last executing test programs: 56.471142173s ago: executing program 0 (id=193): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x20044084) close(r3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}, 0x4, 0x700000000000000}, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r4, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) socket$packet(0x11, 0x3, 0x300) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 56.410937307s ago: executing program 0 (id=197): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a8, 0xd0, 0x208, 0x2d8, 0x3c8, 0xd0, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff], [0x0, 0xff000000], 'syzkaller0\x00', 'pimreg0\x00', {0xff}}, 0x0, 0x100, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @common=@frag={{0x30}, {[0x0, 0x8], 0x6, 0xd, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x8}, {}, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [0x0, 0x2000000], 'bond_slave_1\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'geneve1\x00', 'team_slave_1\x00', {0xff}, {}, 0x32, 0x9, 0x1, 0x40}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x2, 0x4], 0x9, 0x2, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x4, 0x1}, {0x4, 0x4}, {0x2, 0x5, 0x5}, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608) 56.41002318s ago: executing program 0 (id=199): r0 = socket$can_bcm(0x1d, 0x2, 0x2) (async) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa006363c54f00000073907800000000ffffffff00af00000008907800"/46], 0x0) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xa0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@hyper}) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f00000000c0)={&(0x7f0000000bc0)={{@hyper, 0x7}, {@hyper, 0x40}, 0x400, "6ffa7ed1bc09502b8027bfb93cdd2a24b142fea8e396d9d91f36a04c1dbf6537a353ef706421ca9138bf98e366bc703a059127b80395ec366fdc19f1940cf5b8343cbe5941356de067fdba67b874643bbd4e8595259f1a84c4f167fcabf11e4cf006d03fd22a2ed9c4c614454bc162cd2d953d558949940bdda81e2d5944db02ea2524591a20778967bff9cbffa1d7ed7c26463f5c21ab7175a3a77604327252f5df2414ad1a2557cb6c0de0371faa9303d28d5c45e79ac10e1fd6b4b53ce94215b5d6a90e369c5730803e3a38c812807404c0f3cd7c7da5b44f7f8a56ed38629a39a2147b03e9c2deb7e7deadc02613873f49cd06928c8b195c30e7aefdf89afd15566f49917e3009e9f8b7d7bddc368f0e475072ccc986eb75c1c5f3741ea6ce09cb9c000b6c588baee578fa1918ade1b7340a21767a999d809daa443bfd3950ad4618b99105f07c5c546129f7325772a17b0e958936eecaa22023e3d604175ec1be4da6cd7c67f193f2b291f158d41ec66381a1ba720fa1c49fa8e08fdb159765286774f00a75ea0012c5a5fc39abafcb733ddceedb06371a53b8de724b330b70cadf636624aadf932977160dda261e1b1519674129607c0a60f56e89c9d638a55eac9e7bb482a73c38aa59f3ec24f7eccfc527415eb7e8c7187ed33acd2e617a7102294aef696054d23bb874808dbbaf9386aa35784790468faa1bdefa265315c401a595d68cb4b1094898661690f370f609c6bad288fe2a4d1da3673458ed31dc0a66174a5f87ffaed39aa450dc3b5bf2bc8e73e3eda1c198aee76b2e1af3b3dc3ba56ea69a1e0aafa640543af37becca132bacd7e1aa5b07487e413ca151f1733818e6b5b715895b5d000dfbb5595d6aa1e380a69b9e92e00f72f729fb280e37c8a36b4babcf39a8056451c9e0a6be1e2cfd60267a5104f1a7d29ab46ee86d24b57349ce4203f2810b2d43ae09819005ef7f7debe89c4790d4683459cb2dee5ae844961bed269050acb7d156f76b76fae8f63386912ac66a91ef34f6d7491c46eae69ecbc577e1921820aa284a54a7bace24d4bb650d07cad76d2bc7766ddfc441a0cf8c44b49d27c6cac671fdf9e17209e84057e4ac8b65be8581a92b45ca1a053f621203083c6486e6b5e7a95dae24a987e4bdffaf078905c1d306eb15de706ec07736c2a488a0456f0d7fb6593d81e3ce32fabff74ef15da439ef3808d15b14a5aadde0cba312de065a78cbb09941e504e16ca12dd64f4ed21eb4c9bf25f96bac50d8314a830ada298aa40ab25d19583e1d05e82b6ce3ec41628b198decd6d8bd0251a3d7a6651b9e04f2260f637cba3fa93899e5241565e2315a0ccb40deacbcfbe5dd7c8ef921c6c10978919070fca2b7a5bcb2c539313b93e6ed5c93de6ed800a870913d8c0f8e28e0a5a2bd5922d8c1a502e0ca9a718b6cde33"}, 0x418}) (async) recvmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x1140) 56.365624088s ago: executing program 0 (id=201): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x24}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) connect$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0xfffe, {0x124a6333d1185a5c}}}, 0x14) 56.302476748s ago: executing program 0 (id=202): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1a0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x20) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r5, 0xedaa7000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r5, r6, 0x25, 0x0, @val=@netfilter={0x3, 0x1, 0x6, 0x1}}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000240)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r9, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r10 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xb, 0x2000) ioctl$VIDIOC_SUBDEV_G_FMT(r10, 0xc0585604, &(0x7f0000000040)={0x0, 0x0, {0x9, 0x4, 0x1012, 0x5, 0x0, 0x0, 0x2, 0x6}}) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000605ebd94103b2f9e57e93e000701feffffff00000000017c0000040042800100000006200600800a0000110002800c0014800800"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r11 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) lseek(r11, 0x7, 0x4) mlockall(0x1) 55.871749285s ago: executing program 0 (id=216): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x9, &(0x7f0000002080)=0xfffff0c3, 0x4) sendmmsg$inet(r1, &(0x7f0000000f80)=[{{&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000200)="0b12", 0x2}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000070000004608ead00000008111000000000000000000000001"], 0x30}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}}], 0x2, 0xc004) r2 = dup(r0) r3 = socket(0x1e, 0x4, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, 0x0, &(0x7f0000000080)) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0xffff, 0x4, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000022c0)=""/153}, {&(0x7f0000002380)=""/18}, {&(0x7f0000002400)=""/255}, {&(0x7f0000002500)=""/98}, {&(0x7f0000002580)=""/141}], 0xfffffd3, 0x0, 0xffffffffffffffc2}}], 0x1, 0x40000003, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4000010, 0xffffffffffffffff, 0x2000) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000002040)=0x9, 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) syz_emit_ethernet(0x4e, &(0x7f0000002140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd604dd30800180601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002008d907800012202000066078129e7f1671fe5f65b26c027231f57ed8abb2c0378127917d3519c6a657324b18410de8ba16e10ce96af102681cd582eb6080ee684908c0f4a8720f9a8ba280f8e3ea75f577e8b722799220c251ce11809f67599362e2a5ba5b45db8348a65a83c42f8813c9553344c12240d5916ef242dce67a86c8d9ec83bdd1b79b9b41259035219b641f7e9fe0b045bd353807cd60b6ee0bcdd2e4584"], 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') pread64(r5, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0xffffffffffffff0c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f00000020c0), &(0x7f0000002100)=0x41) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') read$FUSE(r6, &(0x7f0000000000)={0x2020}, 0x96) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002280)={'sit0\x00'}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r7, 0x2000, 0x0) lremovexattr(0x0, 0x0) mlock(&(0x7f00006f2000/0x4000)=nil, 0x4000) write$binfmt_aout(r2, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 40.757243688s ago: executing program 32 (id=216): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x9, &(0x7f0000002080)=0xfffff0c3, 0x4) sendmmsg$inet(r1, &(0x7f0000000f80)=[{{&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000200)="0b12", 0x2}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000070000004608ead00000008111000000000000000000000001"], 0x30}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}}], 0x2, 0xc004) r2 = dup(r0) r3 = socket(0x1e, 0x4, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, 0x0, &(0x7f0000000080)) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0xffff, 0x4, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000022c0)=""/153}, {&(0x7f0000002380)=""/18}, {&(0x7f0000002400)=""/255}, {&(0x7f0000002500)=""/98}, {&(0x7f0000002580)=""/141}], 0xfffffd3, 0x0, 0xffffffffffffffc2}}], 0x1, 0x40000003, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4000010, 0xffffffffffffffff, 0x2000) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000002040)=0x9, 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) syz_emit_ethernet(0x4e, &(0x7f0000002140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd604dd30800180601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002008d907800012202000066078129e7f1671fe5f65b26c027231f57ed8abb2c0378127917d3519c6a657324b18410de8ba16e10ce96af102681cd582eb6080ee684908c0f4a8720f9a8ba280f8e3ea75f577e8b722799220c251ce11809f67599362e2a5ba5b45db8348a65a83c42f8813c9553344c12240d5916ef242dce67a86c8d9ec83bdd1b79b9b41259035219b641f7e9fe0b045bd353807cd60b6ee0bcdd2e4584"], 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') pread64(r5, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0xffffffffffffff0c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f00000020c0), &(0x7f0000002100)=0x41) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') read$FUSE(r6, &(0x7f0000000000)={0x2020}, 0x96) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002280)={'sit0\x00'}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r7, 0x2000, 0x0) lremovexattr(0x0, 0x0) mlock(&(0x7f00006f2000/0x4000)=nil, 0x4000) write$binfmt_aout(r2, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 1.681954917s ago: executing program 4 (id=1212): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@datasec={0x2, 0x0, 0x0, 0xf, 0x2, [], "25ff"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "b8b3"}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x38, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x401}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.681016026s ago: executing program 4 (id=1213): r0 = syz_open_dev$sndpcmc(&(0x7f0000000380), 0x1, 0x8000) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f00000003c0)={0x1, 0x0, 0xe7, 0x8, 0x8000000000000001, 0x7, 0x5, 0xdb, 0x10001, 0x1, 0x8, 0x1}) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r2, 0x2b, 0x0, 0xffffffff, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000140)}, 0x40) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000000)=0x80) 1.64296858s ago: executing program 4 (id=1214): socket$netlink(0x10, 0x3, 0xf) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01530000f9ffffffffff01"], 0x34}}, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="aa915efc35b2e154aaaaaaaabbaaaaaaaaaaaa889510de8100330008004505001400670000063290787f000001e0000001"], 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000040)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r7, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r7, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r6, 0x3b83, &(0x7f00000004c0)={0x28, 0x5, r7, r7, 0x3, 0x1, 0x3fff}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1.635143969s ago: executing program 4 (id=1215): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = getpid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r2, &(0x7f00000000c0)=r1, 0x12) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) 1.561744249s ago: executing program 4 (id=1216): r0 = add_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="6b763333aea08ab855345343e4b97f", 0xf, 0xfffffffffffffffe) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0xfffffffc, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000014) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000040)={r0, 0x46, 0x59}, &(0x7f0000000080)={'enc=', 'raw', ' hash=', {'sha1-ce\x00'}}, &(0x7f0000000100)="6276f631c0378286a9d6bed0495bf80ed6bbce778509d7320863fb839afb6d4aabdfd6bdb1c66b3b11f3905d77c962c2b30411bdd0cb10ce04e45c508859d7981caad46195f5", &(0x7f0000000180)=""/89) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 1.561458304s ago: executing program 4 (id=1217): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) syz_usb_connect(0x5, 0x34, &(0x7f00000027c0)=ANY=[], 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)='\\', 0x1}, {&(0x7f0000000040)="8c6bd5cc5262c98e9a23fdaf1825d7466b1463f5bb67d4cb53a000e013376a3e09367cd60fe8037923c9b6ecb0058994aae9f4fbb5045730d9508c13c074", 0x3e}, {&(0x7f0000000400)="12627cfb9518a908aa79a84f592171a353a5ba880fc4eb144f7c150fcef2c89ae33665b591305859eb163acd9cb4040b275cc2e044db744ae64b425a49fb1633ef39d6f0127a9faece55a38903f22fab3082263d1d46e2b05bc309a7376f1e26", 0x60}, {&(0x7f0000000380)="9ba9208e7fcc9505e3719f30ac391e6cc4002035aa70718e00edb2fc426f586fd061a9552855e7ce9dd63409a3986a19d3efb1b31cc6e3ff45c349e6bb702b860422f9e39192f23a69d0b42c8bea051d285c7c3d78cc342392b13d700deb8a766e015d18fb3c7d40af2ecbaebfb745af5cb08de240311cb821b4e66d18ba", 0x7e}, {&(0x7f0000000c80)="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", 0x3b4}], 0x5, 0x0, 0x0, 0x810}, 0x44851) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) close(r3) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x8200, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x4, "d2c4924f5689213dc64c3b6e6ff82a75e5318fca4288c20600000072020bcd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"8b9eb04e6ad0970eabea02ceefec6c7480bb02c10cedad271dd44e20d2dcfb57", r5}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1c03, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x87, 0x20, 0xb, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x2, 0xa0, 0x1, {0x22, 0xba3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x3, 0xa}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x95, 0x6, 0x5}}]}}}]}}]}}, &(0x7f0000002600)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x91, 0x4, 0x7, 0xcf, 0x3}, 0xb2, &(0x7f0000002400)={0x5, 0xf, 0xb2, 0x1, [@generic={0xad, 0x10, 0x1, "dbf1e9035ae583c118f1c807ed28b24df64f7165239cc96e4bcf4aad7ecfb8c606af0e2ac9fbf6154a85326e3275a8ab481296ea93eca96b9c79b36a0e9a05b6048acd78cb5ca74efc9a90acd033d3944e8af72557b6adc973548a2efee6b5bb5f8586a95b18b245593f2c956794c79b6c41b640f4ada119cbaafe974d469087e95f47d965373bf8acc82519c55ef294ad060f7b252d8b2897eed2611f46f9fc8007f37a374ecd337986"}]}, 0x3, [{0x3, &(0x7f00000001c0)=@string={0x3, 0x3, "e3"}}, {0xa8, &(0x7f0000002640)=ANY=[@ANYBLOB="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"]}, {0x60, &(0x7f0000002580)=@string={0x60, 0x3, "97e8a89c69bcfceac32e9a485c917dd7f163391dcdfee54bb07add3ba5b03ac96f770a450e4eec024a1a1ecda90bc06e8628d917490ddf7c6b3f17b83d914f9b2cbad94d4b04a9dcf6ce3d4ca457c27e8fec49e8fd212a148dfd2ca7d74d"}}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r6, &(0x7f00000003c0)={0x2020}, 0xffffffaf) r7 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x1277, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x7, 0x903, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d960720810000000000000020e40d000000000000000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c55126540647f306003d8a0f4bd000000004d55f83800", [0x6, 0x200000000]}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xe6) 1.439400219s ago: executing program 3 (id=1221): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x3}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x10000, 0x0, 0x4, 0xefffffff, 0x0, [{0x2, 0x8, 0xfc, '\x00', 0x3}, {0x3, 0x9, 0xfc, '\x00', 0x7c}, {0xfc, 0x12, 0x4, '\x00', 0x1}, {0x11, 0xb, 0x0, '\x00', 0xea}, {}, {0xfe, 0x0, 0x1, '\x00', 0x2}, {0x1f, 0x1, 0x2}, {0xfd, 0x0, 0x0, '\x00', 0x2}, {0x0, 0xf, 0xf7, '\x00', 0xfc}, {0xa8, 0x6, 0x0, '\x00', 0x11}, {0xb}, {0x9, 0x9, 0x42, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x1}, {0x2, 0x0, 0x6}, {0xff, 0x0, 0x0, '\x00', 0x49}, {0x1, 0x21, 0x80}, {0x3, 0x0, 0x0, '\x00', 0x80}, {0x2, 0x2, 0x6, '\x00', 0x10}, {0x48, 0x4, 0xd, '\x00', 0xfd}, {0x8, 0xc0, 0x3}, {0x4, 0x12, 0x3, '\x00', 0x25}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x2, 0x0, 0x9}, {0x80, 0xff, 0x3, '\x00', 0x7}]}}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) syz_80211_inject_frame(&(0x7f0000000180), 0x0, 0x0) 1.23094809s ago: executing program 1 (id=1224): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = getpid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r2, &(0x7f00000000c0)=r1, 0x12) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) 1.229981358s ago: executing program 1 (id=1225): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x13, 0x1, 0x2, "7e0efe3287fdaced3d4fd6e8c46a2ca55aab2500000000b482b200", 0x50424752}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 834.607551ms ago: executing program 2 (id=1227): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)={'trans=rdma,', {'port', 0x3d, 0xffffffffffffffff}}) 761.86954ms ago: executing program 2 (id=1228): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000ffffbb3b2f49306cae1e713733083cb7e3ef7f000000e2ffffffff8400e11479a96e299092fce30354016a34"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x40001) syz_usbip_server_init(0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x43, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x64, 0x0, &(0x7f0000000080)=0x4f) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="b4659d8396bc22175a2116efdd88dd3c22a193", @ANYRES64=0x0], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r4, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e00, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000080)={0x51, 0x0, 0x4, {0x0, 0x62}, {0x4, 0xa5d}, @rumble={0xef51, 0x9}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x3c}}, 0x0) r9 = socket(0x1d, 0x2, 0x6) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r10 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x1e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r11, 0x2, {0x3}}, 0x18) sendmsg$NFT_BATCH(r9, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x9832c93c1b3cca22}}, [@NFT_MSG_DELTABLE={0xec, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xaa, 0x6, "7909574c8d113f69080c4031e23b9caa29077dd4b16fd536c22fb62ea962e17b0ac68d78d0a1fbd38fb194746ef1d1f3372be96dcedff409aafc83ad04e854d712085093284328e70b0676df1844fbdd20f0edeedf45f243a1064f852b850f073fd88a428ef9470028dceddf22da7010b2d97e011e1713437840d53897f5d35cd952a8e8344de70e9f4ac0d434ac915fd067f1c2e89566d2a5fc989104bbc059b36663bb4190"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x800, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}}, @NFT_MSG_DELFLOWTABLE={0xbc, 0x18, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x84, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'pim6reg\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd69f}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x60, 0x5, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x38, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x188fbc5e}, @NFTA_HOOK_DEV={0x14, 0x3, 'macsec0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x643891c3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x270}, 0x1, 0x0, 0x0, 0x20048010}, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000002fc0)={0x2020}, 0x2020) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000100008040000000030000009500000000000000950000000000f49257b4d62156b462d5a52e71bd000028c76b56c0c3d543ae4c75ddd76651d86b242ce9031aa59caf8f01a9caa6db8ef494b96d722505c3c265ff537f871a3b49b4c1af2dfae01010582f48a411656579622827eac907deb568d3c4c3a1cfcca22e3b5710b410986b00000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x10001, 0x0, &(0x7f0000000380), 0x41100, 0x50, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x10, 0x6, 0x33}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)=[{0x0, 0x4, 0x10, 0xb}, {0x1, 0x4, 0x2, 0x8}, {0x5, 0x5, 0x7, 0xc}, {0x5, 0x5, 0xf, 0x5}], 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000a00)={0xffffffffffffffff, r2, 0x0, r12}, 0x10) 702.034821ms ago: executing program 3 (id=1229): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a8, 0xd0, 0x208, 0x2d8, 0x3c8, 0xd0, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff], [0x0, 0xff000000], 'syzkaller0\x00', 'pimreg0\x00', {0xff}}, 0x0, 0x100, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @common=@frag={{0x30}, {[0x0, 0x8], 0x6, 0xd, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x8}, {}, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [], 'bond_slave_1\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0xf0, 0x0, {0x20}}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'geneve1\x00', 'team_slave_1\x00', {0xff}, {}, 0x32, 0x9, 0x1, 0x40}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x2, 0x4], 0x9, 0x2, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x4, 0x1}, {0x4, 0x4}, {0x2, 0x5, 0x5}, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608) 701.622344ms ago: executing program 3 (id=1230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x14041084) mkdir(&(0x7f0000000300)='./bus\x00', 0x90) (async) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x100c0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) read$FUSE(r1, 0x0, 0x0) 701.247851ms ago: executing program 3 (id=1231): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000980)) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r5 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3d0}) close(r5) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x500, 0x0, 0x0, 0x0, [0x4]}}) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, r6, 0x100000b, 0x4010, r2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 512.01298ms ago: executing program 3 (id=1232): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x60640) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000540)={{0x3, 0x3, 0x0, 0x462b, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffff47c7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x10001, 0xfffffffffffffffc, 0x10006, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x3, 0x9, 0x0, 0x0, 0xa9d5, 0x0, 0x1, 0x5, 0x0, 0x0, 0xf, 0x0, 0xfffffffffffffffd, 0xfeb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x2, 0x1000, 0xe0a2, 0x0, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000000, 0x73fb, 0x0, 0x0, 0x0, 0x2, 0xb7a8, 0xff, 0x0, 0xfffffffffffffffc]}) (async) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000006, 0x10012, r2, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) (async) read$FUSE(r0, &(0x7f0000004540)={0x2020}, 0x2020) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 511.735343ms ago: executing program 3 (id=1233): socket$netlink(0x10, 0x3, 0xf) (async) r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route_sched(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001600)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xd, 0xffe0}, {0xffe0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000814}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x5, 0x6, 0x806, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x5, 0x6, 0x806, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000007740)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x832b, 0x0) (async) recvmmsg(r2, &(0x7f0000007740)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x832b, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r3, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000020601080000000000000000000000001400078008001140000000000500150002000000050005000a000000050001008700000005000400020000000900020073797a310000000011000300686173683a69702c706f7274"], 0x60}}, 0x0) 342.022171ms ago: executing program 1 (id=1234): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2102, 0x22008}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0xfffffff0}}]}]}]}, 0x48}}, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1402, 0x4, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x28}}, 0x8001) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2102, 0x22008}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0xfffffff0}}]}]}]}, 0x48}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1402, 0x4, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x28}}, 0x8001) (async) 340.675372ms ago: executing program 1 (id=1235): r0 = socket$caif_stream(0x25, 0x1, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) mknod(&(0x7f0000000400)='./file0\x00', 0x1, 0x8) mount$tmpfs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x10, &(0x7f0000000b80)={[{@gid={'gid', 0x3d, r1}}]}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000180)) 272.063137ms ago: executing program 1 (id=1236): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000006940)) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) setreuid(0x0, r1) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x4000, &(0x7f0000000080)={'trans=rdma,', {}, 0x2c, {[], [{@uid_lt={'uid<', r1}}, {@permit_directio}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@measure}]}}) 271.87657ms ago: executing program 1 (id=1237): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x1, 0xc9, 0x0, 0x72d}}}, 0x9) (async) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000001c0)={0x1, 0x3b7, 0x1, 0x4}, 0x8) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000200), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r0, r2}) (async) sendmsg$rds(r6, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000280)=""/4108, 0x100c}], 0x1, 0x0, 0x0, 0x81}, 0x84) 51.764465ms ago: executing program 2 (id=1238): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00010025bd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="0200050008000100"], 0x2c}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRESOCT=r0, @ANYRES32=0x41424344, @ANYBLOB="5410000090780000"], 0x0) 51.347353ms ago: executing program 2 (id=1239): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a8, 0xd0, 0x208, 0x2d8, 0x3c8, 0xd0, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff], [0x0, 0xff000000], 'syzkaller0\x00', 'pimreg0\x00', {0xff}}, 0x0, 0x100, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @common=@frag={{0x30}, {[0x0, 0x8], 0x6, 0xd, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x8}, {}, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [], 'bond_slave_1\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0xf0, 0x0, {0x16e}}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'geneve1\x00', 'team_slave_1\x00', {0xff}, {}, 0x32, 0x9, 0x1, 0x40}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x2, 0x4], 0x9, 0x2, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x4, 0x1}, {0x4, 0x4}, {0x2, 0x5, 0x5}, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608) 385.269µs ago: executing program 2 (id=1240): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2008e411d424505399ef1d14cf1000000000007020000f8ffffffb703000008dc40c862f2beecbe8798a28524e3da56d8953d178f0da9380000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @loopback}, 0x0, 0x2, 0x0, 0x3}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000200)="38d12264567b0a827f0eb89761c302816dd9a604ad684f2c87af574c533777489688d360af889cb7a460eae960e22b51c8f11c5c1a2d9e47711b171b085f3ad7d94a099240596287a437f140a06b5b423472391eb82fefadfc2f71ca3bfe9912e4b8885de7697297d53f35bca7b8", 0x6e}, {&(0x7f00000004c0)="39b90908fee0d74f499f14757565ecf7362dd8c2d15d81595ba6437ef93cc8a11e851ca0f05d296eae0870c6e20e7fa1204947d8a1c36978b7b1d85119788287ee826cb8387a5c0cbfff49100de8b66ea71828bd42a8c4b1e63e67c84962ba75b1f675ea0dc9c0acc95671d745189be2116cf899c88c53364ae6db4d837475f1f7d7faaaa1c6fa60a98db5b2253c919246869c4707df83cb2389ef5b397bf9c4181b8564380e734e2d1b", 0xaa}, {&(0x7f0000000280)="ae3ae545ded17536258b9aea5252abfe2ff0338193e40c3bdec8838c46313e4a638e9b5925c86a8ba36a", 0x2a}, {&(0x7f0000000580)="51113c4aad7951a838a5802d5de29d6a328e3478ce72d3f5d1fc0e726f7f9e8eb18e8c99534692eba1aa5c0c6a957f100e8816035568dc38528f8d8b3052b9d22db40805a840bbd52b63378a30da05df799ffc60536b49ad50374916cdd140d24288d39694aab550faf6c6780448c3aa7bde0284a534a9abb2f2d51694a78901bdd2c169171738b315fade8ff40c43234c8b9e4b312b2fdfde94f2d1d1c4ca160a93f8623e037fca0aeaaced100f3d65f01def158d6b0ae36ea645b2e7c99cdefeb7c8476c1be2a3adbae59bcc18370a7d60fd14a39e215628f490477eeca92f3d20ef83d92c92d322c07752cb59", 0xee}, {&(0x7f0000000680)="4113885b28b1401be188df92b31001ec358ab4d1771c4fb5a1461c4a938b931eb33eaa827e9cb6ffb3af02ad6c9b35ccf690b5e6a819d7a33a4c3bfa1ed7ebe1e905d430db1af39a294713b1ca7f6871f0b367cc47853953802dd4fc4b69d5db8cefe0def2494e1684c6be2e68cb4680e4fa3e95c6a567657f27f712fd430b0d4121e57b4c33123863685d4d447d7f5134f53e2f", 0x94}, {&(0x7f0000000a00)="b3b1d3ac65de479d763238ad604e451076e65760e850b286a245c766ed50b04c7fcff11c4080cc3bddeda277035e4dc7a3abae1565c7c116b70996729d7bed779ca720a1bfa7c9e6ef0ca07fb513340a60f063aa4db3569ed3c7c3b88a5495964135be50f347421a0683398a65eb988a6cea4cca891640b71c17b6887953ffabebbda7823f3b41c5b312721b4718fdb997bc80c9e86d1c7aee572e376e9b9a221b38c22251da87f62ef6a4ca9b2b87eb4dd9", 0xb2}, {&(0x7f0000000300)}], 0x7, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1c8}, 0x4001) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x4}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r8, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r8, 0x0) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r9, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='thermal_power_cpu_limit\x00', r6}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000454000/0x3000)=nil, 0x3000, &(0x7f0000000040)='/dev/hpet\x00') r10 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r11 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r11, 0x400442c8, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYBLOB="43ea6e69080001000000"]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=1241): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0], 0x0, 0xc1, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0xfffffffffffffddf, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x11, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x32, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xafe6, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x59}, @jmp={0x5, 0x1, 0x6, 0x5, 0x3, 0x10, 0xffffffffffffffff}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @exit, @alu={0x4, 0x1, 0x5, 0xb, 0x1, 0xfffffffffffffff8}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @generic={0xf7, 0x8, 0x5, 0x4, 0xe3d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000900)='GPL\x00', 0xfffffff5, 0xf7, &(0x7f0000000940)=""/247, 0x0, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000b40), 0x101000, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000b80), 0x40, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x13, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000007b000000000000000100000085100000f8ffffff8d09f4fff0ffffff02d0090001000000185a000009000000000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000eaffffb6020000000000008500000086000000183200000200000000000000000000009500000000000000c6770a026d517beb7aedb8b244a63e7ba46558990beced06ca06ef3717d64853f2160cb425e9bd6a5f6a0f95a52e53e08cb3c9e829075e09b2b426ae910c51ca07264b7f2dd7cdd90dfc5ab0d94a9531fae5a50d74c1f7773aaf58751326e6de5e6d5c3be606c7dbb7ea51d1ec8014707e6e54b3bf6125026ef38665167f127be39357c934c33d66777b06fe35145c3830df2a51da157dfab2ed19066e0e64"], &(0x7f0000000100)='syzkaller\x00', 0x6, 0x73, &(0x7f0000000240)=""/115, 0x41000, 0x8, '\x00', r2, @fallback=0x19, r3, 0x8, &(0x7f0000000340)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x4, 0x10001, 0x4}, 0x10, r4, r5, 0x4, &(0x7f0000000c40)=[r6, r7, 0x1, r8], &(0x7f0000000c80)=[{0x2, 0x2, 0x9, 0x3}, {0x0, 0x3, 0x2}, {0x3, 0x4, 0x1, 0xc4f1b0569954c89f}, {0x5, 0x1, 0xb, 0x9}], 0x10, 0x7ff, @void, @value}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r9, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r11, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r11, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r11, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) timer_create(0x7, &(0x7f0000000fc0)={0x0, 0x22, 0x4, @thr={&(0x7f0000000ec0)="b4b7e0ff9c5625b1a8b668734484b5b3d33a89210edc8c9aa36d032e5e51dd7eac12093d2d1219368b9fb48dd2ea45facca1ed3be9bd01453ee095333ea658f217b72fd2527e3606cf022d0a027278ac2cb82d0410aa476b89201bd2f7c7059293c8691080f31a62f32335b55c505e621d42f624bd8ea54705cb8b1fed18cb1bf5ceac4ce26a0b2b8b231a1f03969d41f977f459d19fc5a901a45cf9dd9069d170f491e5d291ab6e562e37b01e90834dd5ecdc9e4dc34fa6dda0beb4e79fb07c1f89fb6f8605be6245d9ff640bb5b4daf7774d2b7f3aeeb5782d8ad90738224fdd336180f7694ac7467954102232faed8acd57d32c88", &(0x7f0000000080)="c516c6f0ee47556d227964c54b85541f7b"}}, &(0x7f0000001000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r10, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @broadcast}) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @private=0xa010100}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x3}}]}}]}, 0x44}}, 0x4000010) kernel console output (not intermixed with test programs): T7420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7420 comm=syz.3.454 [ 72.233427][ T40] audit: type=1400 audit(1745933163.118:422): avc: denied { mounton } for pid=7425 comm="syz.2.455" path="/185/file0/file0" dev="9p" ino=35913880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.244510][ T7426] netfs: Couldn't get user pages (rc=-14) [ 72.292107][ T7429] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.456'. [ 72.295769][ T7429] netlink: 24 bytes leftover after parsing attributes in process `syz.3.456'. [ 72.399518][ T7433] Cannot find map_set index 0 as target [ 72.564160][ T7442] veth1_vlan: Device is already in use. [ 72.709374][ T40] audit: type=1400 audit(1745933163.588:423): avc: denied { create } for pid=7450 comm="syz.2.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 72.718210][ T40] audit: type=1400 audit(1745933163.598:424): avc: denied { setopt } for pid=7450 comm="syz.2.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.732357][ T40] audit: type=1400 audit(1745933163.598:425): avc: denied { setopt } for pid=7450 comm="syz.2.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.817437][ T40] audit: type=1400 audit(1745933163.698:426): avc: denied { read } for pid=7457 comm="syz.2.466" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.826726][ T40] audit: type=1400 audit(1745933163.698:427): avc: denied { connect } for pid=7457 comm="syz.2.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.068542][ T7461] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.071228][ T7461] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.074006][ T7461] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.076778][ T7461] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.079426][ T7461] geneve2: entered promiscuous mode [ 73.081053][ T7461] geneve2: entered allmulticast mode [ 73.092999][ T7461] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.096166][ T7461] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.099105][ T7461] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.101860][ T7461] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.316227][ T7462] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.318951][ T7462] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.321633][ T7462] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.327276][ T7462] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.329989][ T7462] geneve2: entered promiscuous mode [ 73.331618][ T7462] geneve2: entered allmulticast mode [ 73.340703][ T7462] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.344393][ T7462] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.347098][ T7462] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.349824][ T7462] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.677082][ T7469] xt_hashlimit: max too large, truncated to 1048576 [ 73.680342][ T7469] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 73.699100][ T7472] veth1_vlan: Device is already in use. [ 73.790255][ T40] audit: type=1400 audit(1745933164.668:428): avc: denied { write } for pid=7475 comm="syz.3.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 73.922401][ T834] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 73.988037][ T7482] trusted_key: encrypted_key: insufficient parameters specified [ 74.052376][ T834] usb 6-1: device descriptor read/64, error -71 [ 74.154783][ T7499] veth1_vlan: Device is already in use. [ 74.302392][ T834] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 74.412464][ T1020] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 74.432457][ T834] usb 6-1: device descriptor read/64, error -71 [ 74.542680][ T834] usb usb6-port1: attempt power cycle [ 74.572421][ T1020] usb 8-1: Using ep0 maxpacket: 8 [ 74.576144][ T1020] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 74.579501][ T1020] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 74.582516][ T1020] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 74.586145][ T1020] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.592064][ T1020] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 74.595625][ T1020] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.639671][ T40] audit: type=1400 audit(1745933165.518:429): avc: denied { bind } for pid=7505 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 74.804214][ T1020] usb 8-1: GET_CAPABILITIES returned 0 [ 74.806051][ T1020] usbtmc 8-1:16.0: can't read capabilities [ 74.894220][ T834] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 74.913341][ T834] usb 6-1: device descriptor read/8, error -71 [ 75.005878][ T1020] usb 8-1: USB disconnect, device number 6 [ 75.152451][ T834] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 75.173113][ T834] usb 6-1: device descriptor read/8, error -71 [ 75.282613][ T834] usb usb6-port1: unable to enumerate USB device [ 75.574156][ T7524] overlayfs: missing 'lowerdir' [ 75.738249][ T40] audit: type=1400 audit(1745933166.618:430): avc: denied { execute } for pid=7529 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 75.796780][ T7534] Cannot find map_set index 0 as target [ 75.880387][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.885700][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.888468][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.890998][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.893828][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.898987][ T5935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.901903][ T5935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.904658][ T5935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.909206][ T5935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.912864][ T5935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.022768][ T1080] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.058041][ T7537] chnl_net:caif_netlink_parms(): no params data found [ 76.092157][ T1080] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.138207][ T7537] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.140914][ T7537] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.143568][ T7537] bridge_slave_0: entered allmulticast mode [ 76.146154][ T7537] bridge_slave_0: entered promiscuous mode [ 76.149899][ T7537] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.153793][ T7537] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.156185][ T7537] bridge_slave_1: entered allmulticast mode [ 76.158958][ T7537] bridge_slave_1: entered promiscuous mode [ 76.196062][ T1080] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.203291][ T7537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.208002][ T7537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.247585][ T7537] team0: Port device team_slave_0 added [ 76.254848][ T7537] team0: Port device team_slave_1 added [ 76.313934][ T1080] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.322705][ T7537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.324937][ T7537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.333423][ T7537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.338903][ T7537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.341153][ T7537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.349836][ T7537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.401904][ T7537] hsr_slave_0: entered promiscuous mode [ 76.405233][ T7537] hsr_slave_1: entered promiscuous mode [ 76.408105][ T7537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.410394][ T7537] Cannot create hsr debugfs directory [ 76.504068][ T1080] bridge_slave_1: left allmulticast mode [ 76.506624][ T1080] bridge_slave_1: left promiscuous mode [ 76.510354][ T1080] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.519212][ T1080] bridge_slave_0: left allmulticast mode [ 76.521561][ T1080] bridge_slave_0: left promiscuous mode [ 76.525069][ T1080] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.927613][ T1080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.932028][ T1080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.935801][ T1080] bond0 (unregistering): Released all slaves [ 76.997846][ T7564] __nla_validate_parse: 10 callbacks suppressed [ 76.997856][ T7564] netlink: 20 bytes leftover after parsing attributes in process `syz.3.497'. [ 77.056423][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 77.056436][ T40] audit: type=1400 audit(1745933167.938:439): avc: denied { ioctl } for pid=7569 comm="syz.2.499" path="socket:[17861]" dev="sockfs" ino=17861 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.089990][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 77.096096][ T7572] veth1_vlan: Device is already in use. [ 77.099490][ T7537] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.103765][ T7537] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.108072][ T7537] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.113391][ T7537] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.120348][ T7576] SET target dimension over the limit! [ 77.181293][ T7537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.195785][ T1080] hsr_slave_0: left promiscuous mode [ 77.197903][ T1080] hsr_slave_1: left promiscuous mode [ 77.200151][ T1080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.203624][ T1080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.206394][ T1080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.208756][ T1080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.228348][ T1080] veth1_macvtap: left promiscuous mode [ 77.230746][ T1080] veth0_macvtap: left promiscuous mode [ 77.233574][ T1080] veth1_vlan: left promiscuous mode [ 77.235452][ T1080] veth0_vlan: left promiscuous mode [ 77.778110][ T1080] team0 (unregistering): Port device team_slave_1 removed [ 77.840575][ T1080] team0 (unregistering): Port device team_slave_0 removed [ 77.993246][ T67] Bluetooth: hci3: command tx timeout [ 78.004128][ T7597] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20000 [ 78.020568][ T40] audit: type=1400 audit(1745933168.898:440): avc: denied { map } for pid=7596 comm="syz.3.508" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 78.080475][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.509'. [ 78.083564][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 78.275527][ T7591] syzkaller1: entered promiscuous mode [ 78.278121][ T7591] syzkaller1: entered allmulticast mode [ 78.285086][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.509'. [ 78.288663][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 78.289512][ T7537] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.306882][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.509'. [ 78.310406][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 78.311432][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.317156][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.324979][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.509'. [ 78.330327][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.330769][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 78.333844][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.407578][ T7608] veth1_vlan: Device is already in use. [ 78.437769][ T7613] Cannot find map_set index 0 as target [ 78.453735][ T7537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.610841][ T7537] veth0_vlan: entered promiscuous mode [ 78.616104][ T7537] veth1_vlan: entered promiscuous mode [ 78.630702][ T7537] veth0_macvtap: entered promiscuous mode [ 78.638253][ T7537] veth1_macvtap: entered promiscuous mode [ 78.646128][ T7537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.649367][ T7537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.653132][ T7537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.658846][ T7537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.668254][ T7537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.673470][ T7537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.686459][ T7537] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.689268][ T7537] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.691935][ T7537] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.697225][ T7537] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.718886][ T7644] veth1_vlan: Device is already in use. [ 78.733265][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.735877][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.749939][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.753491][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.759803][ T40] audit: type=1400 audit(1745933169.638:441): avc: denied { mount } for pid=7651 comm="syz.1.522" name="/" dev="ramfs" ino=18740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 78.767745][ T40] audit: type=1400 audit(1745933169.638:442): avc: denied { mounton } for pid=7537 comm="syz-executor" path="/syzkaller.kSllDy/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 78.776384][ T40] audit: type=1400 audit(1745933169.648:443): avc: denied { mount } for pid=7537 comm="syz-executor" name="/" dev="gadgetfs" ino=7539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 78.784932][ T7650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 78.862443][ T40] audit: type=1400 audit(1745933169.738:444): avc: denied { getopt } for pid=7663 comm="syz.4.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.192128][ T7708] veth1_vlan: Device is already in use. [ 79.218628][ T40] audit: type=1400 audit(1745933170.098:445): avc: denied { mount } for pid=7709 comm="syz.3.543" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 79.226473][ T40] audit: type=1400 audit(1745933170.108:446): avc: denied { remount } for pid=7709 comm="syz.3.543" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 79.244927][ T40] audit: type=1400 audit(1745933170.128:447): avc: denied { unmount } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 79.782085][ T7729] netlink: 'syz.4.550': attribute type 1 has an invalid length. [ 79.864689][ T7742] veth1_vlan: Device is already in use. [ 80.028959][ T7753] lo: entered allmulticast mode [ 80.032391][ T7753] tunl0: entered allmulticast mode [ 80.035031][ T7753] gre0: entered allmulticast mode [ 80.039225][ T7753] gretap0: entered allmulticast mode [ 80.043574][ T7753] erspan0: entered allmulticast mode [ 80.046688][ T7753] ip_vti0: entered allmulticast mode [ 80.049295][ T7753] ip6_vti0: entered allmulticast mode [ 80.052108][ T7753] sit0: entered allmulticast mode [ 80.055646][ T7753] ip6tnl0: entered allmulticast mode [ 80.058440][ T7753] ip6gre0: entered allmulticast mode [ 80.063753][ T7753] syz_tun: entered allmulticast mode [ 80.067234][ T7753] ip6gretap0: entered allmulticast mode [ 80.071173][ T7753] bridge0: entered allmulticast mode [ 80.073883][ T67] Bluetooth: hci3: command tx timeout [ 80.075765][ T7753] vcan0: entered allmulticast mode [ 80.078092][ T7753] bond0: entered allmulticast mode [ 80.081265][ T7753] team0: entered allmulticast mode [ 80.084819][ T7753] dummy0: entered allmulticast mode [ 80.088842][ T7753] nlmon0: entered allmulticast mode [ 80.091165][ T7753] caif0: entered allmulticast mode [ 80.093549][ T7753] batadv0: entered allmulticast mode [ 80.096763][ T7755] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=29 sclass=netlink_audit_socket pid=7755 comm=syz.2.558 [ 80.096772][ T7753] vxcan0: entered allmulticast mode [ 80.102638][ T7753] vxcan1: entered allmulticast mode [ 80.105218][ T7753] veth0: entered allmulticast mode [ 80.108651][ T7753] veth1: entered allmulticast mode [ 80.122081][ T7753] wg0: entered allmulticast mode [ 80.139523][ T7753] wg1: entered allmulticast mode [ 80.158640][ T7753] wg2: entered allmulticast mode [ 80.166660][ T7753] veth0_to_bridge: entered allmulticast mode [ 80.173802][ T7753] bridge_slave_0: entered allmulticast mode [ 80.179431][ T7753] veth1_to_bridge: entered allmulticast mode [ 80.183664][ T7753] bridge_slave_1: entered allmulticast mode [ 80.187837][ T7753] veth0_to_bond: entered allmulticast mode [ 80.192426][ T7753] bond_slave_0: entered allmulticast mode [ 80.195067][ T7753] veth1_to_bond: entered allmulticast mode [ 80.198983][ T7753] bond_slave_1: entered allmulticast mode [ 80.201763][ T7753] veth0_to_team: entered allmulticast mode [ 80.206433][ T7753] team_slave_0: entered allmulticast mode [ 80.208887][ T7753] veth1_to_team: entered allmulticast mode [ 80.213426][ T7753] team_slave_1: entered allmulticast mode [ 80.217103][ T7753] veth0_to_batadv: entered allmulticast mode [ 80.224253][ T7753] batadv_slave_0: entered allmulticast mode [ 80.230037][ T7753] veth1_to_batadv: entered allmulticast mode [ 80.236126][ T7753] batadv_slave_1: entered allmulticast mode [ 80.240993][ T7753] xfrm0: entered allmulticast mode [ 80.246278][ T7753] veth0_to_hsr: entered allmulticast mode [ 80.251011][ T7753] hsr_slave_0: entered allmulticast mode [ 80.256141][ T7753] veth1_to_hsr: entered allmulticast mode [ 80.260831][ T7753] hsr_slave_1: entered allmulticast mode [ 80.267136][ T7753] hsr0: entered allmulticast mode [ 80.272201][ T7753] veth1_virt_wifi: entered allmulticast mode [ 80.278213][ T7753] veth0_virt_wifi: entered allmulticast mode [ 80.283472][ T7753] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 80.287733][ T7753] veth1_vlan: entered allmulticast mode [ 80.293420][ T7753] veth0_vlan: entered allmulticast mode [ 80.300609][ T7753] vlan0: entered allmulticast mode [ 80.303357][ T7753] vlan1: entered allmulticast mode [ 80.306128][ T7753] macvlan0: entered allmulticast mode [ 80.311077][ T7753] macvlan1: entered allmulticast mode [ 80.314482][ T7753] ipvlan0: entered allmulticast mode [ 80.316342][ T7753] ipvlan1: entered allmulticast mode [ 80.319581][ T7753] veth1_macvtap: entered allmulticast mode [ 80.324605][ T7753] veth0_macvtap: entered allmulticast mode [ 80.328010][ T7753] macvtap0: entered allmulticast mode [ 80.331036][ T7753] macsec0: entered allmulticast mode [ 80.334390][ T7753] geneve0: entered allmulticast mode [ 80.337523][ T7753] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.340111][ T7753] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.342758][ T7753] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.345288][ T7753] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.348060][ T7753] geneve1: entered allmulticast mode [ 80.350983][ T7753] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 80.353354][ T7753] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 80.355757][ T7753] erspan1: entered allmulticast mode [ 80.357771][ T7753] vxlan0: entered allmulticast mode [ 80.359782][ T7753] netdevsim netdevsim3 eth0: entered allmulticast mode [ 80.362068][ T7753] netdevsim netdevsim3 eth1: entered allmulticast mode [ 80.364479][ T7753] netdevsim netdevsim3 eth2: entered allmulticast mode [ 80.366698][ T7753] netdevsim netdevsim3 eth3: entered allmulticast mode [ 80.368909][ T7753] bridge1: entered allmulticast mode [ 80.370621][ T7753] gre1: entered allmulticast mode [ 80.384502][ T7767] vti0: entered promiscuous mode [ 80.407914][ T40] audit: type=1400 audit(1745933171.288:448): avc: denied { remount } for pid=7769 comm="syz.2.562" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 80.549753][ T7793] Cannot find map_set index 0 as target [ 80.607315][ T7797] lo: left promiscuous mode [ 80.608786][ T7797] lo: entered allmulticast mode [ 80.610467][ T7797] bridge0: entered allmulticast mode [ 80.612339][ T7797] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 80.614626][ T7797] erspan1: entered allmulticast mode [ 80.616405][ T7797] ip6erspan0: entered allmulticast mode [ 80.618197][ T7797] bond1: entered allmulticast mode [ 80.619891][ T7797] : entered allmulticast mode [ 80.623403][ T7797] vti0: left promiscuous mode [ 80.625492][ T7797] vti0: entered allmulticast mode [ 81.262897][ T7829] netlink: 'syz.3.585': attribute type 11 has an invalid length. [ 81.267126][ T7834] veth1_vlan: Device is already in use. [ 81.359329][ T65] cfg80211: failed to load regulatory.db [ 81.620315][ T7852] loop2: detected capacity change from 0 to 7 [ 81.624889][ T7852] Dev loop2: unable to read RDB block 7 [ 81.626761][ T7852] loop2: unable to read partition table [ 81.628686][ T7852] loop2: partition table beyond EOD, truncated [ 81.630831][ T7852] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 81.925009][ T7863] Cannot find map_set index 0 as target [ 82.088211][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 82.088220][ T40] audit: type=1400 audit(1745933172.968:456): avc: denied { setrlimit } for pid=7882 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 82.152418][ T67] Bluetooth: hci3: command tx timeout [ 82.232738][ T5977] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 82.382443][ T5977] usb 7-1: Using ep0 maxpacket: 8 [ 82.386273][ T5977] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.390176][ T5977] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 82.393756][ T5977] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.396968][ T5977] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.401292][ T5977] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 82.404474][ T5977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.441262][ T40] audit: type=1400 audit(1745933173.318:457): avc: denied { write } for pid=7895 comm="syz.3.609" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 82.611183][ T5977] usb 7-1: GET_CAPABILITIES returned 0 [ 82.613473][ T5977] usbtmc 7-1:16.0: can't read capabilities [ 82.636962][ T7909] capability: warning: `syz.4.613' uses 32-bit capabilities (legacy support in use) [ 82.652494][ T40] audit: type=1400 audit(1745933173.528:458): avc: denied { setattr } for pid=7908 comm="syz.4.613" name="PF_CAIF" dev="sockfs" ino=17349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 82.661852][ T40] audit: type=1400 audit(1745933173.538:459): avc: denied { ioctl } for pid=7908 comm="syz.4.613" path="socket:[17352]" dev="sockfs" ino=17352 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 82.815560][ T834] usb 7-1: USB disconnect, device number 4 [ 82.986438][ T7916] netlink: 'syz.4.624': attribute type 1 has an invalid length. [ 82.989572][ T7916] __nla_validate_parse: 138 callbacks suppressed [ 82.989585][ T7916] netlink: 224 bytes leftover after parsing attributes in process `syz.4.624'. [ 83.086706][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'. [ 83.110806][ T7927] FAULT_INJECTION: forcing a failure. [ 83.110806][ T7927] name failslab, interval 1, probability 0, space 0, times 1 [ 83.118590][ T7927] CPU: 0 UID: 0 PID: 7927 Comm: syz.4.618 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 83.118606][ T7927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.118613][ T7927] Call Trace: [ 83.118617][ T7927] [ 83.118621][ T7927] dump_stack_lvl+0x16c/0x1f0 [ 83.118652][ T7927] should_fail_ex+0x512/0x640 [ 83.118671][ T7927] should_failslab+0xc2/0x120 [ 83.118682][ T7927] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 83.118701][ T7927] ? skb_clone+0x190/0x3f0 [ 83.118720][ T7927] skb_clone+0x190/0x3f0 [ 83.118737][ T7927] netlink_deliver_tap+0xabd/0xd30 [ 83.118758][ T7927] netlink_unicast+0x5df/0x7f0 [ 83.118771][ T7927] ? __pfx_netlink_unicast+0x10/0x10 [ 83.118785][ T7927] netlink_sendmsg+0x8d1/0xdd0 [ 83.118797][ T7927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.118813][ T7927] ____sys_sendmsg+0xa95/0xc70 [ 83.118826][ T7927] ? copy_msghdr_from_user+0x10a/0x160 [ 83.118842][ T7927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.118860][ T7927] ___sys_sendmsg+0x134/0x1d0 [ 83.118877][ T7927] ? __pfx____sys_sendmsg+0x10/0x10 [ 83.118910][ T7927] __sys_sendmsg+0x16d/0x220 [ 83.118926][ T7927] ? __pfx___sys_sendmsg+0x10/0x10 [ 83.118951][ T7927] do_syscall_64+0xcd/0x260 [ 83.118965][ T7927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.118976][ T7927] RIP: 0033:0x7fec39f8e969 [ 83.118986][ T7927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.118996][ T7927] RSP: 002b:00007fec3ae24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.119007][ T7927] RAX: ffffffffffffffda RBX: 00007fec3a1b5fa0 RCX: 00007fec39f8e969 [ 83.119013][ T7927] RDX: 0000000004000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 83.119020][ T7927] RBP: 00007fec3ae24090 R08: 0000000000000000 R09: 0000000000000000 [ 83.119026][ T7927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.119032][ T7927] R13: 0000000000000000 R14: 00007fec3a1b5fa0 R15: 00007ffcb9cca3e8 [ 83.119045][ T7927] [ 83.324297][ T40] audit: type=1400 audit(1745933174.208:460): avc: denied { create } for pid=7934 comm="syz.4.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 83.332098][ T40] audit: type=1400 audit(1745933174.208:461): avc: denied { write } for pid=7934 comm="syz.4.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 83.340961][ T40] audit: type=1400 audit(1745933174.208:462): avc: denied { bind } for pid=7934 comm="syz.4.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.455161][ T7958] FAULT_INJECTION: forcing a failure. [ 83.455161][ T7958] name failslab, interval 1, probability 0, space 0, times 0 [ 83.459178][ T7958] CPU: 0 UID: 0 PID: 7958 Comm: syz.2.630 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 83.459192][ T7958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.459198][ T7958] Call Trace: [ 83.459202][ T7958] [ 83.459206][ T7958] dump_stack_lvl+0x16c/0x1f0 [ 83.459223][ T7958] should_fail_ex+0x512/0x640 [ 83.459237][ T7958] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 83.459256][ T7958] should_failslab+0xc2/0x120 [ 83.459267][ T7958] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 83.459284][ T7958] ? __alloc_skb+0x2b2/0x380 [ 83.459302][ T7958] __alloc_skb+0x2b2/0x380 [ 83.459317][ T7958] ? __pfx___alloc_skb+0x10/0x10 [ 83.459337][ T7958] netlink_ack+0x15d/0xb80 [ 83.459356][ T7958] netlink_rcv_skb+0x347/0x440 [ 83.459366][ T7958] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 83.459380][ T7958] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 83.459396][ T7958] ? bpf_lsm_capable+0x9/0x10 [ 83.459413][ T7958] ? security_capable+0x7e/0x260 [ 83.459425][ T7958] ? ns_capable+0xd7/0x110 [ 83.459439][ T7958] nfnetlink_rcv+0x1b3/0x430 [ 83.459451][ T7958] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 83.459462][ T7958] ? netlink_deliver_tap+0x1ae/0xd30 [ 83.459482][ T7958] netlink_unicast+0x53a/0x7f0 [ 83.459493][ T7958] ? __pfx_netlink_unicast+0x10/0x10 [ 83.459507][ T7958] netlink_sendmsg+0x8d1/0xdd0 [ 83.459520][ T7958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.459536][ T7958] ____sys_sendmsg+0xa95/0xc70 [ 83.459549][ T7958] ? copy_msghdr_from_user+0x10a/0x160 [ 83.459565][ T7958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.459583][ T7958] ___sys_sendmsg+0x134/0x1d0 [ 83.459601][ T7958] ? __pfx____sys_sendmsg+0x10/0x10 [ 83.459634][ T7958] __sys_sendmsg+0x16d/0x220 [ 83.459650][ T7958] ? __pfx___sys_sendmsg+0x10/0x10 [ 83.459675][ T7958] do_syscall_64+0xcd/0x260 [ 83.459689][ T7958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.459699][ T7958] RIP: 0033:0x7f3f91f8e969 [ 83.459708][ T7958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.459718][ T7958] RSP: 002b:00007f3f92e02038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.459729][ T7958] RAX: ffffffffffffffda RBX: 00007f3f921b5fa0 RCX: 00007f3f91f8e969 [ 83.459736][ T7958] RDX: 0000000004000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 83.459742][ T7958] RBP: 00007f3f92e02090 R08: 0000000000000000 R09: 0000000000000000 [ 83.459748][ T7958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.459754][ T7958] R13: 0000000000000000 R14: 00007f3f921b5fa0 R15: 00007ffe450a0f28 [ 83.459768][ T7958] [ 83.647433][ T7967] autofs: Unknown parameter '' [ 83.777751][ T40] audit: type=1400 audit(1745933174.658:463): avc: denied { create } for pid=7972 comm="syz.2.637" name="#13" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 83.784045][ T40] audit: type=1400 audit(1745933174.668:464): avc: denied { link } for pid=7972 comm="syz.2.637" name="#13" dev="tmpfs" ino=1332 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 83.790635][ T40] audit: type=1400 audit(1745933174.668:465): avc: denied { rename } for pid=7972 comm="syz.2.637" name="#14" dev="tmpfs" ino=1332 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 83.791572][ T7975] [ 83.798514][ T7975] netlink: 'syz.4.638': attribute type 1 has an invalid length. [ 84.206438][ T8010] FAULT_INJECTION: forcing a failure. [ 84.206438][ T8010] name failslab, interval 1, probability 0, space 0, times 0 [ 84.210353][ T8010] CPU: 2 UID: 0 PID: 8010 Comm: syz.4.650 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 84.210375][ T8010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.210383][ T8010] Call Trace: [ 84.210389][ T8010] [ 84.210395][ T8010] dump_stack_lvl+0x16c/0x1f0 [ 84.210419][ T8010] should_fail_ex+0x512/0x640 [ 84.210439][ T8010] should_failslab+0xc2/0x120 [ 84.210453][ T8010] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 84.210475][ T8010] ? skb_clone+0x190/0x3f0 [ 84.210500][ T8010] skb_clone+0x190/0x3f0 [ 84.210523][ T8010] netlink_deliver_tap+0xabd/0xd30 [ 84.210549][ T8010] netlink_unicast+0x6b2/0x7f0 [ 84.210567][ T8010] ? __pfx_netlink_unicast+0x10/0x10 [ 84.210588][ T8010] netlink_ack+0x696/0xb80 [ 84.210609][ T8010] netlink_rcv_skb+0x347/0x440 [ 84.210623][ T8010] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 84.210644][ T8010] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 84.210667][ T8010] ? bpf_lsm_capable+0x9/0x10 [ 84.210684][ T8010] ? security_capable+0x7e/0x260 [ 84.210697][ T8010] ? ns_capable+0xd7/0x110 [ 84.210711][ T8010] nfnetlink_rcv+0x1b3/0x430 [ 84.210723][ T8010] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 84.210734][ T8010] ? netlink_deliver_tap+0x1ae/0xd30 [ 84.210754][ T8010] netlink_unicast+0x53a/0x7f0 [ 84.210766][ T8010] ? __pfx_netlink_unicast+0x10/0x10 [ 84.210780][ T8010] netlink_sendmsg+0x8d1/0xdd0 [ 84.210793][ T8010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.210809][ T8010] ____sys_sendmsg+0xa95/0xc70 [ 84.210822][ T8010] ? copy_msghdr_from_user+0x10a/0x160 [ 84.210838][ T8010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 84.210856][ T8010] ___sys_sendmsg+0x134/0x1d0 [ 84.210874][ T8010] ? __pfx____sys_sendmsg+0x10/0x10 [ 84.210906][ T8010] __sys_sendmsg+0x16d/0x220 [ 84.210923][ T8010] ? __pfx___sys_sendmsg+0x10/0x10 [ 84.210948][ T8010] do_syscall_64+0xcd/0x260 [ 84.210962][ T8010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.210973][ T8010] RIP: 0033:0x7fec39f8e969 [ 84.210982][ T8010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.211006][ T8010] RSP: 002b:00007fec3ae24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.211017][ T8010] RAX: ffffffffffffffda RBX: 00007fec3a1b5fa0 RCX: 00007fec39f8e969 [ 84.211024][ T8010] RDX: 0000000004000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 84.211030][ T8010] RBP: 00007fec3ae24090 R08: 0000000000000000 R09: 0000000000000000 [ 84.211036][ T8010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.211043][ T8010] R13: 0000000000000000 R14: 00007fec3a1b5fa0 R15: 00007ffcb9cca3e8 [ 84.211075][ T8010] [ 84.295848][ T67] Bluetooth: hci3: command tx timeout [ 84.333007][ T8014] lo: entered allmulticast mode [ 84.337242][ T8014] tunl0: entered allmulticast mode [ 84.341057][ T8014] gre0: entered allmulticast mode [ 84.346672][ T8014] gretap0: entered allmulticast mode [ 84.350136][ T8014] erspan0: entered allmulticast mode [ 84.354115][ T8014] ip_vti0: entered allmulticast mode [ 84.356844][ T8014] ip6_vti0: entered allmulticast mode [ 84.359912][ T8014] sit0: entered allmulticast mode [ 84.364124][ T8014] ip6tnl0: entered allmulticast mode [ 84.367120][ T8014] ip6gre0: entered allmulticast mode [ 84.374541][ T8014] syz_tun: entered allmulticast mode [ 84.379743][ T8014] ip6gretap0: entered allmulticast mode [ 84.386237][ T8014] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.388858][ T8014] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.393320][ T8014] bridge0: entered allmulticast mode [ 84.397096][ T8014] vcan0: entered allmulticast mode [ 84.400481][ T8014] bond0: entered allmulticast mode [ 84.402218][ T8014] bond_slave_0: entered allmulticast mode [ 84.404570][ T8014] bond_slave_1: entered allmulticast mode [ 84.409320][ T8014] team0: entered allmulticast mode [ 84.411151][ T8014] team_slave_0: entered allmulticast mode [ 84.413513][ T8014] team_slave_1: entered allmulticast mode [ 84.416878][ T8014] dummy0: entered allmulticast mode [ 84.420704][ T8014] nlmon0: entered allmulticast mode [ 84.423698][ T8014] caif0: entered allmulticast mode [ 84.425471][ T8014] batadv0: entered allmulticast mode [ 84.429262][ T8014] vxcan0: entered allmulticast mode [ 84.431305][ T8014] vxcan1: entered allmulticast mode [ 84.434756][ T8014] veth0: entered allmulticast mode [ 84.438448][ T8014] veth1: entered allmulticast mode [ 84.442006][ T8014] wg0: entered allmulticast mode [ 84.445149][ T8014] wg1: entered allmulticast mode [ 84.448098][ T8014] wg2: entered allmulticast mode [ 84.451084][ T8014] veth0_to_bridge: entered allmulticast mode [ 84.456250][ T8014] veth1_to_bridge: entered allmulticast mode [ 84.461334][ T8014] veth0_to_bond: entered allmulticast mode [ 84.465717][ T8014] veth1_to_bond: entered allmulticast mode [ 84.469907][ T8014] veth0_to_team: entered allmulticast mode [ 84.474961][ T8014] veth1_to_team: entered allmulticast mode [ 84.480545][ T8014] veth0_to_batadv: entered allmulticast mode [ 84.483879][ T8014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.486953][ T8014] batadv_slave_0: entered allmulticast mode [ 84.490866][ T8014] veth1_to_batadv: entered allmulticast mode [ 84.494215][ T8014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.497349][ T8014] batadv_slave_1: entered allmulticast mode [ 84.500721][ T8014] xfrm0: entered allmulticast mode [ 84.504155][ T8014] veth0_to_hsr: entered allmulticast mode [ 84.507366][ T8014] hsr_slave_0: entered allmulticast mode [ 84.510656][ T8014] veth1_to_hsr: entered allmulticast mode [ 84.514258][ T8014] hsr_slave_1: entered allmulticast mode [ 84.518624][ T8014] hsr0: entered allmulticast mode [ 84.522153][ T8014] veth1_virt_wifi: entered allmulticast mode [ 84.528167][ T8014] veth0_virt_wifi: entered allmulticast mode [ 84.531570][ T8014] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 84.534764][ T8014] veth1_vlan: entered allmulticast mode [ 84.538621][ T8014] veth0_vlan: entered allmulticast mode [ 84.545770][ T8014] vlan0: entered allmulticast mode [ 84.547484][ T8014] vlan1: entered allmulticast mode [ 84.549418][ T8014] macvlan0: entered allmulticast mode [ 84.553772][ T8014] macvlan1: entered allmulticast mode [ 84.557195][ T8014] ipvlan0: entered allmulticast mode [ 84.558944][ T8014] ipvlan1: entered allmulticast mode [ 84.561477][ T8014] veth1_macvtap: entered allmulticast mode [ 84.565942][ T8014] veth0_macvtap: entered allmulticast mode [ 84.569221][ T8014] macvtap0: entered allmulticast mode [ 84.572358][ T8014] macsec0: entered allmulticast mode [ 84.575977][ T8014] geneve0: entered allmulticast mode [ 84.579021][ T8014] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.581803][ T8014] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.585037][ T8014] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.587708][ T8014] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.590452][ T8014] geneve1: entered allmulticast mode [ 84.594016][ T8014] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 84.598006][ T8014] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 84.601800][ T8014] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 84.605668][ T8014] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 84.612371][ T8014] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 84.619343][ T8014] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 84.623518][ T8014] veth2: entered allmulticast mode [ 84.625359][ T8014] veth3: entered allmulticast mode [ 84.670211][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.652'. [ 84.673170][ T8016] veth1_vlan: Device is already in use. [ 84.754379][ T8025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.655'. [ 84.857266][ T8028] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8028 comm=syz.1.656 [ 84.884714][ T8031] fuse: Unknown parameter 'Rv^t (5bA8辿m7X9`X <3c$05n4pѳ(mDs futG [ 84.884714][ T8031] h [ 97.784304][ T8703] dump_stack_lvl+0x16c/0x1f0 [ 97.784320][ T8703] should_fail_ex+0x512/0x640 [ 97.784336][ T8703] _copy_to_user+0x32/0xd0 [ 97.784352][ T8703] put_user_ifreq+0xeb/0x150 [ 97.784365][ T8703] sock_do_ioctl+0x230/0x280 [ 97.784377][ T8703] ? __pfx_sock_do_ioctl+0x10/0x10 [ 97.784391][ T8703] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 97.784408][ T8703] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 97.784425][ T8703] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 97.784444][ T8703] sock_ioctl+0x227/0x6b0 [ 97.784457][ T8703] ? __pfx_sock_ioctl+0x10/0x10 [ 97.784468][ T8703] ? hook_file_ioctl_common+0x145/0x410 [ 97.784489][ T8703] ? selinux_file_ioctl+0x180/0x270 [ 97.784504][ T8703] ? selinux_file_ioctl+0xb4/0x270 [ 97.784520][ T8703] ? __pfx_sock_ioctl+0x10/0x10 [ 97.784533][ T8703] __x64_sys_ioctl+0x190/0x200 [ 97.784549][ T8703] do_syscall_64+0xcd/0x260 [ 97.784564][ T8703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.784575][ T8703] RIP: 0033:0x7fec39f8e969 [ 97.784583][ T8703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.784594][ T8703] RSP: 002b:00007fec3ae24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.784604][ T8703] RAX: ffffffffffffffda RBX: 00007fec3a1b5fa0 RCX: 00007fec39f8e969 [ 97.784611][ T8703] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 97.784617][ T8703] RBP: 00007fec3ae24090 R08: 0000000000000000 R09: 0000000000000000 [ 97.784624][ T8703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.784630][ T8703] R13: 0000000000000000 R14: 00007fec3a1b5fa0 R15: 00007ffcb9cca3e8 [ 97.784643][ T8703] [ 97.885059][ T8706] bond0: entered allmulticast mode [ 97.887074][ T8706] vlan0: left promiscuous mode [ 97.888708][ T8706] vlan0: entered allmulticast mode [ 97.890421][ T8706] erspan1: entered allmulticast mode [ 97.962106][ T8717] IPv6: NLM_F_CREATE should be specified when creating new route [ 97.965905][ T8717] tmpfs: Bad value for 'nr_inodes' [ 98.060500][ T8728] FAULT_INJECTION: forcing a failure. [ 98.060500][ T8728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.065668][ T8728] CPU: 1 UID: 0 PID: 8728 Comm: syz.4.867 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 98.065683][ T8728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.065689][ T8728] Call Trace: [ 98.065693][ T8728] [ 98.065697][ T8728] dump_stack_lvl+0x16c/0x1f0 [ 98.065714][ T8728] should_fail_ex+0x512/0x640 [ 98.065730][ T8728] _copy_to_user+0x32/0xd0 [ 98.065746][ T8728] simple_read_from_buffer+0xcb/0x170 [ 98.065763][ T8728] proc_fail_nth_read+0x197/0x270 [ 98.065779][ T8728] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 98.065795][ T8728] ? rw_verify_area+0xcf/0x680 [ 98.065809][ T8728] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 98.065825][ T8728] vfs_read+0x1de/0xc70 [ 98.065842][ T8728] ? __pfx___mutex_lock+0x10/0x10 [ 98.065855][ T8728] ? __pfx_vfs_read+0x10/0x10 [ 98.065874][ T8728] ? __fget_files+0x20e/0x3c0 [ 98.065894][ T8728] ksys_read+0x12a/0x240 [ 98.065909][ T8728] ? __pfx_ksys_read+0x10/0x10 [ 98.065928][ T8728] do_syscall_64+0xcd/0x260 [ 98.065942][ T8728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.065953][ T8728] RIP: 0033:0x7fec39f8d37c [ 98.065961][ T8728] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 98.065972][ T8728] RSP: 002b:00007fec3ae24030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 98.065982][ T8728] RAX: ffffffffffffffda RBX: 00007fec3a1b5fa0 RCX: 00007fec39f8d37c [ 98.065989][ T8728] RDX: 000000000000000f RSI: 00007fec3ae240a0 RDI: 0000000000000004 [ 98.065995][ T8728] RBP: 00007fec3ae24090 R08: 0000000000000000 R09: 0000000000000000 [ 98.066002][ T8728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.066008][ T8728] R13: 0000000000000000 R14: 00007fec3a1b5fa0 R15: 00007ffcb9cca3e8 [ 98.066021][ T8728] [ 98.139849][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.347178][ T8743] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 98.349320][ T8743] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 98.351889][ T8743] vhci_hcd vhci_hcd.0: Device attached [ 98.445409][ T8747] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 98.522410][ T8743] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.525084][ T8743] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.530642][ T8743] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.539576][ T8744] vhci_hcd: connection closed [ 98.539827][ T77] vhci_hcd: stop threads [ 98.543324][ T77] vhci_hcd: release socket [ 98.544925][ T77] vhci_hcd: disconnect device [ 98.592968][ T8749] fuse: Bad value for 'fd' [ 98.663264][ T8760] siw: device registration error -23 [ 98.689347][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.877'. [ 98.692141][ T8763] veth1_vlan: Device is already in use. [ 98.963561][ T8776] netlink: 16 bytes leftover after parsing attributes in process `syz.3.882'. [ 99.074855][ T8778] Cannot find map_set index 0 as target [ 99.107827][ T8780] netlink: 'syz.4.884': attribute type 1 has an invalid length. [ 99.118589][ T8780] bond1: entered promiscuous mode [ 99.120375][ T8780] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.134878][ T8780] bond1: (slave bridge1): making interface the new active one [ 99.138968][ T8780] bridge1: entered promiscuous mode [ 99.141762][ T8780] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 99.146764][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 99.146773][ T40] audit: type=1400 audit(1745933190.028:504): avc: denied { listen } for pid=8782 comm="syz.3.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 99.154847][ T40] audit: type=1400 audit(1745933190.028:505): avc: denied { accept } for pid=8782 comm="syz.3.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 99.655110][ T8804] SET target dimension over the limit! [ 99.715070][ T8810] siw: device registration error -23 [ 99.932383][ T5977] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 100.016543][ T8824] __nla_validate_parse: 1 callbacks suppressed [ 100.016558][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.899'. [ 100.022996][ T10] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 100.027842][ T8824] veth1_vlan: Device is already in use. [ 100.095143][ T5977] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.099668][ T5977] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 100.103781][ T5977] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 100.107323][ T5977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.111710][ T8806] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 100.115694][ T5977] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 100.152473][ T63] usb 42-1: device descriptor read/8, error -110 [ 100.162375][ T10] usb 6-1: device descriptor read/64, error -71 [ 100.262368][ T8847] vxlan1: entered allmulticast mode [ 100.287673][ T8849] SET target dimension over the limit! [ 100.310250][ T8851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.905'. [ 100.314148][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.905'. [ 100.350401][ T40] audit: type=1400 audit(1745933191.228:506): avc: denied { create } for pid=8852 comm="syz.3.906" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.356722][ T40] audit: type=1400 audit(1745933191.238:507): avc: denied { read } for pid=8852 comm="syz.3.906" name="file0" dev="tmpfs" ino=1433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.364250][ T40] audit: type=1400 audit(1745933191.238:508): avc: denied { open } for pid=8852 comm="syz.3.906" path="/260/file0" dev="tmpfs" ino=1433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.371074][ T40] audit: type=1400 audit(1745933191.238:509): avc: denied { ioctl } for pid=8852 comm="syz.3.906" path="/260/file0" dev="tmpfs" ino=1433 ioctlcmd=0x1285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.378523][ T40] audit: type=1400 audit(1745933191.248:510): avc: denied { unlink } for pid=5932 comm="syz-executor" name="file0" dev="tmpfs" ino=1433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.403970][ T10] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 100.472379][ T67] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.542323][ T10] usb 6-1: device descriptor read/64, error -71 [ 100.553383][ T63] usb usb42-port1: attempt power cycle [ 100.653516][ T10] usb usb6-port1: attempt power cycle [ 101.002398][ T10] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 101.023915][ T10] usb 6-1: device descriptor read/8, error -71 [ 101.122982][ T63] usb usb42-port1: unable to enumerate USB device [ 101.262388][ T10] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 101.270492][ T8867] input: syz0 as /devices/virtual/input/input9 [ 101.284667][ T10] usb 6-1: device descriptor read/8, error -71 [ 101.331782][ T8871] siw: device registration error -23 [ 101.375567][ T8874] netlink: 44 bytes leftover after parsing attributes in process `syz.3.913'. [ 101.379499][ T8874] netlink: 'syz.3.913': attribute type 6 has an invalid length. [ 101.383089][ T8874] netlink: 'syz.3.913': attribute type 5 has an invalid length. [ 101.385981][ T8874] netlink: 'syz.3.913': attribute type 4 has an invalid length. [ 101.392190][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.913'. [ 101.393674][ T10] usb usb6-port1: unable to enumerate USB device [ 101.403137][ T8876] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 101.405793][ T8876] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 101.409998][ T8876] vhci_hcd vhci_hcd.0: Device attached [ 101.425954][ T8880] netlink: 'syz.3.915': attribute type 4 has an invalid length. [ 101.440575][ T40] audit: type=1400 audit(1745933192.318:511): avc: denied { read } for pid=8879 comm="syz.3.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 101.519230][ T63] IPVS: starting estimator thread 0... [ 101.586780][ T8876] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 101.592603][ T8877] vhci_hcd: connection closed [ 101.594295][ T77] vhci_hcd: stop threads [ 101.597731][ T77] vhci_hcd: release socket [ 101.599417][ T77] vhci_hcd: disconnect device [ 101.602564][ T8885] IPVS: using max 44 ests per chain, 105600 per kthread [ 101.693425][ T8889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.917'. [ 102.455538][ T8899] tmpfs: Bad value for 'mpol' [ 102.461444][ T40] audit: type=1404 audit(1745933193.338:512): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 102.471001][ T40] audit: type=1404 audit(1745933193.348:513): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 102.515612][ T8901] siw: device registration error -23 [ 102.683576][ T65] usb 7-1: USB disconnect, device number 6 [ 102.684447][ T8911] netlink: 16 bytes leftover after parsing attributes in process `syz.3.924'. [ 102.689083][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.924'. [ 102.724009][ T8918] sp0: Synchronizing with TNC [ 102.735170][ T8820] Bluetooth: hci4: Frame reassembly failed (-84) [ 102.863381][ T8929] netlink: 16 bytes leftover after parsing attributes in process `syz.2.931'. [ 102.872002][ T8929] netlink: del zone limit has 8 unknown bytes [ 102.875717][ T8929] netlink: 'syz.2.931': attribute type 10 has an invalid length. [ 102.878925][ T8929] bond0: left allmulticast mode [ 102.887562][ T8930] xt_CT: No such helper "pptp" [ 102.887617][ T8929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.894541][ T8929] bond0: entered allmulticast mode [ 102.896554][ T8929] team0: Port device bond0 added [ 102.899391][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'. [ 102.992900][ T8929] team0 (unregistering): Port device team_slave_0 removed [ 102.998437][ T8929] team0 (unregistering): Port device team_slave_1 removed [ 103.000767][ T8929] bond0: left allmulticast mode [ 103.011206][ T8929] team0 (unregistering): Port device bond0 removed [ 103.115007][ T8935] fuse: Bad value for 'fd' [ 103.116951][ T8936] SET target dimension over the limit! [ 103.154443][ T8940] capability: warning: `syz.4.935' uses deprecated v2 capabilities in a way that may be insecure [ 103.416479][ T8925] syz.1.929 (8925): drop_caches: 2 [ 103.419288][ T8925] syz.1.929 (8925): drop_caches: 2 [ 103.426618][ T8969] Cannot find map_set index 0 as target [ 103.454616][ T8962] netlink: del zone limit has 8 unknown bytes [ 103.457643][ T8962] netlink: 'syz.2.943': attribute type 10 has an invalid length. [ 103.495787][ T8978] 9pnet_virtio: no channels available for device 127.0.0.1 [ 103.512559][ T5935] Bluetooth: hci3: command 0x0c1a tx timeout [ 103.626645][ T9000] siw: device registration error -23 [ 103.806293][ T9005] netlink: del zone limit has 8 unknown bytes [ 103.808477][ T9005] netlink: 'syz.2.958': attribute type 10 has an invalid length. [ 103.847013][ T9013] 9pnet_virtio: no channels available for device 127.0.0.1 [ 104.427714][ T9038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65523 sclass=netlink_route_socket pid=9038 comm=syz.4.969 [ 104.506194][ T9041] netlink: del zone limit has 8 unknown bytes [ 104.508362][ T9041] netlink: 'syz.1.970': attribute type 10 has an invalid length. [ 104.510987][ T9041] bond0: left allmulticast mode [ 104.512769][ T9041] bridge0: left allmulticast mode [ 104.518634][ T9041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.522340][ T9041] bond0: entered allmulticast mode [ 104.524544][ T9041] bridge0: entered allmulticast mode [ 104.527353][ T9041] team0: Port device bond0 added [ 104.575138][ T9043] 9pnet_virtio: no channels available for device 127.0.0.1 [ 104.607044][ T40] kauditd_printk_skb: 79 callbacks suppressed [ 104.607059][ T40] audit: type=1400 audit(1745933195.488:593): avc: denied { create } for pid=9044 comm="syz.1.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.619228][ T40] audit: type=1400 audit(1745933195.498:594): avc: denied { setopt } for pid=9044 comm="syz.1.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.629822][ T40] audit: type=1400 audit(1745933195.498:595): avc: denied { getopt } for pid=9044 comm="syz.1.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.638362][ T40] audit: type=1400 audit(1745933195.498:596): avc: denied { connect } for pid=9044 comm="syz.1.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.646852][ T40] audit: type=1400 audit(1745933195.498:597): avc: denied { name_connect } for pid=9044 comm="syz.1.972" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 104.666998][ T40] audit: type=1400 audit(1745933195.548:598): avc: denied { ioctl } for pid=9044 comm="syz.1.972" path="socket:[25795]" dev="sockfs" ino=25795 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.748349][ T40] audit: type=1400 audit(1745933195.628:599): avc: denied { ioctl } for pid=9047 comm="syz.2.973" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0x64c2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 104.792470][ T67] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 104.904752][ T9050] siw: device registration error -23 [ 104.935075][ T40] audit: type=1400 audit(1745933195.818:600): avc: denied { map } for pid=9051 comm="syz.3.975" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 104.935700][ T9052] FAULT_INJECTION: forcing a failure. [ 104.935700][ T9052] name failslab, interval 1, probability 0, space 0, times 0 [ 104.944537][ T40] audit: type=1400 audit(1745933195.818:601): avc: denied { execute } for pid=9051 comm="syz.3.975" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 104.949395][ T9052] CPU: 1 UID: 0 PID: 9052 Comm: syz.3.975 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 104.949411][ T9052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.949418][ T9052] Call Trace: [ 104.949422][ T9052] [ 104.949427][ T9052] dump_stack_lvl+0x16c/0x1f0 [ 104.949458][ T9052] should_fail_ex+0x512/0x640 [ 104.949475][ T9052] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 104.949493][ T9052] should_failslab+0xc2/0x120 [ 104.949504][ T9052] __kmalloc_cache_noprof+0x6a/0x3e0 [ 104.949520][ T9052] ? resv_map_alloc+0x46/0x400 [ 104.949533][ T9052] resv_map_alloc+0x46/0x400 [ 104.949545][ T9052] hugetlbfs_get_inode+0x33f/0x730 [ 104.949558][ T9052] ? __fget_files+0x20e/0x3c0 [ 104.949576][ T9052] hugetlb_file_setup+0x15b/0x620 [ 104.949592][ T9052] ksys_mmap_pgoff+0x189/0x5c0 [ 104.949608][ T9052] __x64_sys_mmap+0x125/0x190 [ 104.949622][ T9052] do_syscall_64+0xcd/0x260 [ 104.949636][ T9052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.949647][ T9052] RIP: 0033:0x7f69f798e969 [ 104.949656][ T9052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.949666][ T9052] RSP: 002b:00007f69f87bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 104.949677][ T9052] RAX: ffffffffffffffda RBX: 00007f69f7bb5fa0 RCX: 00007f69f798e969 [ 104.949683][ T9052] RDX: 0000000000000003 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 104.949690][ T9052] RBP: 00007f69f87bb090 R08: ffffffffffffffff R09: 0000000000000000 [ 104.949697][ T9052] R10: 00020000000ec071 R11: 0000000000000246 R12: 0000000000000001 [ 104.949703][ T9052] R13: 0000000000000000 R14: 00007f69f7bb5fa0 R15: 00007fff233eeb58 [ 104.949716][ T9052] [ 104.981414][ T9054] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 104.983173][ T40] audit: type=1400 audit(1745933195.848:602): avc: denied { read write } for pid=9053 comm="syz.3.976" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 104.985839][ T9054] openvswitch: netlink: Unknown nsh attribute 0 [ 105.036688][ T9054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.091784][ T9056] __nla_validate_parse: 7 callbacks suppressed [ 105.091795][ T9056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.977'. [ 105.097626][ T9056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.977'. [ 105.127013][ T9056] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 105.246440][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.980'. [ 105.316657][ T9071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.983'. [ 105.319444][ T9071] veth1_vlan: Device is already in use. [ 105.550233][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.990'. [ 105.592927][ T67] Bluetooth: hci3: command 0x0c1a tx timeout [ 105.606667][ T9092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.991'. [ 105.625622][ T9090] team0 (unregistering): Port device team_slave_0 removed [ 105.629362][ T9090] team0 (unregistering): Port device team_slave_1 removed [ 105.634689][ T9090] bond0: left allmulticast mode [ 105.637728][ T9090] bridge0: left allmulticast mode [ 105.646103][ T9090] team0 (unregistering): Port device bond0 removed [ 105.730241][ T9092] netlink: del zone limit has 8 unknown bytes [ 105.732529][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.991'. [ 105.735549][ T9099] bridge0: entered allmulticast mode [ 105.737955][ T9099] bond0: entered allmulticast mode [ 105.739974][ T9099] ipip0: entered allmulticast mode [ 105.762561][ T65] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 105.827569][ T9109] FAULT_INJECTION: forcing a failure. [ 105.827569][ T9109] name failslab, interval 1, probability 0, space 0, times 0 [ 105.832761][ T9109] CPU: 1 UID: 0 PID: 9109 Comm: syz.2.996 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 105.832776][ T9109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.832782][ T9109] Call Trace: [ 105.832786][ T9109] [ 105.832790][ T9109] dump_stack_lvl+0x16c/0x1f0 [ 105.832812][ T9109] should_fail_ex+0x512/0x640 [ 105.832831][ T9109] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 105.832858][ T9109] should_failslab+0xc2/0x120 [ 105.832872][ T9109] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 105.832896][ T9109] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 105.832919][ T9109] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 105.832936][ T9109] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 105.832953][ T9109] alloc_inode+0x61/0x240 [ 105.832970][ T9109] new_inode+0x22/0x1c0 [ 105.832990][ T9109] hugetlbfs_get_inode+0x354/0x730 [ 105.833006][ T9109] ? __fget_files+0x20e/0x3c0 [ 105.833031][ T9109] hugetlb_file_setup+0x15b/0x620 [ 105.833057][ T9109] ksys_mmap_pgoff+0x189/0x5c0 [ 105.833081][ T9109] __x64_sys_mmap+0x125/0x190 [ 105.833100][ T9109] do_syscall_64+0xcd/0x260 [ 105.833119][ T9109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.833130][ T9109] RIP: 0033:0x7f3f91f8e969 [ 105.833144][ T9109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.833159][ T9109] RSP: 002b:00007f3f92e02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 105.833175][ T9109] RAX: ffffffffffffffda RBX: 00007f3f921b5fa0 RCX: 00007f3f91f8e969 [ 105.833185][ T9109] RDX: 0000000000000003 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 105.833194][ T9109] RBP: 00007f3f92e02090 R08: ffffffffffffffff R09: 0000000000000000 [ 105.833204][ T9109] R10: 00020000000ec071 R11: 0000000000000246 R12: 0000000000000001 [ 105.833210][ T9109] R13: 0000000000000000 R14: 00007f3f921b5fa0 R15: 00007ffe450a0f28 [ 105.833223][ T9109] [ 105.906418][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.932334][ T65] usb 8-1: Using ep0 maxpacket: 32 [ 105.935156][ T9115] netlink: 40 bytes leftover after parsing attributes in process `syz.2.999'. [ 105.936463][ T65] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.944100][ T65] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 105.947016][ T65] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 105.950228][ T65] usb 8-1: Product: syz [ 105.951778][ T65] usb 8-1: Manufacturer: syz [ 105.953373][ T65] usb 8-1: SerialNumber: syz [ 105.956101][ T65] usb 8-1: config 0 descriptor?? [ 105.959521][ T65] hub 8-1:0.0: bad descriptor, ignoring hub [ 105.961946][ T65] hub 8-1:0.0: probe with driver hub failed with error -5 [ 105.992828][ T9121] overlayfs: failed to decode file handle (len=6, type=1275, flags=0, err=-22) [ 106.144380][ T9125] bond0: entered allmulticast mode [ 106.146252][ T9125] veth2: entered allmulticast mode [ 106.148128][ T9125] veth3: entered allmulticast mode [ 106.150291][ T9125] erspan2: entered allmulticast mode [ 106.152401][ T9125] bond3: left promiscuous mode [ 106.154101][ T9125] ip6gretap1: left promiscuous mode [ 106.154292][ T9127] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1003'. [ 106.225110][ T9127] vlan0: entered promiscuous mode [ 106.227083][ T9127] vlan0: left allmulticast mode [ 106.229972][ T9127] netlink: del zone limit has 8 unknown bytes [ 106.232743][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1003'. [ 106.267289][ T9142] FAULT_INJECTION: forcing a failure. [ 106.267289][ T9142] name failslab, interval 1, probability 0, space 0, times 0 [ 106.271080][ T9142] CPU: 0 UID: 0 PID: 9142 Comm: syz.4.1007 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 106.271095][ T9142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.271108][ T9142] Call Trace: [ 106.271112][ T9142] [ 106.271116][ T9142] dump_stack_lvl+0x16c/0x1f0 [ 106.271132][ T9142] should_fail_ex+0x512/0x640 [ 106.271145][ T9142] ? fs_reclaim_acquire+0xae/0x150 [ 106.271162][ T9142] should_failslab+0xc2/0x120 [ 106.271174][ T9142] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 106.271191][ T9142] ? security_inode_alloc+0x3b/0x2b0 [ 106.271207][ T9142] security_inode_alloc+0x3b/0x2b0 [ 106.271220][ T9142] inode_init_always_gfp+0xce4/0x1030 [ 106.271240][ T9142] alloc_inode+0x86/0x240 [ 106.271253][ T9142] new_inode+0x22/0x1c0 [ 106.271266][ T9142] hugetlbfs_get_inode+0x354/0x730 [ 106.271279][ T9142] ? __fget_files+0x20e/0x3c0 [ 106.271298][ T9142] hugetlb_file_setup+0x15b/0x620 [ 106.271313][ T9142] ksys_mmap_pgoff+0x189/0x5c0 [ 106.271330][ T9142] __x64_sys_mmap+0x125/0x190 [ 106.271343][ T9142] do_syscall_64+0xcd/0x260 [ 106.271357][ T9142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.271368][ T9142] RIP: 0033:0x7fec39f8e969 [ 106.271377][ T9142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.271388][ T9142] RSP: 002b:00007fec3ae24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 106.271398][ T9142] RAX: ffffffffffffffda RBX: 00007fec3a1b5fa0 RCX: 00007fec39f8e969 [ 106.271405][ T9142] RDX: 0000000000000003 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 106.271411][ T9142] RBP: 00007fec3ae24090 R08: ffffffffffffffff R09: 0000000000000000 [ 106.271417][ T9142] R10: 00020000000ec071 R11: 0000000000000246 R12: 0000000000000001 [ 106.271424][ T9142] R13: 0000000000000000 R14: 00007fec3a1b5fa0 R15: 00007ffcb9cca3e8 [ 106.271437][ T9142] [ 106.332509][ T29] usb 8-1: USB disconnect, device number 7 [ 106.349484][ T9145] SET target dimension over the limit! [ 106.531291][ T9164] netlink: 'syz.1.1016': attribute type 10 has an invalid length. [ 106.534491][ T9164] bond0: left allmulticast mode [ 106.574419][ T9179] FAULT_INJECTION: forcing a failure. [ 106.574419][ T9179] name failslab, interval 1, probability 0, space 0, times 0 [ 106.578916][ T9179] CPU: 2 UID: 0 PID: 9179 Comm: syz.1.1019 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 106.578937][ T9179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.578943][ T9179] Call Trace: [ 106.578949][ T9179] [ 106.578956][ T9179] dump_stack_lvl+0x16c/0x1f0 [ 106.578978][ T9179] should_fail_ex+0x512/0x640 [ 106.578997][ T9179] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 106.579024][ T9179] should_failslab+0xc2/0x120 [ 106.579044][ T9179] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 106.579068][ T9179] ? inode_set_ctime_current+0x2a1/0x8f0 [ 106.579085][ T9179] ? __d_alloc+0x31/0xaa0 [ 106.579103][ T9179] __d_alloc+0x31/0xaa0 [ 106.579120][ T9179] d_alloc_pseudo+0x1c/0xc0 [ 106.579134][ T9179] alloc_file_pseudo+0xcf/0x230 [ 106.579154][ T9179] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 106.579173][ T9179] ? hugetlbfs_get_inode+0x31f/0x730 [ 106.579195][ T9179] hugetlb_file_setup+0x4cd/0x620 [ 106.579214][ T9179] ksys_mmap_pgoff+0x189/0x5c0 [ 106.579233][ T9179] ? rcu_is_watching+0x12/0xc0 [ 106.579254][ T9179] __x64_sys_mmap+0x125/0x190 [ 106.579274][ T9179] do_syscall_64+0xcd/0x260 [ 106.579293][ T9179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.579306][ T9179] RIP: 0033:0x7f654cd8e969 [ 106.579318][ T9179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.579334][ T9179] RSP: 002b:00007f654dbae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 106.579349][ T9179] RAX: ffffffffffffffda RBX: 00007f654cfb5fa0 RCX: 00007f654cd8e969 [ 106.579360][ T9179] RDX: 0000000000000003 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 106.579369][ T9179] RBP: 00007f654dbae090 R08: ffffffffffffffff R09: 0000000000000000 [ 106.579379][ T9179] R10: 00020000000ec071 R11: 0000000000000246 R12: 0000000000000001 [ 106.579388][ T9179] R13: 0000000000000000 R14: 00007f654cfb5fa0 R15: 00007ffcc53c8d18 [ 106.579405][ T9179] [ 106.676444][ T9183] SET target dimension over the limit! [ 107.353500][ T9204] vlan0: entered promiscuous mode [ 107.353614][ T9204] vlan0: left allmulticast mode [ 107.354842][ T9204] netlink: 'syz.3.1028': attribute type 10 has an invalid length. [ 107.354883][ T9204] bond0: left allmulticast mode [ 107.396337][ T9213] FAULT_INJECTION: forcing a failure. [ 107.396337][ T9213] name failslab, interval 1, probability 0, space 0, times 0 [ 107.396358][ T9213] CPU: 3 UID: 0 PID: 9213 Comm: syz.3.1030 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 107.396372][ T9213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.396378][ T9213] Call Trace: [ 107.396382][ T9213] [ 107.396386][ T9213] dump_stack_lvl+0x16c/0x1f0 [ 107.396402][ T9213] should_fail_ex+0x512/0x640 [ 107.396416][ T9213] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 107.396435][ T9213] should_failslab+0xc2/0x120 [ 107.396447][ T9213] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 107.396463][ T9213] ? d_instantiate+0x77/0x90 [ 107.396474][ T9213] ? alloc_empty_file+0x55/0x1e0 [ 107.396488][ T9213] alloc_empty_file+0x55/0x1e0 [ 107.396501][ T9213] alloc_file_pseudo+0x13a/0x230 [ 107.396514][ T9213] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 107.396527][ T9213] ? hugetlbfs_get_inode+0x31f/0x730 [ 107.396542][ T9213] hugetlb_file_setup+0x4cd/0x620 [ 107.396558][ T9213] ksys_mmap_pgoff+0x189/0x5c0 [ 107.396575][ T9213] __x64_sys_mmap+0x125/0x190 [ 107.396588][ T9213] do_syscall_64+0xcd/0x260 [ 107.396602][ T9213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.396613][ T9213] RIP: 0033:0x7f69f798e969 [ 107.396621][ T9213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.396632][ T9213] RSP: 002b:00007f69f87bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 107.396642][ T9213] RAX: ffffffffffffffda RBX: 00007f69f7bb5fa0 RCX: 00007f69f798e969 [ 107.396649][ T9213] RDX: 0000000000000003 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 107.396655][ T9213] RBP: 00007f69f87bb090 R08: ffffffffffffffff R09: 0000000000000000 [ 107.396662][ T9213] R10: 00020000000ec071 R11: 0000000000000246 R12: 0000000000000001 [ 107.396668][ T9213] R13: 0000000000000000 R14: 00007f69f7bb5fa0 R15: 00007fff233eeb58 [ 107.396681][ T9213] [ 107.452170][ T9217] SET target dimension over the limit! [ 107.691721][ T9240] FAULT_INJECTION: forcing a failure. [ 107.691721][ T9240] name failslab, interval 1, probability 0, space 0, times 0 [ 107.691749][ T9240] CPU: 1 UID: 0 PID: 9240 Comm: syz.4.1040 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 107.691767][ T9240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.691777][ T9240] Call Trace: [ 107.691782][ T9240] [ 107.691788][ T9240] dump_stack_lvl+0x16c/0x1f0 [ 107.691810][ T9240] should_fail_ex+0x512/0x640 [ 107.691829][ T9240] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 107.691855][ T9240] should_failslab+0xc2/0x120 [ 107.691871][ T9240] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 107.691908][ T9240] ? security_file_alloc+0x34/0x2b0 [ 107.691933][ T9240] security_file_alloc+0x34/0x2b0 [ 107.691953][ T9240] init_file+0x93/0x4c0 [ 107.691971][ T9240] alloc_empty_file+0x73/0x1e0 [ 107.691989][ T9240] alloc_file_pseudo+0x13a/0x230 [ 107.692006][ T9240] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 107.692024][ T9240] ? hugetlbfs_get_inode+0x31f/0x730 [ 107.692047][ T9240] hugetlb_file_setup+0x4cd/0x620 [ 107.692069][ T9240] ksys_mmap_pgoff+0x189/0x5c0 [ 107.692088][ T9240] ? rcu_is_watching+0x12/0xc0 [ 107.692118][ T9240] __x64_sys_mmap+0x125/0x190 [ 107.692137][ T9240] do_syscall_64+0xcd/0x260 [ 107.692157][ T9240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.692171][ T9240] RIP: 0033:0x7fec39f8e969 [ 107.692183][ T9240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.692197][ T9240] RSP: 002b:00007fec3ae24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 107.692211][ T9240] RAX: ffffffffffffffda RBX: 00007fec3a1b5fa0 RCX: 00007fec39f8e969 [ 107.692220][ T9240] RDX: 0000000000000003 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 107.692228][ T9240] RBP: 00007fec3ae24090 R08: ffffffffffffffff R09: 0000000000000000 [ 107.692237][ T9240] R10: 00020000000ec071 R11: 0000000000000246 R12: 0000000000000001 [ 107.692276][ T9240] R13: 0000000000000000 R14: 00007fec3a1b5fa0 R15: 00007ffcb9cca3e8 [ 107.692297][ T9240] [ 107.741283][ T9234] netlink: 'syz.3.1038': attribute type 10 has an invalid length. [ 107.768144][ T9248] veth1_vlan: Device is already in use. [ 107.972466][ T9259] 9pnet_virtio: no channels available for device syz [ 108.101653][ T9267] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 108.211277][ T9278] cgroup: subsys name conflicts with all [ 108.226282][ T9273] netlink: 'syz.1.1052': attribute type 10 has an invalid length. [ 108.577448][ T9305] kAFS: unable to lookup cell '/,cL' [ 108.701466][ T9307] netlink: 'syz.3.1064': attribute type 10 has an invalid length. [ 108.831927][ T9326] SET target dimension over the limit! [ 108.959690][ T9334] veth1_vlan: Device is already in use. [ 109.178260][ T9344] netlink: 'syz.3.1073': attribute type 10 has an invalid length. [ 109.219803][ T9356] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 109.222250][ T9356] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 109.225096][ T9356] vhci_hcd vhci_hcd.0: Device attached [ 109.286606][ T9367] netlink: 'syz.3.1079': attribute type 3 has an invalid length. [ 109.393502][ T9356] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 109.397507][ T9377] FAULT_INJECTION: forcing a failure. [ 109.397507][ T9377] name failslab, interval 1, probability 0, space 0, times 0 [ 109.402078][ T9377] CPU: 1 UID: 0 PID: 9377 Comm: syz.1.1081 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 109.402099][ T9377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.402105][ T9377] Call Trace: [ 109.402110][ T9377] [ 109.402114][ T9377] dump_stack_lvl+0x16c/0x1f0 [ 109.402151][ T9377] should_fail_ex+0x512/0x640 [ 109.402172][ T9377] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 109.402191][ T9377] should_failslab+0xc2/0x120 [ 109.402203][ T9377] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 109.402220][ T9377] ? mas_alloc_nodes+0x18b/0x8b0 [ 109.402252][ T9377] mas_alloc_nodes+0x18b/0x8b0 [ 109.402274][ T9377] mas_node_count_gfp+0x105/0x130 [ 109.402289][ T9377] mas_preallocate+0x53e/0xcd0 [ 109.402306][ T9377] ? __pfx_mas_preallocate+0x10/0x10 [ 109.402324][ T9377] ? vm_area_alloc+0x1f/0x160 [ 109.402343][ T9377] ? lockdep_init_map_type+0x5c/0x280 [ 109.402370][ T9377] __mmap_region+0x139b/0x27c0 [ 109.402388][ T9377] ? __pfx___mmap_region+0x10/0x10 [ 109.402400][ T9377] ? __lock_acquire+0x5ca/0x1ba0 [ 109.402448][ T9377] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 109.402477][ T9377] mmap_region+0x32b/0x3f0 [ 109.402497][ T9377] do_mmap+0xd8e/0x11b0 [ 109.402518][ T9377] ? __pfx_do_mmap+0x10/0x10 [ 109.402532][ T9377] ? __pfx_down_write_killable+0x10/0x10 [ 109.402558][ T9377] vm_mmap_pgoff+0x281/0x450 [ 109.402583][ T9377] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 109.402599][ T9377] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 109.402619][ T9377] ? hugetlbfs_get_inode+0x31f/0x730 [ 109.402643][ T9377] ksys_mmap_pgoff+0x1c8/0x5c0 [ 109.402661][ T9377] ? rcu_is_watching+0x12/0xc0 [ 109.402681][ T9377] __x64_sys_mmap+0x125/0x190 [ 109.402701][ T9377] do_syscall_64+0xcd/0x260 [ 109.402720][ T9377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.402732][ T9377] RIP: 0033:0x7f654cd8e969 [ 109.402746][ T9377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.402760][ T9377] RSP: 002b:00007f654dbae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 109.402775][ T9377] RAX: ffffffffffffffda RBX: 00007f654cfb5fa0 RCX: 00007f654cd8e969 [ 109.402785][ T9377] RDX: 0000000000000003 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 109.402795][ T9377] RBP: 00007f654dbae090 R08: ffffffffffffffff R09: 0000000000000000 [ 109.402805][ T9377] R10: 00020000000ec071 R11: 0000000000000246 R12: 0000000000000002 [ 109.402814][ T9377] R13: 0000000000000000 R14: 00007f654cfb5fa0 R15: 00007ffcc53c8d18 [ 109.402848][ T9377] [ 109.403320][ T9357] vhci_hcd: connection closed [ 109.487073][ T8820] vhci_hcd: stop threads [ 109.490103][ T8820] vhci_hcd: release socket [ 109.491650][ T8820] vhci_hcd: disconnect device [ 109.492860][ T9381] bond0: entered allmulticast mode [ 109.522538][ T63] usb 42-1: enqueue for inactive port 0 [ 109.583575][ T9383] netlink: del zone limit has 8 unknown bytes [ 109.586278][ T9383] netlink: 'syz.1.1084': attribute type 10 has an invalid length. [ 109.589304][ T9383] bond0: left allmulticast mode [ 109.794556][ T9404] netlink: 'syz.1.1089': attribute type 1 has an invalid length. [ 109.944317][ T9416] netlink: 'syz.1.1092': attribute type 21 has an invalid length. [ 110.023731][ T63] usb usb42-port1: attempt power cycle [ 110.048227][ T9418] netlink: del zone limit has 8 unknown bytes [ 110.050510][ T9418] netlink: 'syz.1.1093': attribute type 10 has an invalid length. [ 110.072140][ T9432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=9432 comm=syz.2.1095 [ 110.083680][ T9433] loop4: detected capacity change from 0 to 524255232 [ 110.084733][ T40] kauditd_printk_skb: 101 callbacks suppressed [ 110.084743][ T40] audit: type=1400 audit(1745933200.968:704): avc: denied { read write } for pid=9431 comm="syz.4.1096" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.102898][ T40] audit: type=1400 audit(1745933200.968:705): avc: denied { open } for pid=9431 comm="syz.4.1096" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.117754][ T40] audit: type=1400 audit(1745933200.998:706): avc: denied { read } for pid=9436 comm="syz.2.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.149685][ T40] audit: type=1400 audit(1745933201.028:707): avc: denied { mounton } for pid=9442 comm="syz.3.1099" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 110.150746][ T9444] /dev/nullb0: Can't open blockdev [ 110.152865][ T9445] __nla_validate_parse: 32 callbacks suppressed [ 110.152879][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1100'. [ 110.152992][ T9445] veth1_vlan: Device is already in use. [ 110.153543][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1097'. [ 110.202384][ T40] audit: type=1400 audit(1745933201.068:708): avc: denied { name_bind } for pid=9446 comm="syz.1.1101" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 110.209053][ T40] audit: type=1400 audit(1745933201.068:709): avc: denied { node_bind } for pid=9446 comm="syz.1.1101" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 110.257276][ T9459] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1105'. [ 110.334270][ T40] audit: type=1400 audit(1745933201.218:710): avc: denied { setopt } for pid=9467 comm="syz.3.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 110.335524][ T9468] loop4: detected capacity change from 0 to 524255232 [ 110.348720][ T9459] netlink: del zone limit has 8 unknown bytes [ 110.351679][ T9459] netlink: 'syz.4.1105': attribute type 10 has an invalid length. [ 110.355053][ T9459] bond0: left allmulticast mode [ 110.358927][ T9459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1105'. [ 110.381886][ T9470] SET target dimension over the limit! [ 110.434943][ T9483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1111'. [ 110.438509][ T9483] veth1_vlan: Device is already in use. [ 110.457621][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1110'. [ 110.466229][ T9486] xt_ecn: cannot match TCP bits for non-tcp packets [ 110.466404][ T40] audit: type=1400 audit(1745933201.348:711): avc: denied { execute_no_trans } for pid=9485 comm="syz.3.1112" path="/321/file1" dev="tmpfs" ino=1756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.490692][ T40] audit: type=1400 audit(1745933201.368:712): avc: denied { map } for pid=9490 comm="syz.3.1113" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.547505][ T9500] syz.3.1117: attempt to access beyond end of device [ 110.547505][ T9500] loop3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 110.551663][ T9500] gfs2: error -5 reading superblock [ 110.553905][ T9500] veth1_virt_wifi: mtu less than device minimum [ 110.557936][ T40] audit: type=1400 audit(1745933200.436:713): avc: denied { read append } for pid=9499 comm="syz.3.1117" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 110.585138][ T9502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1118'. [ 110.592811][ T63] usb usb42-port1: unable to enumerate USB device [ 110.653886][ T9502] netlink: del zone limit has 8 unknown bytes [ 110.656066][ T9502] netlink: 'syz.3.1118': attribute type 10 has an invalid length. [ 110.658631][ T9502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1118'. [ 110.659942][ T9509] SET target dimension over the limit! [ 110.690586][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'. [ 110.693934][ T9511] veth1_vlan: Device is already in use. [ 110.819981][ T9527] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1125'. [ 110.824217][ T9527] tipc: MTU too low for tipc bearer [ 110.941134][ T9536] overlay: filesystem on ./bus is read-only [ 110.975382][ T9539] SET target dimension over the limit! [ 111.068477][ T9541] netlink: del zone limit has 8 unknown bytes [ 111.105246][ T9559] macvlan0: left allmulticast mode [ 111.149362][ T9569] SET target dimension over the limit! [ 111.362357][ T67] Bluetooth: hci3: command 0x0c1a tx timeout [ 111.382553][ T9590] netlink: del zone limit has 8 unknown bytes [ 111.469660][ T9602] [U] [ 111.470607][ T9602] [U] [ 111.471495][ T9602] [U] [ 111.472385][ T9602] [U] [ 111.474406][ T9602] [U] [ 111.475352][ T9602] [U] [ 111.476241][ T9602] [U] [ 111.477134][ T9602] [U] [ 111.478408][ T9602] [U] [ 111.479470][ T9602] [U] [ 111.480469][ T9602] [U] [ 111.481346][ T9602] [U] [ 111.482412][ T9602] [U] [ 111.483329][ T9602] [U] [ 111.484201][ T9602] [U] [ 111.485080][ T9602] [U] [ 111.757558][ T9618] veth1_vlan: Device is already in use. [ 111.860147][ T9620] netlink: del zone limit has 8 unknown bytes [ 112.066274][ T9641] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 112.069051][ T9641] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 112.079009][ T9641] vhci_hcd vhci_hcd.0: Device attached [ 112.246228][ T9641] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 112.249520][ T9596] [U] [ 112.251356][ T9642] vhci_hcd: connection closed [ 112.252668][ T8821] vhci_hcd: stop threads [ 112.256510][ T8821] vhci_hcd: release socket [ 112.258433][ T8821] vhci_hcd: disconnect device [ 112.337251][ T9654] netlink: del zone limit has 8 unknown bytes [ 112.340333][ T9654] bond0: left allmulticast mode [ 112.395673][ T9664] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 112.401183][ T8821] Bluetooth: hci4: Frame reassembly failed (-84) [ 112.717519][ T9684] ptm ptm44: ldisc open failed (-12), clearing slot 44 [ 112.828606][ T9698] SET target dimension over the limit! [ 112.858909][ T9700] [U] [ 112.859936][ T9700] [U] [ 112.860832][ T9700] [U] [ 112.861723][ T9700] [U] [ 112.863053][ T9700] [U] [ 112.864121][ T9700] [U] [ 112.865335][ T9700] [U] [ 112.866428][ T9700] [U] [ 112.867555][ T9700] [U] [ 112.868469][ T9700] [U] [ 112.869578][ T9700] [U] [ 112.870480][ T9700] [U] [ 112.871466][ T9700] [U] [ 112.872394][ T9700] [U] [ 112.873352][ T9700] [U] [ 112.874431][ T9700] [U] [ 112.877221][ T9699] [U] [ 112.904512][ T9702] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 113.282404][ T65] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 113.397144][ T9714] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 113.399283][ T9714] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 113.401736][ T9714] vhci_hcd vhci_hcd.0: Device attached [ 113.442372][ T65] usb 9-1: Using ep0 maxpacket: 16 [ 113.445598][ T65] usb 9-1: config 0 has an invalid interface number: 114 but max is 0 [ 113.448105][ T65] usb 9-1: config 0 has no interface number 0 [ 113.449996][ T65] usb 9-1: config 0 interface 114 has no altsetting 0 [ 113.453839][ T65] usb 9-1: New USB device found, idVendor=1c04, idProduct=0015, bcdDevice=f2.69 [ 113.456601][ T65] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.459060][ T65] usb 9-1: Product: syz [ 113.460363][ T65] usb 9-1: Manufacturer: syz [ 113.461794][ T65] usb 9-1: SerialNumber: syz [ 113.465139][ T65] usb 9-1: config 0 descriptor?? [ 113.569005][ T9714] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 113.573631][ T9715] vhci_hcd: connection closed [ 113.573867][ T8821] vhci_hcd: stop threads [ 113.576777][ T8821] vhci_hcd: release socket [ 113.578354][ T8821] vhci_hcd: disconnect device [ 113.737704][ T9726] [U] [ 113.738625][ T9726] [U] [ 113.739522][ T9726] [U] [ 113.740408][ T9726] [U] [ 113.741524][ T9726] [U] [ 113.742520][ T9726] [U] [ 113.743223][ T9710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.743641][ T9726] [U] [ 113.746948][ T9710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.747706][ T9726] [U] [ 113.751794][ T9726] [U] [ 113.752739][ T9726] [U] [ 113.753621][ T9726] [U] [ 113.754497][ T9726] [U] [ 113.755596][ T9726] [U] [ 113.756486][ T9726] [U] [ 113.757389][ T9726] [U] [ 113.758267][ T9726] [U] [ 113.760078][ T10] usb 9-1: USB disconnect, device number 5 [ 113.760645][ T9725] [U] [ 113.788103][ T9728] SET target dimension over the limit! [ 113.843816][ T9730] 9pnet_virtio: no channels available for device 127.0.0.1 [ 113.846370][ T9730] fusectl: Unknown parameter 'trans' [ 113.908806][ T9734] veth1_vlan: Device is already in use. (1ro~"&[x|\DH#-ZϞؿ;az{C'OkѹZ<ؤ20"VSAtEwC.Z?ix?flzWCo.+&k>24`"0a_}$Za1ϭI,:re>/56tl||uS2jKn=V68PwW?>z+qnjC(.} q1gZ/ءق"Ҍ@/ر^񔜲xM$C8̥15'Wup2zQCZJjʼ>5 :b"A۶<n#J He~3g]^p+I""h=sYIו}3() 93>0#L\oߒǛSPlY/ E:Řx2tZ҄u`~b{RRx0fAAƿPQ/V6;d\o}BGG>3*۩S~V-z!J$Bgp#ŧ 3q3wbT:8}oF?֚@8>Iu0蟔'sA & /c_<`,Xqy_T'DE XoPUbz10C#9'0elu0?JZe6ut6dK d;m3\ 2jR &دb ;NjϾoÊ4m3ظC~fʻ0wWC NPXH.n.1:z 7d$gD ߥΒ窍gŅ_VUnT)2/.ŀӳ1$8o,ayRZKb%B|vڒ.hT&MDQps#6(= UBr`ޕױ3ۍh0CBi'9Sa}ͮx DBooF$-P8 O.Bwl W'e8˚h<3>b&MSfU1g░J ͥ1~y};cNYU &01W p0~`rB)=9?# Т+K -5K xﭗO4ݵBj2˦1/]Ǣu0j6OkYR۠uDo6ԯ5+\]ΏNc4"`W빡8r h~knHӜ?Nw/k"VA_#g(*/NVdɡڈ#>bYHg,1qi _yGNdžl@ ~C Ȋ-&w[J/Pt]De à4܃~kGi6Q/3 AJ4G&ɧC⾱n;&O6ׇw?{EVLG fxf}"G`0hC(EDYɰ4FL(,YF/`k Eڹ}j|pԺRG8VN"%ߕ7o- }>7gμ }U=mup(3k@H-NA##GČIO?Ey0b:6id0Kl͖R65YDž<C Ā;PڒZðZVkBıQV.HJܤo# f>ׄ O`|B9/Z0 5UE]G\!¥`",HA Z/CPyQndxa'"'Nҙwl\3 VMi1m*_gw! RDnj&% /o<`[>&ko6Md"5ieuDV}M(G4I"=Yxm_z~9|LG=!do&k\Inݪ>5N,VSF͊NNNV'/XJ2`/fXpT~hW]"U@G!.$ʶ]t͝EƋ xϦJe$ͶF(=ZEZݝN$,jO۸g`e;FdljINդ iOo%SKgȷΥhm!eZ)o!|]凶dM?ܹPY?foASP .yeԓ~k.3Guo`U<Ȟ)͞Fq#D[P3j1=QMB5iĐ]  RAЃ؏I}dkX#Fv⺢g1Ƌ%IfRMz \:$qMjGB!d#cL_xb*\*B!-qS6hq"{wKFxo`=a) Jȓ #}-U}r H06ސv*'tJ+O(`./e{:1@0IZ[ 114.202147][ T9758] [U] [ 114.203174][ T9758] [U] [ 114.204067][ T9758] [U] [ 114.204951][ T9758] [U] [ 114.206030][ T9758] [U] [ 114.206957][ T9758] [U] [ 114.207816][ T9758] [U] [ 114.208677][ T9758] [U] [ 114.209611][ T9758] [U] [ 114.210505][ T9758] [U] [ 114.211395][ T9758] [U] [ 114.212284][ T9758] [U] [ 114.215059][ T9758] [U] [ 114.215964][ T9758] [U] [ 114.216876][ T9758] [U] [ 114.217733][ T9758] [U] [ 114.257096][ T9761] SET target dimension over the limit! [ 114.283778][ T9763] bond0: entered allmulticast mode [ 114.285691][ T9763] vlan0: left promiscuous mode [ 114.287303][ T9763] vlan0: entered allmulticast mode [ 114.289063][ T9763] macvlan0: entered allmulticast mode [ 114.290865][ T9763] syztnl1: entered allmulticast mode [ 114.292841][ T9763] syztnl0: entered allmulticast mode [ 114.316517][ T9765] syzkaller1: entered promiscuous mode [ 114.318266][ T9765] syzkaller1: entered allmulticast mode [ 114.320546][ T9767] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 114.322597][ T9767] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 114.325209][ T9767] vhci_hcd vhci_hcd.0: Device attached [ 114.450393][ T9773] veth1_vlan: Device is already in use. [ 114.482396][ T67] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 114.483346][ T5935] Bluetooth: hci4: command 0x1003 tx timeout [ 114.499067][ T9767] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.509275][ T9768] vhci_hcd: connection closed [ 114.509688][ T1165] vhci_hcd: stop threads [ 114.513643][ T1165] vhci_hcd: release socket [ 114.515673][ T1165] vhci_hcd: disconnect device [ 114.624270][ T9790] bond0: entered allmulticast mode [ 114.626131][ T9790] vlan0: left promiscuous mode [ 114.627931][ T9790] vlan0: entered allmulticast mode [ 114.631851][ T9790] bond1: left promiscuous mode [ 114.635362][ T9790] bridge1: left promiscuous mode [ 114.637004][ T9790] bond1: entered allmulticast mode [ 114.638675][ T9790] bridge1: entered allmulticast mode [ 114.644142][ T9790] bridge2: entered allmulticast mode [ 114.647155][ T9790] sit1: entered allmulticast mode [ 114.649342][ T9790] bridge3: entered allmulticast mode [ 114.678629][ T9792] SET target dimension over the limit! [ 114.739001][ T9799] veth1_vlan: Device is already in use. [ 114.874875][ T9812] bridge4: entered allmulticast mode [ 114.981241][ T9749] [U] [ 115.013410][ T9821] SET target dimension over the limit! [ 115.131065][ T9837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.162350][ T29] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 115.211407][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 115.211421][ T40] audit: type=1400 audit(1745933205.086:761): avc: denied { setopt } for pid=9839 comm="syz.1.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 115.239283][ T9843] bond0: entered allmulticast mode [ 115.292416][ T29] usb 9-1: device descriptor read/64, error -71 [ 115.532362][ T29] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 115.644059][ T40] audit: type=1400 audit(1745933205.526:762): avc: denied { read } for pid=9847 comm="syz.2.1226" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 115.651390][ T40] audit: type=1400 audit(1745933205.526:763): avc: denied { open } for pid=9847 comm="syz.2.1226" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 115.662376][ T29] usb 9-1: device descriptor read/64, error -71 [ 115.695945][ T9852] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 115.698058][ T9852] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 115.700618][ T9852] vhci_hcd vhci_hcd.0: Device attached [ 115.747403][ T9857] SET target dimension over the limit! [ 115.772520][ T29] usb usb9-port1: attempt power cycle [ 115.868906][ T9852] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 115.874031][ T9853] vhci_hcd: connection closed [ 115.874344][ T8821] vhci_hcd: stop threads [ 115.877210][ T8821] vhci_hcd: release socket [ 115.878705][ T8821] vhci_hcd: disconnect device [ 115.953810][ T40] audit: type=1400 audit(1745933205.836:764): avc: denied { execute } for pid=9864 comm="syz.3.1232" path="/dev/snd/controlC#" dev="devtmpfs" ino=2856 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 116.116926][ T29] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 116.132785][ T29] usb 9-1: device descriptor read/8, error -71 [ 116.153023][ T40] audit: type=1400 audit(1745933206.036:765): avc: denied { create } for pid=9877 comm="syz.1.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 116.156408][ T9878] tmpfs: Invalid gid '0x00000000ffffffff' [ 116.160015][ T40] audit: type=1400 audit(1745933206.036:766): avc: denied { getopt } for pid=9877 comm="syz.1.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 116.190830][ T9880] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 116.275231][ T40] audit: type=1400 audit(1745933206.156:767): avc: denied { create } for pid=9881 comm="syz.1.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 116.280814][ T40] audit: type=1400 audit(1745933206.156:768): avc: denied { ioctl } for pid=9881 comm="syz.1.1237" path="socket:[29980]" dev="sockfs" ino=29980 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 116.287873][ T40] audit: type=1400 audit(1745933206.156:769): avc: denied { write } for pid=9881 comm="syz.1.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 116.372315][ T29] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 116.393516][ T29] usb 9-1: device descriptor read/8, error -71 [ 116.434857][ T9890] SET target dimension over the limit! [ 116.499414][ T9894] validate_nla: 6 callbacks suppressed [ 116.499425][ T9894] netlink: 'syz.2.1241': attribute type 4 has an invalid length. [ 116.502459][ T29] usb usb9-port1: unable to enumerate USB device [ 116.506335][ T9894] netlink: 'syz.2.1241': attribute type 4 has an invalid length. [ 116.511929][ T40] audit: type=1400 audit(1745933206.386:770): avc: denied { name_bind } for pid=9893 comm="syz.2.1241" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 116.519086][ T9894] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] SMP KASAN NOPTI [ 116.523214][ T9894] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 116.526797][ T9894] CPU: 3 UID: 0 PID: 9894 Comm: syz.2.1241 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 116.531147][ T9894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.534507][ T9894] RIP: 0010:skb_segment+0x194f/0x3ef0 [ 116.536245][ T9894] Code: 00 00 fe e9 48 eb ff ff e8 de 6b 77 f8 48 8b 84 24 d0 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 09 3c 03 7f 05 e8 f0 e6 dc f8 48 8b 84 24 d0 [ 116.542444][ T9894] RSP: 0018:ffffc90003ec68c0 EFLAGS: 00010202 [ 116.544443][ T9894] RAX: dffffc0000000000 RBX: 0000000000020048 RCX: ffffc9000cb53000 [ 116.546925][ T9894] RDX: 000000000000000e RSI: ffffffff8943c522 RDI: 0000000000000070 [ 116.549488][ T9894] RBP: ffffc90003ec6a68 R08: 0000000000000005 R09: 000000000000ffff [ 116.552075][ T9894] R10: 000000000000ffff R11: aaaa0aaaaaaaaaaa R12: ffff88806162fc00 [ 116.554619][ T9894] R13: 000000000001fffe R14: 000000000000ffff R15: 000000000000004a [ 116.557141][ T9894] FS: 00007f3f92e026c0(0000) GS:ffff8880d6ce4000(0000) knlGS:0000000000000000 [ 116.560027][ T9894] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.562178][ T9894] CR2: 0000200000200000 CR3: 000000003f6a5000 CR4: 0000000000352ef0 [ 116.564740][ T9894] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.567528][ T9894] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 116.570148][ T9894] Call Trace: [ 116.571321][ T9894] [ 116.572316][ T9894] ? mod_objcg_state+0x265/0xa50 [ 116.574077][ T9894] ? do_raw_spin_lock+0x12c/0x2b0 [ 116.575759][ T9894] ? __pfx_skb_segment+0x10/0x10 [ 116.577448][ T9894] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 116.579486][ T9894] ? enqueue_to_backlog+0x483/0xe50 [ 116.581461][ T9894] tcp_gso_segment+0x3be/0x19e0 [ 116.583493][ T9894] ? __pfx_tcp_wfree+0x10/0x10 [ 116.584990][ T9894] ? __pfx_eth_type_trans+0x10/0x10 [ 116.586667][ T9894] tcp6_gso_segment+0x1ec/0x1140 [ 116.588337][ T9894] ipv6_gso_segment+0x810/0x1db0 [ 116.589948][ T9894] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 116.591668][ T9894] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.593677][ T9894] skb_mac_gso_segment+0x2a5/0x650 [ 116.595325][ T9894] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 116.597042][ T9894] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 116.598830][ T9894] ? unwind_next_frame+0x3fe/0x20a0 [ 116.600717][ T9894] ? tcp_sendmsg_locked+0x1ee6/0x3930 [ 116.602949][ T9894] __skb_gso_segment+0x36e/0x700 [ 116.605047][ T9894] validate_xmit_skb+0x956/0xfe0 [ 116.607135][ T9894] ? find_held_lock+0x2b/0x80 [ 116.608798][ T9894] validate_xmit_skb_list+0xc1/0x130 [ 116.610420][ T9894] sch_direct_xmit+0x433/0xcf0 [ 116.612416][ T9894] ? __pfx_sch_direct_xmit+0x10/0x10 [ 116.614405][ T9894] ? do_raw_spin_lock+0x12c/0x2b0 [ 116.615978][ T9894] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 116.617597][ T9894] __dev_queue_xmit+0x2d4d/0x43e0 [ 116.619192][ T9894] ? selinux_ip_postroute+0x73a/0xde0 [ 116.620940][ T9894] ? __pfx___dev_queue_xmit+0x10/0x10 [ 116.622740][ T9894] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 116.624530][ T9894] ? __lock_acquire+0xaa4/0x1ba0 [ 116.626094][ T9894] ip6_finish_output2+0xe98/0x2020 [ 116.627713][ T9894] ip6_finish_output+0x3f9/0x1360 [ 116.629363][ T9894] ip6_output+0x1f9/0x540 [ 116.630975][ T9894] ? __pfx_ip6_output+0x10/0x10 [ 116.633050][ T9894] ip6_xmit+0x12d7/0x2320 [ 116.634884][ T9894] ? __pfx_ip6_xmit+0x10/0x10 [ 116.636805][ T9894] ? __sk_dst_check+0x120/0x350 [ 116.638862][ T9894] inet6_csk_xmit+0x3c7/0x740 [ 116.640787][ T9894] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 116.643036][ T9894] ? csum_ipv6_magic+0x299/0x320 [ 116.645153][ T9894] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 116.647188][ T9894] __tcp_transmit_skb+0x19d6/0x3e90 [ 116.649355][ T9894] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 116.651688][ T9894] ? kasan_quarantine_put+0x10a/0x240 [ 116.653948][ T9894] ? kfree_skbmem+0x16c/0x1f0 [ 116.655955][ T9894] tcp_write_xmit+0x1274/0x8770 [ 116.657906][ T9894] __tcp_push_pending_frames+0xaf/0x390 [ 116.660236][ T9894] tcp_rcv_established+0x860/0x2180 [ 116.662407][ T9894] ? ip6_dst_check+0x352/0x940 [ 116.664405][ T9894] ? __pfx_tcp_rcv_established+0x10/0x10 [ 116.666739][ T9894] tcp_v6_do_rcv+0x895/0x1740 [ 116.668760][ T9894] ? __local_bh_enable_ip+0xa4/0x120 [ 116.670973][ T9894] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 116.673152][ T9894] __release_sock+0x14c/0x400 [ 116.675157][ T9894] __sk_flush_backlog+0x27/0xc0 [ 116.677215][ T9894] tcp_sendmsg_locked+0x3058/0x3930 [ 116.679411][ T9894] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 116.681760][ T9894] ? do_raw_spin_lock+0x12c/0x2b0 [ 116.683925][ T9894] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 116.686159][ T9894] ? __local_bh_enable_ip+0xa4/0x120 [ 116.688375][ T9894] tcp_sendmsg+0x2e/0x50 [ 116.690171][ T9894] ? __pfx_tcp_sendmsg+0x10/0x10 [ 116.691926][ T9894] inet6_sendmsg+0xb9/0x140 [ 116.693364][ T9894] __sys_sendto+0x37d/0x510 [ 116.694810][ T9894] ? __pfx___sys_sendto+0x10/0x10 [ 116.696402][ T9894] ? __pfx___x64_sys_futex+0x10/0x10 [ 116.698063][ T9894] ? __sys_setsockopt+0x1cd/0x230 [ 116.699658][ T9894] __x64_sys_sendto+0xe0/0x1c0 [ 116.701172][ T9894] ? do_syscall_64+0x91/0x260 [ 116.702674][ T9894] ? lockdep_hardirqs_on+0x7c/0x110 [ 116.704313][ T9894] do_syscall_64+0xcd/0x260 [ 116.705751][ T9894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.707588][ T9894] RIP: 0033:0x7f3f91f8e969 [ 116.708972][ T9894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.714906][ T9894] RSP: 002b:00007f3f92e02038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 116.717484][ T9894] RAX: ffffffffffffffda RBX: 00007f3f921b5fa0 RCX: 00007f3f91f8e969 [ 116.719959][ T9894] RDX: ffffffffffffff1d RSI: 00002000000000c0 RDI: 0000000000000009 [ 116.722418][ T9894] RBP: 00007f3f92010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 116.724886][ T9894] R10: 0000000000000850 R11: 0000000000000246 R12: 0000000000000000 [ 116.727353][ T9894] R13: 0000000000000000 R14: 00007f3f921b5fa0 R15: 00007ffe450a0f28 [ 116.729818][ T9894] [ 116.730801][ T9894] Modules linked in: [ 116.732154][ T9894] ---[ end trace 0000000000000000 ]--- [ 116.733918][ T9894] RIP: 0010:skb_segment+0x194f/0x3ef0 [ 116.735657][ T9894] Code: 00 00 fe e9 48 eb ff ff e8 de 6b 77 f8 48 8b 84 24 d0 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 09 3c 03 7f 05 e8 f0 e6 dc f8 48 8b 84 24 d0 [ 116.741623][ T9894] RSP: 0018:ffffc90003ec68c0 EFLAGS: 00010202 [ 116.743576][ T9894] RAX: dffffc0000000000 RBX: 0000000000020048 RCX: ffffc9000cb53000 [ 116.746002][ T9894] RDX: 000000000000000e RSI: ffffffff8943c522 RDI: 0000000000000070 [ 116.748483][ T9894] RBP: ffffc90003ec6a68 R08: 0000000000000005 R09: 000000000000ffff [ 116.750919][ T9894] R10: 000000000000ffff R11: aaaa0aaaaaaaaaaa R12: ffff88806162fc00 [ 116.753398][ T9894] R13: 000000000001fffe R14: 000000000000ffff R15: 000000000000004a [ 116.755823][ T9894] FS: 00007f3f92e026c0(0000) GS:ffff8880d6ce4000(0000) knlGS:0000000000000000 [ 116.758535][ T9894] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.760551][ T9894] CR2: 0000200000200000 CR3: 000000003f6a5000 CR4: 0000000000352ef0 [ 116.763074][ T9894] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.765480][ T9894] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 116.767863][ T9894] Kernel panic - not syncing: Fatal exception in interrupt [ 116.770712][ T9894] Kernel Offset: disabled [ 116.772072][ T9894] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:22:31 Registers: info registers vcpu 0 CPU#0 RAX=00000000000d0ce4 RBX=0000000000000000 RCX=ffffffff8b6c4419 RDX=ffffed100d4865be RSI=ffffffff8bf47da0 RDI=ffffffff81919711 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000000 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff9084f110 R15=0000000000000000 RIP=ffffffff8b6c2caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69e4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000b63fe4 CR3=000000003f6a5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f92011a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f92011a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f92011a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f92011aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f92011b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f92011c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6efb8702ea2467f6 b1c29b1c26e0fd59 bd82c68861b0c751 edf1a1c91bc63544 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e8e6cced997e9650 dc77c1f965aaa1b4 cbda682bcaa8af35 2144faab18c3d2ff ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 39c04a02c7927a96 5397549e6c855c90 1597c71a2c14cba9 6607adc1b931d41c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 378099cd0f450d90 e8e6cced997e9650 dc77c1f965aaa1b4 cbda682bcaa8af35 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 640e6e0619edb2fa 7d15da512adf3038 5c1435fe067b7766 3dc334c95793e37b ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 127f166586f36e02 2561bfb3546e7e70 1480ecd151eab7db c706e63b5c6d5ede ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e626137558af3a77 f7c1740da5e5fa31 954ad9b05afc0dd9 cdd72d7f4b2607ca ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 510c91ae26b4b209 5e0729e8c9b38ce0 532ea5950f6a5f6a bde925b40c16f253 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000009a314 RBX=0000000000000001 RCX=ffffffff8b6c4419 RDX=ffffed100d4a65be RSI=ffffffff8bf47da0 RDI=ffffffff81919711 RBP=ffffed1003ad0488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a65bd R10=ffff88806a532deb R11=0000000000000000 R12=0000000000000001 R13=ffff88801d682440 R14=ffffffff9084f110 R15=0000000000000000 RIP=ffffffff8b6c2caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ae4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3e4d0d CR3=0000000028c18000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=3a810b1eb6134bdc DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555580cdd8ed 0000555580cdd7e0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555580ce7ac4 0000555580ce7ac0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555580cdd430 0000555580cdd330 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000208060a016c 8e0008001d90030f f08080820488001d 88031c8080808404 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02c00302100002b0 0358100004900300 0100080005000210 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300100002800401 0000020806060167 b200080002e00300 100002d003001000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0808b8030894928d 88080008b0030100 000010ae06088203 0100000202060880 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010fffffffffffff 0408800401941000 060171ae00007890 00001054100808b8 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030894928d880800 08b0030100000010 ae06088203010000 0202060880030010 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002800401000002 0806060167b20008 0002e00300100002 d00300100002c003 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02100002b0035810 0004900300010008 0005000210083003 0008002803000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000f0d84 RBX=0000000000000002 RCX=ffffffff8b6c4419 RDX=ffffed100d4c65be RSI=ffffffff8bf47da0 RDI=ffffffff81919711 RBP=ffffed1003ad0910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c65bd R10=ffff88806a632deb R11=0000000000000000 R12=0000000000000002 R13=ffff88801d684880 R14=ffffffff9084f110 R15=0000000000000000 RIP=ffffffff8b6c2caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6be4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c311f63 CR3=000000004e285000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854f2635 RDI=ffffffff9adf44e0 RBP=ffffffff9adf44a0 RSP=ffffc90003ec6230 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000036 R14=ffffffff9adf44a0 R15=ffffffff854f25d0 RIP=ffffffff854f265f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f3f92e026c0 ffffffff 00c00000 GS =0000 ffff8880d6ce4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000200000 CR3=000000003f6a5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f92011a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f92011a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f92011a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f92011aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f92011b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f92011c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f92183488 00007f3f92183480 00007f3f92183478 00007f3f92183450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f92ced100 00007f3f92183440 00007f3f92183458 00007f3f921834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f92183498 00007f3f92183490 00007f3f92183488 00007f3f92183480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000