.164085][ T1413] __dev_queue_xmit+0x7f0/0x43e0 [ 89.165375][ T1413] ? __pfx___dev_queue_xmit+0x10/0x10 [ 89.166748][ T1413] ? __pfx___lock_acquire+0x10/0x10 [ 89.168108][ T1413] ? __pfx___lock_acquire+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 89.169428][ T1413] ? lock_acquire.part.0+0x11b/0x380 [ 89.171155][ T1413] ? find_held_lock+0x2d/0x110 [ 89.172447][ T1413] ? find_held_lock+0x2d/0x110 [ 89.173703][ T1413] ? tx+0xa8/0x190 [ 89.174687][ T1413] ? __pfx_lock_release+0x10/0x10 [ 89.176076][ T1413] ? lock_acquire+0x2f/0xb0 [ 89.177261][ T1413] tx+0xcc/0x190 [ 89.178206][ T1413] ? __pfx_tx+0x10/0x10 [ 89.179288][ T1413] kthread+0x1e7/0x3c0 [ 89.180367][ T1413] ? __pfx_kthread+0x10/0x10 [ 89.181579][ T1413] ? __pfx_default_wake_function+0x10/0x10 [ 89.183211][ T1413] ? lockdep_hardirqs_on+0x7c/0x110 [ 89.184567][ T1413] ? __kthread_parkme+0x148/0x220 [ 89.185869][ T1413] ? __pfx_kthread+0x10/0x10 [ 89.187063][ T1413] kthread+0x2c1/0x3a0 [ 89.188129][ T1413] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.189467][ T1413] ? __pfx_kthread+0x10/0x10 [ 89.190663][ T1413] ret_from_fork+0x45/0x80 [ 89.191823][ T1413] ? __pfx_kthread+0x10/0x10 [ 89.193023][ T1413] ret_from_fork_asm+0x1a/0x30 [ 89.194261][ T1413] [ 89.195065][ T1413] [ 89.195694][ T1413] Allocated by task 6227: [ 89.196804][ T1413] kasan_save_stack+0x33/0x60 [ 89.198121][ T1413] kasan_save_track+0x14/0x30 [ 89.199350][ T1413] __kasan_kmalloc+0xaa/0xb0 [ 89.200535][ T1413] alloc_tty_struct+0x98/0x8d0 [ 89.201788][ T1413] tty_init_dev.part.0+0x1e/0x660 [ 89.203082][ T1413] tty_open+0xac1/0xf80 [ 89.204160][ T1413] chrdev_open+0x237/0x6a0 [ 89.205308][ T1413] do_dentry_open+0xf59/0x1ea0 [ 89.206540][ T1413] vfs_open+0x82/0x3f0 [ 89.207595][ T1413] path_openat+0x1e6a/0x2d60 [ 89.208781][ T1413] do_filp_open+0x20c/0x470 [ 89.209947][ T1413] do_sys_openat2+0x17a/0x1e0 [ 89.211157][ T1413] __x64_sys_openat+0x175/0x210 [ 89.212408][ T1413] do_syscall_64+0xcd/0x250 [ 89.213567][ T1413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.215086][ T1413] [ 89.215712][ T1413] Freed by task 6352: [ 89.216740][ T1413] kasan_save_stack+0x33/0x60 [ 89.217952][ T1413] kasan_save_track+0x14/0x30 [ 89.219155][ T1413] kasan_save_free_info+0x3b/0x60 [ 89.220447][ T1413] __kasan_slab_free+0x51/0x70 [ 89.221670][ T1413] kfree+0x14f/0x4b0 [ 89.222691][ T1413] process_one_work+0x9c5/0x1ba0 [ 89.224000][ T1413] worker_thread+0x6c8/0xf00 [ 89.225195][ T1413] kthread+0x2c1/0x3a0 [ 89.226249][ T1413] ret_from_fork+0x45/0x80 [ 89.227403][ T1413] ret_from_fork_asm+0x1a/0x30 [ 89.228633][ T1413] [ 89.229252][ T1413] Last potentially related work creation: [ 89.230696][ T1413] kasan_save_stack+0x33/0x60 [ 89.231902][ T1413] __kasan_record_aux_stack+0xba/0xd0 [ 89.233271][ T1413] insert_work+0x36/0x230 [ 89.234378][ T1413] __queue_work+0x97e/0x1080 [ 89.235572][ T1413] queue_work_on+0x11a/0x140 [ 89.236752][ T1413] release_tty+0x4de/0x5d0 [ 89.237901][ T1413] tty_release_struct+0xb7/0xe0 [ 89.239147][ T1413] tty_release+0xe25/0x1410 [ 89.240322][ T1413] __fput+0x3f8/0xb60 [ 89.241349][ T1413] task_work_run+0x14e/0x250 [ 89.242546][ T1413] do_exit+0xadd/0x2d70 [ 89.243626][ T1413] do_group_exit+0xd3/0x2a0 [ 89.244794][ T1413] get_signal+0x24ed/0x26c0 [ 89.245960][ T1413] arch_do_signal_or_restart+0x90/0x7e0 [ 89.247373][ T1413] syscall_exit_to_user_mode+0x150/0x2a0 [ 89.248810][ T1413] do_syscall_64+0xda/0x250 [ 89.249972][ T1413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.251489][ T1413] [ 89.252107][ T1413] The buggy address belongs to the object at ffff88804f380000 [ 89.252107][ T1413] which belongs to the cache kmalloc-cg-2k of size 2048 [ 89.255679][ T1413] The buggy address is located 32 bytes inside of [ 89.255679][ T1413] freed 2048-byte region [ffff88804f380000, ffff88804f380800) [ 89.259117][ T1413] [ 89.259741][ T1413] The buggy address belongs to the physical page: [ 89.261362][ T1413] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88804f381000 pfn:0x4f380 [ 89.263902][ T1413] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 89.266029][ T1413] memcg:ffff8880314dd601 [ 89.267109][ T1413] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 89.269255][ T1413] page_type: f5(slab) [ 89.270288][ T1413] raw: 00fff00000000240 ffff88801b050140 ffffea00013db810 ffffea00013dc610 [ 89.272479][ T1413] raw: ffff88804f381000 0000000000080004 00000001f5000000 ffff8880314dd601 [ 89.274666][ T1413] head: 00fff00000000240 ffff88801b050140 ffffea00013db810 ffffea00013dc610 [ 89.276871][ T1413] head: ffff88804f381000 0000000000080004 00000001f5000000 ffff8880314dd601 [ 89.279072][ T1413] head: 00fff00000000003 ffffea00013ce001 ffffffffffffffff 0000000000000000 [ 89.281281][ T1413] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 89.283486][ T1413] page dumped because: kasan: bad access detected [ 89.285113][ T1413] page_owner tracks the page as allocated [ 89.286564][ T1413] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5950, tgid 5950 (syz-executor), ts 45139041287, free_ts 0 [ 89.291719][ T1413] post_alloc_hook+0x2d1/0x350 [ 89.292955][ T1413] get_page_from_freelist+0xfce/0x2f80 [ 89.294359][ T1413] __alloc_pages_noprof+0x223/0x25a0 [ 89.295715][ T1413] alloc_pages_mpol_noprof+0x2c9/0x610 [ 89.297113][ T1413] new_slab+0x2c9/0x410 [ 89.298182][ T1413] ___slab_alloc+0xdac/0x1880 [ 89.299392][ T1413] __slab_alloc.constprop.0+0x56/0xb0 [ 89.300758][ T1413] __kmalloc_node_track_caller_noprof+0x355/0x430 [ 89.302403][ T1413] kmemdup_noprof+0x29/0x60 [ 89.303582][ T1413] neigh_sysctl_register+0xb3/0x640 [ 89.304916][ T1413] addrconf_sysctl_register+0xb9/0x1f0 [ 89.306313][ T1413] ipv6_add_dev+0xa6f/0x13f0 [ 89.307523][ T1413] addrconf_notify+0x53e/0x19c0 [ 89.308780][ T1413] notifier_call_chain+0xb7/0x410 [ 89.310088][ T1413] call_netdevice_notifiers_info+0xbe/0x140 [ 89.311632][ T1413] register_netdevice+0x17a0/0x1e90 [ 89.312977][ T1413] page_owner free stack trace missing [ 89.314347][ T1413] [ 89.314972][ T1413] Memory state around the buggy address: [ 89.316410][ T1413] ffff88804f37ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.318451][ T1413] ffff88804f37ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.320502][ T1413] >ffff88804f380000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.322552][ T1413] ^ [ 89.323831][ T1413] ffff88804f380080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.325802][ T1413] ffff88804f380100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.327847][ T1413] ================================================================== [ 89.329964][ T1413] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 89.331813][ T1413] CPU: 3 UID: 0 PID: 1413 Comm: aoe_tx0 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 89.334362][ T1413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.337020][ T1413] Call Trace: [ 89.337859][ T1413] [ 89.338594][ T1413] dump_stack_lvl+0x3d/0x1f0 [ 89.339800][ T1413] panic+0x71d/0x800 [ 89.340815][ T1413] ? __pfx_panic+0x10/0x10 [ 89.341985][ T1413] ? check_panic_on_warn+0x1f/0xb0 [ 89.343301][ T1413] check_panic_on_warn+0xab/0xb0 [ 89.344594][ T1413] end_report+0x117/0x180 [ 89.345711][ T1413] kasan_report+0xe9/0x110 [ 89.346870][ T1413] ? handle_tx+0x5a5/0x630 [ 89.348044][ T1413] ? handle_tx+0x5a5/0x630 [ 89.349204][ T1413] handle_tx+0x5a5/0x630 [ 89.350312][ T1413] dev_hard_start_xmit+0x9a/0x7b0 [ 89.351633][ T1413] __dev_queue_xmit+0x7f0/0x43e0 [ 89.352911][ T1413] ? __pfx___dev_queue_xmit+0x10/0x10 [ 89.354284][ T1413] ? __pfx___lock_acquire+0x10/0x10 [ 89.355630][ T1413] ? __pfx___lock_acquire+0x10/0x10 [ 89.356978][ T1413] ? lock_acquire.part.0+0x11b/0x380 [ 89.358336][ T1413] ? find_held_lock+0x2d/0x110 [ 89.359580][ T1413] ? find_held_lock+0x2d/0x110 [ 89.360824][ T1413] ? tx+0xa8/0x190 [ 89.361806][ T1413] ? __pfx_lock_release+0x10/0x10 [ 89.363112][ T1413] ? lock_acquire+0x2f/0xb0 [ 89.364298][ T1413] tx+0xcc/0x190 [ 89.365230][ T1413] ? __pfx_tx+0x10/0x10 [ 89.366293][ T1413] kthread+0x1e7/0x3c0 [ 89.367361][ T1413] ? __pfx_kthread+0x10/0x10 [ 89.368560][ T1413] ? __pfx_default_wake_function+0x10/0x10 [ 89.370063][ T1413] ? lockdep_hardirqs_on+0x7c/0x110 [ 89.371411][ T1413] ? __kthread_parkme+0x148/0x220 [ 89.372716][ T1413] ? __pfx_kthread+0x10/0x10 [ 89.373911][ T1413] kthread+0x2c1/0x3a0 [ 89.374970][ T1413] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.376318][ T1413] ? __pfx_kthread+0x10/0x10 [ 89.377513][ T1413] ret_from_fork+0x45/0x80 [ 89.378667][ T1413] ? __pfx_kthread+0x10/0x10 [ 89.379879][ T1413] ret_from_fork_asm+0x1a/0x30 [ 89.381123][ T1413] [ 89.382516][ T1413] Kernel Offset: disabled [ 89.383641][ T1413] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:05:17 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff816a768c RDX=fffffbfff20beb83 RSI=0000000000000008 RDI=ffffffff905f5c10 RBP=0000000000000000 RSP=ffffc90005c5f5e8 R8 =0000000000000000 R9 =fffffbfff20beb82 R10=ffffffff905f5c17 R11=0000000000000003 R12=0000000000000000 R13=000000000003d90c R14=0000000000000000 R15=0000000000000000 RIP=ffffffff816a7694 RFL=00000247 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555885f4500 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb028d36038 CR3=0000000032c52000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d766765735f 656c646e61683d53 4e4f4954504f5f4e 4153410063657865 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb02986d100 00007fb028d0c440 00007fb028d0c458 00007fb028d0c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=0000000000000021 RCX=ffffffff816a7e9e RDX=fffffbfff2dc9399 RSI=0000000000000008 RDI=ffffffff96e49cc0 RBP=0000000000000003 RSP=ffffc90000a9f948 R8 =0000000000000000 R9 =fffffbfff2dc9398 R10=ffffffff96e49cc7 R11=0000000000000002 R12=0000000000000000 R13=ffff88801fd34880 R14=0000000000000021 R15=ffff88801fd353b0 RIP=ffffffff816a7ea6 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0d2f267d60 CR3=000000000df7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d2e70c6a3 00007f0d2e70c6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffedd47a610 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000300000014 0000000200000021 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000007 0000000400000017 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555763021e1 0000555576301cd0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000030343935 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000101 0000000000003065 6764697200000034 1000118000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 98471c6a69479006 000055557630b4f0 00007f0d2e70cda0 0000000000000037 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8101028000000000 0800010000000806 060127a262422070 85309c3800000036 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 574462da00000000 9158026db9972af4 3808039803380800 00007f0d00000035 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d00000000 0000000000000101 0000000000003065 6764697200000034 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000300 RBX=0000000000000000 RCX=ffffffff89e14814 RDX=ffff88801d6b2440 RSI=0000000000000000 RDI=0000000000000001 RBP=ffff888052e3e500 RSP=ffffc9000062e898 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000003 R12=ffff8880290ba404 R13=0000000000000000 R14=ffff8880290ba380 R15=0000000000000000 RIP=ffffffff818ebb68 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020000000 CR3=000000000df7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 70fe02b63a2949d9 6649a92219adb9c1 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2b8d5415b3c5ae8f 23ec435e3f10cebe ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6cb91411ba2b46f2 264104ae62cfc689 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d1962eadb6d1928 26b77e7bd31f7644 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000600 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ea97f438eb92a300 00000036eb92d4a8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0080010000800100 00800100eb930306 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003600800100 eb9238fc00000036 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0080010000000036 0000003600800100 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a4f4d0ddde6a5a7e 68faf6753df06e37 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2b766fc230669456 d4977128573640ce ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85067aa5 RDI=ffffffff9ab05bc0 RBP=ffffffff9ab05b80 RSP=ffffc900070bf498 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000031343154 R12=0000000000000000 R13=000000000000005b R14=ffffffff85067a40 R15=0000000000000000 RIP=ffffffff85067acf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055e196461050 CR3=000000000df7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3610f28f3f95bdf5 b16efc99e361654a ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 417373cb280ad89b 9c95c48e05f8cf04 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a13dc6e38fa1063 46e891b36903f96b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 24517d03230486d9 00a9af54e67b518a ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000100 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c8d368179c55ecde cb135e0632653d88 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 610590c532f3ed19 dea5d03d63ad05c1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 71f2a7cb6f6a49b6 a303cb7b5f0abef9 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f47c9c9d1489bfde b6906a6601b857c3 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 76223874b2b9b665 c0602594813a7c81 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 95d52142523a67be 05c2247162b914f2 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000