last executing test programs: 7.891169248s ago: executing program 0 (id=430): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/user\x00') flistxattr(r1, &(0x7f0000000080)=""/156, 0x9c) (async) flistxattr(r1, &(0x7f0000000080)=""/156, 0x9c) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x8, 0x0, 0x101, 0x5, 0x0}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r3, 0xfffffffa}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000280)={r3, 0x9d, "00aa7dd5391f9e0d811f16d06e2cfe48b6178d5634a75fbcf6e86fd073d227365910fc2f992cf1e0bb074add9859c81f4c8f692f010a5c1d3248fc93c7a64d8748a475bd7c5c49ff93e809125bda5435275c50449d88743b68646988b22cd2b8d7fff0fb96418729f292f71eea89de90a6f1b99896eb7367387bddbecb062973da63fbc8ffb2aee17ca2cefd0310968d81ac92b64d540df726c3c187b4"}, &(0x7f0000000340)=0xa5) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000380)={r3, 0xffff, 0x6, [0x4, 0x100, 0x4, 0x0, 0x5, 0x9]}, 0x14) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000003c0)={r3, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000400)={r3, @in6={{0xa, 0x4e21, 0x30, @private2, 0xff}}}, 0x84) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000400)={r3, @in6={{0xa, 0x4e21, 0x30, @private2, 0xff}}}, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @remote}], 0x10) r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) fsync(r5) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000540)={r3, @in={{0x2, 0x4e22, @private=0xa010101}}}, 0x84) landlock_create_ruleset(&(0x7f0000000600)={0x132, 0x0, 0x1}, 0x18, 0x1) (async) r6 = landlock_create_ruleset(&(0x7f0000000600)={0x132, 0x0, 0x1}, 0x18, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000640), 0x121000) (async) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000640), 0x121000) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000680)={0x101, r7}, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r2) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x14c, r8, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe60}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x38}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x871d}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8000}, 0x240040c5) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), r2) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r9, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf9d}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44080}, 0xf0f66e34c32dd748) sendmsg$nl_route(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@ipv6_getanyicast={0x14, 0x3e, 0x20, 0x70bd2d, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20040804) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000b80)={r4}, &(0x7f0000000bc0)=0x8) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000c00), 0x400000) (async) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000c00), 0x400000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000000c40)={{0x1, 0x2, 0x60000, 0x2, 0xfffffc01}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000000c40)={{0x1, 0x2, 0x60000, 0x2, 0xfffffc01}}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000cc0), r2) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000cc0), r2) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r11, 0x10, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x1) (async) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r11, 0x10, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x1) 7.889496568s ago: executing program 0 (id=432): r0 = open$dir(&(0x7f00000042c0)='./file1\x00', 0x4240, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) r1 = dup(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00c8700b6d74a37ea300000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00 \x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0xf, &(0x7f0000000300)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0xf}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @generic={0x2, 0x6, 0x2, 0xd, 0x7fffffff}, @generic={0x5, 0xe, 0x7, 0x6, 0x5ae}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000380)='syzkaller\x00', 0x800, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, @tracing, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0xa, 0x0, 0x3}, 0x10, 0x0, r2, 0x6, &(0x7f0000000400)=[r6, r4, r1, r3, r1], &(0x7f0000000440)=[{0x1, 0x2, 0x6, 0x9}, {0x3, 0x1, 0x8, 0x7}, {0x5, 0x4, 0x0, 0x3}, {0x5, 0x5, 0xe, 0x9}, {0x2, 0x2, 0x1, 0xd}, {0x0, 0x5, 0x8, 0x9}], 0x10, 0x4, @void, @value}, 0x94) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) fcntl$getownex(r7, 0x10, &(0x7f0000000080)={0x0, 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x25, 0xc, @val=@iter={&(0x7f0000000100)=@task={r8}, 0x10}}, 0x20) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='efs\x00', 0x2000802, 0x0) 7.802415764s ago: executing program 0 (id=433): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/ipc\x00') r2 = fcntl$dupfd(r0, 0x406, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)=ANY=[@ANYBLOB="afdd037b", @ANYRES16=r4, @ANYBLOB="030f0000000000000000340000000800030004000000"], 0x1c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r5, 0x16, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000240), &(0x7f0000000280)=r7}, 0x20) ioctl$TCFLSH(r2, 0x400455c8, 0x20000000009) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) flock(0xffffffffffffffff, 0xc) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x2a020400) r10 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x0) r12 = openat$cgroup_pressure(r11, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) read$FUSE(r12, &(0x7f0000000d40)={0x2020}, 0x2020) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @remote, 0x7, 0xda, 0xba, 0x400, 0x800, 0x80020080}) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r9, @ANYRES32=r13, @ANYBLOB="02"], 0x10) socket$kcm(0xa, 0x2, 0x73) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1a) 5.690883422s ago: executing program 0 (id=457): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000000)=0x80) connect$rose(r0, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @default]}, 0x40) 5.615689575s ago: executing program 0 (id=462): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') ioctl$BTRFS_IOC_ADD_DEV(r0, 0xb701, 0x0) (async) ioctl$BTRFS_IOC_ADD_DEV(r0, 0xb701, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x1e5041, 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f00000018c0)='./file0\x00', &(0x7f0000001900), 0x2, &(0x7f0000001a00)={'trans=virtio,', {[{@cache_fscache}, {@aname={'aname', 0x3d, '/proc/locks\x00'}}]}}) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x2040810) (async) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x2040810) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB=','], 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB=','], 0x20) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, r3, 0xffffe000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) 3.661691476s ago: executing program 3 (id=493): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f00000000c0)=0xa, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x3c}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f00000001c0)='GPL\x00', 0x4, 0xf4, &(0x7f00000004c0)=""/244, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xe, 0xc, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[r3], &(0x7f00000006c0)=[{0x5, 0x3, 0x2, 0xb}, {0x5, 0x4, 0xd, 0xa}, {0x5, 0x5, 0x2}, {0x4, 0x3, 0xa, 0xb}, {0x5, 0x3, 0x10, 0x2}], 0x10, 0x1, @void, @value}, 0x94) (async) r4 = socket(0x10, 0x803, 0x0) (async) r5 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x1000, 0x0, {0xa, 0x78, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x1000000, 0xfffff001}}]}, 0x40}}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.560435396s ago: executing program 3 (id=499): sendmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000000)=@x25, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="1fe60c37980422cf736248a053376dae29bbc47f1a950bdd879c805b0bdd8456ff3031f61f9e6022b477d3ce5ef657640cde1bf29b8dbeff50fe3c9ce8bf1c2748bb1954430204db7368c4872ef496c88966a4e8fd", 0x55}, {&(0x7f0000000100)="00b2f8e343010c92e57195093211a2e4ce216ab432d554272bdc9062600ca60f681c1f1074ce852add6614174ce2f0c2ad83ebf946df0f109f214542", 0x3c}, {&(0x7f0000000140)="4d19499c9c9006d78a10f540d8320d99c0a6027d868efaefdac5b0543d0af076051c476c9ad2ebb835700bcbcb7ea16e", 0x30}, {&(0x7f0000000b00)="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", 0x1000}], 0x4, &(0x7f00000001c0)=[{0x48, 0x103, 0x5478590c, "9f46fc75fbea71fac39c5290b707eabdc07f2123873b96319855414cbff8bad4d9db91f4da9c2c12173a626b204e454c8982d26c26178c"}, {0xc8, 0x0, 0x7, "93e6494e30efaa362a2c725e4a7241e0ecb0496576055794775f46ec65f0cdd2b27037a686fc1c716a08719fe96c10bf808bde89521666ca2a2b764f2d0de7267d34a0fec5becb70e5a2dfb2e4562b41ce43457e8426b774431dbdd0e00c7d1de89db5fecba7cbfd34d86847d36c8366dabb73ecc07a84bc29ded0b08f1dd6b7d0550c495eb536311736cd381f43fbfded19ce8f06fae9064d159f27b25098c2869d180176bf7baad3f67dc1af3b3f587c461e61b2d8"}], 0x110}}], 0x1, 0x4c094) (async) syz_emit_ethernet(0x34e, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000cd0403183afffe8000000000000000000000000000bbff02000000000000000000000000000186009078005a01000000000000000000030aa78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af050200990000050000000000260004000018fe906d31efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab283e278888e668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c61bcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000000b17dcea46800000004c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f00e07b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a02744000000000000000000000000085e14ccb44d2d42cfb3f207afb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c00"/843], 0x0) 2.502398973s ago: executing program 3 (id=500): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 2.501618873s ago: executing program 3 (id=501): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2100c916ecb91dd021102100000008000300", @ANYRES32=r3, @ANYBLOB="24002d80050004000000000008000300040000000500010042000000080002"], 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x400c084) 2.441967358s ago: executing program 3 (id=503): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x4000010, r0, 0x2d249000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$dsp(r0, &(0x7f0000000040)="30063417dae43525372da5a5317da0573588bd7f9d1878f232ad94ddecb6599bbc62beacab9bf677a22c35cc59fbba5ff36cd132eac9ee4867e1733e77b21e6edfe6919c07fa322f6955d997baa45159737c809293d22f337df477a5d7faa5fade8c33ff6d538db07ac4b9009ff1eacfdc2060fe1aeda678c0da640368e444acc7597bb6a5", 0x85) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) socket$can_raw(0x1d, 0x3, 0x1) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000100)={0x8, 0x4f, {0x0}, {0x0}, 0x9, 0x7fffffff}) timer_create(0x7, &(0x7f0000000140)={0x0, 0x3a, 0x2, @tid=r2}, &(0x7f0000000180)) ioctl$CDROMREADALL(r1, 0x5318, &(0x7f00000001c0)) mount$overlay(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80), 0x10c0, &(0x7f0000000cc0)={[{@redirect_dir_off}, {@index_off}, {@metacopy_on}, {@volatile}, {@workdir={'workdir', 0x3d, './file0'}}, {@uuid_null}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@euid_lt={'euid<', r3}}]}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000d40)={0x1, 0xffffffffffffffff, 0x1}) preadv(r4, &(0x7f0000001180)=[{&(0x7f0000000d80)=""/195, 0xc3}, {&(0x7f0000000e80)=""/12, 0xc}, {&(0x7f0000000ec0)=""/186, 0xba}, {&(0x7f0000000f80)=""/228, 0xe4}, {&(0x7f0000001080)=""/125, 0x7d}, {&(0x7f0000001100)=""/67, 0x43}], 0x6, 0x4, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r5 = add_key$keyring(&(0x7f0000001300), &(0x7f0000001340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000001200), &(0x7f0000001240)={'syz', 0x2}, &(0x7f0000001280)="7e0603d4b3102598966a225b8146383846228df6dfdeeecc276ffefc4e499c9dd3ce3baa68468bcb0e92dbd81fedec0a3c6a2bf984f3785e2c3b171c2976bbcb65dce08129d03adf64e4ef9b77e64beec7ce672b465a2702a05a4eab0f75000f95b52906", 0x64, r5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001380)={0x0, 0x3, 0x8002004, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f00000013c0)=0x7fff) ioctl$BTRFS_IOC_SEND(r6, 0x40489426, &(0x7f0000001480)={{r1}, 0x9, &(0x7f0000001400)=[0xb, 0x7ff, 0x0, 0x8000000000000000, 0x0, 0x0, 0x6, 0x3, 0x10], 0x8000, 0x5}) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000001500)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000001840)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001800)={&(0x7f00000015c0)={0x224, r7, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x81, 0x47}}}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="82eafbc460770d48f344f57aaf077d13"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="73ae1f6b56af1b2251decb760fe9f8c7c945633470a5d7e8"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="0e58fc385b31e64a5f18c03d8963e717"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b97eebc7807d9fb3793f624dc97a19d5b8d08cb640d6696b017827bd31de9b1e"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "79cd074b27974e3f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7935b53dc0235063"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="48b81292ee1fa4ef0c526c87482c147d"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6da7979f0503d4feb325c50dbe4d44d5"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="aba761588fd19d8796d2ca1a14f47f89aa1e7a66dbad640313fe5149d0d3c678"}]}, @NL80211_ATTR_REKEY_DATA={0xa4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f9fa016ded6b5e7896e218cd81568d36af9831cdbcca60a8"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "481733c36d5c1cd1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b5207fb67827f178"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "58dc2079caaf46ce"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d24e62a2dad6bb43504c613febb5175dfff1d1ee5bbb91bf"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d470b4330240a2ce"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "de4bbe28d3540513"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="67fcb9267ebad8e116345c1b68b6edb26e62d36ca3b1124622727e6db6c80495"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ef329007a14402bb9cf6e339965c6eb2"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e266c52bf3a6f94b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffff9}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f4e8089bb89c5ba474587be415a58595819c9a5c5b0bc368"}]}, @NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="45f1e36271acc9cb39c433dd0e557655d13007eae33cc59945ed34be845e5226"}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x10000}, 0x44) syz_open_dev$sndmidi(&(0x7f0000001880), 0x4, 0x159000) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f00000018c0)={0x0, @bt={0x2, 0x6, 0x1, 0x3, 0x60000000000000, 0x8, 0x7, 0x7, 0x8, 0x1218, 0x4, 0x4, 0x5, 0x5, 0x5, 0x4, {0x80, 0x3ff}, 0x5, 0xb}}) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000001980), 0x10) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f00000019c0)={@desc={0x1, 0x0, @desc2}}) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000001a40)={{r1}, "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"}) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000002a40)=""/53, &(0x7f0000002a80)=0x35) 2.440501425s ago: executing program 3 (id=504): r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x800) (async) getpid() (async) getpid() (async) socket$nl_route(0x10, 0x3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="223a830aeee3fba7453392c50f0edaca3461f888957d0531a6ac58d201420c32340db5f14642397a26112124394bed105797ed9008c44e8e19914582c056988148ae4118481fc19ba12721052814be5f3e98b8a746fe54c38f3866f9f385ff64", 0x60, 0x8000, &(0x7f0000000140)={0x2, 0x4e21, @private=0xa010102}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000180), 0x9, 0x128c0) r4 = openat(r3, &(0x7f00000001c0)='./file0\x00', 0x412000, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) getpid() (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001340)={&(0x7f0000000300)={0x1038, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7}, @ETHTOOL_A_EEE_MODES_OURS={0x1014, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffe00}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}]}, 0x1038}, 0x1, 0x0, 0x0, 0x4084010}, 0xc000) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r3) sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x38, r7, 0x300, 0x70bd26, 0x4, {{}, {@void, @val={0xc, 0x99, {0x36, 0x3}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xfa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20004040) r8 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r8, &(0x7f0000001800)={0x2c, &(0x7f0000001580)={0x20, 0x0, 0x54, {0x54, 0x22, "2b1028fab522da39f6bf261abcba9dd91ea0056e83c3151bd3d2a3c8b38ca911a331f847e48fbf6b9cdce0b249115e3b69a3e58a69519469e8d68fe8234c8341d8cc38c049ec99c1afc6cb89c14c9d715101"}}, &(0x7f0000001600)={0x0, 0x3, 0x47, @string={0x47, 0x3, "01f87b69bb8e66df3129a34e8a636b6be864c3f6a89c342ae692b8579a5d079a29b50d241531f82a1ea5e12bc007ee32612d696e1407abb61fa3acd29ebb615aa5bc70c57a"}}, &(0x7f0000001680)={0x0, 0xf, 0xf8, {0x5, 0xf, 0xf8, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0xfe, 0x2, 0x81}, @ptm_cap={0x3}, @generic={0xc7, 0x10, 0xa, "40eda345d41b627c8b9b09763b1488b6617ff748b05c9e39b1d1c7b17f29ffc39053b4e5bcfdc7622999f5608bc20d18cb8d86333a02e2ada1fd744bc66edb02e9c8bd8d04d1483aaf56020f0cd9e38690d211acb3f7afcc7529d864ca549e752c135b7e437a403de2c0e058f32d4c6c14eb526ac749f4103c76087851e56a29f62969bde847b6cc7d3d3302a4f359f21f7279b5fce526792d9eee3e2bb910b525c2200ad0526d139bb22ed52db9b4fb822fb6a03fc17a90f40cc879ac4c071e58abea02"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x25, 0x1, 0x7, 0xe23, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "4deb68954f800047f692ac570fa36100"}]}}, &(0x7f0000001780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x7f, 0x4, "83cb572c", "37071803"}}, &(0x7f00000017c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0x0, 0x84, 0x5a, 0xd, 0x5}}}, &(0x7f0000001d40)={0x84, &(0x7f0000001840)={0x20, 0x15, 0xfc, "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"}, &(0x7f0000001980)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000019c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001a00)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000001a40)={0x20, 0x0, 0x4, {0x0, 0x10}}, &(0x7f0000001a80)={0x40, 0x7, 0x2, 0x3ff}, &(0x7f0000001ac0)={0x40, 0x9, 0x1, 0xc0}, &(0x7f0000001b00)={0x40, 0xb, 0x2, "ea53"}, &(0x7f0000001b40)={0x40, 0xf, 0x2, 0xcc}, &(0x7f0000001b80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000001bc0)={0x40, 0x17, 0x6, @random="10c98929232b"}, &(0x7f0000001c00)={0x40, 0x19, 0x2, "c7e1"}, &(0x7f0000001c40)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000001c80)={0x40, 0x1c, 0x1, 0xc3}, &(0x7f0000001cc0)={0x40, 0x1e, 0x1, 0xb}, &(0x7f0000001d00)={0x40, 0x21, 0x1, 0x1}}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001e40)={&(0x7f0000001e00)='host1x_syncpt_load_min\x00', r4, 0x0, 0x4}, 0x18) (async) getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000001e80)=""/55, &(0x7f0000001ec0)=0x37) (async) r9 = socket(0xa, 0x80806, 0x20200) (async) socket$kcm(0x29, 0x5, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000002080)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002040)={&(0x7f0000001f40)={0xf4, r6, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x94, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x24000810}, 0x342e2956a4bca63b) (async) rt_sigtimedwait(&(0x7f00000020c0)={[0x1]}, 0x0, &(0x7f0000002100)={0x77359400}, 0x8) read$msr(0xffffffffffffffff, &(0x7f0000002140)=""/4096, 0x1000) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000003200)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x28, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0xc}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4040) (async) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000003240)={0x5, 0x7}) (async) setsockopt$sock_int(r9, 0x1, 0x3, &(0x7f0000003280)=0x1000, 0x4) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000032c0)={0xaa, 0x200}) 1.141160353s ago: executing program 2 (id=508): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='net\x00') getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) sendto$packet(r2, &(0x7f0000000200)="000054fc15", 0x5, 0x51, &(0x7f0000000000)={0x11, 0x8100, r3, 0x1, 0x8, 0x6, @remote}, 0x14) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r1, 0x4) 1.119798397s ago: executing program 0 (id=462): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') ioctl$BTRFS_IOC_ADD_DEV(r0, 0xb701, 0x0) (async) ioctl$BTRFS_IOC_ADD_DEV(r0, 0xb701, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x1e5041, 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f00000018c0)='./file0\x00', &(0x7f0000001900), 0x2, &(0x7f0000001a00)={'trans=virtio,', {[{@cache_fscache}, {@aname={'aname', 0x3d, '/proc/locks\x00'}}]}}) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x2040810) (async) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x2040810) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB=','], 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB=','], 0x20) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, r3, 0xffffe000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) 1.012442532s ago: executing program 1 (id=509): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x4], 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="bb000500000000001800128008000100767469000c0002800800040077"], 0x38}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a800000000007d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xa) read$msr(r6, &(0x7f00000000c0)=""/163, 0xa3) 961.726826ms ago: executing program 2 (id=510): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x228002, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) recvmmsg(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/166, 0xa6}, 0x40}], 0x1, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001880)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000040) openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x100000ffb, 0x2) 862.586685ms ago: executing program 1 (id=511): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2100c916ecb91dd021102100000008000300", @ANYRES32=r3, @ANYBLOB="24002d80050004000000000008000300040000000500010042000000080002"], 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x400c084) 859.984652ms ago: executing program 1 (id=512): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x60480) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') setns(r1, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0xf0, 0x0, 0x2, 0x1}) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000040)) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="480100001a001307000000000000000000000000000000000000000000000001e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) unshare(0x60480) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') (async) setns(r1, 0x0) (async) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) (async) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0xf0, 0x0, 0x2, 0x1}) (async) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000040)) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="480100001a001307000000000000000000000000000000000000000000000001e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}}, 0x0) (async) 792.453091ms ago: executing program 1 (id=513): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000180)=0x800001, 0x4) preadv(r0, &(0x7f0000000000), 0x0, 0x1, 0x200) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000040)=@ethtool_test={0x1a, 0x6, 0xbd}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x30) 791.79293ms ago: executing program 1 (id=514): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x2, 0x60, 0x0) accept$alg(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) setresgid(0xee00, r4, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000e8ff0000000000000000000000950000000002010082a18358887405b9713a1145b427653c3267c531977b364fd3e9959e924ae614258e8c6620331673ed90fbbf4d99"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r5, 0x0, 0x0}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000f00)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x3d1c, @local, 0x81}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000000c0)="b6223efb202d268f4154895117c243fa236ed2447db059121db000b593c5e739d02158ce0383df4ea964ddfdd0e4d0a2dc6446522fde362a", 0x38}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) 722.114074ms ago: executing program 1 (id=515): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040f04020106040bb2656ee5b0d664420283dff60853972d6696ded3fe735ea0b356f0de0300b1"], 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3e}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {0x2}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = dup(r1) bind$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0xfffe, @any, 0x3}, 0xe) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@gettaction={0x28, 0x32, 0x1, 0x70bd25, 0x25dffbfe, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8094}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r8) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="40000000100005ff00000000000000000000004ab0a934ed4f55a6f9cb6c9bbbd8bbc3461c37801fa23cb464fd271e20513ec8bdf0f4f2835581d4716b709c161da5d74b63b163fa7564f4e6a7c6268a4c8494388a329b898b7415f3abe6f1e45d6e74fcd397b70dde24f5dfd18bc9cac08237d62ac52ccba5353281dd5f51999df8a65d09ecf572664f343ad308213c513bf0fd0f25f2f70b2cc7c6214b52f264e25409df6fac9fd253c3e24ea8b4fb8ea20893fb85", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100767469001400028008000500e000000108000100", @ANYRES32=r9, @ANYBLOB], 0x40}}, 0x0) connect$packet(r6, &(0x7f0000000000)={0x11, 0x15, r9, 0x1, 0x80, 0x6, @remote}, 0x14) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) 112.390226ms ago: executing program 2 (id=516): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x122c42) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000003c0)={@multicast1, @remote, 0x1, 0x4, [@loopback, @dev={0xac, 0x14, 0x14, 0x28}, @broadcast, @dev={0xac, 0x14, 0x14, 0x15}]}, 0x20) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000a80)={0x1, 0x1000, "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"}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x58, r4, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @device_a, @initial, {0x0, 0x4c}, @value=@ver_80211n={0x0, 0x0, 0x2, 0x0, 0x0, 0x1}}, 0x1b, @val={0x8c, 0x18, {0x1fe, "3bf9d27a3fa9", @long="f877cc31de9038e5b85b2ccfde685c3b"}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r7 = open(&(0x7f0000000000)='./file0\x00', 0x1ed842, 0x77) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r7, 0x0, {0x0, 0x0, 0x0, 0x1, 0x800, 0x0, 0x0, 0xc, 0x1, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c71b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ca193b3e7772fd29f35239d200", "24431a1e77ae8e174f000001000000000010e100", [0x0, 0x7]}}) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x12, 0x610, 0x0, 0x202, 0x240, 0x2e8, 0x2e8, 0x240, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private2, @mcast2, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x4000003f, 0x0, 0x0, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) 62.428164ms ago: executing program 2 (id=517): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x0, 0x80805513, &(0x7f00000000c0)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1000, 0x0) 1.080152ms ago: executing program 2 (id=518): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000ed07449e360000000600000018017f22", @ANYRES8=r0, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000001fc0)=ANY=[@ANYBLOB="42000000030000000000000000000000000000000000000021"], 0x42) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vhost_msg_v2(r6, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) (async) write$vhost_msg_v2(r6, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) open_by_handle_at(r5, &(0x7f0000000100)=ANY=[@ANYRES8=r2], 0x408100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000100), 0x80) (async) pipe2$watch_queue(&(0x7f0000000100), 0x80) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) read$FUSE(r8, &(0x7f00000029c0)={0x2020}, 0x2020) (async) read$FUSE(r8, &(0x7f00000029c0)={0x2020}, 0x2020) sendto$packet(r0, &(0x7f0000000140)="240000000000f19ae5f8faa8aae9d4295cd29ddceea56b9f0acbc3d8e07c3bb6137a72a7c559eb301ad8252fbcd180956153d9f0c22fd85913057b4d5c4687055262ecc433c9dcef6d788e9dbf7d99bff71a5e16", 0x2, 0x0, &(0x7f0000000200)={0x11, 0xf8, r7}, 0xfffffffffffffdf5) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x50) 0s ago: executing program 2 (id=519): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e6902300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000000000000728032de4b00"/24]) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="00000000000013e7d2c3ccadb9d59b9108d9f21ce73e4a004a6ecfeca41a5722e564fef1e9f305be9a9d6a8405fb617c8b9ab4b5707d0050c1a9454a2660bedab4b5341c0051376592a4462b1461ef688324fe45327c18ef75c91e98f2d30fda", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x1f, &(0x7f00000008c0)=ANY=[@ANYBLOB="bca0ffff0500000018440000faffffff0000000000000000851000000400000018110000", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a50000000986090008000000f509030005000000183900000500"/56], 0x0, 0xfffffa84, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) add_key$user(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000180)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7957ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453", 0xc0, 0xffffffffffffffff) r6 = fsopen(&(0x7f00000001c0)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f9", 0x1, 0xfffffffffffffffe) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x11, &(0x7f0000000080)=0x2000004, 0x4) r9 = dup(r7) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x200002}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x1080, &(0x7f0000000340)=ANY=[]) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d00000002000000010000000800000000000000", @ANYRES32=r4, @ANYBLOB="f5ffffff0000000000000000000000001e000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="05000000010000000500"/28], 0x50) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000400), 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) kernel console output (not intermixed with test programs): [ 43.941406][ T40] audit: type=1400 audit(1744202190.425:81): avc: denied { rlimitinh } for pid=5859 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.946843][ T40] audit: type=1400 audit(1744202190.425:82): avc: denied { siginh } for pid=5859 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.535377][ T40] audit: type=1400 audit(1744202191.035:83): avc: denied { read } for pid=5336 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 44.542699][ T40] audit: type=1400 audit(1744202191.035:84): avc: denied { append } for pid=5336 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.550432][ T40] audit: type=1400 audit(1744202191.035:85): avc: denied { open } for pid=5336 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.558518][ T40] audit: type=1400 audit(1744202191.035:86): avc: denied { getattr } for pid=5336 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:25953' (ED25519) to the list of known hosts. [ 46.201337][ T40] audit: type=1400 audit(1744202192.695:87): avc: denied { name_bind } for pid=5911 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 48.206197][ T5919] cgroup: Unknown subsys name 'net' [ 48.321634][ T5919] cgroup: Unknown subsys name 'cpuset' [ 48.327481][ T5919] cgroup: Unknown subsys name 'rlimit' [ 48.546423][ T5929] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.308996][ T5919] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.533921][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 52.533936][ T40] audit: type=1400 audit(1744202199.035:105): avc: denied { execmem } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.732430][ T40] audit: type=1400 audit(1744202199.225:106): avc: denied { create } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.737901][ T40] audit: type=1400 audit(1744202199.225:107): avc: denied { read write } for pid=5937 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.746012][ T40] audit: type=1400 audit(1744202199.225:108): avc: denied { open } for pid=5937 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.754199][ T40] audit: type=1400 audit(1744202199.245:109): avc: denied { ioctl } for pid=5937 comm="syz-executor" path="socket:[6082]" dev="sockfs" ino=6082 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.788285][ T5945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.798153][ T5950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.800842][ T5950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.803171][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.805710][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.807997][ T5950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.808561][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.809094][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.810684][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.815202][ T5951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.816411][ T40] audit: type=1400 audit(1744202199.315:110): avc: denied { read } for pid=5949 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.817109][ T5950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.818599][ T5950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.818963][ T5951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.819494][ T5951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.819739][ T5951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.823935][ T40] audit: type=1400 audit(1744202199.315:111): avc: denied { open } for pid=5949 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.823958][ T40] audit: type=1400 audit(1744202199.315:112): avc: denied { mounton } for pid=5949 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.826692][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.831313][ T5950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.832756][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.836759][ T5950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.841119][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.004396][ T40] audit: type=1400 audit(1744202199.505:113): avc: denied { module_request } for pid=5937 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.044292][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 53.144359][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 53.236148][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.238845][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.241674][ T5937] bridge_slave_0: entered allmulticast mode [ 53.245260][ T5937] bridge_slave_0: entered promiscuous mode [ 53.309139][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.311965][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.314913][ T5937] bridge_slave_1: entered allmulticast mode [ 53.318137][ T5937] bridge_slave_1: entered promiscuous mode [ 53.326627][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 53.408686][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.455609][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.529114][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 53.568614][ T5937] team0: Port device team_slave_0 added [ 53.570618][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.572440][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.574450][ T5949] bridge_slave_0: entered allmulticast mode [ 53.576985][ T5949] bridge_slave_0: entered promiscuous mode [ 53.602591][ T5937] team0: Port device team_slave_1 added [ 53.604672][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.606798][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.608636][ T5949] bridge_slave_1: entered allmulticast mode [ 53.610831][ T5949] bridge_slave_1: entered promiscuous mode [ 53.727360][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.729716][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.732000][ T5938] bridge_slave_0: entered allmulticast mode [ 53.734941][ T5938] bridge_slave_0: entered promiscuous mode [ 53.751354][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.770251][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.772465][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.774866][ T5938] bridge_slave_1: entered allmulticast mode [ 53.777465][ T5938] bridge_slave_1: entered promiscuous mode [ 53.780365][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.782374][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.789368][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.794220][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.851373][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.853412][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.861106][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.879102][ T5949] team0: Port device team_slave_0 added [ 53.881164][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.883753][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.885763][ T5940] bridge_slave_0: entered allmulticast mode [ 53.888122][ T5940] bridge_slave_0: entered promiscuous mode [ 53.890854][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.893068][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.895388][ T5940] bridge_slave_1: entered allmulticast mode [ 53.897789][ T5940] bridge_slave_1: entered promiscuous mode [ 53.921466][ T5949] team0: Port device team_slave_1 added [ 53.953154][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.959739][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.977578][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.025396][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.027351][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.034780][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.054179][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.088392][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.090313][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.097744][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.129889][ T5938] team0: Port device team_slave_0 added [ 54.141080][ T5937] hsr_slave_0: entered promiscuous mode [ 54.143036][ T5937] hsr_slave_1: entered promiscuous mode [ 54.162053][ T5938] team0: Port device team_slave_1 added [ 54.215211][ T5940] team0: Port device team_slave_0 added [ 54.244129][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.246726][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.256295][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.274624][ T5940] team0: Port device team_slave_1 added [ 54.295368][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.298077][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.306433][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.356483][ T5949] hsr_slave_0: entered promiscuous mode [ 54.358814][ T5949] hsr_slave_1: entered promiscuous mode [ 54.360692][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.362985][ T5949] Cannot create hsr debugfs directory [ 54.392293][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.395244][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.402182][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.406002][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.407862][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.414665][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.513821][ T5940] hsr_slave_0: entered promiscuous mode [ 54.516678][ T5940] hsr_slave_1: entered promiscuous mode [ 54.519384][ T5940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.522068][ T5940] Cannot create hsr debugfs directory [ 54.575193][ T5938] hsr_slave_0: entered promiscuous mode [ 54.577750][ T5938] hsr_slave_1: entered promiscuous mode [ 54.580250][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.582896][ T5938] Cannot create hsr debugfs directory [ 54.864466][ T5295] Bluetooth: hci3: command tx timeout [ 54.864554][ T5945] Bluetooth: hci2: command tx timeout [ 54.865071][ T5950] Bluetooth: hci0: command tx timeout [ 54.919662][ T5937] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.925734][ T5937] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.934507][ T5937] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.944007][ T5945] Bluetooth: hci1: command tx timeout [ 54.944971][ T5937] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.962886][ T5949] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.975134][ T5949] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.979654][ T5949] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.983565][ T5949] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.045145][ T5940] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.049874][ T5940] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.056449][ T5940] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.073171][ T5940] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.127821][ T5938] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.150236][ T5938] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.155976][ T5938] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.161717][ T5938] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.202412][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.243322][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.254288][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.291222][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.294270][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.299050][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.301676][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.308461][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.321020][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.323357][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.329392][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.338629][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.340618][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.377840][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.410416][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.413161][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.422567][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.425162][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.432338][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.441035][ T5937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.443045][ T40] audit: type=1400 audit(1744202201.935:114): avc: denied { sys_module } for pid=5949 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.461619][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.488167][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.490823][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.502787][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.505497][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.552114][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.568947][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.621835][ T5937] veth0_vlan: entered promiscuous mode [ 55.631069][ T5949] veth0_vlan: entered promiscuous mode [ 55.639427][ T5937] veth1_vlan: entered promiscuous mode [ 55.646695][ T5949] veth1_vlan: entered promiscuous mode [ 55.657225][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.689007][ T5937] veth0_macvtap: entered promiscuous mode [ 55.695617][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.698556][ T5937] veth1_macvtap: entered promiscuous mode [ 55.721839][ T5949] veth0_macvtap: entered promiscuous mode [ 55.728424][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.735653][ T5940] veth0_vlan: entered promiscuous mode [ 55.742603][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.747680][ T5949] veth1_macvtap: entered promiscuous mode [ 55.757499][ T5940] veth1_vlan: entered promiscuous mode [ 55.759970][ T5937] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.762516][ T5937] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.765482][ T5937] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.767983][ T5937] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.785922][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.788988][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.792466][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.803351][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.807030][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.810555][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.821593][ T5949] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.824960][ T5949] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.827477][ T5949] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.829858][ T5949] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.845206][ T5938] veth0_vlan: entered promiscuous mode [ 55.865357][ T5940] veth0_macvtap: entered promiscuous mode [ 55.870967][ T5938] veth1_vlan: entered promiscuous mode [ 55.874258][ T5940] veth1_macvtap: entered promiscuous mode [ 55.878579][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.881374][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.906498][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.910347][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.914367][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.918347][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.924011][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.935764][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.936745][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.937842][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.942199][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.945060][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.947909][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.951625][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.972009][ T5940] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.975596][ T5940] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.978928][ T5940] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.982122][ T5940] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.997917][ T5938] veth0_macvtap: entered promiscuous mode [ 56.002389][ T5938] veth1_macvtap: entered promiscuous mode [ 56.004911][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.007096][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.037290][ T5937] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.048748][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.051624][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.062172][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.067586][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.071000][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.074173][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.077091][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.079930][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.083907][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.087296][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.089515][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.107330][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.111158][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.115028][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.118898][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.122614][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.126073][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.130914][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.139342][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.141873][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.142836][ T5938] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.148191][ T5938] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.153083][ T5938] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.156100][ T5938] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.206982][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.209498][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.255970][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.259060][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.346467][ T6020] program syz.2.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.354748][ T5996] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 56.450877][ T6036] ALSA: mixer_oss: invalid OSS volume '' [ 56.458051][ T6039] netlink: 666 bytes leftover after parsing attributes in process `syz.2.12'. [ 56.536267][ T5996] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 56.546780][ T5996] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 56.550080][ T5996] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 56.554360][ T5996] usb 5-1: config 0 interface 0 has no altsetting 0 [ 56.559180][ T5996] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 56.561654][ T5996] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 56.566470][ T5996] usb 5-1: config 0 interface 0 has no altsetting 0 [ 56.570035][ T5996] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 56.572480][ T5996] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 56.577748][ T5996] usb 5-1: config 0 interface 0 has no altsetting 0 [ 56.581242][ T5996] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 56.584043][ T5996] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 56.587112][ T5996] usb 5-1: config 0 interface 0 has no altsetting 0 [ 56.590678][ T5996] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 56.593222][ T5996] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 56.596769][ T5996] usb 5-1: config 0 interface 0 has no altsetting 0 [ 56.599845][ T5996] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 56.602364][ T5996] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 56.605687][ T5996] usb 5-1: config 0 interface 0 has no altsetting 0 [ 56.608623][ T5996] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 56.611110][ T5996] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 56.612640][ T6056] IPVS: length: 93 != 61222174680 [ 56.614456][ T5996] usb 5-1: config 0 interface 0 has no altsetting 0 [ 56.616368][ T5996] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 56.620910][ T5996] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 56.624247][ T5996] usb 5-1: config 0 interface 0 has no altsetting 0 [ 56.629390][ T5996] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 56.632049][ T5996] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 56.634712][ T5996] usb 5-1: Product: syz [ 56.635945][ T5996] usb 5-1: Manufacturer: syz [ 56.637286][ T5996] usb 5-1: SerialNumber: syz [ 56.641270][ T5996] usb 5-1: config 0 descriptor?? [ 56.648517][ T5996] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 56.731971][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 56.735454][ T6063] netlink: 244 bytes leftover after parsing attributes in process `syz.2.20'. [ 56.747105][ T6065] netlink: 36 bytes leftover after parsing attributes in process `syz.3.21'. [ 56.861670][ T5980] usb 5-1: USB disconnect, device number 2 [ 56.864749][ T6075] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 56.867998][ T5980] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 56.884943][ C2] Illegal XDP return value 16128 on prog (id 4) dev veth0, expect packet loss! [ 56.907951][ T6080] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.911991][ T6080] netlink: 'syz.3.25': attribute type 4 has an invalid length. [ 56.914839][ T6079] netlink: 'syz.3.25': attribute type 4 has an invalid length. [ 56.924782][ T6079] Zero length message leads to an empty skb [ 56.944839][ T5945] Bluetooth: hci2: command tx timeout [ 56.945675][ T5295] Bluetooth: hci0: command tx timeout [ 56.945716][ T5950] Bluetooth: hci3: command tx timeout [ 57.029784][ T6088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'. [ 57.039244][ T5295] Bluetooth: hci1: command tx timeout [ 57.047018][ T6091] netlink: 340 bytes leftover after parsing attributes in process `syz.1.28'. [ 57.050723][ T6091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28'. [ 57.088812][ T6093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6093 comm=syz.3.29 [ 57.090841][ T6096] trusted_key: encrypted_key: insufficient parameters specified [ 57.094100][ T6093] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 57.098705][ T6093] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 57.396387][ T6116] netlink: 340 bytes leftover after parsing attributes in process `syz.0.38'. [ 57.400156][ T6116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.38'. [ 57.449223][ T6118] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.460854][ T6118] netlink: 'syz.0.39': attribute type 12 has an invalid length. [ 57.463085][ T6118] netlink: 'syz.0.39': attribute type 29 has an invalid length. [ 57.465703][ T6118] netlink: 148 bytes leftover after parsing attributes in process `syz.0.39'. [ 57.468612][ T6118] netlink: 'syz.0.39': attribute type 1 has an invalid length. [ 57.471294][ T6118] netlink: 'syz.0.39': attribute type 2 has an invalid length. [ 57.558604][ T40] kauditd_printk_skb: 118 callbacks suppressed [ 57.558614][ T40] audit: type=1400 audit(1744202204.055:233): avc: denied { accept } for pid=6123 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.567900][ T40] audit: type=1400 audit(1744202204.065:234): avc: denied { write } for pid=6123 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.574075][ T40] audit: type=1400 audit(1744202204.065:235): avc: denied { read } for pid=6123 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.584437][ T40] audit: type=1400 audit(1744202204.065:236): avc: denied { mount } for pid=6130 comm="syz.1.42" name="/" dev="9p" ino=36831504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 57.602080][ T40] audit: type=1400 audit(1744202204.095:237): avc: denied { mounton } for pid=6130 comm="syz.1.42" path="/15/file0/file0" dev="9p" ino=36831512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.611410][ T40] audit: type=1400 audit(1744202204.095:238): avc: denied { mount } for pid=6130 comm="syz.1.42" name="/" dev="hugetlbfs" ino=8792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 57.623565][ T6131] netlink: 'syz.1.42': attribute type 1 has an invalid length. [ 57.626361][ T40] audit: type=1400 audit(1744202204.095:239): avc: denied { remount } for pid=6130 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 57.634569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 57.638371][ T40] audit: type=1400 audit(1744202204.095:240): avc: denied { remove_name } for pid=6133 comm="rm" name="resolv.conf.dummy0.ipv4ll" dev="tmpfs" ino=2029 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.650092][ T40] audit: type=1400 audit(1744202204.135:241): avc: denied { append } for pid=6140 comm="syz.2.44" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 57.654077][ T6143] process 'syz.0.45' launched './file0' with NULL argv: empty string added [ 57.658031][ T40] audit: type=1400 audit(1744202204.135:242): avc: denied { map } for pid=6140 comm="syz.2.44" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 57.679301][ T6131] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 57.712963][ T6143] "syz.0.45" (6143) uses obsolete ecb(arc4) skcipher [ 57.770890][ T6155] Cache volume key already in use (9p,syz,) [ 57.858053][ T6171] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 57.878371][ T6173] netlink: 'syz.1.55': attribute type 1 has an invalid length. [ 57.898329][ T6175] xt_hashlimit: size too large, truncated to 1048576 [ 57.917334][ T6178] netlink: 'syz.2.51': attribute type 33 has an invalid length. [ 57.933080][ T6175] syz.0.56: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 57.939261][ T6175] CPU: 0 UID: 0 PID: 6175 Comm: syz.0.56 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 57.939276][ T6175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.939281][ T6175] Call Trace: [ 57.939285][ T6175] [ 57.939289][ T6175] dump_stack_lvl+0x16c/0x1f0 [ 57.939305][ T6175] warn_alloc+0x248/0x3a0 [ 57.939316][ T6175] ? __pfx_warn_alloc+0x10/0x10 [ 57.939331][ T6175] ? __get_vm_area_node+0x1b9/0x300 [ 57.939343][ T6175] ? __get_vm_area_node+0x1e5/0x300 [ 57.939359][ T6175] __vmalloc_node_range_noprof+0x1110/0x1540 [ 57.939378][ T6175] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 57.939397][ T6175] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 57.939416][ T6175] __kvmalloc_node_noprof+0x2ff/0x600 [ 57.939426][ T6175] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 57.939440][ T6175] ? net_generic+0xea/0x2a0 [ 57.939452][ T6175] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 57.939469][ T6175] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 57.939482][ T6175] hashlimit_mt_check_common+0x8bb/0x1460 [ 57.939500][ T6175] hashlimit_mt_check+0x71/0x90 [ 57.939513][ T6175] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 57.939531][ T6175] xt_check_match+0x283/0xa50 [ 57.939549][ T6175] ? __schedule+0x942/0x5de0 [ 57.939562][ T6175] ? __pfx_xt_check_match+0x10/0x10 [ 57.939577][ T6175] ? xt_find_target+0x1f2/0x290 [ 57.939591][ T6175] ? xt_find_match+0x1f6/0x290 [ 57.939606][ T6175] find_check_entry.constprop.0+0x34e/0xa20 [ 57.939633][ T6175] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 57.939655][ T6175] ? kasan_quarantine_put+0x10a/0x240 [ 57.939664][ T6175] ? lockdep_hardirqs_on+0x7c/0x110 [ 57.939681][ T6175] ? kfree+0x2b6/0x4d0 [ 57.939705][ T6175] ? translate_table+0xc0e/0x17b0 [ 57.939729][ T6175] translate_table+0xd0b/0x17b0 [ 57.939759][ T6175] ? __pfx_translate_table+0x10/0x10 [ 57.939775][ T6175] ? xt_alloc_table_info+0x3e/0xa0 [ 57.939792][ T6175] do_ip6t_set_ctl+0x570/0xb00 [ 57.939805][ T6175] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 57.939820][ T6175] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 57.939835][ T6175] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 57.939855][ T6175] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 57.939869][ T6175] nf_setsockopt+0x8a/0xf0 [ 57.939883][ T6175] ipv6_setsockopt+0x135/0x170 [ 57.939897][ T6175] rawv6_setsockopt+0xc2/0x510 [ 57.939909][ T6175] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 57.939920][ T6175] ? selinux_socket_setsockopt+0x6a/0x80 [ 57.939932][ T6175] ? sock_common_setsockopt+0x2e/0xf0 [ 57.939947][ T6175] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 57.939962][ T6175] do_sock_setsockopt+0x221/0x470 [ 57.939976][ T6175] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 57.939998][ T6175] __sys_setsockopt+0x1a0/0x230 [ 57.940012][ T6175] __x64_sys_setsockopt+0xbd/0x160 [ 57.940023][ T6175] ? do_syscall_64+0x91/0x260 [ 57.940036][ T6175] ? lockdep_hardirqs_on+0x7c/0x110 [ 57.940048][ T6175] do_syscall_64+0xcd/0x260 [ 57.940062][ T6175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.940073][ T6175] RIP: 0033:0x7f984858d169 [ 57.940084][ T6175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.940098][ T6175] RSP: 002b:00007f9849451038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 57.940115][ T6175] RAX: ffffffffffffffda RBX: 00007f98487a5fa0 RCX: 00007f984858d169 [ 57.940123][ T6175] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 57.940129][ T6175] RBP: 00007f984860e2a0 R08: 0000000000000588 R09: 0000000000000000 [ 57.940135][ T6175] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 57.940140][ T6175] R13: 0000000000000000 R14: 00007f98487a5fa0 R15: 00007ffe8512a3b8 [ 57.940153][ T6175] [ 57.940157][ T6175] Mem-Info: [ 58.047793][ T6175] active_anon:8640 inactive_anon:1 isolated_anon:0 [ 58.047793][ T6175] active_file:1140 inactive_file:38441 isolated_file:0 [ 58.047793][ T6175] unevictable:1768 dirty:1617 writeback:0 [ 58.047793][ T6175] slab_reclaimable:10948 slab_unreclaimable:69856 [ 58.047793][ T6175] mapped:23573 shmem:4922 pagetables:948 [ 58.047793][ T6175] sec_pagetables:289 bounce:0 [ 58.047793][ T6175] kernel_misc_reclaimable:0 [ 58.047793][ T6175] free:483212 free_pcp:2015 free_cma:0 [ 58.060112][ T6175] Node 0 active_anon:34436kB inactive_anon:4kB active_file:4560kB inactive_file:153688kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:94168kB dirty:6428kB writeback:0kB shmem:16152kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11760kB pagetables:3792kB sec_pagetables:1156kB all_unreclaimable? no Balloon:0kB [ 58.070869][ T6175] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:40kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 58.080695][ T6175] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 58.088108][ T6175] lowmem_reserve[]: 0 1236 1236 1236 1236 [ 58.089841][ T6175] Node 0 DMA32 free:336804kB boost:0kB min:27548kB low:34432kB high:41316kB reserved_highatomic:0KB active_anon:35676kB inactive_anon:4kB active_file:4560kB inactive_file:153688kB unevictable:3536kB writepending:6428kB present:2080628kB managed:1265916kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:3932kB free_cma:0kB [ 58.099314][ T6175] lowmem_reserve[]: 0 0 0 0 0 [ 58.100640][ T6175] Node 1 Normal free:1580692kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:3536kB writepending:40kB present:2097152kB managed:1781964kB mlocked:0kB bounce:0kB free_pcp:1848kB local_pcp:552kB free_cma:0kB [ 58.108673][ T6175] lowmem_reserve[]: 0 0 0 0 0 [ 58.110383][ T6175] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 58.114531][ T6175] Node 0 DMA32: 3*4kB (UME) 7*8kB (E) 17*16kB (UE) 17*32kB (UE) 8*64kB (ME) 2*128kB (UE) 2*256kB (UM) 2*512kB (ME) 0*1024kB 0*2048kB 80*4096kB (UM) = 330868kB [ 58.121303][ T6175] Node 1 Normal: 5*4kB (UME) 6*8kB (UME) 5*16kB (ME) 114*32kB (UME) 67*64kB (UME) 16*128kB (UM) 7*256kB (U) 8*512kB (UM) 4*1024kB (UE) 4*2048kB (UME) 379*4096kB (UM) = 1580692kB [ 58.127892][ T6175] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 58.131192][ T6175] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 58.134704][ T6175] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 58.138135][ T6175] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 58.141459][ T6175] 46209 total pagecache pages [ 58.143194][ T6175] 1 pages in swap cache [ 58.145113][ T6175] Free swap = 124992kB [ 58.146621][ T6175] Total swap = 124996kB [ 58.148176][ T6175] 1048443 pages RAM [ 58.149679][ T6175] 0 pages HighMem/MovableOnly [ 58.151443][ T6175] 282633 pages reserved [ 58.152918][ T6175] 0 pages cma reserved [ 58.189888][ T6206] batadv_slave_1: entered promiscuous mode [ 58.206633][ T6206] batadv_slave_1: left promiscuous mode [ 58.350108][ T6232] netlink: 'syz.2.71': attribute type 10 has an invalid length. [ 58.373529][ T6232] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 58.379269][ T6231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.523752][ T5982] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.674313][ T5982] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 58.678863][ T5982] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.682175][ T5982] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.685616][ T5982] usb 8-1: config 0 interface 0 has no altsetting 0 [ 58.689445][ T5982] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.692752][ T5982] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.696676][ T5982] usb 8-1: config 0 interface 0 has no altsetting 0 [ 58.700340][ T5982] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.703912][ T5982] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.707961][ T5982] usb 8-1: config 0 interface 0 has no altsetting 0 [ 58.711362][ T5982] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.714744][ T5982] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.718845][ T5982] usb 8-1: config 0 interface 0 has no altsetting 0 [ 58.722026][ T5982] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.725225][ T5982] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.729156][ T5982] usb 8-1: config 0 interface 0 has no altsetting 0 [ 58.732952][ T5982] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.736353][ T5982] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.740390][ T5982] usb 8-1: config 0 interface 0 has no altsetting 0 [ 58.743954][ T5982] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.747274][ T5982] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.751171][ T5982] usb 8-1: config 0 interface 0 has no altsetting 0 [ 58.755059][ T5982] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.758415][ T5982] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.762465][ T5982] usb 8-1: config 0 interface 0 has no altsetting 0 [ 58.767170][ T5982] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 58.770587][ T5982] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 58.773875][ T5982] usb 8-1: Product: syz [ 58.775478][ T5982] usb 8-1: Manufacturer: syz [ 58.777255][ T5982] usb 8-1: SerialNumber: syz [ 58.783072][ T5982] usb 8-1: config 0 descriptor?? [ 58.790924][ T5982] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 58.998226][ T5982] usb 8-1: USB disconnect, device number 2 [ 59.011066][ T5982] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 59.023898][ T5295] Bluetooth: hci2: command tx timeout [ 59.023926][ T5945] Bluetooth: hci0: command tx timeout [ 59.026290][ T5295] Bluetooth: hci3: command tx timeout [ 59.104017][ T5295] Bluetooth: hci1: command tx timeout [ 59.172683][ T6244] xt_hashlimit: size too large, truncated to 1048576 [ 59.259866][ T6248] xt_hashlimit: size too large, truncated to 1048576 [ 60.053974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.370362][ T6264] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 60.388415][ T6264] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 60.392822][ T6264] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 60.395505][ T6264] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 60.398676][ T6264] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 60.405530][ T6264] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 60.407258][ T6264] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 60.413088][ T6264] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 60.421805][ T6285] xt_hashlimit: size too large, truncated to 1048576 [ 60.425099][ T6264] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 60.426938][ T6264] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 60.433150][ T6264] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 60.485961][ T6285] FAULT_INJECTION: forcing a failure. [ 60.485961][ T6285] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 60.489875][ T6285] CPU: 2 UID: 0 PID: 6285 Comm: syz.2.87 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 60.489904][ T6285] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.489911][ T6285] Call Trace: [ 60.489915][ T6285] [ 60.489920][ T6285] dump_stack_lvl+0x16c/0x1f0 [ 60.489937][ T6285] should_fail_ex+0x512/0x640 [ 60.489950][ T6285] _copy_from_iter+0x2a4/0x15b0 [ 60.489964][ T6285] ? alloc_pages_mpol+0x25a/0x550 [ 60.489975][ T6285] ? __pfx__copy_from_iter+0x10/0x10 [ 60.489985][ T6285] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 60.490001][ T6285] copy_page_from_iter+0xa5/0x120 [ 60.490013][ T6285] tun_build_skb.constprop.0+0x292/0x1480 [ 60.490031][ T6285] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 60.490051][ T6285] ? __pfx__kstrtoull+0x10/0x10 [ 60.490067][ T6285] tun_get_user+0x165f/0x3b10 [ 60.490085][ T6285] ? __pfx_tun_get_user+0x10/0x10 [ 60.490096][ T6285] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 60.490111][ T6285] ? find_held_lock+0x2b/0x80 [ 60.490124][ T6285] ? tun_get+0x191/0x370 [ 60.490138][ T6285] tun_chr_write_iter+0xdc/0x210 [ 60.490151][ T6285] vfs_write+0x5ba/0x1180 [ 60.490160][ T6285] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 60.490174][ T6285] ? __pfx_vfs_write+0x10/0x10 [ 60.490181][ T6285] ? find_held_lock+0x2b/0x80 [ 60.490201][ T6285] ksys_write+0x12a/0x240 [ 60.490209][ T6285] ? __pfx_ksys_write+0x10/0x10 [ 60.490217][ T6285] ? rcu_is_watching+0x12/0xc0 [ 60.490232][ T6285] do_syscall_64+0xcd/0x260 [ 60.490246][ T6285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.490256][ T6285] RIP: 0033:0x7fdfb9f8bc1f [ 60.490263][ T6285] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 60.490272][ T6285] RSP: 002b:00007fdfbad14000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 60.490282][ T6285] RAX: ffffffffffffffda RBX: 00007fdfba1a5fa0 RCX: 00007fdfb9f8bc1f [ 60.490288][ T6285] RDX: 000000000000007e RSI: 0000200000000300 RDI: 00000000000000c8 [ 60.490293][ T6285] RBP: 00007fdfbad14090 R08: 0000000000000000 R09: 0000000000000000 [ 60.490298][ T6285] R10: 000000000000007e R11: 0000000000000293 R12: 0000000000000001 [ 60.490304][ T6285] R13: 0000000000000000 R14: 00007fdfba1a5fa0 R15: 00007ffe18e76e78 [ 60.490315][ T6285] [ 60.562832][ T6295] ======================================================= [ 60.562832][ T6295] WARNING: The mand mount option has been deprecated and [ 60.562832][ T6295] and is ignored by this kernel. Remove the mand [ 60.562832][ T6295] option from the mount to silence this warning. [ 60.562832][ T6295] ======================================================= [ 60.600354][ T5295] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 60.622366][ T6299] virt_wifi0 speed is unknown, defaulting to 1000 [ 60.625142][ T6299] virt_wifi0 speed is unknown, defaulting to 1000 [ 60.627932][ T6302] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 60.628629][ T6299] virt_wifi0 speed is unknown, defaulting to 1000 [ 60.629941][ T6302] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 60.635682][ T6302] vhci_hcd vhci_hcd.0: Device attached [ 60.635829][ T6299] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 60.645872][ T6303] usbip_core: unknown command [ 60.646576][ T6299] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 60.647283][ T6303] vhci_hcd: unknown pdu 0 [ 60.647290][ T6303] usbip_core: unknown command [ 60.648313][ T1172] vhci_hcd: stop threads [ 60.653038][ T1172] vhci_hcd: release socket [ 60.655165][ T1172] vhci_hcd: disconnect device [ 60.666496][ T6299] virt_wifi0 speed is unknown, defaulting to 1000 [ 60.670882][ T6299] virt_wifi0 speed is unknown, defaulting to 1000 [ 60.675083][ T6299] virt_wifi0 speed is unknown, defaulting to 1000 [ 60.678994][ T6299] virt_wifi0 speed is unknown, defaulting to 1000 [ 60.814362][ T6317] tipc: Started in network mode [ 60.815860][ T6317] tipc: Node identity 4, cluster identity 4711 [ 60.817666][ T6317] tipc: Node number set to 4 [ 60.885566][ T6320] ptrace attach of "/syz-executor exec"[6323] was attempted by "/syz-executor exec"[6320] [ 61.083528][ T6336] xt_hashlimit: size too large, truncated to 1048576 [ 61.234563][ T6340] capability: warning: `syz.2.103' uses 32-bit capabilities (legacy support in use) [ 61.486791][ T6353] block device autoloading is deprecated and will be removed. [ 61.630714][ T6360] __nla_validate_parse: 19 callbacks suppressed [ 61.630728][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'. [ 61.646638][ T6360] capability: warning: `syz.2.110' uses deprecated v2 capabilities in a way that may be insecure [ 61.679207][ T6365] virt_wifi0 speed is unknown, defaulting to 1000 [ 61.833178][ T6370] xt_hashlimit: size too large, truncated to 1048576 [ 61.967543][ T6374] cgroup: No subsys list or none specified [ 62.021044][ T4684] IPVS: starting estimator thread 0... [ 62.023798][ T5982] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 62.103804][ T6377] IPVS: using max 45 ests per chain, 108000 per kthread [ 62.173744][ T5982] usb 7-1: Using ep0 maxpacket: 8 [ 62.176231][ T5982] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 62.180157][ T5982] usb 7-1: config 1 has no interface number 1 [ 62.182542][ T5982] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 62.187973][ T5982] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 59, changing to 7 [ 62.194712][ T5982] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 62.198256][ T5982] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.201264][ T5982] usb 7-1: Product: ᐉ [ 62.202898][ T5982] usb 7-1: Manufacturer: 幋ႚ⍁賕⧤ꈶ輕䫏䰒魌尋곶難歒졂枣镃૑䕽甬튖ئ먣匞⨣얤ꮂ쥩嚌뜂痄㵷و땗㟣孡媬䗯鑫₥⴯庢忨䈁胂ष怳脤竨鿊靀멫黯꾣쥎쮖욠ꗾ㔖̋뎭띹Ỉ㵡ᦣ廄뻲飞﬈쪤둫쳿谯開聗叾凯焔퍫箻䠌茜⼶鍭ꡜ桺 [ 62.214196][ T5982] usb 7-1: SerialNumber: 쓶 [ 62.224014][ T5295] Bluetooth: hci0: command 0x0406 tx timeout [ 62.226135][ T6264] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 62.385634][ T6385] netlink: 24 bytes leftover after parsing attributes in process `syz.1.118'. [ 62.410289][ T6385] tun0: tun_chr_ioctl cmd 1074025678 [ 62.412184][ T6385] tun0: group set to 0 [ 62.429428][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.112'. [ 62.433432][ T6368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.437408][ T6368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.451884][ T5982] usb 7-1: found format II with max.bitrate = 102, frame size=1 [ 62.454620][ T5982] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 62.463856][ T5295] Bluetooth: hci3: command 0x0c1a tx timeout [ 62.466336][ T5950] Bluetooth: hci2: command 0x0c1a tx timeout [ 62.470792][ T5982] usb 7-1: USB disconnect, device number 2 [ 62.477792][ T6392] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 62.577776][ T6396] xt_hashlimit: size too large, truncated to 1048576 [ 62.645213][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 62.688602][ T40] kauditd_printk_skb: 81 callbacks suppressed [ 62.688612][ T40] audit: type=1400 audit(1744202209.185:324): avc: denied { unlink } for pid=6399 comm="syz.1.121" name="#1" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 62.699148][ T40] audit: type=1400 audit(1744202209.185:325): avc: denied { mount } for pid=6399 comm="syz.1.121" name="/" dev="overlay" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 62.759356][ T6402] xt_hashlimit: size too large, truncated to 1048576 [ 62.993463][ T6410] netlink: 340 bytes leftover after parsing attributes in process `syz.2.125'. [ 62.996844][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.125'. [ 63.005417][ T40] audit: type=1400 audit(1744202209.505:326): avc: denied { rename } for pid=5336 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.016273][ T40] audit: type=1400 audit(1744202209.505:327): avc: denied { unlink } for pid=5336 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.025767][ T40] audit: type=1400 audit(1744202209.505:328): avc: denied { create } for pid=5336 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.088614][ T40] audit: type=1400 audit(1744202209.585:329): avc: denied { setopt } for pid=6415 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 63.127361][ T6420] syz_tun: entered allmulticast mode [ 63.131561][ T6414] JFS: charset not found [ 63.131714][ T6420] lo: entered allmulticast mode [ 63.132540][ T40] audit: type=1400 audit(1744202209.625:330): avc: denied { write } for pid=6407 comm="syz.0.124" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.137566][ T40] audit: type=1400 audit(1744202209.635:331): avc: denied { write } for pid=6419 comm="syz.1.128" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 63.169369][ T6413] ip6t_srh: unknown srh match flags 4000 [ 63.170123][ T6419] syz_tun: left allmulticast mode [ 63.173104][ T6419] lo: left allmulticast mode [ 63.216481][ T6424] autofs: Unknown parameter '' [ 63.245581][ T6425] virt_wifi0 speed is unknown, defaulting to 1000 [ 63.256390][ T6424] virt_wifi0 speed is unknown, defaulting to 1000 [ 63.411125][ T6437] xt_hashlimit: size too large, truncated to 1048576 [ 63.423068][ T6439] xt_hashlimit: size too large, truncated to 1048576 [ 63.522094][ T40] audit: type=1400 audit(1744202210.015:332): avc: denied { watch watch_reads } for pid=6444 comm="syz.2.133" path="/47" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 63.530851][ T40] audit: type=1400 audit(1744202210.015:333): avc: denied { mount } for pid=6444 comm="syz.2.133" name="/" dev="configfs" ino=3090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 63.568941][ T6449] netlink: 340 bytes leftover after parsing attributes in process `syz.2.135'. [ 63.572467][ T6449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.135'. [ 63.651761][ T6455] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 63.659011][ T4684] virt_wifi0 speed is unknown, defaulting to 1000 [ 63.660141][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'. [ 63.711988][ T6460] xt_hashlimit: size too large, truncated to 1048576 [ 63.761223][ T6464] xt_hashlimit: size too large, truncated to 1048576 [ 63.783749][ T29] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 63.826237][ T6476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.829692][ T6476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.842709][ T6461] bridge1: entered promiscuous mode [ 63.844869][ T6471] nvme_fabrics: missing parameter 'transport=%s' [ 63.844898][ T6471] nvme_fabrics: missing parameter 'nqn=%s' [ 63.896395][ T6486] xt_hashlimit: size too large, truncated to 1048576 [ 63.913763][ T29] usb 8-1: device descriptor read/64, error -71 [ 63.955680][ T6496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.959554][ T6496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.968333][ T6496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.973161][ T6496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.979765][ T6496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.984938][ T6496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.988763][ T6496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.996045][ T6496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.999825][ T6496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.003474][ T6496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.020533][ T6501] netlink: 340 bytes leftover after parsing attributes in process `syz.1.146'. [ 64.023823][ T6501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'. [ 64.083752][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 64.126150][ T6503] xt_hashlimit: invalid interval [ 64.154046][ T29] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 64.183739][ T62] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 64.213894][ T10] usb 5-1: device descriptor read/64, error -71 [ 64.286480][ T29] usb 8-1: device descriptor read/64, error -71 [ 64.303975][ T5295] Bluetooth: hci0: command 0x0406 tx timeout [ 64.323726][ T62] usb 7-1: device descriptor read/64, error -71 [ 64.352508][ T6514] nft_compat: unsupported protocol 1 [ 64.354717][ T6514] trusted_key: encrypted_key: insufficient parameters specified [ 64.395217][ T29] usb usb8-port1: attempt power cycle [ 64.473797][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 64.543846][ T5295] Bluetooth: hci3: command 0x0c1a tx timeout [ 64.544442][ T5950] Bluetooth: hci2: command 0x0c1a tx timeout [ 64.563743][ T62] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 64.583296][ T6531] xt_hashlimit: size too large, truncated to 1048576 [ 64.613771][ T10] usb 5-1: device descriptor read/64, error -71 [ 64.703782][ T62] usb 7-1: device descriptor read/64, error -71 [ 64.726713][ T10] usb usb5-port1: attempt power cycle [ 64.745656][ T29] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 64.764545][ T29] usb 8-1: device descriptor read/8, error -71 [ 64.814057][ T62] usb usb7-port1: attempt power cycle [ 65.003679][ T29] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 65.024403][ T29] usb 8-1: device descriptor read/8, error -71 [ 65.063776][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 65.085136][ T10] usb 5-1: device descriptor read/8, error -71 [ 65.144242][ T29] usb usb8-port1: unable to enumerate USB device [ 65.153724][ T62] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 65.174362][ T62] usb 7-1: device descriptor read/8, error -71 [ 65.333790][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 65.354190][ T10] usb 5-1: device descriptor read/8, error -71 [ 65.413703][ T62] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 65.434167][ T62] usb 7-1: device descriptor read/8, error -71 [ 65.464033][ T10] usb usb5-port1: unable to enumerate USB device [ 65.543956][ T62] usb usb7-port1: unable to enumerate USB device [ 65.756337][ T6551] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 65.760888][ T6551] VFS: Can't find a romfs filesystem on dev nullb0. [ 65.760888][ T6551] [ 65.836523][ T6555] xt_hashlimit: size too large, truncated to 1048576 [ 66.025526][ T5950] Bluetooth: hci3: unexpected event for opcode 0x100c [ 66.103702][ T5950] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 66.156228][ T6568] batman_adv: batadv0: Adding interface: gretap1 [ 66.158830][ T6568] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 66.306475][ T6579] program syz.1.170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.310480][ T6579] xt_hashlimit: size too large, truncated to 1048576 [ 66.383798][ T5950] Bluetooth: hci0: command 0x0406 tx timeout [ 66.584351][ T6586] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 66.624130][ T5950] Bluetooth: hci2: command 0x0c1a tx timeout [ 66.649220][ T6590] macvlan0: entered promiscuous mode [ 66.650855][ T6590] macvlan0: entered allmulticast mode [ 66.652341][ T6590] veth1_vlan: entered allmulticast mode [ 66.798432][ T6611] xt_hashlimit: size too large, truncated to 1048576 [ 66.918415][ T6617] netlink: 'syz.3.181': attribute type 4 has an invalid length. [ 67.028968][ T6617] netlink: 'syz.3.181': attribute type 11 has an invalid length. [ 67.072710][ T6629] __nla_validate_parse: 3 callbacks suppressed [ 67.072722][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'. [ 67.078056][ T6629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.184'. [ 67.135391][ T6635] netlink: 340 bytes leftover after parsing attributes in process `syz.2.188'. [ 67.138072][ T6635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.188'. [ 67.253771][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 67.443945][ T10] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 67.447321][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 67.450023][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 67.452965][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 67.456304][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 67.459247][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 67.462781][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 67.465549][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 67.468139][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 67.471186][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 67.474077][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 67.476658][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 67.480238][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 67.483020][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 67.485905][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 67.489123][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 67.491754][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 67.494450][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 67.497556][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 67.501194][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 67.507482][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 67.511487][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 67.512229][ T6653] netlink: 68 bytes leftover after parsing attributes in process `syz.2.193'. [ 67.515600][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 67.515634][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 67.515658][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 67.517651][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 67.517735][ T10] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 67.517751][ T10] usb 5-1: Product: syz [ 67.517762][ T10] usb 5-1: Manufacturer: syz [ 67.517772][ T10] usb 5-1: SerialNumber: syz [ 67.521209][ T10] usb 5-1: config 0 descriptor?? [ 67.547190][ T10] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 67.766121][ T40] kauditd_printk_skb: 66 callbacks suppressed [ 67.766132][ T40] audit: type=1400 audit(1744202214.265:400): avc: denied { write } for pid=6614 comm="syz.0.180" path="socket:[13337]" dev="sockfs" ino=13337 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 67.775242][ T40] audit: type=1400 audit(1744202214.265:401): avc: denied { nlmsg_read } for pid=6614 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 67.782481][ T5950] Bluetooth: hci0: unexpected event for opcode 0x0803 [ 67.833321][ T40] audit: type=1400 audit(1744202214.325:402): avc: denied { read } for pid=6668 comm="syz.2.197" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 67.841790][ T40] audit: type=1400 audit(1744202214.325:403): avc: denied { open } for pid=6668 comm="syz.2.197" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 67.847616][ T29] usb 5-1: USB disconnect, device number 7 [ 67.856707][ T29] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 67.872737][ T6671] vlan2: entered allmulticast mode [ 67.877483][ T6671] batadv0: entered allmulticast mode [ 67.922433][ T40] audit: type=1400 audit(1744202214.415:404): avc: denied { mount } for pid=6673 comm="syz.2.199" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 67.973137][ T40] audit: type=1400 audit(1744202214.465:405): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 67.998033][ T40] audit: type=1400 audit(1744202214.495:406): avc: denied { write } for pid=6677 comm="syz.2.200" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 68.117721][ T40] audit: type=1400 audit(1744202214.615:407): avc: denied { execute_no_trans } for pid=6681 comm="syz.3.202" path="/33/file1" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.172558][ T6686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'. [ 68.173835][ T40] audit: type=1400 audit(1744202214.665:408): avc: denied { read write } for pid=6683 comm="syz.1.204" name="btrfs-control" dev="devtmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 68.180343][ T6686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'. [ 68.186850][ T40] audit: type=1400 audit(1744202214.665:409): avc: denied { open } for pid=6683 comm="syz.1.204" path="/dev/btrfs-control" dev="devtmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 68.263678][ T4684] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 68.414348][ T4684] usb 7-1: Using ep0 maxpacket: 8 [ 68.426658][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 68.427553][ T4684] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 68.432470][ T4684] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 68.433443][ T6708] netlink: 610 bytes leftover after parsing attributes in process `syz.1.209'. [ 68.440506][ T4684] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.446148][ T4684] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 68.449858][ T4684] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 68.457429][ T4684] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 68.460240][ T4684] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 68.466898][ T4684] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.476164][ T4684] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 68.479337][ T4684] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 68.483234][ T4684] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 68.487488][ T4684] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 68.490900][ T4684] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.497217][ T4684] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 68.500279][ T4684] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 68.506376][ T6710] Bluetooth: MGMT ver 1.23 [ 68.507825][ T4684] usb 7-1: string descriptor 0 read error: -22 [ 68.509129][ T6710] syz.1.210 uses obsolete (PF_INET,SOCK_PACKET) [ 68.509924][ T4684] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 68.514644][ T4684] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.523256][ T4684] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 68.603350][ T6716] virt_wifi0 speed is unknown, defaulting to 1000 [ 68.669904][ T6716] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 68.702458][ T6723] netlink: 'syz.0.213': attribute type 27 has an invalid length. [ 68.743784][ T6723] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.746758][ T6723] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.755258][ T6724] netlink: 36 bytes leftover after parsing attributes in process `syz.0.213'. [ 68.833147][ T6723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.844889][ T6723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.918141][ T6723] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.920664][ T6723] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.923360][ T6723] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.925966][ T6723] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.096358][ T24] usb 7-1: USB disconnect, device number 7 [ 69.480216][ T6736] fuse: Unknown parameter '' [ 69.753754][ T6082] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 69.904763][ T6082] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 69.908037][ T6082] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.911186][ T6082] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.917294][ T6082] usb 5-1: config 0 interface 0 has no altsetting 0 [ 69.920000][ T6082] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.922804][ T6082] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.926019][ T6082] usb 5-1: config 0 interface 0 has no altsetting 0 [ 69.928582][ T6082] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.931085][ T6082] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.934273][ T6082] usb 5-1: config 0 interface 0 has no altsetting 0 [ 69.936823][ T6082] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.939283][ T6082] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.942318][ T6082] usb 5-1: config 0 interface 0 has no altsetting 0 [ 69.945182][ T6082] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.947811][ T6082] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.950851][ T6082] usb 5-1: config 0 interface 0 has no altsetting 0 [ 69.954079][ T6082] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.956559][ T6082] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.959727][ T6082] usb 5-1: config 0 interface 0 has no altsetting 0 [ 69.962595][ T6082] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.966409][ T6082] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.970345][ T6082] usb 5-1: config 0 interface 0 has no altsetting 0 [ 69.974104][ T6082] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.977337][ T6082] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.978317][ T6777] overlayfs: conflicting options: userxattr,metacopy=on [ 69.981375][ T6082] usb 5-1: config 0 interface 0 has no altsetting 0 [ 69.983930][ T6082] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 69.989108][ T6082] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 69.992268][ T6082] usb 5-1: Product: syz [ 69.994252][ T6082] usb 5-1: Manufacturer: syz [ 69.995740][ T6082] usb 5-1: SerialNumber: syz [ 69.997032][ T6781] overlayfs: conflicting options: userxattr,metacopy=on [ 70.000226][ T6082] usb 5-1: config 0 descriptor?? [ 70.008834][ T6082] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 70.119256][ T6792] xt_hashlimit: size too large, truncated to 1048576 [ 70.405516][ T6822] usb usb9: usbfs: process 6822 (syz.1.241) did not claim interface 5 before use [ 70.409054][ T6823] usb usb9: usbfs: process 6823 (syz.1.241) did not claim interface 5 before use [ 70.427810][ T6739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.431755][ T6739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.701162][ T6731] usb 5-1: USB disconnect, device number 8 [ 70.710049][ T6731] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 70.893394][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b070400: rx timeout, send abort [ 70.897109][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802b070400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 71.238126][ T6861] omfs: Invalid superblock (0) [ 71.241090][ T6861] omfs: Invalid superblock (0) [ 71.244245][ T6861] omfs: Invalid superblock (0) [ 71.247391][ T6861] omfs: Invalid superblock (0) [ 71.249415][ T6861] omfs: Invalid superblock (0) [ 71.251299][ T6861] omfs: Invalid superblock (0) [ 71.253666][ T6861] omfs: Invalid superblock (0) [ 71.255513][ T6861] omfs: Invalid superblock (0) [ 71.257968][ T6861] omfs: Invalid superblock (0) [ 71.260871][ T6861] omfs: Invalid superblock (0) [ 71.263137][ T6861] omfs: Invalid superblock (0) [ 71.266241][ T6861] omfs: Invalid superblock (0) [ 71.268553][ T6861] omfs: Invalid superblock (0) [ 71.270451][ T6861] omfs: Invalid superblock (0) [ 71.272250][ T6861] omfs: Invalid superblock (0) [ 71.275676][ T6861] omfs: Invalid superblock (0) [ 71.277904][ T6861] omfs: Invalid superblock (0) [ 71.279722][ T6861] omfs: Invalid superblock (0) [ 71.280205][ T6731] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 71.281588][ T6861] omfs: Invalid superblock (0) [ 71.286417][ T6861] omfs: Invalid superblock (0) [ 71.288282][ T6861] omfs: Invalid superblock (0) [ 71.290117][ T6861] omfs: Invalid superblock (0) [ 71.291915][ T6861] omfs: Invalid superblock (0) [ 71.295126][ T6861] omfs: Invalid superblock (0) [ 71.296977][ T6861] omfs: Invalid superblock (0) [ 71.299107][ T6861] omfs: Invalid superblock (0) [ 71.300924][ T6861] omfs: Invalid superblock (0) [ 71.302996][ T6861] omfs: Invalid superblock (0) [ 71.305245][ T6861] omfs: Invalid superblock (0) [ 71.307820][ T6861] omfs: Invalid superblock (0) [ 71.310094][ T6861] omfs: Invalid superblock (0) [ 71.312532][ T6861] omfs: Invalid superblock (0) [ 71.314483][ T6861] omfs: Invalid superblock (0) [ 71.316379][ T6861] omfs: Invalid superblock (0) [ 71.318509][ T6861] omfs: Invalid superblock (0) [ 71.320359][ T6861] omfs: Invalid superblock (0) [ 71.322237][ T6861] omfs: Invalid superblock (0) [ 71.324191][ T6861] omfs: Invalid superblock (0) [ 71.326678][ T6861] omfs: Invalid superblock (0) [ 71.328527][ T6861] omfs: Invalid superblock (0) [ 71.334226][ T6861] omfs: Invalid superblock (0) [ 71.336109][ T6861] omfs: Invalid superblock (0) [ 71.338023][ T6861] omfs: Invalid superblock (0) [ 71.340528][ T6861] omfs: Invalid superblock (0) [ 71.342562][ T6861] omfs: Invalid superblock (0) [ 71.345141][ T6861] omfs: Invalid superblock (0) [ 71.347050][ T6861] omfs: Invalid superblock (0) [ 71.347406][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.348948][ T6861] omfs: Invalid superblock (0) [ 71.352310][ T6861] omfs: Invalid superblock (0) [ 71.354752][ T6861] omfs: Invalid superblock (0) [ 71.356616][ T6861] omfs: Invalid superblock (0) [ 71.358469][ T6861] omfs: Invalid superblock (0) [ 71.360317][ T6861] omfs: Invalid superblock (0) [ 71.362208][ T6861] omfs: Invalid superblock (0) [ 71.364867][ T6861] omfs: Invalid superblock (0) [ 71.367145][ T6861] omfs: Invalid superblock (0) [ 71.369261][ T6861] omfs: Invalid superblock (0) [ 71.371245][ T6861] omfs: Invalid superblock (0) [ 71.373123][ T6861] omfs: Invalid superblock (0) [ 71.376085][ T6861] omfs: Invalid superblock (0) [ 71.378229][ T6861] omfs: Invalid superblock (0) [ 71.380852][ T6861] omfs: Invalid superblock (0) [ 71.383511][ T6861] omfs: Invalid superblock (0) [ 71.385514][ T6861] omfs: Invalid superblock (0) [ 71.388145][ T6861] omfs: Invalid superblock (0) [ 71.435624][ T6731] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 71.437897][ T6731] usb 7-1: config 0 has no interface number 0 [ 71.439599][ T6731] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 71.445261][ T6731] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 71.448979][ T6731] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 71.452137][ T6731] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 71.455819][ T6731] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 71.458925][ T6731] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 71.462451][ T6731] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 71.465028][ T6731] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.470599][ T6731] usb 7-1: config 0 descriptor?? [ 71.472829][ T6858] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 71.474975][ T6858] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 71.483513][ T6731] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 71.504778][ T6903] openvswitch: netlink: Actions may not be safe on all matching packets [ 71.504778][ T6904] openvswitch: netlink: Actions may not be safe on all matching packets [ 71.677356][ T6930] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 71.743274][ T24] usb 7-1: USB disconnect, device number 8 [ 71.743433][ C0] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 71.747721][ T24] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 71.751497][ T6939] 9pnet_fd: p9_fd_create_unix (6939): problem connecting socket: ./file2: -2 [ 71.778467][ T6858] xt_hashlimit: size too large, truncated to 1048576 [ 72.036101][ T6946] SET target dimension over the limit! [ 72.426223][ T6956] __nla_validate_parse: 7 callbacks suppressed [ 72.426239][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.275'. [ 72.466254][ T6958] netlink: 340 bytes leftover after parsing attributes in process `syz.2.276'. [ 72.469759][ T6958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.276'. [ 72.490250][ T6960] netlink: 76 bytes leftover after parsing attributes in process `syz.0.277'. [ 72.493376][ T6960] netlink: 72 bytes leftover after parsing attributes in process `syz.0.277'. [ 72.496546][ T6960] netlink: 'syz.0.277': attribute type 3 has an invalid length. [ 72.499337][ T6960] netlink: 11 bytes leftover after parsing attributes in process `syz.0.277'. [ 72.656429][ T6974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6974 comm=syz.3.282 [ 72.663291][ T6974] bridge0: port 3(syz_tun) entered blocking state [ 72.668324][ T6974] bridge0: port 3(syz_tun) entered disabled state [ 72.670826][ T6974] syz_tun: entered allmulticast mode [ 72.674513][ T6974] syz_tun: entered promiscuous mode [ 72.676922][ T6974] bridge0: port 3(syz_tun) entered blocking state [ 72.679440][ T6974] bridge0: port 3(syz_tun) entered forwarding state [ 72.721136][ T6981] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 72.807967][ T6987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6987 comm=syz.3.282 [ 72.882801][ T6997] netlink: 340 bytes leftover after parsing attributes in process `syz.3.287'. [ 72.888347][ T6997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.287'. [ 72.990341][ T7005] kvm: pic: level sensitive irq not supported [ 72.990786][ T7005] kvm: pic: non byte read [ 73.025236][ T7005] kvm: emulating exchange as write [ 73.193804][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 73.232991][ T7011] program syz.3.292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.260185][ T7013] warning: `syz.3.293' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.293694][ T7015] lo: entered allmulticast mode [ 73.301435][ T7014] lo: left allmulticast mode [ 73.341834][ T7017] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 73.343685][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 73.344426][ T7017] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 73.347931][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.350640][ T7017] vhci_hcd vhci_hcd.0: Device attached [ 73.351825][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 73.357489][ T7018] usbip_core: unknown command [ 73.357915][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 73.358607][ T7017] netlink: 'syz.3.295': attribute type 1 has an invalid length. [ 73.359938][ T7018] vhci_hcd: unknown pdu 67108864 [ 73.362995][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.366192][ T7018] usbip_core: unknown command [ 73.367635][ T224] vhci_hcd: stop threads [ 73.367644][ T224] vhci_hcd: release socket [ 73.367655][ T224] vhci_hcd: disconnect device [ 73.381821][ T24] usb 7-1: config 0 descriptor?? [ 73.383710][ T6731] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 73.386085][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 73.386098][ T40] audit: type=1400 audit(1744202219.885:453): avc: denied { map } for pid=7016 comm="syz.3.295" path="/63/file0" dev="tmpfs" ino=353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.387607][ T24] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 73.523846][ T6731] usb 6-1: device descriptor read/64, error -71 [ 73.527798][ T7022] netlink: 'syz.0.296': attribute type 10 has an invalid length. [ 73.531093][ T7022] netlink: 40 bytes leftover after parsing attributes in process `syz.0.296'. [ 73.535566][ T7022] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.539092][ T7022] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.542273][ T7022] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.547057][ T7022] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.553032][ T7022] team0: Port device geneve0 added [ 73.593241][ T7024] netlink: 340 bytes leftover after parsing attributes in process `syz.0.297'. [ 73.773785][ T6731] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 73.923800][ T6731] usb 6-1: device descriptor read/64, error -71 [ 74.034065][ T6731] usb usb6-port1: attempt power cycle [ 74.373743][ T6731] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 74.394307][ T6731] usb 6-1: device descriptor read/8, error -71 [ 74.585044][ T40] audit: type=1400 audit(1744202221.085:454): avc: denied { bind } for pid=7038 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.587121][ T7041] syz_tun: entered allmulticast mode [ 74.599111][ T7041] lo: entered allmulticast mode [ 74.604344][ T7040] syz_tun: left allmulticast mode [ 74.606208][ T7040] lo: left allmulticast mode [ 74.633874][ T6731] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 74.636869][ T7043] SELinux: syz.0.304 (7043) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 74.654548][ T6731] usb 6-1: device descriptor read/8, error -71 [ 74.723447][ T40] audit: type=1400 audit(1744202221.215:455): avc: denied { listen } for pid=7049 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 74.753712][ T7053] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 74.760810][ T40] audit: type=1400 audit(1744202221.255:456): avc: denied { bind } for pid=7052 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 74.764556][ T6731] usb usb6-port1: unable to enumerate USB device [ 74.816322][ T40] audit: type=1400 audit(1744202221.315:457): avc: denied { ioctl } for pid=7054 comm="syz.0.308" path="socket:[14725]" dev="sockfs" ino=14725 ioctlcmd=0x89f7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 74.939339][ T40] audit: type=1400 audit(1744202221.435:458): avc: denied { write } for pid=7060 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 74.946829][ T7061] xt_hashlimit: size too large, truncated to 1048576 [ 75.179458][ T1142] Bluetooth: Invalid byte 5e after esc byte [ 75.186838][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 75.323807][ T24] usb 6-1: device descriptor read/64, error -71 [ 75.435350][ T1142] Bluetooth: Error in BCSP hdr checksum [ 75.498134][ T40] audit: type=1400 audit(1744202221.995:459): avc: denied { write } for pid=7068 comm="syz.3.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.573689][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 75.694857][ T224] Bluetooth: Error in BCSP hdr checksum [ 75.703895][ T24] usb 6-1: device descriptor read/64, error -71 [ 75.814539][ T24] usb usb6-port1: attempt power cycle [ 75.894515][ T5996] usb 7-1: USB disconnect, device number 9 [ 75.918722][ T40] audit: type=1400 audit(1744202222.415:460): avc: denied { read } for pid=7071 comm="syz.2.313" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 76.153770][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 76.233843][ T5996] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 76.315681][ T40] audit: type=1400 audit(1744202222.815:461): avc: denied { setattr } for pid=7083 comm="syz.3.318" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.363732][ T24] usb 6-1: device not accepting address 8, error -71 [ 76.406666][ T5996] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 76.409980][ T5996] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.412543][ T5996] usb 7-1: Product: syz [ 76.414978][ T5996] usb 7-1: Manufacturer: syz [ 76.416690][ T5996] usb 7-1: SerialNumber: syz [ 76.422077][ T5996] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 76.434377][ T40] audit: type=1400 audit(1744202222.935:462): avc: denied { firmware_load } for pid=5996 comm="kworker/0:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=287 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 76.442233][ T5996] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 76.655738][ T10] usb 7-1: USB disconnect, device number 10 [ 77.193860][ T5950] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 77.194021][ T5295] Bluetooth: hci4: command 0x1003 tx timeout [ 77.215024][ T7102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.258656][ T7108] vlan2: entered allmulticast mode [ 77.260646][ T7108] team0: entered allmulticast mode [ 77.262737][ T7108] team_slave_0: entered allmulticast mode [ 77.265671][ T7108] team_slave_1: entered allmulticast mode [ 77.267775][ T7108] geneve0: entered allmulticast mode [ 77.365498][ T7119] MINIX-fs: blocksize too small for device [ 77.503981][ T5996] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 77.507544][ T5996] ath9k_htc: Failed to initialize the device [ 77.511745][ T10] usb 7-1: ath9k_htc: USB layer deinitialized [ 77.549927][ T7131] cgroup: none used incorrectly [ 77.723381][ T7133] 9pnet_fd: Insufficient options for proto=fd [ 77.755900][ T7147] __nla_validate_parse: 10 callbacks suppressed [ 77.755911][ T7147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.338'. [ 77.760317][ T7147] netlink: 340 bytes leftover after parsing attributes in process `syz.2.338'. [ 78.098041][ T7162] 9pnet: Could not find request transport: virtioaL\J `(3^0x0000000000000000 [ 78.241470][ T7174] mkiss: ax0: crc mode is auto. [ 78.391937][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.347'. [ 78.395372][ T7178] netlink: 340 bytes leftover after parsing attributes in process `syz.2.347'. [ 78.438948][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 78.438962][ T40] audit: type=1800 audit(1744202224.935:473): pid=7180 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.349" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 78.481350][ T40] audit: type=1400 audit(1744202224.975:474): avc: denied { bind } for pid=7185 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 78.481380][ T5950] Bluetooth: hci3: Malformed LE Event: 0x1b [ 78.515106][ T40] audit: type=1400 audit(1744202225.015:475): avc: denied { append } for pid=7183 comm="syz.0.350" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 78.537260][ T7191] netlink: 'syz.1.354': attribute type 1 has an invalid length. [ 78.539402][ T7191] netlink: 'syz.1.354': attribute type 4 has an invalid length. [ 78.541475][ T7191] netlink: 15363 bytes leftover after parsing attributes in process `syz.1.354'. [ 78.549388][ T40] audit: type=1400 audit(1744202225.045:476): avc: denied { wake_alarm } for pid=7190 comm="syz.1.354" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.612370][ T7198] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 78.615819][ T7198] xt_hashlimit: size too large, truncated to 1048576 [ 78.669298][ T7204] netlink: 64 bytes leftover after parsing attributes in process `syz.2.355'. [ 78.672051][ T7204] geneve0: default FDB implementation only supports local addresses [ 78.808860][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.358'. [ 78.811279][ T7209] netlink: 340 bytes leftover after parsing attributes in process `syz.2.358'. [ 78.926568][ T7221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.363'. [ 78.937688][ T4684] IPVS: starting estimator thread 0... [ 79.023776][ T7222] IPVS: using max 45 ests per chain, 108000 per kthread [ 79.088283][ T7232] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.198854][ T7232] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.287737][ T7236] xt_hashlimit: size too large, truncated to 1048576 [ 79.303192][ T40] audit: type=1400 audit(1744202225.795:477): avc: denied { unmount } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.340784][ T7239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.368'. [ 79.349916][ T7232] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.383410][ T40] audit: type=1400 audit(1744202225.875:478): avc: denied { map } for pid=7241 comm="syz.0.369" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 79.392177][ T40] audit: type=1400 audit(1744202225.875:479): avc: denied { execute } for pid=7241 comm="syz.0.369" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 79.402054][ T40] audit: type=1400 audit(1744202225.895:480): avc: denied { ioctl } for pid=7241 comm="syz.0.369" path="/dev/uhid" dev="devtmpfs" ino=1296 ioctlcmd=0x1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 79.419885][ T7232] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.431165][ T40] audit: type=1400 audit(1744202225.925:481): avc: denied { mount } for pid=7243 comm="syz.2.370" name="/" dev="ramfs" ino=13164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 79.439610][ T40] audit: type=1400 audit(1744202225.935:482): avc: denied { create } for pid=7243 comm="syz.2.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.505610][ T7232] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.519603][ T7232] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.530720][ T7232] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.531994][ T7251] netlink: 'syz.0.373': attribute type 3 has an invalid length. [ 79.536156][ T7251] netlink: 'syz.0.373': attribute type 3 has an invalid length. [ 79.540099][ T7232] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.614375][ T7258] openvswitch: netlink: Actions may not be safe on all matching packets [ 79.651961][ T7267] unsupported nlmsg_type 40 [ 80.023488][ T7293] netlink: 'syz.2.387': attribute type 1 has an invalid length. [ 80.026067][ T7293] netlink: 'syz.2.387': attribute type 4 has an invalid length. [ 80.278480][ T7304] use of bytesused == 0 is deprecated and will be removed in the future, [ 80.281097][ T7304] use the actual size instead. [ 80.479019][ T7312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7312 comm=syz.2.392 [ 80.487470][ T7313] netlink: 'syz.3.393': attribute type 1 has an invalid length. [ 80.513030][ T7313] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.520679][ T7312] virt_wifi0 speed is unknown, defaulting to 1000 [ 80.537505][ T7313] bond2: (slave gretap1): making interface the new active one [ 80.540695][ T7313] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 80.669190][ T7328] tls_set_device_offload: netdev not found [ 80.725328][ T7328] ata3.00: invalid multi_count 1 ignored [ 80.841225][ T7342] hfsplus: unable to find HFS+ superblock [ 80.940217][ T7361] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 81.064211][ T7378] netlink: 'syz.1.414': attribute type 25 has an invalid length. [ 81.067602][ T7379] netlink: 'syz.1.414': attribute type 25 has an invalid length. [ 81.249432][ T7411] x_tables: duplicate underflow at hook 1 [ 81.280329][ T7405] sctp: failed to load transform for md5: -2 [ 81.448109][ T1172] Bluetooth: hci4: Frame reassembly failed (-84) [ 81.534637][ T7450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.537682][ T7450] team0: Port device bond0 added [ 81.595223][ T78] cfg80211: failed to load regulatory.db [ 81.620776][ T7454] smc: net device bond0 applied user defined pnetid SYZ0 [ 81.712715][ T7459] vlan2: entered allmulticast mode [ 81.714747][ T7459] bond0: entered allmulticast mode [ 81.716202][ T7459] bond_slave_0: entered allmulticast mode [ 81.717918][ T7459] bond_slave_1: entered allmulticast mode [ 81.719711][ T7459] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 81.964488][ T7467] netlink: 'syz.2.441': attribute type 1 has an invalid length. [ 82.126639][ T7479] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 82.362790][ T7497] xt_hashlimit: invalid interval [ 82.943889][ T5295] Bluetooth: hci0: command tx timeout [ 83.504256][ T5295] Bluetooth: hci4: command 0xfc11 tx timeout [ 83.505982][ T5950] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 83.574379][ T5950] Bluetooth: hci1: unexpected event for opcode 0x0406 [ 83.583172][ T7520] __nla_validate_parse: 19 callbacks suppressed [ 83.583182][ T7520] netlink: 32 bytes leftover after parsing attributes in process `syz.2.458'. [ 83.621993][ T7522] netlink: 340 bytes leftover after parsing attributes in process `syz.2.459'. [ 83.669126][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.726435][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 83.726450][ T40] audit: type=1400 audit(1744202230.225:514): avc: denied { execute } for pid=7528 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 83.734656][ T40] audit: type=1400 audit(1744202230.225:515): avc: denied { execute_no_trans } for pid=7528 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 83.772200][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.858663][ T5295] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.859406][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.864875][ T5295] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.867680][ T5295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.870627][ T5295] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.874504][ T5295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.885908][ T40] audit: type=1400 audit(1744202230.385:516): avc: denied { mounton } for pid=7538 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 83.899105][ T7538] virt_wifi0 speed is unknown, defaulting to 1000 [ 83.927604][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.929589][ T40] audit: type=1400 audit(1744202230.425:517): avc: denied { read } for pid=7540 comm="syz.2.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 83.977736][ T7546] openvswitch: netlink: Key type 30 is not supported [ 84.003143][ T5295] Bluetooth: hci1: unexpected event for opcode 0x0406 [ 84.017144][ T7549] netlink: 32 bytes leftover after parsing attributes in process `syz.2.467'. [ 84.037419][ T7538] chnl_net:caif_netlink_parms(): no params data found [ 84.069289][ T7552] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 84.116646][ T7538] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.120148][ T7538] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.122229][ T7538] bridge_slave_0: entered allmulticast mode [ 84.126547][ T7538] bridge_slave_0: entered promiscuous mode [ 84.129425][ T7538] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.131488][ T7538] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.133517][ T7538] bridge_slave_1: entered allmulticast mode [ 84.136238][ T7538] bridge_slave_1: entered promiscuous mode [ 84.200239][ T7538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.207122][ T7538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.270262][ T7538] team0: Port device team_slave_0 added [ 84.275423][ T7538] team0: Port device team_slave_1 added [ 84.277372][ T13] bridge_slave_1: left allmulticast mode [ 84.279509][ T13] bridge_slave_1: left promiscuous mode [ 84.282870][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.288582][ T13] bridge_slave_0: left allmulticast mode [ 84.290589][ T13] bridge_slave_0: left promiscuous mode [ 84.292951][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.294298][ T7563] netlink: 340 bytes leftover after parsing attributes in process `syz.3.470'. [ 84.333763][ T24] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 84.389257][ T13] geneve0 (unregistering): left allmulticast mode [ 84.398184][ T13] team0: Port device geneve0 removed [ 84.463727][ T24] usb 7-1: device descriptor read/64, error -71 [ 84.500345][ T7571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.473'. [ 84.561775][ T40] audit: type=1400 audit(1744202231.055:518): avc: denied { setopt } for pid=7570 comm="syz.1.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.569307][ T40] audit: type=1400 audit(1744202231.065:519): avc: denied { write } for pid=7570 comm="syz.1.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.599484][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.604483][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.605342][ T7576] mmap: syz.1.474 (7576) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.612245][ T13] bond0 (unregistering): Released all slaves [ 84.649397][ T7538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.651467][ T7538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.659908][ T7538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.665518][ T7538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.668226][ T7538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.679250][ T7538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.714679][ T24] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 84.730374][ T7538] hsr_slave_0: entered promiscuous mode [ 84.732836][ T7538] hsr_slave_1: entered promiscuous mode [ 84.735267][ T7538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.737648][ T7538] Cannot create hsr debugfs directory [ 84.774786][ T7584] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7584 comm=syz.3.477 [ 84.782981][ T40] audit: type=1400 audit(1744202231.275:520): avc: denied { read } for pid=7583 comm="syz.3.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 84.812446][ T40] audit: type=1400 audit(1744202231.305:521): avc: denied { mount } for pid=7586 comm="syz.1.478" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 84.854707][ T40] audit: type=1400 audit(1744202231.355:522): avc: denied { unmount } for pid=5949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 84.860581][ T24] usb 7-1: device descriptor read/64, error -71 [ 84.963853][ T24] usb usb7-port1: attempt power cycle [ 85.001618][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.483'. [ 85.118236][ T40] audit: type=1400 audit(1744202231.615:523): avc: denied { read } for pid=7605 comm="syz.3.484" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 85.122989][ T7616] block device autoloading is deprecated and will be removed. [ 85.126483][ T7615] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 85.128362][ T7615] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 85.131456][ T7615] vhci_hcd vhci_hcd.0: Device attached [ 85.135557][ T7617] vhci_hcd: connection closed [ 85.140702][ T224] vhci_hcd: stop threads [ 85.145089][ T224] vhci_hcd: release socket [ 85.146393][ T224] vhci_hcd: disconnect device [ 85.154869][ T7606] md2: using deprecated bitmap file support [ 85.156839][ T7606] md2: error: bitmap file must be a regular file [ 85.324436][ T24] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 85.354683][ T24] usb 7-1: device descriptor read/8, error -71 [ 85.453803][ T7538] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.461423][ T7538] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.479329][ T7538] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.485235][ T7538] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.522779][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 85.532381][ T7538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.552961][ T7538] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.565130][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.567959][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.578833][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.580878][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.604097][ T24] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 85.632144][ T24] usb 7-1: device descriptor read/8, error -71 [ 85.744305][ T24] usb usb7-port1: unable to enumerate USB device [ 85.801354][ T7683] netlink: 340 bytes leftover after parsing attributes in process `syz.1.496'. [ 85.904271][ T5295] Bluetooth: hci0: command tx timeout [ 86.673277][ T7538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.704627][ T7538] veth0_vlan: entered promiscuous mode [ 86.710896][ T7538] veth1_vlan: entered promiscuous mode [ 86.725609][ T7538] veth0_macvtap: entered promiscuous mode [ 86.729992][ T7538] veth1_macvtap: entered promiscuous mode [ 86.741600][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.745760][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.749447][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.753201][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.758697][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.761589][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.765855][ T7538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.773279][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.777442][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.781198][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.784951][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.787787][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.791137][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.796719][ T7538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.801357][ T7538] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.804679][ T7538] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.807168][ T7538] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.809555][ T7538] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.810918][ T5295] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 86.855626][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.857818][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.877836][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.880036][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.943752][ T6731] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 87.020122][ T13] tipc: Left network mode [ 87.073783][ T6731] usb 7-1: device descriptor read/64, error -71 [ 87.228819][ T13] hsr_slave_0: left promiscuous mode [ 87.231992][ T13] hsr_slave_1: left promiscuous mode [ 87.234735][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.239609][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.750052][ T13] team_slave_1 (unregistering): left allmulticast mode [ 87.753187][ T13] team0 (unregistering): Port device team_slave_1 removed [ 87.818057][ T13] team_slave_0 (unregistering): left allmulticast mode [ 87.821740][ T13] team0 (unregistering): Port device team_slave_0 removed [ 88.408334][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.412474][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.415784][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.419393][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.421755][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.455361][ T7731] virt_wifi0 speed is unknown, defaulting to 1000 [ 88.531110][ T7743] netlink: 32 bytes leftover after parsing attributes in process `syz.1.515'. [ 88.552888][ T7731] chnl_net:caif_netlink_parms(): no params data found [ 88.650464][ T7731] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.652559][ T7731] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.654680][ T7731] bridge_slave_0: entered allmulticast mode [ 88.657066][ T7731] bridge_slave_0: entered promiscuous mode [ 88.661521][ T7731] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.664384][ T7731] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.666986][ T7731] bridge_slave_1: entered allmulticast mode [ 88.669817][ T7731] bridge_slave_1: entered promiscuous mode [ 88.708597][ T7731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.714713][ T7731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.752429][ T7731] team0: Port device team_slave_0 added [ 88.757497][ T7731] team0: Port device team_slave_1 added [ 88.800246][ T7731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.802944][ T7731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.811970][ T7731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.818391][ T7731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.820896][ T7731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.828326][ T7731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.864006][ T7731] hsr_slave_0: entered promiscuous mode [ 88.866010][ T7731] hsr_slave_1: entered promiscuous mode [ 88.951873][ T7731] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.146281][ T7750] xt_HMARK: spi-set and port-set can't be combined [ 89.243109][ T7755] overlayfs: failed to resolve './file0': -2 [ 89.368345][ T5295] ================================================================== [ 89.371290][ T5295] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0x16a/0x170 [ 89.372369][ T40] kauditd_printk_skb: 11 callbacks suppressed SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 89.372379][ T40] audit: type=1400 audit(1744202235.865:535): avc: denied { map } for pid=7760 comm="syz.1.520" path="socket:[17252]" dev="sockfs" ino=17252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.374003][ T5295] Read of size 8 at addr ffff88805c0e2188 by task kworker/u33:1/5295 [ 89.374017][ T5295] [ 89.374026][ T5295] CPU: 3 UID: 0 PID: 5295 Comm: kworker/u33:1 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 89.374044][ T5295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.374055][ T5295] Workqueue: hci1 hci_rx_work [ 89.374074][ T5295] Call Trace: [ 89.374079][ T5295] [ 89.374086][ T5295] dump_stack_lvl+0x116/0x1f0 [ 89.374108][ T5295] print_report+0xc3/0x670 [ 89.374123][ T5295] ? __virt_addr_valid+0x5e/0x590 [ 89.374142][ T5295] ? __phys_addr+0xc6/0x150 [ 89.374165][ T5295] ? l2cap_sock_ready_cb+0x16a/0x170 [ 89.374182][ T5295] kasan_report+0xe0/0x110 [ 89.374200][ T5295] ? l2cap_sock_ready_cb+0x16a/0x170 [ 89.374220][ T5295] l2cap_sock_ready_cb+0x16a/0x170 [ 89.374236][ T5295] l2cap_le_start+0x1ea/0xe40 [ 89.374255][ T5295] ? l2cap_connect_cfm+0x819/0xf80 [ 89.374278][ T5295] ? __pfx_l2cap_le_start+0x10/0x10 [ 89.374301][ T5295] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 89.374324][ T5295] ? __l2cap_chan_add+0x3e6/0xa20 [ 89.374349][ T5295] l2cap_connect_cfm+0x8f4/0xf80 [ 89.374367][ T5295] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 89.374383][ T5295] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 89.374397][ T5295] le_conn_complete_evt+0x1662/0x1d70 [ 89.374414][ T5295] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 89.374429][ T5295] ? hci_event_packet+0x43c/0x1190 [ 89.374439][ T5295] hci_le_conn_complete_evt+0x23c/0x370 [ 89.374451][ T5295] hci_le_meta_evt+0x2f3/0x5e0 [ 89.374466][ T5295] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 89.374482][ T5295] hci_event_packet+0x669/0x1190 [ 89.374496][ T5295] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 89.374513][ T5295] ? __pfx_hci_event_packet+0x10/0x10 [ 89.374528][ T5295] ? kcov_remote_start+0x3c9/0x6d0 [ 89.374539][ T5295] ? lockdep_hardirqs_on+0x7c/0x110 [ 89.374553][ T5295] hci_rx_work+0x2c5/0x16b0 [ 89.374563][ T5295] ? rcu_is_watching+0x12/0xc0 [ 89.374576][ T5295] process_one_work+0x9cc/0x1b70 [ 89.374589][ T5295] ? __pfx_process_one_work+0x10/0x10 [ 89.374602][ T5295] ? assign_work+0x1a0/0x250 [ 89.374612][ T5295] worker_thread+0x6c8/0xf10 [ 89.374625][ T5295] ? __pfx_worker_thread+0x10/0x10 [ 89.374635][ T5295] kthread+0x3c2/0x780 [ 89.374644][ T5295] ? __pfx_kthread+0x10/0x10 [ 89.374653][ T5295] ? __pfx_kthread+0x10/0x10 [ 89.374662][ T5295] ? __pfx_kthread+0x10/0x10 [ 89.374677][ T5295] ? __pfx_kthread+0x10/0x10 [ 89.374687][ T5295] ? rcu_is_watching+0x12/0xc0 [ 89.374699][ T5295] ? __pfx_kthread+0x10/0x10 [ 89.374708][ T5295] ret_from_fork+0x45/0x80 [ 89.374720][ T5295] ? __pfx_kthread+0x10/0x10 [ 89.374730][ T5295] ret_from_fork_asm+0x1a/0x30 [ 89.374748][ T5295] [ 89.374752][ T5295] [ 89.376720][ T40] audit: type=1400 audit(1744202235.865:536): avc: denied { read } for pid=7760 comm="syz.1.520" path="socket:[17252]" dev="sockfs" ino=17252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.384294][ T5295] Allocated by task 7764: [ 89.384303][ T5295] kasan_save_stack+0x33/0x60 [ 89.384315][ T5295] kasan_save_track+0x14/0x30 [ 89.384323][ T5295] __kasan_kmalloc+0xaa/0xb0 [ 89.384331][ T5295] __kmalloc_noprof+0x223/0x510 [ 89.384340][ T5295] sk_prot_alloc+0x1a8/0x2a0 [ 89.384355][ T5295] sk_alloc+0x36/0xc20 [ 89.384364][ T5295] bt_sock_alloc+0x3b/0x3a0 [ 89.476700][ T5295] l2cap_sock_alloc.constprop.0+0x33/0x1d0 [ 89.478395][ T5295] l2cap_sock_create+0x123/0x1f0 [ 89.479785][ T5295] bt_sock_create+0x182/0x350 [ 89.481105][ T5295] __sock_create+0x335/0x8d0 [ 89.482432][ T5295] __sys_socket+0x14d/0x260 [ 89.483708][ T5295] __x64_sys_socket+0x72/0xb0 [ 89.485038][ T5295] do_syscall_64+0xcd/0x260 [ 89.486344][ T5295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.488024][ T5295] [ 89.488725][ T5295] Freed by task 7761: [ 89.489863][ T5295] kasan_save_stack+0x33/0x60 [ 89.491191][ T5295] kasan_save_track+0x14/0x30 [ 89.492510][ T5295] kasan_save_free_info+0x3b/0x60 [ 89.493948][ T5295] __kasan_slab_free+0x51/0x70 [ 89.495305][ T5295] kfree+0x2b6/0x4d0 [ 89.496459][ T5295] __sk_destruct+0x718/0x950 [ 89.497791][ T5295] sk_destruct+0xc2/0xf0 [ 89.499014][ T5295] __sk_free+0xf4/0x3e0 [ 89.500181][ T5295] sk_free+0x6a/0x90 [ 89.501293][ T5295] l2cap_sock_kill+0x171/0x2d0 [ 89.502644][ T5295] l2cap_sock_release+0x189/0x210 [ 89.504073][ T5295] __sock_release+0xb0/0x270 [ 89.505377][ T5295] sock_close+0x1c/0x30 [ 89.506572][ T5295] __fput+0x3ff/0xb70 [ 89.507717][ T5295] task_work_run+0x14d/0x240 [ 89.509031][ T5295] syscall_exit_to_user_mode+0x27b/0x2a0 [ 89.510608][ T5295] do_syscall_64+0xda/0x260 [ 89.511892][ T5295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.513539][ T5295] [ 89.514252][ T5295] The buggy address belongs to the object at ffff88805c0e2000 [ 89.514252][ T5295] which belongs to the cache kmalloc-2k of size 2048 [ 89.518096][ T5295] The buggy address is located 392 bytes inside of [ 89.518096][ T5295] freed 2048-byte region [ffff88805c0e2000, ffff88805c0e2800) [ 89.521883][ T5295] [ 89.522569][ T5295] The buggy address belongs to the physical page: [ 89.524357][ T5295] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5c0e0 [ 89.526787][ T5295] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 89.529127][ T5295] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 89.531216][ T5295] page_type: f5(slab) [ 89.532342][ T5295] raw: 00fff00000000040 ffff88801b442f00 dead000000000122 0000000000000000 [ 89.534745][ T5295] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 89.537152][ T5295] head: 00fff00000000040 ffff88801b442f00 dead000000000122 0000000000000000 [ 89.539573][ T5295] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 89.541981][ T5295] head: 00fff00000000003 ffffea0001703801 00000000ffffffff 00000000ffffffff [ 89.544419][ T5295] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 89.546818][ T5295] page dumped because: kasan: bad access detected [ 89.548616][ T5295] page_owner tracks the page as allocated [ 89.550217][ T5295] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7750, tgid 7749 (syz.2.516), ts 89139639605, free_ts 88205610481 [ 89.555969][ T5295] post_alloc_hook+0x181/0x1b0 [ 89.557339][ T5295] get_page_from_freelist+0x1193/0x39b0 [ 89.558908][ T5295] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 89.560554][ T5295] alloc_pages_mpol+0x1fb/0x550 [ 89.561933][ T5295] new_slab+0x23c/0x330 [ 89.563116][ T5295] ___slab_alloc+0xd9c/0x1940 [ 89.564465][ T5295] __slab_alloc.constprop.0+0x56/0xb0 [ 89.565993][ T5295] __kmalloc_noprof+0x2f2/0x510 [ 89.567377][ T5295] sk_prot_alloc+0x1a8/0x2a0 [ 89.568683][ T5295] sk_alloc+0x36/0xc20 [ 89.569846][ T5295] __netlink_create+0x5e/0x2c0 [ 89.571189][ T5295] netlink_create+0x39e/0x620 [ 89.572513][ T5295] __sock_create+0x335/0x8d0 [ 89.573825][ T5295] __sys_socket+0x14d/0x260 [ 89.575122][ T5295] __x64_sys_socket+0x72/0xb0 [ 89.576424][ T5295] do_syscall_64+0xcd/0x260 [ 89.577747][ T5295] page last free pid 6731 tgid 6731 stack trace: [ 89.579516][ T5295] __free_frozen_pages+0x69d/0xff0 [ 89.580957][ T5295] kasan_depopulate_vmalloc_pte+0x63/0x80 [ 89.582561][ T5295] __apply_to_page_range+0x5f9/0xd30 [ 89.584060][ T5295] kasan_release_vmalloc+0xd1/0xe0 [ 89.585505][ T5295] purge_vmap_node+0x1cb/0xa70 [ 89.586877][ T5295] __purge_vmap_area_lazy+0x9d1/0xc90 [ 89.588370][ T5295] drain_vmap_area_work+0x27/0x40 [ 89.589794][ T5295] process_one_work+0x9cc/0x1b70 [ 89.591179][ T5295] worker_thread+0x6c8/0xf10 [ 89.592499][ T5295] kthread+0x3c2/0x780 [ 89.593657][ T5295] ret_from_fork+0x45/0x80 [ 89.594939][ T5295] ret_from_fork_asm+0x1a/0x30 [ 89.596287][ T5295] [ 89.597008][ T5295] Memory state around the buggy address: [ 89.598584][ T5295] ffff88805c0e2080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.600788][ T5295] ffff88805c0e2100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.602970][ T5295] >ffff88805c0e2180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.605191][ T5295] ^ [ 89.606389][ T5295] ffff88805c0e2200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.608584][ T5295] ffff88805c0e2280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.610800][ T5295] ================================================================== [ 89.613414][ T5295] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 89.616150][ T5295] CPU: 3 UID: 0 PID: 5295 Comm: kworker/u33:1 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 89.619693][ T5295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.622655][ T5295] Workqueue: hci1 hci_rx_work [ 89.623975][ T5295] Call Trace: [ 89.624962][ T5295] [ 89.625836][ T5295] dump_stack_lvl+0x3d/0x1f0 [ 89.627155][ T5295] panic+0x71c/0x800 [ 89.628268][ T5295] ? __pfx_panic+0x10/0x10 [ 89.629531][ T5295] ? irqentry_exit+0x3b/0x90 [ 89.630843][ T5295] ? lockdep_hardirqs_on+0x7c/0x110 [ 89.632297][ T5295] ? preempt_schedule_thunk+0x16/0x30 [ 89.633819][ T5295] ? l2cap_sock_ready_cb+0x16a/0x170 [ 89.635308][ T5295] ? preempt_schedule_common+0x44/0xc0 [ 89.636859][ T5295] ? l2cap_sock_ready_cb+0x16a/0x170 [ 89.638362][ T5295] check_panic_on_warn+0xab/0xb0 [ 89.639693][ T5295] end_report+0x107/0x170 [ 89.640876][ T5295] kasan_report+0xee/0x110 [ 89.642114][ T5295] ? l2cap_sock_ready_cb+0x16a/0x170 [ 89.643558][ T5295] l2cap_sock_ready_cb+0x16a/0x170 [ 89.644955][ T5295] l2cap_le_start+0x1ea/0xe40 [ 89.646277][ T5295] ? l2cap_connect_cfm+0x819/0xf80 [ 89.647705][ T5295] ? __pfx_l2cap_le_start+0x10/0x10 [ 89.649119][ T5295] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 89.650782][ T5295] ? __l2cap_chan_add+0x3e6/0xa20 [ 89.652164][ T5295] l2cap_connect_cfm+0x8f4/0xf80 [ 89.653528][ T5295] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 89.655054][ T5295] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 89.656670][ T5295] le_conn_complete_evt+0x1662/0x1d70 [ 89.658170][ T5295] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 89.659725][ T5295] ? hci_event_packet+0x43c/0x1190 [ 89.661121][ T5295] hci_le_conn_complete_evt+0x23c/0x370 [ 89.662668][ T5295] hci_le_meta_evt+0x2f3/0x5e0 [ 89.664101][ T5295] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 89.665817][ T5295] hci_event_packet+0x669/0x1190 [ 89.667221][ T5295] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 89.668696][ T5295] ? __pfx_hci_event_packet+0x10/0x10 [ 89.670198][ T5295] ? kcov_remote_start+0x3c9/0x6d0 [ 89.671628][ T5295] ? lockdep_hardirqs_on+0x7c/0x110 [ 89.673076][ T5295] hci_rx_work+0x2c5/0x16b0 [ 89.674356][ T5295] ? rcu_is_watching+0x12/0xc0 [ 89.675689][ T5295] process_one_work+0x9cc/0x1b70 [ 89.677082][ T5295] ? __pfx_process_one_work+0x10/0x10 [ 89.678587][ T5295] ? assign_work+0x1a0/0x250 [ 89.679876][ T5295] worker_thread+0x6c8/0xf10 [ 89.681165][ T5295] ? __pfx_worker_thread+0x10/0x10 [ 89.682596][ T5295] kthread+0x3c2/0x780 [ 89.683740][ T5295] ? __pfx_kthread+0x10/0x10 [ 89.685026][ T5295] ? __pfx_kthread+0x10/0x10 [ 89.686313][ T5295] ? __pfx_kthread+0x10/0x10 [ 89.687613][ T5295] ? __pfx_kthread+0x10/0x10 [ 89.688901][ T5295] ? rcu_is_watching+0x12/0xc0 [ 89.690247][ T5295] ? __pfx_kthread+0x10/0x10 [ 89.691537][ T5295] ret_from_fork+0x45/0x80 [ 89.692785][ T5295] ? __pfx_kthread+0x10/0x10 [ 89.694076][ T5295] ret_from_fork_asm+0x1a/0x30 [ 89.695406][ T5295] [ 89.696810][ T5295] Kernel Offset: disabled [ 89.698045][ T5295] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:37:16 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854e0a85 RDI=ffffffff9ae254e0 RBP=ffffffff9ae254a0 RSP=ffffc900007cf888 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000064 R14=ffffffff9ae254a0 R15=ffffffff854e0a20 RIP=ffffffff854e0aaf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2e3746 CR3=0000000029442000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000040 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcad50ec10 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5aa740f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5aa740f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5aa740f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5aa740f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5aa740f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5aa740f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080080783 RBX=0000000000000000 RCX=ffff888106ca9070 RDX=000000000000009d RSI=ffffffff8698aa58 RDI=ffff888106ca92d0 RBP=0000000000000001 RSP=ffffc900006a0b68 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000001 R13=0000000000004e20 R14=ffff888106ca9070 R15=0000000000000001 RIP=ffffffff8698aa9f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ab3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb4676d7d60 CR3=00000000322d6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb466b7c6a3 00007fb466b7c6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff208e0f20 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556c3721ff 000055556c3720c0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556c3764b0 000055556c375e80 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 06060164ee000800 02e00300100002d0 0300100002c00302 100002b00303a010 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0104c086a0801000 0280040100000008 06060164ee000800 02e00300100002d0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300100002c00302 100002b00303a010 000190031a000500 000000010000fe00 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00141c25dfdbfe00 0000000601001800 0000d03e08000300 0401800301800402 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a003000800029003 0fffffffffffff04 0280030010000108 000100000c080606 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=fffffbfff3604ab0 RBX=fffffbfff3604ab1 RCX=ffffffff82114710 RDX=fffffbfff3604ab1 RSI=0000000000000004 RDI=ffffffff9b025580 RBP=fffffbfff3604ab0 RSP=ffffc900029c7978 R8 =0000000000000001 R9 =fffffbfff3604ab0 R10=ffffffff9b025583 R11=0000000000000000 R12=ffff88805a3e8b40 R13=00007f66a0c1a000 R14=00007f66a0c1a000 R15=ffffc900029c7dd8 RIP=ffffffff82209c51 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f66a091a500 ffffffff 00c00000 GS =0000 ffff8880d6bb3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f66a0b0e8e5 CR3=000000002452c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ffffff ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200000000352e32 2e325f4342494c47 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000064 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6300726964686366 0064696765746567 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854e0a85 RDI=ffffffff9ae254e0 RBP=ffffffff9ae254a0 RSP=ffffc9000dadf148 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=74203a7469647561 R12=0000000000000000 R13=0000000000000065 R14=ffffffff9ae254a0 R15=ffffffff854e0a20 RIP=ffffffff854e0aaf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cb3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2682f0 CR3=000000004d340000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89ab20f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89ab20f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89ab20f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89ab20f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89ab20f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89ab20f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89ab37c488 00007f89ab37c480 00007f89ab37c478 00007f89ab37c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89abedd100 00007f89ab37c440 00007f89ab37c458 00007f89ab37c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89ab37c498 00007f89ab37c490 00007f89ab37c488 00007f89ab37c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000190 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000