last executing test programs: 11.439847904s ago: executing program 2 (id=334): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000140)={0x2, 0x0, 0x9}) (async) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000140)={0x2, 0x0, 0x9}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x3, 0xb, 0x2172, 0xffffffffffffffff, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x8001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x100, 0xc1, 0x300, 0xe1, 0xe, 0x1, 0x69, 0x10010000, 0x3, 0xfffffffc, 0x9, 0x5, 0x7, 0x1, 0x1, 0xfd, 0x3, 0x107ff, 0x2, 0x4, 0x88, 0x7ff, 0x80000, 0x20001e58, 0x801, 0xf39d, 0x6, 0x8, 0xa4b5, 0x0, 0xfffffff4]}) ioctl$COMEDI_INSN(r2, 0x8028640c, 0x0) connect$inet(r1, 0x0, 0x0) (async) connect$inet(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x800) (async) sendmsg$nl_route_sched(r3, 0x0, 0x800) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) (async) sendto$inet(r1, &(0x7f0000000900)="2e552f5d9fd8b0d9627c49f8f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/timer_list\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x8e, 0x180000504) recvfrom$inet(r1, &(0x7f0000000240), 0x0, 0xc9100120, 0x0, 0x0) (async) recvfrom$inet(r1, &(0x7f0000000240), 0x0, 0xc9100120, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000100)={'ah\x00'}, &(0x7f00000001c0)=0x1e) (async) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000100)={'ah\x00'}, &(0x7f00000001c0)=0x1e) syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) (async) r6 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000140)={0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89f1, &(0x7f0000000900)={'bond0\x00', @broadcast}) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000200)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x27, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x201, 0xc1}) 9.918050171s ago: executing program 2 (id=341): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.1:6789\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x41) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendfile(r2, r2, 0x0, 0x400000000000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000044) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) (async) fsopen(&(0x7f0000000000)='ceph\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.1:6789\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x41) (async) write(r1, &(0x7f0000000000)='3', 0x4e) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) sendfile(r2, r2, 0x0, 0x400000000000000) (async) 8.518631794s ago: executing program 2 (id=343): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000180)='syz1\x00') ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000100)={'hsr0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)=@newtaction={0x6c, 0x30, 0x83d79f1e8021ba05, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000000}, @rand_addr=0xffffffff, @rand_addr=0x64010100, 0xff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1e000000742ed963de", @ANYRES16=0x0, @ANYBLOB="010028bd7000fbdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32=r5, @ANYBLOB="20000280", @ANYRES32=r4, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000003000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6.540493735s ago: executing program 2 (id=347): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) creat(&(0x7f0000000000)='./dev\x00', 0x8) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x5, 0xe, 0xfffffff7, 0x8001, 0x9, 0x401, 0x3, 0x749}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRESDEC, @ANYRES16=r1, @ANYBLOB="1f551ee7f836601e440fe7f8b370f5db71d869153feeb85f5606d37e42c233fe0af08c5f48cdbc8b9b476b19a33b2d2ff3011212bdf0c1226dd4e7060053e024853607eb425621627b5fa913140c6abab47f1344244b9d4e6066d5c83788e0738fe5f56eb790b50b3eb03c50a0fae82c70e329b51bf8edb2377b6b8a0b22553e7ba6d36a655ff65a7cf0385c2b55b12a4dccbeb98a71db845cfbf527fd442a246b85ef666fe089d4ec97fc2d302e1f960e9b5f2ef9ad451b7ae6d23bca013d555d4c0d9f4d7a391c417a32fc7a69e69a1ef853", @ANYRES32=r1], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) 4.23753362s ago: executing program 0 (id=356): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) add_key(0x0, 0x0, &(0x7f0000000400)="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", 0x179, 0xfffffffffffffffc) connect$inet6(r0, &(0x7f0000000580)={0xa, 0x4e24, 0x0, @mcast2, 0x2}, 0x1c) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103) fcntl$setstatus(r1, 0x4, 0x2000) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6fd5193abe1223abee3c0ee084cf746d6f64653d30303030303830303030303030303030303130303030302c757365725f69643dc92ca45c5180e908392b14c0de28760027028d1010dd8423b2b3", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000800)={{{@in=@empty, @in=@local}}, {{}, 0x0, @in6=@empty}}, &(0x7f00000006c0)=0xe8) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9533, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4.118159023s ago: executing program 1 (id=358): setns(0xc9, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001840)={0x1, 0x1, 0x0, 0x0, 0x0, 0x2ffc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc4, 0x8}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000100)="29000000140005b7ff00220d426360eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e7870eeffc4a707f8db653caf6bf2ab18b36ee84338b3a13938e3607ed496950ee089134e6e856d220c15bb461bde5a8cc4cc6e70d5c9de143ec4d1f796b1ce1cb5a9a15b6b45fb34dde90b454e4964c3351c4f19c0aa08455eaf36348e78e1d78e37f2df9846b3750d691f90c78e9204bfb38796f6b4c358e538675a597e9cf0cf53f1723724ee3a905c9772548236927198ebc08773", 0x13) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000280)="005f86274e5100010089c0207441d29d54e5011ae77e112c888d0e2718211e05ed1c9ded6a6084f2ea8a290b82854b12e50f57b3d1c1148330406f016a87be80470f3da9a4d8429fe832cb73056739cb4700000000000000", 0x58, 0xffffffffffffffff) 3.809757352s ago: executing program 1 (id=359): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000107400"/20, @ANYRESHEX=0x0, @ANYBLOB="a4a40100f3b20500", @ANYRES32=r0], 0x3}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000840) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='osdkeepalive\x00', &(0x7f0000000080)='1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='osd_idle_ttl\x00', &(0x7f0000000080)='1\x00', 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x59}, @void, @val={0xc, 0x99, {0x3, 0x1b}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05000000ff7c2a6cd2e03601647a08000300", @ANYRES32=r6], 0x28}}, 0x0) bind$rxrpc(r2, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x7, @mcast2, 0x4}}, 0x24) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000107400"/20, @ANYRESHEX=0x0, @ANYBLOB="a4a40100f3b20500", @ANYRES32=r0], 0x3}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000840) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x80000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) fsopen(&(0x7f0000000000)='ceph\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='osdkeepalive\x00', &(0x7f0000000080)='1\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='osd_idle_ttl\x00', &(0x7f0000000080)='1\x00', 0x0) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x59}, @void, @val={0xc, 0x99, {0x3, 0x1b}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05000000ff7c2a6cd2e03601647a08000300", @ANYRES32=r6], 0x28}}, 0x0) (async) bind$rxrpc(r2, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x7, @mcast2, 0x4}}, 0x24) (async) 3.269816896s ago: executing program 0 (id=360): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000140), 0xa4c2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x33271080, 0xfffffff5}) 2.919608227s ago: executing program 3 (id=361): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07e05606000043fe0000140600000ee60000bf050000000000006e6500000000000065070000020000e3260700004c0000001f75000000000000bf5400000000000007040000f0fff8ffad350100000000009500000000000000050000000000000095000000000000001c0a7900009d3c2792138e042ce31c2b7ae994a5642cb064ecd5615f3196e3359aceb768637e60bd5d2e4b5992de991371274fdff6e79fc722e25659a7c85615c1b88bc894123cfe3614e887ffffff7f381ef4932cb0dcebea6d90e9c1677fbefd35003d883a2c559b7a34db461b197baf8ebb7c11a8df40d92706d0bbcc5bf6fec345ae9606c3c1a348f9b395592c1f9ae5de8923b27a6fdc20441018e5e4b41b13000c94df1f2db24c67d4c7ba9ec035883e2791a9e9dff3e8bfc7d1be00000082018f5f4b2c00000000000000387a601e3a3412086dee84efd375f0645f3301f55d3b9efdfbed9b430bcf0418e100bdff1c8bcfc0c229874bc3d2418bab997c8bef9aa55841caa572ddff9220c67c9e17bee524c3dc747445763ecb0a7f2cd12bc34b0fc6273786b5bba17e9b8f1c2af8e23c411a4d1124cfb5279195f701000000f77c71294bbfd85878726c49eb89085967722d98cb884d1afe82f7f722e38397996271700241094d272dd8b754b2dd7817450bc7921dd372e621dd447b86e7ffd1bdc198deb495cac0995ca3ef6c1affb693ae366b0f11db6e312bdb8261d0dc10cac6a27e29f171b8e9f172c3db24558d77b8bf18be45c50b3fc005fa7b134dfc948f6015e0389d7f34cb9c02cf517c8ed7a9b6159c1446ef1c2ccff2bde95aa860ed9b836d6b8fcab7663d9bd8415e6f90fdb007b8f3e009000000000000002eb85073720c1df1147c9f5013c82fc98604bd70cd56609a6b73943748a90002d9cf81bcb1d262845762f6b0a284cc463b42492bab0f7b25895cc3ba8bf0b5e0fc018463d03a73fa85429725545128b0e9b550a13d0dd35092250bbce4f618cad2375a34c7f15c3096f3e9004468cf1aba4a6f22ed0eb3681c6963205eefc072ab79ad8b126500419e25a94ce13a7a96deac79c90b8df10b1e364cf97eaa49fd2294320fad0d814f230f954eec844f6b658ee04eb1c6d655a3383928d6e0307a7097b0a5fa5040958d2b7ad0eb7605a7de7ce9cf0e6b472d764976fbf7edd83dac8b9273976bfd6090de0a73cf8a9b2c23500a4054703e2df18d8498356e3c1cd6418e149f8a22e95da26221d8a69b642915471f4917571357aa9df385c0532d6e70263ec616f88dc8f93c886ede7743c53d738b9c7021f0032970eabd2808c53128b3eb600f2614256184c506454980e542ce450029aa6de147a8c81e6f701a4b9b278b08e4b02710907923f0797f96413054f2d1b5f2ba0c49567b53db5d862acf2c42faa37c4a8738f64ed7fef9ffba58a3c1ca52b55aef071e4f11334e3a70918e5b18dab84decde74d616b5b05c96378acc79375a7ebdb54b01d512de48184950f5cac97f0a6dcc6d12c48c6e3b925fee7974ca8f3009188bbecc30e1adbc290ac99555ec069636a8079f8ca80343ff84e896dda2d4148f982feff6b38699fb57aab5596479f84b59daa9a406c5119761d5aabb51c5175461f8b0aa7265c380317f08775d8a8a8bda64ada2c6b3599f548d6272937e4d89ef6ebcecf84fa856024b55dd057056bbae005f0fba858f3abdd9c115064000000000000000000070b0bb28fd1eca97a90864863235d415379d1bdb3d35015f85be2ae802455d3b079f12aa837996ca1ce7280cb394b4c13ca623c30b19887d41eab495f698284a1bc17ff100000000000000000000dac089bdf7984e3300000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @remote, 0x2}, 0x1c, 0x0}, 0x20008814) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 2.859673797s ago: executing program 2 (id=362): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet(0xa, 0x801, 0x84) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x78}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000002d, &(0x7f0000000200)=0xb1e0, 0x4) mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_freeze_timeout', 0x0, 0x20) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000040)=@arm64={0x4, 0x0, 0xf3, '\x00', 0x80000004}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002740), r7) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000027c0)={0x1c, r8, 0x1455205535f1cb59, 0x70bd2b, 0x25dfdbfa, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x20048894) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r6, &(0x7f0000000200)='bf', 0x2) close(0x3) listen(r1, 0x8) (async) r9 = accept4(r1, 0x0, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f0000000580)="9b", 0x29fff, 0x0, 0x0, 0x0) write(r9, &(0x7f0000000100)="65c7d7264f", 0x5) (async) shutdown(r0, 0x1) 2.859316267s ago: executing program 1 (id=363): mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x118) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106d0415c200000000000109022400010000a00209040001020300020009210000400122180009058103"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @empty}, 0x10) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) sendmmsg$inet(r2, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e80)="2389", 0x2}], 0x1}}], 0x1, 0x4040040) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./sys_sec/tomoyo/domain_policy\x00', 0x48423, 0xd653e3496d3743a6) chdir(&(0x7f0000000080)='./file0\x00') ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x2, "94c492eb0165203d36bec70800890100000000000000e1100a0000005900"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.858983932s ago: executing program 0 (id=364): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) 2.718886987s ago: executing program 0 (id=365): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x4) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r4 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x5000, 0x6, @loopback, 0x7}, 0x1c) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f0000000780)={0x1, 0x0, @pic={0x7, 0x5, 0x6, 0x6, 0x3, 0x3, 0xe, 0x46, 0x0, 0xff, 0x3, 0x3, 0x9, 0x2, 0x4, 0x4}}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000200)={0x4, 0x1, 0x1, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae03, 0x38) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'sit0\x00', 0x0}) r11 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="05150200fffe000218028008000100"/28, @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x48080}, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 2.044721039s ago: executing program 3 (id=366): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtaction={0xbc, 0x30, 0x48b, 0x1, 0x0, {}, [{0xa8, 0x1, [@m_ctinfo={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x80000001, 0x0, 0x9, 0x5}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7fffffff}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @loopback, @multicast2, 0xff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000080)={0x8, 0xe}) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000000c0)) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x20}, [@IFAL_ADDRESS={0x14, 0x1, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0xffcc) 1.979289891s ago: executing program 1 (id=367): r0 = gettid() timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="2000000043000701fefffffffcdb080001"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x2004c000) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x91], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f0000000380), &(0x7f00000003c0)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./tracing\x00', 0x1ff) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x15961, 0x10000, 0x0, 0x4e}, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000100)={&(0x7f00008d5000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x4000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f0000453000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x45a7e000) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 1.745011579s ago: executing program 3 (id=368): socket(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7c, &(0x7f0000000180)={0x0, 0xc8a2, 0x1, 0x1, 0x20002f7}) openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632800e", 0x4}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) setns(0xc9, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) read(r2, &(0x7f00000004c0)=""/137, 0x89) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, 0x0, 0x0) pipe2(0x0, 0x80080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002a000300", @ANYRES32=r5, @ANYBLOB="0800350000000000090007007c19d522760000000800090001ac0f000a00060008021100000100000500080001000000080026006c0900000a0034000202020202020000"], 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r7, r7, &(0x7f0000000000)=0x2eb4, 0x2000007ff) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) 1.618086458s ago: executing program 0 (id=369): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT(r0, &(0x7f0000000040)={0x8, {"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", 0x1000}}, 0x1006) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000010c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'vcan0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001240)={'erspan0\x00', &(0x7f0000001140)={'ip_vti0\x00', 0x0, 0x0, 0x1, 0x80, 0x3, {{0x2a, 0x4, 0x1, 0x5, 0xa8, 0x67, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp={0x44, 0x8, 0xed, 0x0, 0x6, [0x1]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0xb0, [@empty]}, @timestamp={0x44, 0x28, 0xea, 0x0, 0x8, [0x4, 0xfffffffe, 0x8, 0x10, 0x0, 0x80000001, 0x2, 0x1700, 0x6]}, @timestamp_prespec={0x44, 0x1c, 0x8d, 0x3, 0x4, [{@private=0xa010100, 0x2}, {@loopback, 0x590a}, {@multicast2, 0x3}]}, @timestamp_addr={0x44, 0x3c, 0x97, 0x1, 0x5, [{@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x42}, {@multicast1, 0xa61}, {@multicast2, 0xe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@empty, 0x9}, {@private=0xa010101, 0xfffffff3}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001280)={'nicvf0\x00', 0x0}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001340)={'erspan0\x00', &(0x7f00000012c0)={'syztnl0\x00', 0x0, 0x8, 0x700, 0x2, 0x0, {{0x10, 0x4, 0x2, 0x5, 0x40, 0x66, 0x0, 0x8, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x2c, 0x98, 0x3, 0x3, [{@rand_addr=0x64010100, 0x7}, {@multicast1}, {@multicast2, 0xffffff3b}, {@private=0xa010102, 0xfffffff3}, {@broadcast, 0x8}]}]}}}}}) (rerun: 32) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000001c00)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001380)={0x81c, r2, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @ETHTOOL_A_LINKMODES_OURS={0x770, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x154, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3979}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/uhid\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x21}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/\x1a\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\\:^]-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/uhid\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/uhid\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x482}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/uhid\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '#\x8a%}#,]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x55ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/uhid\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}]}, @ETHTOOL_A_BITSET_VALUE={0xbf, 0x4, "4bee8fba6f3e59b7564d720b5e36f86de6d4fadb974d862f06ab6d077f7e3ccd2adb074b1e793b960f9817a892d25f81138fd02e8c3fb10bbcbfe5206bd064d02a28a5d89e72c493d85ca0f4146c18beabd00ed256a3853c467069d83867095860ffe3fec3ea9c3be3557a681a3f818ef371fb2a7b29ffe10772bb9761ad1173dc09a25a716674eab7ad8c3d5024f4fa2fc9c71163ccc7b404fdd234138e5d1f8dd6ecf81b662e704b3c11807f01416750b69bc6a7d6e51eeacca6"}, @ETHTOOL_A_BITSET_MASK={0x7e, 0x5, "7487425b7c6197ae4d6278f36e6ebdc5f14398e3174b936239420919a4ddf1feab4ecabc7205f52710566eede861013275cad2505bce8ce7d63748001e63bc69ed4796de06718bf778a3ab04abe0843f7180824fb7a18b0638113e0adc7266f9a1fe9711662b57918dc93d8557ce5915a400be2c731694d8e399"}, @ETHTOOL_A_BITSET_VALUE={0xed, 0x4, "d4b42d037d8be9afb89e8af774c1ce30c8f5922d441f6e33f04adaf48ea383aa51091f7c1f0813360edb23715d47911c8142cafd71688111b15af67e6ee5a471acea45e1048a27cb756b16082c61a0e3eedfb4fcbebd3b37abd826c951516eafdde4d60d6678e2e5bf7a9e909677c530bb9aa181e92a9d9373d571b82f27f469ff709132936e4b32f1aaf70e4ca7a790dc380d0c4300adfb611ed19f81e00a2b882d73a6710dc816f6c80423f3be50e02a3d977ead297e46b3fbb43c3923ff0baf283b0cf144b316870d0c1778592f2a8a7772eb11d0e330f57da2b9b274a9c27ea9970b80ec84d686"}, @ETHTOOL_A_BITSET_VALUE={0xe9, 0x4, "9dba6cf45be1f28ab3f8d503452d280a7cb8bf3f0db759af2c00eb92dd1d890af9e361137140600f0cb9ba5f0dd72f0dbcbf8365d087fb75bca6fca911ecfb8958a42ca16c034e0ebfa4165aa2ae2a716d24cd60443908781a285aecc8ddeff93442db7684930f47e6b095d6e66cfc8cc888c77e27c1529597d8a0ec93e110fd3ebdb03a7a93a3bf524f98b3059aeed8c414b95e8b1e250ef20ddcefb03abd1b66642aecbb317476beee880ca41fbf84b13336aa73812db85a889f6ff5947c10d4f29991406d2512c5e82adb9380124b26cd2359fdac1d74ba58347ab57ea073b5a776d011"}, @ETHTOOL_A_BITSET_BITS={0x100, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/uhid\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/uhid\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '%)@!-}+\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '\'}/%^\\%!\'^Y)\'@-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/uhid\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/uhid\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/uhid\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/uhid\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x198, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '.$^\\\'*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/uhid\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb8bf}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/uhid\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/uhid\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2e14}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x16}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9ca5}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/uhid\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '>[%!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe2ad}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/uhid\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}.,!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/uhid\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/uhid\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '\xc0[}:!/&$&#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x483}]}]}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/uhid\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/uhid\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x6}]}, 0x81c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) (async) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x70, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x20}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001d80), 0x319002, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000001dc0)={'ni_daq_700\x00', [0x0, 0x6, 0x4, 0x7f, 0x2, 0xa4, 0xfbe, 0x9bc, 0x6, 0x8916, 0x7, 0x4, 0x9, 0x173, 0x8, 0xc, 0x6, 0x3, 0x80000001, 0x742, 0x1, 0x4f6, 0x5, 0x1, 0x56, 0x5, 0xbbd, 0x29, 0x81, 0x8, 0x3, 0xfffffff8]}) (async, rerun: 64) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001ec0), r1) (rerun: 64) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000002000)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x9c, r9, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8000}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async, rerun: 64) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000002040), 0x1, 0x0) (rerun: 64) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f0000002080)) socket$nl_audit(0x10, 0x3, 0x9) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r11, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x58, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x5, 0x4, 0xf5bd, 0x80000001, 0xffff]}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004018}, 0x4040810) read$ublk_bdev(r10, &(0x7f0000002200)=""/179, 0xb3) (async, rerun: 32) r12 = io_uring_setup(0x71e4, &(0x7f00000022c0)={0x0, 0x5ee2, 0x80000, 0x0, 0x4c}) (rerun: 32) fchmod(r7, 0xa1) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002380), r8) sendmsg$NL80211_CMD_STOP_AP(r10, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x20, r13, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x51}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async, rerun: 32) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000002480)={0x1, 0x53, "4a4fda743d9fa70cd9a697170c44edc8c8f227e5e90de39c638d1c06654db45938f1e95f67de08c2808bbe8a4e1c254df7afcbfea9a505007160c5b252674532f35b36f8ee73ea34046bc1420b97cb2de679d2"}, &(0x7f0000002500)=0x5b) (rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000002540)={r14, 0x5}, &(0x7f0000002580)=0x8) (async) ioctl(r11, 0x45c, &(0x7f00000025c0)="7d666b650881d22d55aafcd5f07cb554fac5fca18356de8d48f8a3704b1ba037c36f4996d716398b9a75283e88e3c039b53b10b8b83bb33a35d62a78f0815662ec72f5d42f5c5eef60ad0cc3ce74b40eaec1f9c5d82dc6206f9b61095bca5b66c64de95829cb5b08") (async) ioctl$KVM_CAP_X2APIC_API(r10, 0x4068aea3, &(0x7f0000002640)={0x81, 0x0, 0x2}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) 1.615903549s ago: executing program 3 (id=370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) flock(r1, 0xc) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="54000000090601080000000000000000000000030900020073797a3100001800018014000240fe8000000000000000000000000000bb060004400e1f0000050007008a00"/84], 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r5 = accept4(r3, 0x0, 0x0, 0x800) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) r8 = dup3(0xffffffffffffffff, r7, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x20000000, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000580)={@fda={0x66646185, 0x5, 0x1, 0x31}, @flat=@weak_binder={0x77622a85, 0x110a, 0x5}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e956a7736a2d6720a78cf973d2b457ee8600a599101364db8e4077e49c82548998c69530afebfc5de028a4061b4f5dc0cea040db8e78e284b7f9dfffe9ce6c8d338a0191fa4e7d2d3e496d4690a831a03f97dc4d43af34a22ac309f6659d885fdc3ad084d2ea", @ANYRES8, @ANYRESOCT=r6], 0x2f}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) sendmsg$key(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x10, 0x5, 0x2, 0x2, 0x0, 0x70bd2b, 0x25dfdbfc}, 0x10}}, 0x20000000) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, 0xc, 0x6, 0x500, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x4) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="b9020100c00f32b8e9ae00000f23c80f21f8350c0090000f23f83ef30f2c774966baf80cb823fae484ef66bafc0cb003ee66baf80cb8e6a8a888ef66bafc0c66ed64f40f20c035000000400f22c02e0fe3120f017bc1f9", 0x57}], 0x0, 0x18, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) fsopen(&(0x7f0000000040)='nfs\x00', 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) 1.006726975s ago: executing program 0 (id=371): r0 = socket(0xa, 0x3, 0xff) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6401000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000001e00), r2) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001e80)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0xa}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0xffffffffffffff41, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0) (async) io_setup(0x4, &(0x7f0000000280)=0x0) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) (async) io_cancel(r5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x7f, 0x0, 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x4000002}, 0x1c) (async, rerun: 32) syz_emit_ethernet(0x6e, &(0x7f0000000500)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x0, @mcast1, @loopback, [], "554001294af7376b"}}}}}}}, 0x0) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x498, 0xffffffff, 0x0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x38, 0xfffd}}}, {{@ipv6={@private2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0x0, 0xffffff00, 0xff], [0x0, 0xff000000, 0x0, 0xff], 'ip6_vti0\x00', 'veth0_macvtap\x00', {0xff}, {}, 0x2e, 0x29, 0x3, 0x19}, 0x0, 0x100, 0x228, 0x0, {}, [@common=@icmp6={{0x28}, {0x12, "16c0", 0x1}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x40, 0x8}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xf, 'system_u:object_r:crypt_device_t:s0\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @mcast1, [0xff, 0xff, 0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xff], 'xfrm0\x00', 'dummy0\x00', {}, {}, 0x62, 0x9, 0x4, 0x34}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f8) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1e}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x4) 283.032865ms ago: executing program 1 (id=372): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a000000fd0200030000000006001d"], 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="300000001c00010c000000000000000007000000", @ANYRES32=r6, @ANYBLOB="800002f8070001007f0000010a0002"], 0x30}}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000b40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000640)=@newchain={0x4c0, 0x64, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x3, 0x2}, {0xd, 0xd}, {0xa, 0x3}}, [@f_rsvp6={{0xa}, {0x40, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0x5}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr=' \x01\x00'}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_RSVP_POLICE={0xc, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}]}}, @f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x9, 0x9, 0x8, 0x101, 0x33, 0x8, 0x200, 0x50000000, 0x6, 0x5, 0x9, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x6, 0x1ff, 0x1, 0xffff, 0x8000, 0x7fffffff, 0x1ff, 0x4, 0x10, 0xb, 0x9, 0xf, 0x5, 0x4, 0xae, 0x4, 0x9, 0xb029, 0xffff, 0x3, 0xfffe0000, 0xa0000000, 0x8, 0x3, 0x8000, 0x3, 0x1, 0x3, 0x5, 0x46e0, 0x9a, 0x4, 0xf, 0xffff, 0x2, 0xf, 0x6, 0x0, 0x7, 0x100, 0x57, 0x1, 0x800, 0x8, 0x0, 0x0, 0x3, 0xb53a, 0x9, 0xffffffff, 0x6, 0x9a, 0xff, 0xfffff144, 0x0, 0x4, 0x9, 0x9, 0x10000, 0x800000, 0x8, 0x0, 0xfffffff8, 0x9, 0x0, 0x3, 0x8, 0x1, 0xab2, 0x1000, 0x9, 0x5, 0xc7, 0x7, 0x80, 0x3, 0x4, 0x8, 0xe, 0x1, 0x7, 0x3, 0x6, 0x7fff, 0x10, 0x944a, 0x3, 0x8, 0x7, 0xffffffff, 0x80000000, 0xffffff8a, 0x5, 0x6, 0x29fe9ee0, 0x6, 0x9, 0x9, 0x7, 0x80000001, 0x3, 0x350, 0xd0, 0x7, 0x24, 0x800, 0x80000000, 0x4, 0x9, 0x1, 0x7fffffff, 0x1, 0x4, 0xb, 0x0, 0x5, 0x7, 0xd74a, 0x9, 0x4, 0xb, 0xf90, 0x40, 0x4, 0xa66, 0x1, 0x0, 0x9, 0x46c, 0xcd1, 0x1, 0x2, 0x2, 0x10, 0x3, 0xffff, 0x6, 0x8, 0x6, 0x4, 0x0, 0xffff, 0x8, 0x9dd, 0x200, 0x8, 0x3, 0x9, 0x9, 0xffff, 0x8, 0x6af6841b, 0x4, 0xe4, 0x1, 0xfffffffb, 0x2, 0x4, 0xffff, 0x6, 0x7, 0x8000, 0x100, 0x6, 0x1, 0x3, 0x40, 0x1, 0xab9d, 0x0, 0x8, 0x3, 0x5, 0xa, 0x7, 0x5, 0x96, 0x5, 0x3, 0x4800000, 0x7, 0x2, 0x1, 0x5, 0x2, 0x0, 0x6, 0x0, 0x101, 0xa, 0x3, 0xe, 0x10001, 0x7, 0x2, 0x6, 0x0, 0x2, 0x8, 0x3a, 0x0, 0x6, 0x1, 0x3, 0x752, 0x100, 0x6e, 0x9, 0x1, 0x4, 0xb2, 0x2, 0x3, 0x2, 0xce, 0xfffffffc, 0x9, 0x1b, 0x8, 0x1ff, 0x1, 0x2, 0x3, 0x1, 0xfffffffa, 0x2, 0x1, 0x3, 0x80000001, 0x7, 0xffff, 0x5, 0x7, 0xfffffd25, 0xffffffff, 0x800, 0xffffd944, 0x7, 0x3]}]}]}}, @f_rsvp={{0x9}, {0x14, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x6, 0x4}}, @TCA_RSVP_DST={0x8, 0x2, @local}]}}, @f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @local}]}}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x804}, 0x4804) ioperm(0x0, 0x2, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x0, 0x6, 0x0) close_range(r2, 0xffffffffffffffff, 0x3f00000000000000) 282.693396ms ago: executing program 2 (id=373): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="380000001000010025bd7000fddbdf25000000", @ANYRESOCT, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES8], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x4000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000002900), 0x4) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3e, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) syz_clone3(0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) pwritev2(r6, &(0x7f0000004080)=[{&(0x7f0000000180)="921e1fa8f06f18", 0x7}], 0x1, 0x9, 0xd0, 0x11) mkdirat(r6, &(0x7f0000000100)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x22) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040eb2821c0c"], 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 179.973343ms ago: executing program 1 (id=374): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="019785f4fe5a0600000020"], 0x38}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="019785f4fe5a0600000020"], 0x38}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000327bd7000fddbdf250700000334000980080002000400000008000200ffff00000000000005000000080001000200000008000100050000010800020000000000955cfe15d7e3629f7c27702c43558f447dcce879c589c297516ba320c044e7174893429c0685d2bd9bc606ea3f256f9f05acd3ba4f9fb2454c7931ee5336bb2b0e72e519b3a3d8708af4dc7b3cea3354e844646f67445c3f877db0bacdd4ea8885922ae3aa74cc896419b6cbb453ebd59350b56cc7dd1864bc5d842df089fdb8d58a0c732dd2923f0b0d327dfed32185fb4eccf12a20bdb08182f28335adfa5098"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x8850) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21505, 0x200feff}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 89.757608ms ago: executing program 3 (id=375): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000000c0)={0x3, 0xf0, "1a6a561e65e22e820a49e8c4b32200b7931fc843eaef770d51dfb642f24aa1cb827419f65dcba79d01b05bfe5a886a843e3db26376c92f091f93028105dbebbf579ed035828d23f74e8fbded6e1fb00b932b1ec7a8daeab5f566373749c7f60fe691cd11b4eafbe84cfe183592f6d02700d3eb64f8c641f95f48c1794abcb431c6990e16e36b482e5323a692b92c8c98470a08cc3a2666533e21a5f3e7a37cf0d3f3c947cfea88e7610423fa6d49e54061063aa9de9ce3b4ea789cab7b44bb4cc274b91f3f4ad60c409679fa6ee7560ae3246e279f9737d92cb0061899fdb1b49f4e81fec444f91736bf7fabce872760"}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x68, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r1, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_to_hsr\x00'}, @IFLA_MTU={0x8, 0x4, 0x6}, @IFLA_PHYS_SWITCH_ID={0x9, 0x24, "4a2efc13a9"}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 3 (id=376): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x11, 0x1020, r1, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40400, 0x8) fcntl$notify(r3, 0x402, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x7e, 0x3b00, 0x0, 0xfffffffffffffdfd) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) (async) fanotify_init(0xf00, 0x0) (async) fanotify_mark(r2, 0x11, 0x1020, r1, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40400, 0x8) (async) fcntl$notify(r3, 0x402, 0x18) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) (async) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92", 0x2}], 0x1}}], 0x1, 0x4400c800) (async) sendto$inet6(r0, &(0x7f0000000300), 0x7e, 0x3b00, 0x0, 0xfffffffffffffdfd) (async) kernel console output (not intermixed with test programs): 37.504433][ T43] audit: type=1400 audit(1791496349.092:159): avc: denied { read } for pid=5736 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.504459][ T43] audit: type=1400 audit(1791496349.092:160): avc: denied { open } for pid=5736 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.505776][ T5740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.506214][ T43] audit: type=1400 audit(1791496349.092:161): avc: denied { mounton } for pid=5736 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.507438][ T5734] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.508859][ T5737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.509189][ T5089] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.509306][ T5089] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.511732][ T43] audit: type=1400 audit(1791496349.102:162): avc: denied { module_request } for pid=5736 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.518192][ T43] audit: type=1400 audit(1791496349.102:163): avc: denied { module_request } for pid=5726 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 38.072023][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.072075][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.072134][ T5732] bridge_slave_0: entered allmulticast mode [ 38.072845][ T5732] bridge_slave_0: entered promiscuous mode [ 38.095318][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.095362][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.095508][ T5732] bridge_slave_1: entered allmulticast mode [ 38.096225][ T5732] bridge_slave_1: entered promiscuous mode [ 38.143259][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.143535][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.143767][ T5725] bridge_slave_0: entered allmulticast mode [ 38.144707][ T5725] bridge_slave_0: entered promiscuous mode [ 38.151759][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.159686][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.159733][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.159792][ T5725] bridge_slave_1: entered allmulticast mode [ 38.160521][ T5725] bridge_slave_1: entered promiscuous mode [ 38.171556][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.213350][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.213393][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.213536][ T5736] bridge_slave_0: entered allmulticast mode [ 38.214262][ T5736] bridge_slave_0: entered promiscuous mode [ 38.225333][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.225461][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.225591][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.225868][ T5726] bridge_slave_0: entered allmulticast mode [ 38.227483][ T5726] bridge_slave_0: entered promiscuous mode [ 38.229584][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.229646][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.229749][ T5736] bridge_slave_1: entered allmulticast mode [ 38.230446][ T5736] bridge_slave_1: entered promiscuous mode [ 38.231920][ T5732] team0: Port device team_slave_0 added [ 38.233099][ T5732] team0: Port device team_slave_1 added [ 38.246082][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.246561][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.246569][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.246582][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.247413][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.247506][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.247988][ T5726] bridge_slave_1: entered allmulticast mode [ 38.249362][ T5726] bridge_slave_1: entered promiscuous mode [ 38.273560][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.273570][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.273582][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.291215][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.302783][ T5725] team0: Port device team_slave_0 added [ 38.305225][ T5726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.307780][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.310383][ T5726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.311398][ T5725] team0: Port device team_slave_1 added [ 38.381286][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.381303][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.381323][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.383019][ T5736] team0: Port device team_slave_0 added [ 38.386938][ T5732] hsr_slave_0: entered promiscuous mode [ 38.387409][ T5732] hsr_slave_1: entered promiscuous mode [ 38.389912][ T5726] team0: Port device team_slave_0 added [ 38.390504][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.390516][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.390536][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.392525][ T5736] team0: Port device team_slave_1 added [ 38.393694][ T5726] team0: Port device team_slave_1 added [ 38.426263][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.426273][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.426285][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.431265][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.431274][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.431286][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.450052][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.450065][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.450077][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.468713][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.468722][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.468734][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.482485][ T5725] hsr_slave_0: entered promiscuous mode [ 38.482933][ T5725] hsr_slave_1: entered promiscuous mode [ 38.483259][ T5725] debugfs: 'hsr0' already exists in 'hsr' [ 38.483330][ T5725] Cannot create hsr debugfs directory [ 38.503624][ T5726] hsr_slave_0: entered promiscuous mode [ 38.504068][ T5726] hsr_slave_1: entered promiscuous mode [ 38.504374][ T5726] debugfs: 'hsr0' already exists in 'hsr' [ 38.504385][ T5726] Cannot create hsr debugfs directory [ 38.529397][ T5736] hsr_slave_0: entered promiscuous mode [ 38.530117][ T5736] hsr_slave_1: entered promiscuous mode [ 38.530575][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 38.530590][ T5736] Cannot create hsr debugfs directory [ 38.770631][ T5732] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.777113][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.777514][ T5732] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.782253][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.783087][ T5732] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.786922][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.788727][ T5732] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.791707][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.837200][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.837292][ T5732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.837733][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.837802][ T5732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.855252][ T5725] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.859379][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.860874][ T5725] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.865000][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.865590][ T5725] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.868894][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.869799][ T5725] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.873619][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.928054][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.928099][ T5725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.928198][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.928245][ T5725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.930955][ T5736] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.934582][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.938798][ T5736] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.944624][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.945245][ T5736] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.948354][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.952006][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.953575][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.955747][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.957962][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.979442][ T5736] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.981748][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.998588][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.042447][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.045942][ T5726] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.048508][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.051665][ T5726] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.054043][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.054728][ T5726] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.058095][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.059370][ T5726] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.063841][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.070704][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.070749][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.082798][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.082841][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.100074][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.138527][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.161624][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.161709][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.174905][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.174949][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.206467][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.240425][ T5725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.243922][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.248109][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.255193][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.255235][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.256253][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.256294][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.278056][ T5726] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.289297][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.289344][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.303239][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.303286][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.442840][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.479950][ T5732] veth0_vlan: entered promiscuous mode [ 39.485157][ T5732] veth1_vlan: entered promiscuous mode [ 39.500518][ T5732] veth0_macvtap: entered promiscuous mode [ 39.503106][ T5732] veth1_macvtap: entered promiscuous mode [ 39.513906][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.518399][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.546880][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.577490][ T65] Bluetooth: hci2: command tx timeout [ 39.577828][ T65] Bluetooth: hci0: command tx timeout [ 39.577898][ T5727] Bluetooth: hci3: command tx timeout [ 39.578587][ T5089] Bluetooth: hci1: command tx timeout [ 39.597885][ T5725] veth0_vlan: entered promiscuous mode [ 39.601203][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.605933][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.605950][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.610857][ T5725] veth1_vlan: entered promiscuous mode [ 39.641010][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.641023][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.647455][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.659271][ T5725] veth0_macvtap: entered promiscuous mode [ 39.661681][ T5736] veth0_vlan: entered promiscuous mode [ 39.665429][ T5725] veth1_macvtap: entered promiscuous mode [ 39.667546][ T5736] veth1_vlan: entered promiscuous mode [ 39.690854][ T5732] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.693387][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.709467][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.716297][ T5736] veth0_macvtap: entered promiscuous mode [ 39.719718][ T5736] veth1_macvtap: entered promiscuous mode [ 39.727580][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.728280][ T5726] veth0_vlan: entered promiscuous mode [ 39.737705][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.744172][ T5726] veth1_vlan: entered promiscuous mode [ 39.746707][ T5568] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.749943][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.757707][ T5568] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.758198][ T5568] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.810315][ T5726] veth0_macvtap: entered promiscuous mode [ 39.818047][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.818063][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.819897][ T5726] veth1_macvtap: entered promiscuous mode [ 39.853804][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.853821][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.863734][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.873355][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.873366][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.879838][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.893193][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.893205][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.896870][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.907689][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.907866][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.910515][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.910664][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.910813][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.910833][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.910851][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.910870][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.910887][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.910904][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.910922][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.967410][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.967428][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.987964][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.987977][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.030292][ T5885] program syz.0.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 40.031690][ T5885] random: crng reseeded on system resumption [ 40.070222][ T5892] CIFS: Attempting to mount //127.0.0.1/share [ 40.072781][ T5894] ipt_ah: unknown flags FF [ 40.122291][ T5896] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 40.124982][ T5892] CIFS: VFS: \\127.0.0.1 Invalid 0x0 dialect returned: not requested [ 40.125114][ T5892] CIFS: VFS: cifs_mount failed w/return code = -5 [ 40.204622][ T5924] syzkaller1: entered allmulticast mode [ 40.346608][ T42] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 40.496568][ T42] usb 7-1: Using ep0 maxpacket: 16 [ 40.498173][ T42] usb 7-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 40.505552][ T42] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.505574][ T42] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.505588][ T42] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.505604][ T42] usb 7-1: config 0 interface 0 has no altsetting 0 [ 40.505627][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.516171][ T42] usb 7-1: config 0 descriptor?? [ 40.766718][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 40.812115][ T42] usbhid 7-1:0.0: can't add hid device: -71 [ 40.812197][ T42] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 40.820897][ T5933] fuse: Bad value for 'group_id' [ 40.820915][ T5933] fuse: Bad value for 'group_id' [ 40.823389][ T42] usb 7-1: USB disconnect, device number 2 [ 40.892254][ T5937] FAULT_INJECTION: forcing a failure. [ 40.892254][ T5937] name failslab, interval 1, probability 0, space 0, times 1 [ 40.892284][ T5937] CPU: 2 UID: 0 PID: 5937 Comm: syz.2.18 Not tainted syzkaller #0 PREEMPT(full) [ 40.892306][ T5937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.892317][ T5937] Call Trace: [ 40.892325][ T5937] [ 40.892332][ T5937] dump_stack_lvl+0x100/0x190 [ 40.892366][ T5937] should_fail_ex.cold+0x5/0xa [ 40.892393][ T5937] should_failslab+0xc2/0x120 [ 40.892423][ T5937] __kmalloc_cache_noprof+0x91/0x6d0 [ 40.892445][ T5937] ? selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 40.892475][ T5937] selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 40.892502][ T5937] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 40.892551][ T5937] selinux_socket_post_create+0x368/0x7e0 [ 40.892577][ T5937] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 40.892604][ T5937] ? tcp_v6_init_sock+0x15/0xb0 [ 40.892632][ T5937] ? __pfx_tcp_v6_init_sock+0x10/0x10 [ 40.892665][ T5937] ? inet6_create+0xb34/0x12b0 [ 40.892695][ T5937] security_socket_post_create+0xaf/0x270 [ 40.892721][ T5937] __sock_create+0x70b/0x860 [ 40.892749][ T5937] __sys_socket+0x14d/0x260 [ 40.892773][ T5937] ? __pfx___sys_socket+0x10/0x10 [ 40.892805][ T5937] __x64_sys_socket+0x72/0xb0 [ 40.892828][ T5937] ? lockdep_hardirqs_on+0x7d/0x110 [ 40.892854][ T5937] do_syscall_64+0x123/0x790 [ 40.892881][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.892901][ T5937] RIP: 0033:0x7f0d6079e199 [ 40.892917][ T5937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.892934][ T5937] RSP: 002b:00007f0d61615028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 40.892953][ T5937] RAX: ffffffffffffffda RBX: 00007f0d60a25fa0 RCX: 00007f0d6079e199 [ 40.892965][ T5937] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 40.892976][ T5937] RBP: 00007f0d60835888 R08: 0000000000000000 R09: 0000000000000000 [ 40.892986][ T5937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.892997][ T5937] R13: 00007f0d60a26038 R14: 00007f0d60a25fa0 R15: 00007ffef02c17e8 [ 40.893021][ T5937] [ 40.896303][ T5937] ip_tables: iptables: counters copy to user failed while replacing table [ 40.928617][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 40.930089][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.066922][ T25] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 41.135395][ T5946] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 41.147852][ T10] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 41.226744][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 41.227240][ T25] usb 8-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 41.228027][ T25] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.228042][ T25] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.228053][ T25] usb 8-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.228065][ T25] usb 8-1: config 0 interface 0 has no altsetting 0 [ 41.228080][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.229960][ T25] usb 8-1: config 0 descriptor?? [ 41.317504][ T5954] 9pnet_virtio: no channels available for device syz [ 41.642165][ T25] input: HID 046d:c215 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:046D:C215.0002/input/input5 [ 41.656618][ T5089] Bluetooth: hci1: command tx timeout [ 41.656640][ T5089] Bluetooth: hci3: command tx timeout [ 41.657891][ T5089] Bluetooth: hci0: command tx timeout [ 41.657928][ T5089] Bluetooth: hci2: command tx timeout [ 41.697362][ T5972] FAULT_INJECTION: forcing a failure. [ 41.697362][ T5972] name failslab, interval 1, probability 0, space 0, times 0 [ 41.697385][ T5972] CPU: 0 UID: 0 PID: 5972 Comm: syz.1.14 Tainted: G L syzkaller #0 PREEMPT(full) [ 41.697400][ T5972] Tainted: [L]=SOFTLOCKUP [ 41.697404][ T5972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.697410][ T5972] Call Trace: [ 41.697416][ T5972] [ 41.697422][ T5972] dump_stack_lvl+0x100/0x190 [ 41.697454][ T5972] should_fail_ex.cold+0x5/0xa [ 41.697479][ T5972] should_failslab+0xc2/0x120 [ 41.697498][ T5972] __kvmalloc_node_noprof+0x113/0x9b0 [ 41.697513][ T5972] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 41.697526][ T5972] ? percpu_ref_init+0xec/0x3f0 [ 41.697538][ T5972] ? io_alloc_cache_init+0x38/0x170 [ 41.697551][ T5972] io_alloc_cache_init+0x38/0x170 [ 41.697562][ T5972] io_uring_setup.cold+0x450/0x1cde [ 41.697575][ T5972] ? lock_acquire+0x1d1/0x380 [ 41.697587][ T5972] ? avc_has_perm_noaudit+0x56/0x470 [ 41.697598][ T5972] ? __pfx_io_uring_setup+0x10/0x10 [ 41.697612][ T5972] ? find_held_lock+0x2b/0x80 [ 41.697628][ T5972] ? avc_has_perm_noaudit+0x11e/0x470 [ 41.697638][ T5972] ? avc_has_perm_noaudit+0x11e/0x470 [ 41.697662][ T5972] ? xfd_validate_state+0x129/0x190 [ 41.697680][ T5972] __x64_sys_io_uring_setup+0xc2/0x170 [ 41.697703][ T5972] do_syscall_64+0x123/0x790 [ 41.697730][ T5972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.697742][ T5972] RIP: 0033:0x7f2a32b9e199 [ 41.697752][ T5972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.697762][ T5972] RSP: 002b:00007f2a33a03fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 41.697773][ T5972] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007f2a32b9e199 [ 41.697780][ T5972] RDX: 0000200000000240 RSI: 0000200000000040 RDI: 0000000000003c2d [ 41.697786][ T5972] RBP: 00007f2a32c35888 R08: 0000000000000000 R09: 0000000000000000 [ 41.697793][ T5972] R10: 0000200000000140 R11: 0000000000000206 R12: 0000200000000240 [ 41.697800][ T5972] R13: 0000200000000140 R14: 00002000000000c0 R15: 00007ffdca7f9138 [ 41.697815][ T5972] [ 41.785409][ T5838] usb 6-1: USB disconnect, device number 2 [ 41.831932][ T25] logitech 0003:046D:C215.0002: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.3-1/input0 [ 41.876240][ T25] usb 8-1: USB disconnect, device number 2 [ 41.907028][ T5977] fido_id[5977]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/8-1/report_descriptor': No such file or directory [ 42.121082][ T5988] vhci_hcd vhci_hcd.0: failed to lookup sock [ 42.122912][ T5988] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 42.335595][ T5996] IPVS: set_ctl: invalid protocol: 47 172.20.20.13:20004 [ 42.366365][ T6000] netlink: 56 bytes leftover after parsing attributes in process `syz.0.34'. [ 42.420893][ T43] kauditd_printk_skb: 104 callbacks suppressed [ 42.420911][ T43] audit: type=1400 audit(1791496354.012:268): avc: denied { mount } for pid=6002 comm="syz.0.35" name="/" dev="ramfs" ino=9145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 42.421785][ T6003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=6003 comm=syz.0.35 [ 42.421806][ T6003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=6003 comm=syz.0.35 [ 42.439863][ T43] audit: type=1400 audit(1791496354.032:269): avc: denied { mount } for pid=6006 comm="syz.3.36" name="/" dev="configfs" ino=2092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 42.443440][ T43] audit: type=1400 audit(1791496354.032:270): avc: denied { search } for pid=6006 comm="syz.3.36" name="/" dev="configfs" ino=2092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 42.443476][ T43] audit: type=1400 audit(1791496354.032:271): avc: denied { search } for pid=6006 comm="syz.3.36" name="usb_gadget" dev="configfs" ino=6159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 42.448544][ T43] audit: type=1400 audit(1791496354.032:272): avc: denied { write } for pid=6006 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.448571][ T43] audit: type=1400 audit(1791496354.032:273): avc: denied { name_connect } for pid=6006 comm="syz.3.36" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 42.467479][ T43] audit: type=1400 audit(1791496354.062:274): avc: denied { listen } for pid=6006 comm="syz.3.36" laddr=fe80::13 lport=35645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.469897][ T43] audit: type=1400 audit(1791496354.062:275): avc: denied { setopt } for pid=6006 comm="syz.3.36" laddr=fe80::13 lport=35645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.472067][ T43] audit: type=1400 audit(1791496354.062:276): avc: denied { accept } for pid=6006 comm="syz.3.36" laddr=fe80::13 lport=35645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.531998][ T43] audit: type=1400 audit(1791496354.122:277): avc: denied { unmount } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 42.558550][ T6015] syzkaller0: entered promiscuous mode [ 42.558564][ T6015] syzkaller0: entered allmulticast mode [ 42.613254][ T6013] ipvlan2: entered allmulticast mode [ 42.613269][ T6013] batadv0: entered allmulticast mode [ 42.615009][ T6013] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 42.653418][ T6013] netlink: 16 bytes leftover after parsing attributes in process `syz.0.38'. [ 42.704752][ T6018] Zero length message leads to an empty skb [ 42.818964][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'. [ 42.818977][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 42.828997][ T6029] netlink: 'syz.0.43': attribute type 2 has an invalid length. [ 42.829010][ T6029] netlink: 40 bytes leftover after parsing attributes in process `syz.0.43'. [ 42.837168][ T6029] : entered promiscuous mode [ 42.844271][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.43'. [ 42.859618][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.859643][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.859660][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.859676][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.280508][ T6047] FAULT_INJECTION: forcing a failure. [ 43.280508][ T6047] name failslab, interval 1, probability 0, space 0, times 0 [ 43.280548][ T6047] CPU: 0 UID: 0 PID: 6047 Comm: syz.1.49 Tainted: G L syzkaller #0 PREEMPT(full) [ 43.280573][ T6047] Tainted: [L]=SOFTLOCKUP [ 43.280580][ T6047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 43.280591][ T6047] Call Trace: [ 43.280598][ T6047] [ 43.280605][ T6047] dump_stack_lvl+0x100/0x190 [ 43.280637][ T6047] should_fail_ex.cold+0x5/0xa [ 43.280665][ T6047] should_failslab+0xc2/0x120 [ 43.280693][ T6047] __kmalloc_node_noprof+0xff/0x880 [ 43.280717][ T6047] ? __get_vm_area_node+0x1ff/0x350 [ 43.280742][ T6047] ? __get_vm_area_node+0x22b/0x350 [ 43.280766][ T6047] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 43.280800][ T6047] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 43.280855][ T6047] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 43.280886][ T6047] ? find_held_lock+0x2b/0x80 [ 43.280915][ T6047] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 43.280945][ T6047] ? avc_has_perm_noaudit+0x11e/0x470 [ 43.280970][ T6047] ? avc_has_perm_noaudit+0x145/0x470 [ 43.280989][ T6047] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 43.281014][ T6047] __vmalloc_node_noprof+0xad/0xf0 [ 43.281039][ T6047] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 43.281068][ T6047] __vmalloc_noprof+0xa3/0x120 [ 43.281094][ T6047] ? __pfx___vmalloc_noprof+0x10/0x10 [ 43.281122][ T6047] ? rcu_is_watching+0x13/0xc0 [ 43.281149][ T6047] ? cap_capable+0x107/0x430 [ 43.281172][ T6047] bpf_prog_alloc_no_stats+0x59/0x690 [ 43.281196][ T6047] ? security_capable+0x80/0x260 [ 43.281234][ T6047] bpf_prog_alloc+0x3b/0x200 [ 43.281258][ T6047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 43.281286][ T6047] bpf_prog_load+0x49e/0x2ab0 [ 43.281316][ T6047] ? __pfx_bpf_prog_load+0x10/0x10 [ 43.281364][ T6047] __sys_bpf+0x1f46/0x4a30 [ 43.281391][ T6047] ? __pfx___sys_bpf+0x10/0x10 [ 43.281409][ T6047] ? find_held_lock+0x2b/0x80 [ 43.281436][ T6047] ? futex_wake+0x4ea/0x5e0 [ 43.281472][ T6047] ? rcu_read_lock_any_held+0x6a/0x90 [ 43.281501][ T6047] ? find_held_lock+0x2b/0x80 [ 43.281528][ T6047] ? ksys_write+0x190/0x250 [ 43.281557][ T6047] ? ksys_write+0x190/0x250 [ 43.281595][ T6047] ? __x64_sys_futex+0x34f/0x4d0 [ 43.281622][ T6047] ? __x64_sys_futex+0x358/0x4d0 [ 43.281654][ T6047] ? xfd_validate_state+0x129/0x190 [ 43.281679][ T6047] ? __x64_sys_bpf+0xce/0x140 [ 43.281698][ T6047] __x64_sys_bpf+0xce/0x140 [ 43.281720][ T6047] ? do_syscall_64+0xae/0x790 [ 43.281746][ T6047] do_syscall_64+0x123/0x790 [ 43.281773][ T6047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.281792][ T6047] RIP: 0033:0x7f2a32b9e199 [ 43.281808][ T6047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.281825][ T6047] RSP: 002b:00007f2a33a25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 43.281844][ T6047] RAX: ffffffffffffffda RBX: 00007f2a32e25fa0 RCX: 00007f2a32b9e199 [ 43.281856][ T6047] RDX: 0000000000000094 RSI: 00002000000021c0 RDI: 0000000000000005 [ 43.281867][ T6047] RBP: 00007f2a32c35888 R08: 0000000000000000 R09: 0000000000000000 [ 43.281878][ T6047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.281889][ T6047] R13: 00007f2a32e26038 R14: 00007f2a32e25fa0 R15: 00007ffdca7f9138 [ 43.281913][ T6047] [ 43.284443][ T6047] syz.1.49: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 43.284596][ T6047] CPU: 0 UID: 0 PID: 6047 Comm: syz.1.49 Tainted: G L syzkaller #0 PREEMPT(full) [ 43.284622][ T6047] Tainted: [L]=SOFTLOCKUP [ 43.284630][ T6047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 43.284639][ T6047] Call Trace: [ 43.284645][ T6047] [ 43.284652][ T6047] dump_stack_lvl+0x100/0x190 [ 43.284683][ T6047] warn_alloc.cold+0x9e/0xb2 [ 43.284705][ T6047] ? __pfx_warn_alloc+0x10/0x10 [ 43.284727][ T6047] ? dump_stack_lvl+0x17c/0x190 [ 43.284756][ T6047] ? rcu_is_watching+0x13/0xc0 [ 43.284786][ T6047] ? __kasan_kmalloc+0x8a/0xb0 [ 43.284811][ T6047] ? __kmalloc_node_noprof+0x360/0x880 [ 43.284834][ T6047] ? __get_vm_area_node+0x1ff/0x350 [ 43.284859][ T6047] ? __get_vm_area_node+0x22b/0x350 [ 43.284885][ T6047] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 43.284919][ T6047] __vmalloc_node_range_noprof+0x10f4/0x1420 [ 43.284956][ T6047] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 43.284985][ T6047] ? find_held_lock+0x2b/0x80 [ 43.285012][ T6047] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 43.285039][ T6047] ? avc_has_perm_noaudit+0x11e/0x470 [ 43.285063][ T6047] ? avc_has_perm_noaudit+0x145/0x470 [ 43.285083][ T6047] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 43.285108][ T6047] __vmalloc_node_noprof+0xad/0xf0 [ 43.285135][ T6047] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 43.285163][ T6047] __vmalloc_noprof+0xa3/0x120 [ 43.285188][ T6047] ? __pfx___vmalloc_noprof+0x10/0x10 [ 43.285218][ T6047] ? rcu_is_watching+0x13/0xc0 [ 43.285244][ T6047] ? cap_capable+0x107/0x430 [ 43.285267][ T6047] bpf_prog_alloc_no_stats+0x59/0x690 [ 43.285292][ T6047] ? security_capable+0x80/0x260 [ 43.285314][ T6047] bpf_prog_alloc+0x3b/0x200 [ 43.285338][ T6047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 43.285363][ T6047] bpf_prog_load+0x49e/0x2ab0 [ 43.285396][ T6047] ? __pfx_bpf_prog_load+0x10/0x10 [ 43.285443][ T6047] __sys_bpf+0x1f46/0x4a30 [ 43.285471][ T6047] ? __pfx___sys_bpf+0x10/0x10 [ 43.285490][ T6047] ? find_held_lock+0x2b/0x80 [ 43.285516][ T6047] ? futex_wake+0x4ea/0x5e0 [ 43.285558][ T6047] ? rcu_read_lock_any_held+0x6a/0x90 [ 43.285589][ T6047] ? find_held_lock+0x2b/0x80 [ 43.285617][ T6047] ? ksys_write+0x190/0x250 [ 43.285640][ T6047] ? ksys_write+0x190/0x250 [ 43.285676][ T6047] ? __x64_sys_futex+0x34f/0x4d0 [ 43.285701][ T6047] ? __x64_sys_futex+0x358/0x4d0 [ 43.285729][ T6047] ? xfd_validate_state+0x129/0x190 [ 43.285737][ T6008] syz.3.36 (6008) used greatest stack depth: 19352 bytes left [ 43.285755][ T6047] ? __x64_sys_bpf+0xce/0x140 [ 43.285776][ T6047] __x64_sys_bpf+0xce/0x140 [ 43.285795][ T6047] ? do_syscall_64+0xae/0x790 [ 43.285820][ T6047] do_syscall_64+0x123/0x790 [ 43.285846][ T6047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.285864][ T6047] RIP: 0033:0x7f2a32b9e199 [ 43.285880][ T6047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.285896][ T6047] RSP: 002b:00007f2a33a25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 43.285915][ T6047] RAX: ffffffffffffffda RBX: 00007f2a32e25fa0 RCX: 00007f2a32b9e199 [ 43.285928][ T6047] RDX: 0000000000000094 RSI: 00002000000021c0 RDI: 0000000000000005 [ 43.285940][ T6047] RBP: 00007f2a32c35888 R08: 0000000000000000 R09: 0000000000000000 [ 43.285952][ T6047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.285963][ T6047] R13: 00007f2a32e26038 R14: 00007f2a32e25fa0 R15: 00007ffdca7f9138 [ 43.285988][ T6047] [ 43.285997][ T6047] Mem-Info: [ 43.286005][ T6047] active_anon:8706 inactive_anon:0 isolated_anon:0 [ 43.286005][ T6047] active_file:720 inactive_file:45324 isolated_file:0 [ 43.286005][ T6047] unevictable:1000 dirty:66 writeback:31 [ 43.286005][ T6047] slab_reclaimable:11545 slab_unreclaimable:61929 [ 43.286005][ T6047] mapped:24581 shmem:1559 pagetables:5785 [ 43.286005][ T6047] sec_pagetables:291 bounce:0 [ 43.286005][ T6047] kernel_misc_reclaimable:0 [ 43.286005][ T6047] free:199995 free_pcp:13598 free_cma:0 [ 43.286052][ T6047] Node 0 active_anon:31284kB inactive_anon:0kB active_file:2880kB inactive_file:181076kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:98324kB dirty:212kB writeback:124kB shmem:4236kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12896kB pagetables:14776kB sec_pagetables:1164kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 43.286102][ T6047] Node 1 active_anon:3540kB inactive_anon:0kB active_file:0kB inactive_file:220kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:52kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:8364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 43.294399][ T6047] Node 0 DMA free:5108kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:172kB local_pcp:0kB free_cma:0kB [ 43.294458][ T6047] lowmem_reserve[]: 0 1204 1204 1204 1204 [ 43.294491][ T6047] Node 0 DMA32 free:40612kB boost:0kB min:27108kB low:33884kB high:40660kB reserved_highatomic:0kB free_highatomic:0kB active_anon:31284kB inactive_anon:0kB active_file:2880kB inactive_file:181076kB unevictable:2000kB writepending:212kB zspages:0kB present:2080628kB managed:1233708kB mlocked:0kB bounce:0kB free_pcp:6204kB local_pcp:1040kB free_cma:0kB [ 43.294546][ T6047] lowmem_reserve[]: 0 0 0 0 0 [ 43.294576][ T6047] Node 1 Normal free:754260kB boost:0kB min:40124kB low:50152kB high:60180kB reserved_highatomic:0kB free_highatomic:0kB active_anon:3540kB inactive_anon:0kB active_file:0kB inactive_file:220kB unevictable:2000kB writepending:52kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:47852kB local_pcp:7608kB free_cma:0kB [ 43.294622][ T6047] lowmem_reserve[]: 0 0 0 0 0 [ 43.294651][ T6047] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 2*2048kB (UM) 0*4096kB = 5108kB [ 43.294771][ T6047] Node 0 DMA32: 664*4kB (M) 231*8kB (UM) 118*16kB (ME) 75*32kB (ME) 44*64kB (ME) 38*128kB (UME) 17*256kB (UM) 10*512kB (M) 4*1024kB (M) 3*2048kB (UM) 1*4096kB (M) = 40280kB [ 43.294904][ T6047] Node 1 Normal: 1*4kB (U) 2*8kB (ME) 3*16kB (UME) 2*32kB (UE) 2*64kB (UM) 3*128kB (UME) 2*256kB (ME) 1*512kB (E) 1*1024kB (E) 1*2048kB (M) 183*4096kB (M) = 754308kB [ 43.295124][ T6047] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 43.295140][ T6047] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 43.295155][ T6047] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 43.295168][ T6047] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 43.295182][ T6047] 47682 total pagecache pages [ 43.295190][ T6047] 0 pages in swap cache [ 43.295196][ T6047] Free swap = 124996kB [ 43.295202][ T6047] Total swap = 124996kB [ 43.295208][ T6047] 1048443 pages RAM [ 43.295216][ T6047] 0 pages HighMem/MovableOnly [ 43.295221][ T6047] 290706 pages reserved [ 43.295227][ T6047] 0 pages cma reserved [ 43.363883][ T6049] netlink: 'syz.2.50': attribute type 2 has an invalid length. [ 43.552545][ T6066] syzkaller0: entered promiscuous mode [ 43.552559][ T6066] syzkaller0: entered allmulticast mode [ 43.690092][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'. [ 43.737444][ T5727] Bluetooth: hci2: command tx timeout [ 43.737464][ T5727] Bluetooth: hci3: command tx timeout [ 43.737476][ T5727] Bluetooth: hci1: command tx timeout [ 43.741088][ T6086] CIFS: Attempting to mount //127.0.0.1/share [ 43.783085][ T6091] qnx4: unable to read the superblock [ 43.850863][ T6102] netlink: 32 bytes leftover after parsing attributes in process `syz.2.63'. [ 43.850978][ T6102] netlink: 32 bytes leftover after parsing attributes in process `syz.2.63'. [ 43.851057][ T6102] netlink: 32 bytes leftover after parsing attributes in process `syz.2.63'. [ 43.853495][ T6103] netdevsim netdevsim2: Direct firmware load for . [ 43.853495][ T6103] failed with error -2 [ 43.854183][ T6103] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 43.854183][ T6103] [ 43.903931][ T6107] xt_hashlimit: size too large, truncated to 1048576 [ 44.028696][ T1349] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 44.166801][ T1349] usb 6-1: device descriptor read/64, error -71 [ 44.416527][ T1349] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 44.546507][ T1349] usb 6-1: device descriptor read/64, error -71 [ 44.582149][ T6086] CIFS: VFS: Error connecting to socket. Aborting operation. [ 44.582176][ T6086] CIFS: VFS: cifs_mount failed w/return code = -4 [ 44.612740][ T38] IPVS: starting estimator thread 0... [ 44.620737][ T6119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=6119 comm=syz.0.66 [ 44.624667][ T6119] IPVS: sh: FWM 1 0x00000001 - no destination available [ 44.659047][ T1349] usb usb6-port1: attempt power cycle [ 44.709005][ T6120] IPVS: using max 43 ests per chain, 103200 per kthread [ 44.819810][ T6137] comedi comedi0: lab-pc-1200: I/O base address or length out of range [ 44.996498][ T1349] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 45.017371][ T1349] usb 6-1: device descriptor read/8, error -71 [ 45.062693][ T6152] Console: switching to colour dummy device 80x25 [ 45.193942][ T6154] batman_adv: batadv0: Adding interface: virt_wifi0 [ 45.193952][ T6154] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.193965][ T6154] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active [ 45.256595][ T1349] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 45.277199][ T1349] usb 6-1: device descriptor read/8, error -71 [ 45.387408][ T1349] usb usb6-port1: unable to enumerate USB device [ 45.405597][ T6151] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 45.419218][ T6151] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 45.419406][ T6151] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 45.419482][ T6151] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 45.419611][ T6151] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 45.420258][ T6151] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 45.437240][ T6151] pci 0000:00:01.0: Adding to iommu group 1 [ 45.442668][ T6151] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 45.442684][ T6151] pci 0000:00:01.0: vgaarb: bridge control possible [ 45.442692][ T6151] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 45.449272][ T6151] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 45.452816][ T6151] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 45.458130][ T6151] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 45.504633][ T6151] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 45.504712][ T6151] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 45.505985][ T6151] [drm] features: -virgl +edid -resource_blob -host_visible [ 45.505994][ T6151] [drm] features: -context_init -blob_alignment [ 45.519209][ T6151] [drm] number of scanouts: 1 [ 45.519242][ T6151] [drm] number of cap sets: 0 [ 45.542280][ T6151] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 1 [ 45.591202][ T6151] Console: switching to colour frame buffer device 160x50 [ 45.634301][ T6151] virtio-pci 0000:00:01.0: [drm] fb0: virtio_gpudrmfb frame buffer device [ 45.677948][ T6169] tun0: tun_chr_ioctl cmd 1074025675 [ 45.677962][ T6169] tun0: persist enabled [ 45.678083][ T6169] tun0: tun_chr_ioctl cmd 1074025675 [ 45.678091][ T6169] tun0: persist enabled [ 45.816553][ T5089] Bluetooth: hci1: command tx timeout [ 45.816752][ T5089] Bluetooth: hci3: command tx timeout [ 46.369492][ T6180] can0: slcan on ttynull. [ 46.438027][ T6179] can0 (unregistered): slcan off ttynull. [ 46.464645][ T6188] Bluetooth: MGMT ver 1.23 [ 46.642583][ T6224] random: crng reseeded on system resumption [ 46.650207][ T6226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.655275][ T6226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.664104][ T6224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.665098][ T6224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.886568][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 46.935496][ T6238] netlink: 'syz.1.97': attribute type 1 has an invalid length. [ 46.935514][ T6238] netlink: 'syz.1.97': attribute type 2 has an invalid length. [ 47.036509][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 47.040283][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 47.040306][ T9] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=64.5b [ 47.040969][ T9] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 47.040985][ T9] usb 7-1: can't read configurations, error -71 [ 47.044194][ T6247] capability: warning: `syz.3.101' uses deprecated v2 capabilities in a way that may be insecure [ 47.052447][ T6247] overlayfs: workdir and upperdir must reside under the same mount [ 47.078021][ T6247] 9p: Unknown uid 00000000004294967295 [ 47.127168][ T6250] ip_tables: iptables: counters copy to user failed while replacing table [ 47.251516][ T5800] hid (null): bogus close delimiter [ 47.262640][ T5800] corsair-cpro 0003:1B1C:0C10.0003: unexpected long global item [ 47.263250][ T5800] corsair-cpro 0003:1B1C:0C10.0003: probe with driver corsair-cpro failed with error -22 [ 47.590768][ T43] kauditd_printk_skb: 133 callbacks suppressed [ 47.590785][ T43] audit: type=1400 audit(1791496359.182:411): avc: denied { read } for pid=6268 comm="syz.3.109" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.590820][ T43] audit: type=1400 audit(1791496359.182:412): avc: denied { open } for pid=6268 comm="syz.3.109" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.597230][ T43] audit: type=1400 audit(1791496359.182:413): avc: denied { ioctl } for pid=6268 comm="syz.3.109" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.604450][ T43] audit: type=1400 audit(1791496359.192:414): avc: denied { set_context_mgr } for pid=6268 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 47.614219][ T43] audit: type=1400 audit(1791496359.202:415): avc: denied { map } for pid=6268 comm="syz.3.109" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.615717][ T43] audit: type=1400 audit(1791496359.202:416): avc: denied { call } for pid=6268 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 47.616586][ T6270] binder: 6268:6270 ioctl c0306201 200000000180 returned -14 [ 47.655659][ T43] audit: type=1400 audit(1791496359.242:417): avc: denied { allowed } for pid=6274 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 47.767760][ T6282] __nla_validate_parse: 66 callbacks suppressed [ 47.767778][ T6282] netlink: 40 bytes leftover after parsing attributes in process `syz.0.114'. [ 47.780341][ T43] audit: type=1400 audit(1791496359.372:418): avc: denied { ioctl } for pid=6283 comm="syz.3.115" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12434 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 47.785226][ T43] audit: type=1400 audit(1791496359.372:419): avc: denied { write } for pid=6277 comm="syz.2.112" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 47.813704][ T43] audit: type=1400 audit(1791496359.402:420): avc: denied { read write } for pid=6286 comm="syz.0.116" name="vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.829300][ T6291] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 47.845212][ T6292] netlink: 20 bytes leftover after parsing attributes in process `syz.3.115'. [ 47.845253][ T6292] netlink: 20 bytes leftover after parsing attributes in process `syz.3.115'. [ 48.115577][ T6306] bridge0: port 3(veth1_to_bridge) entered blocking state [ 48.115635][ T6306] bridge0: port 3(veth1_to_bridge) entered disabled state [ 48.115772][ T6306] veth1_to_bridge: entered allmulticast mode [ 48.118818][ T6306] veth1_to_bridge: entered promiscuous mode [ 48.118902][ T6306] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 48.119811][ T6306] bridge0: port 3(veth1_to_bridge) entered blocking state [ 48.119877][ T6306] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 48.122216][ T6306] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 48.306732][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 48.308469][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 48.308908][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 48.309070][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 48.309259][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 48.309490][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 48.309648][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 48.309834][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 48.309993][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 48.658774][ T6328] comedi comedi1: dt2814: I/O base address not correctly aligned [ 48.659598][ T6329] 9pnet_virtio: no channels available for device syz [ 48.661530][ T6329] comedi comedi1: dt2814: I/O base address not correctly aligned [ 48.675282][ T25] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 48.826971][ T25] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 48.827784][ T25] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 48.827806][ T25] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 48.827819][ T25] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 48.827830][ T25] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 48.827842][ T25] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 48.828592][ T25] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 48.828612][ T25] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 48.828626][ T25] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 48.828638][ T25] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 48.828649][ T25] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 48.829382][ T25] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 48.829401][ T25] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 48.829413][ T25] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 48.829425][ T25] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 48.829436][ T25] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 48.831642][ T25] usb 6-1: string descriptor 0 read error: -22 [ 48.831694][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.904193][ T25] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 49.698695][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'. [ 49.698709][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'. [ 49.703042][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'. [ 49.703054][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'. [ 49.703358][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'. [ 49.703367][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'. [ 49.703607][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'. [ 49.728138][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.728163][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.728181][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.728197][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.752197][ T6368] netlink: 'syz.3.137': attribute type 12 has an invalid length. [ 49.786936][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.787008][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.787027][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.787043][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.086799][ T6380] autofs4:pid:6380:validate_dev_ioctl: invalid path supplied for cmd(0xc0189374) [ 50.087079][ T6380] netlink: 'syz.3.142': attribute type 1 has an invalid length. [ 50.116327][ T6380] bond1: entered promiscuous mode [ 50.116377][ T6380] bond1: entered allmulticast mode [ 50.122018][ T6380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.140399][ T6380] erspan1: entered allmulticast mode [ 50.144795][ T6380] bond1: (slave erspan1): making interface the new active one [ 50.144807][ T6380] erspan1: entered promiscuous mode [ 50.145847][ T6380] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 50.359994][ T6424] xt_NFQUEUE: number of total queues is 0 [ 50.706499][ T42] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.867375][ T42] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 50.868279][ T42] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 50.868302][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.869113][ T42] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 50.869124][ T42] usb 5-1: Manufacturer: syz [ 50.870607][ T42] usb 5-1: config 0 descriptor?? [ 50.916462][ T42] rc_core: IR keymap rc-hauppauge not found [ 50.916474][ T42] Registered IR keymap rc-empty [ 50.918828][ T42] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 50.920361][ T42] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 51.080532][ T1349] usb 5-1: USB disconnect, device number 2 [ 51.437797][ T42] usb 6-1: USB disconnect, device number 7 [ 51.740728][ T6466] fuseblk: Bad value for 'user_id' [ 51.740747][ T6466] fuseblk: Bad value for 'user_id' [ 52.136465][ C0] net_ratelimit: 26701 callbacks suppressed [ 52.136481][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.136630][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.136770][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.136908][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.137050][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.137188][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.137326][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.137651][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.137795][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.137949][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.377096][ T5089] Bluetooth: hci4: command 0x1003 tx timeout [ 52.377980][ T5727] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 52.482020][ T6472] binder: 6471:6472 ioctl c0306201 200000000080 returned -14 [ 52.482432][ T6472] binder: 6471:6472 ioctl c0306201 200000000040 returned -14 [ 52.482704][ T6472] binder: 6471:6472 ioctl c0306201 200000000640 returned -14 [ 52.856590][ T43] kauditd_printk_skb: 51 callbacks suppressed [ 52.856603][ T43] audit: type=1400 audit(1791496364.442:472): avc: denied { ioctl } for pid=6481 comm="syz.1.168" path="/dev/binderfs/features/oneway_spam_detection" dev="binder" ino=1048595 ioctlcmd=0x620b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.538334][ T6444] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 53.609710][ T43] audit: type=1400 audit(1791496365.172:473): avc: denied { ioctl } for pid=6489 comm="syz.0.170" path="socket:[12602]" dev="sockfs" ino=12602 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.609755][ T43] audit: type=1400 audit(1791496365.172:474): avc: denied { ioctl } for pid=6489 comm="syz.0.170" path="socket:[12603]" dev="sockfs" ino=12603 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 53.626225][ T43] audit: type=1400 audit(1791496365.212:475): avc: denied { mount } for pid=6495 comm="syz.0.173" name="/" dev="ecryptfs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ecryptfs_t tclass=filesystem permissive=1 [ 53.627855][ T43] audit: type=1400 audit(1791496365.222:476): avc: denied { name_bind } for pid=6495 comm="syz.0.173" src=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 53.628600][ T43] audit: type=1400 audit(1791496365.222:477): avc: denied { create } for pid=6495 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.632211][ T43] audit: type=1400 audit(1791496365.222:478): avc: denied { connect } for pid=6495 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.632848][ T43] audit: type=1400 audit(1791496365.222:479): avc: denied { write } for pid=6495 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.694651][ T43] audit: type=1400 audit(1791496365.282:480): avc: denied { append } for pid=6499 comm="syz.3.174" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 53.705231][ T43] audit: type=1400 audit(1791496365.292:481): avc: denied { map } for pid=6499 comm="syz.3.174" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 53.765252][ T6507] process 'syz.1.171' launched './file0' with NULL argv: empty string added [ 53.910183][ T6517] Bluetooth: MGMT ver 1.23 [ 53.953851][ T42] wiimote 0005:057E:0306.0004: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 53.954431][ T42] wiimote 0005:057E:0306.0004: New device registered [ 54.093057][ T62] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 54.158710][ T6529] __nla_validate_parse: 62 callbacks suppressed [ 54.158728][ T6529] netlink: 220 bytes leftover after parsing attributes in process `syz.3.180'. [ 54.216535][ T5508] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 54.292285][ T62] usb 7-1: Using ep0 maxpacket: 16 [ 54.346872][ T62] usb 7-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 54.379145][ T62] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.379164][ T62] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.379175][ T62] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 54.379187][ T62] usb 7-1: config 0 interface 0 has no altsetting 0 [ 54.379202][ T62] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.381291][ T5508] usb 5-1: Using ep0 maxpacket: 8 [ 54.381757][ T5508] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 54.382693][ T5508] usb 5-1: config 0 has no interfaces? [ 54.384388][ T5508] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.384400][ T5508] usb 5-1: Product: syz [ 54.384407][ T5508] usb 5-1: Manufacturer: syz [ 54.384414][ T5508] usb 5-1: SerialNumber: syz [ 54.423432][ T6531] netlink: 'syz.1.181': attribute type 46 has an invalid length. [ 54.423450][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 54.423956][ T6531] netlink: 92 bytes leftover after parsing attributes in process `syz.1.181'. [ 54.479518][ T62] usb 7-1: config 0 descriptor?? [ 54.481380][ T5508] usb 5-1: config 0 descriptor?? [ 54.702594][ T5508] usb 5-1: USB disconnect, device number 3 [ 54.708589][ T6521] wiimote 0005:057E:0306.0004: Device removed [ 54.932098][ T62] usbhid 7-1:0.0: can't add hid device: -71 [ 54.932148][ T62] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 54.944002][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.182'. [ 54.970499][ T62] usb 7-1: USB disconnect, device number 5 [ 55.337515][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.187'. [ 55.405659][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 55.406032][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 55.568301][ T6554] device-mapper: table: 248:0: mirror: Unrecognised feature requested (-EINVAL) [ 55.568318][ T6554] device-mapper: ioctl: error adding target to table [ 55.639465][ T6558] netlink: 'syz.3.190': attribute type 10 has an invalid length. [ 55.639924][ T6561] netlink: 'syz.2.191': attribute type 1 has an invalid length. [ 55.639936][ T6561] nbd: error processing sock list [ 55.687382][ T6566] device-mapper: ioctl: Invalid ioctl structure: name U, dev 42744cd223460000 [ 55.695243][ T6569] netlink: 'syz.3.190': attribute type 10 has an invalid length. [ 55.834332][ T6558] team0: Port device dummy0 added [ 55.867755][ T6561] tipc: Started in network mode [ 55.867830][ T6561] tipc: Node identity ac1414aa, cluster identity 4711 [ 55.875811][ T6561] tipc: New replicast peer: 172.20.20.187 [ 55.879999][ T6561] tipc: Enabled bearer , priority 10 [ 55.954109][ T6569] team0: Port device dummy0 removed [ 56.131611][ T6576] overlayfs: missing 'workdir' [ 56.456943][ T5814] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 56.536704][ T5508] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 56.621744][ T5814] usb 8-1: New USB device found, idVendor=1110, idProduct=900f, bcdDevice= 1.00 [ 56.623176][ T5814] usb 8-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 56.623208][ T5814] usb 8-1: config 1 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 56.623237][ T5814] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.699974][ T5508] usb 6-1: Using ep0 maxpacket: 16 [ 56.702800][ T5508] usb 6-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 56.703933][ T5508] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.703958][ T5508] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.703976][ T5508] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.703996][ T5508] usb 6-1: config 0 interface 0 has no altsetting 0 [ 56.704023][ T5508] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.711312][ T5508] usb 6-1: config 0 descriptor?? [ 56.776134][ T6590] sctp: [Deprecated]: syz.2.197 (pid 6590) Use of struct sctp_assoc_value in delayed_ack socket option. [ 56.776134][ T6590] Use struct sctp_sack_info instead [ 56.777132][ T42] wiimote 0005:057E:0306.0004: detected device: Nintendo Wii Remote (Gen 1) [ 56.804918][ T6591] sctp: [Deprecated]: syz.2.197 (pid 6591) Use of struct sctp_assoc_value in delayed_ack socket option. [ 56.804918][ T6591] Use struct sctp_sack_info instead [ 56.806971][ T5814] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 56.898461][ T42] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input8 [ 56.975232][ T42] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input9 [ 57.003947][ T42] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input7 [ 57.064584][ T6586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.074078][ T6586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.146518][ C0] net_ratelimit: 74453 callbacks suppressed [ 57.146536][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.146542][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 57.146674][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 57.146697][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 57.146736][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.146843][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 57.146954][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 57.147016][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 57.147162][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 57.147177][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 57.147700][ T6524] tipc: Node number set to 2886997162 [ 57.188139][ T5508] usbhid 6-1:0.0: can't add hid device: -71 [ 57.188282][ T5508] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 57.198430][ T5508] usb 6-1: USB disconnect, device number 8 [ 57.365237][ T6601] xfrm1: entered allmulticast mode [ 57.525676][ T6605] warning: `syz.2.198' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 57.883356][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 57.883368][ T43] audit: type=1400 audit(1791496369.472:495): avc: denied { name_bind } for pid=6608 comm="syz.1.199" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 58.218077][ T43] audit: type=1400 audit(1791496369.812:496): avc: denied { unmount } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 58.360589][ T6619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6619 comm=syz.3.203 [ 58.373661][ T6615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.201'. [ 58.465231][ T43] audit: type=1400 audit(1791496370.052:497): avc: denied { write } for pid=6624 comm="syz.1.204" name="/" dev="9p" ino=71827653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.467115][ T43] audit: type=1400 audit(1791496370.062:498): avc: denied { map } for pid=6624 comm="syz.1.204" path="/dev/video8" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 58.534489][ T5814] usb 8-1: selecting invalid altsetting 8 [ 58.534503][ T5814] usb 8-1: [UEAGLE-ATM] setting alternate 8 failed for 2 interface, using bulk mode [ 58.534572][ T5814] usb 8-1: [UEAGLE-ATM] urb submission failed with error -19 [ 58.534610][ T5814] ueagle-atm 8-1:1.0: usbatm_usb_probe: bind failed: -19! [ 58.552177][ T5814] usb 8-1: USB disconnect, device number 3 [ 59.027242][ T5814] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 59.186514][ T5814] usb 8-1: Using ep0 maxpacket: 16 [ 59.193308][ T5814] usb 8-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 59.194207][ T5814] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.194221][ T5814] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.194232][ T5814] usb 8-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.194245][ T5814] usb 8-1: config 0 interface 0 has no altsetting 0 [ 59.194260][ T5814] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.196340][ T5814] usb 8-1: config 0 descriptor?? [ 59.318484][ T43] audit: type=1400 audit(1791496370.912:499): avc: denied { name_connect } for pid=6633 comm="syz.1.208" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 59.331388][ T43] audit: type=1400 audit(1791496370.922:500): avc: denied { mounton } for pid=6633 comm="syz.1.208" path="/40/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 59.659468][ T5814] usbhid 8-1:0.0: can't add hid device: -71 [ 59.659534][ T5814] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 59.662754][ T5814] usb 8-1: USB disconnect, device number 4 [ 59.918883][ T43] audit: type=1400 audit(1791496371.512:501): avc: denied { map } for pid=6647 comm="syz.3.213" path="socket:[14480]" dev="sockfs" ino=14480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 60.069737][ T6655] bridge0: port 3(ipvlan2) entered blocking state [ 60.069825][ T6655] bridge0: port 3(ipvlan2) entered disabled state [ 60.069976][ T6655] ipvlan2: entered allmulticast mode [ 60.069990][ T6655] bridge0: entered allmulticast mode [ 60.072770][ T6655] ipvlan2: left allmulticast mode [ 60.072786][ T6655] bridge0: left allmulticast mode [ 60.093506][ T43] audit: type=1400 audit(1791496371.682:502): avc: denied { append } for pid=6652 comm="syz.3.214" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 60.241522][ T43] audit: type=1400 audit(1791496371.832:503): avc: denied { execute } for pid=6656 comm="syz.1.217" path="/file0" dev="ramfs" ino=14521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 60.659162][ T5814] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 60.716086][ T43] audit: type=1400 audit(1791496372.302:504): avc: denied { setattr } for pid=6662 comm="syz.3.220" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 60.808094][ T5814] usb 6-1: Using ep0 maxpacket: 16 [ 60.809599][ T5814] usb 6-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 60.811956][ T5814] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.811977][ T5814] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.811992][ T5814] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.812009][ T5814] usb 6-1: config 0 interface 0 has no altsetting 0 [ 60.812031][ T5814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.820439][ T5814] usb 6-1: config 0 descriptor?? [ 60.903885][ T6673] ip6erspan0: entered allmulticast mode [ 61.125635][ T5814] usbhid 6-1:0.0: can't add hid device: -71 [ 61.125716][ T5814] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 61.130573][ T5814] usb 6-1: USB disconnect, device number 9 [ 62.156466][ C0] net_ratelimit: 83805 callbacks suppressed [ 62.156480][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.156537][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 62.156633][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.156675][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 62.156684][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 62.156869][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 62.156944][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.156974][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 62.157014][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 62.157088][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.227117][ T6739] netlink: 'syz.3.228': attribute type 4 has an invalid length. [ 62.242372][ T6739] netlink: 'syz.3.228': attribute type 4 has an invalid length. [ 62.251023][ T6741] syz.1.227 uses obsolete (PF_INET,SOCK_PACKET) [ 62.461579][ T6748] syzkaller1: entered promiscuous mode [ 62.461600][ T6748] syzkaller1: entered allmulticast mode [ 62.796497][ T6528] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 62.946651][ T6528] usb 8-1: Using ep0 maxpacket: 16 [ 62.949080][ T6528] usb 8-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 62.952682][ T6528] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.952699][ T6528] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.952710][ T6528] usb 8-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.952722][ T6528] usb 8-1: config 0 interface 0 has no altsetting 0 [ 62.952737][ T6528] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.955102][ T6528] usb 8-1: config 0 descriptor?? [ 62.962606][ T6757] capability: warning: `syz.1.232' uses 32-bit capabilities (legacy support in use) [ 63.024946][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.232'. [ 63.233606][ T6528] usbhid 8-1:0.0: can't add hid device: -71 [ 63.233654][ T6528] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 63.238446][ T6528] usb 8-1: USB disconnect, device number 5 [ 63.310130][ T6763] netlink: 'syz.3.233': attribute type 3 has an invalid length. [ 63.462519][ T6767] tipc: Enabling of bearer rejected, already enabled [ 63.482824][ T43] kauditd_printk_skb: 12 callbacks suppressed [ 63.482834][ T43] audit: type=1400 audit(1791496375.072:517): avc: denied { mount } for pid=6771 comm="syz.1.235" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 63.513557][ T6770] netlink: 'syz.3.234': attribute type 1 has an invalid length. [ 63.578891][ T43] audit: type=1400 audit(1791496375.172:518): avc: denied { bind } for pid=6769 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.579122][ T43] audit: type=1400 audit(1791496375.172:519): avc: denied { name_bind } for pid=6769 comm="syz.3.234" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 63.579267][ T43] audit: type=1400 audit(1791496375.172:520): avc: denied { node_bind } for pid=6769 comm="syz.3.234" saddr=255.255.255.255 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 63.712381][ T43] audit: type=1400 audit(1791496375.302:521): avc: denied { append } for pid=6782 comm="syz.0.237" name="001" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 64.144840][ T43] audit: type=1400 audit(1791496375.732:522): avc: denied { unmount } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 64.167391][ T43] audit: type=1400 audit(1791496375.762:523): avc: denied { bind } for pid=6809 comm="syz.3.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.174525][ T6810] netlink: 40 bytes leftover after parsing attributes in process `syz.3.243'. [ 64.301469][ T6812] 9p: Bad value for 'aname' [ 64.329268][ T42] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 64.414872][ T6822] ptrace attach of "/syz-executor exec"[5736] was attempted by ""[6822] [ 64.424369][ T6821] netlink: 64 bytes leftover after parsing attributes in process `syz.1.248'. [ 64.497215][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 64.497715][ T42] usb 5-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 64.498517][ T42] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.498531][ T42] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.498542][ T42] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.498554][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 64.498569][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.499782][ T42] usb 5-1: config 0 descriptor?? [ 64.559711][ T6827] No source specified [ 64.664354][ T43] audit: type=1400 audit(1791496376.252:524): avc: denied { watch watch_reads } for pid=6825 comm="syz.1.250" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=2061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.733588][ T43] audit: type=1400 audit(1791496376.322:525): avc: denied { name_bind } for pid=6802 comm="syz.0.241" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 64.938109][ T6841] nvme_fabrics: testsubsysq÷~¦y¿s’PÜ–�u!Ä`¬œå«iÕ%ªO7Øý÷½±î©ís9¾ã{8SžæÅ»&‹:¼é-æoXcGùšóhØÇ›GKþ¢Ó·7mLdz”ñù+^ˆß‚ònÿ°$ÜE‰ÃgÈЀÜ÷¤‘x?£yˆz¥0^‰ŒÊàë%_iÙ?©“ƒƒ”ã�…{ÛD2ü¸ÁØôZÍs$i¥—C¼0cÄÕ¨Jw=U¢ŠãG‰`+Vf¼©�+ ¨¸Á‰s!¤l°Pp#Ç ¼wŸlÀ needs to be < 223 bytes [ 65.087093][ T43] audit: type=1400 audit(1791496376.682:526): avc: denied { setopt } for pid=6842 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.110622][ T6844] x_tables: duplicate underflow at hook 1 [ 66.512322][ T6887] syzkaller0: entered promiscuous mode [ 66.512687][ T6887] syzkaller0: entered allmulticast mode [ 66.784784][ T6891] xt_CONNSECMARK: invalid mode: 0 [ 67.016448][ T6896] netlink: 20 bytes leftover after parsing attributes in process `syz.2.266'. [ 67.077276][ T42] usbhid 5-1:0.0: can't add hid device: -71 [ 67.077328][ T42] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 67.094122][ T42] usb 5-1: USB disconnect, device number 4 [ 67.166435][ C2] net_ratelimit: 89193 callbacks suppressed [ 67.166452][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 67.166506][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 67.166546][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 67.166633][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 67.166649][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 67.166704][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 67.166785][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 67.166787][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 67.166943][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 67.166959][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 67.191014][ T6896] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.191035][ T6896] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.397629][ T6914] SELinux: DCCP has been removed, pid=6914 comm=syz.2.273 [ 67.936349][ T5443] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.026530][ T6528] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 68.106538][ T5814] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 68.188249][ T6528] usb 7-1: Using ep0 maxpacket: 16 [ 68.193988][ T6528] usb 7-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 68.194806][ T6528] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.194821][ T6528] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.194860][ T6528] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.194876][ T6528] usb 7-1: config 0 interface 0 has no altsetting 0 [ 68.194898][ T6528] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.197053][ T6528] usb 7-1: config 0 descriptor?? [ 68.203779][ T6948] netlink: 'syz.0.280': attribute type 1 has an invalid length. [ 68.204035][ T6948] comedi comedi2: s526: I/O base address not correctly aligned [ 68.246847][ T5814] usb 6-1: device descriptor read/64, error -71 [ 68.430652][ T6528] usbhid 7-1:0.0: can't add hid device: -71 [ 68.430703][ T6528] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 68.432087][ T6528] usb 7-1: USB disconnect, device number 6 [ 68.496490][ T5814] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 68.626773][ T5814] usb 6-1: device descriptor read/64, error -71 [ 68.640665][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 68.640676][ T43] audit: type=1400 audit(1791496380.232:545): avc: denied { read } for pid=6954 comm="syz.2.282" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 68.640850][ T43] audit: type=1400 audit(1791496380.232:546): avc: denied { open } for pid=6954 comm="syz.2.282" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 68.641225][ T43] audit: type=1400 audit(1791496380.232:547): avc: denied { ioctl } for pid=6954 comm="syz.2.282" path="/dev/sg0" dev="devtmpfs" ino=720 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 68.725859][ T6958] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 68.725871][ T6958] overlayfs: missing 'lowerdir' [ 68.737493][ T5814] usb usb6-port1: attempt power cycle [ 68.899014][ T6965] jffs2: notice: (6965) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 68.913587][ T43] audit: type=1400 audit(1791496380.502:548): avc: denied { write } for pid=6964 comm="syz.2.286" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.921238][ T43] audit: type=1400 audit(1791496380.512:549): avc: denied { add_name } for pid=6964 comm="syz.2.286" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.922347][ T43] audit: type=1400 audit(1791496380.512:550): avc: denied { create } for pid=6964 comm="syz.2.286" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.950550][ T43] audit: type=1400 audit(1791496380.542:551): avc: denied { read write open } for pid=6964 comm="syz.2.286" path="/78/mnt/fillfile" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.951452][ T43] audit: type=1400 audit(1791496380.542:552): avc: denied { write } for pid=6964 comm="syz.2.286" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 68.992293][ T43] audit: type=1400 audit(1791496380.582:553): avc: denied { create } for pid=6969 comm="syz.2.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.993120][ T43] audit: type=1400 audit(1791496380.582:554): avc: denied { setopt } for pid=6969 comm="syz.2.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.996935][ T6970] veth0_macvtap: left promiscuous mode [ 69.098541][ T5814] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 69.117277][ T5814] usb 6-1: device descriptor read/8, error -71 [ 69.366678][ T5814] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 69.386911][ T5814] usb 6-1: device descriptor read/8, error -71 [ 69.506867][ T5814] usb usb6-port1: unable to enumerate USB device [ 69.664119][ T5443] veth0_macvtap: entered promiscuous mode [ 69.925932][ T6988] loop0: detected capacity change from 0 to 3904 [ 70.092884][ T6988] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 8062929921242851455 bytes. [ 70.092904][ T6988] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 70.092911][ T6988] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 70.092938][ T6988] loop0: [ 70.746533][ T5814] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 70.897312][ T5814] usb 5-1: Using ep0 maxpacket: 16 [ 70.897925][ T5814] usb 5-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 70.899002][ T5814] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.899026][ T5814] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.899044][ T5814] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.899066][ T5814] usb 5-1: config 0 interface 0 has no altsetting 0 [ 70.899091][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.910726][ T5814] usb 5-1: config 0 descriptor?? [ 71.103197][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.103672][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.134243][ T1033] cfg80211: failed to load regulatory.db [ 71.378838][ T7022] netlink: 'syz.2.296': attribute type 12 has an invalid length. [ 71.967677][ T7042] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.049960][ T7034] kAFS: unable to lookup cell 'syz1' [ 72.051623][ T7037] kAFS: unable to lookup cell 'syz1' [ 72.176451][ C3] net_ratelimit: 85951 callbacks suppressed [ 72.176465][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 72.176581][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 72.176585][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 72.176656][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 72.176692][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 72.176792][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 72.176798][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 72.176903][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 72.177004][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 72.177013][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 72.539566][ T7061] FAULT_INJECTION: forcing a failure. [ 72.539566][ T7061] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 72.539589][ T7061] CPU: 1 UID: 0 PID: 7061 Comm: syz.2.307 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.539604][ T7061] Tainted: [L]=SOFTLOCKUP [ 72.539608][ T7061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.539614][ T7061] Call Trace: [ 72.539619][ T7061] [ 72.539635][ T7061] dump_stack_lvl+0x100/0x190 [ 72.539700][ T7061] should_fail_ex.cold+0x5/0xa [ 72.539715][ T7061] ? prepare_alloc_pages+0x16d/0x5b0 [ 72.539752][ T7061] should_fail_alloc_page+0xeb/0x140 [ 72.539769][ T7061] prepare_alloc_pages+0x1f0/0x5b0 [ 72.539786][ T7061] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 72.539802][ T7061] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 72.539817][ T7061] ? rcu_is_watching+0x13/0xc0 [ 72.539834][ T7061] ? trace_kmem_cache_alloc+0xd1/0x100 [ 72.539851][ T7061] ? kmem_cache_alloc_lru_noprof+0x2d1/0x6a0 [ 72.539867][ T7061] ? __lock_acquire+0x5c0/0x1f40 [ 72.539879][ T7061] ? __css_rstat_updated+0x1ce/0x590 [ 72.539894][ T7061] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 72.539915][ T7061] ? rcu_is_watching+0x13/0xc0 [ 72.539931][ T7061] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 72.539947][ T7061] ? find_held_lock+0x2b/0x80 [ 72.539967][ T7061] ? __lock_acquire+0x5c0/0x1f40 [ 72.539979][ T7061] ? rcu_is_watching+0x13/0xc0 [ 72.539994][ T7061] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.540009][ T7061] ? policy_nodemask+0xed/0x4f0 [ 72.540027][ T7061] alloc_pages_mpol+0x201/0x550 [ 72.540044][ T7061] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 72.540060][ T7061] ? filemap_get_entry+0x22d/0x450 [ 72.540077][ T7061] ? filemap_get_entry+0x22d/0x450 [ 72.540096][ T7061] folio_alloc_noprof+0x22/0x250 [ 72.540108][ T7061] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 72.540124][ T7061] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 72.540139][ T7061] ? rcu_is_watching+0x13/0xc0 [ 72.540154][ T7061] ? trace_kmalloc+0xeb/0x110 [ 72.540171][ T7061] __filemap_get_folio_mpol+0x653/0x1280 [ 72.540192][ T7061] ioctx_alloc+0x7e1/0x21a0 [ 72.540210][ T7061] ? __pfx_ioctx_alloc+0x10/0x10 [ 72.540225][ T7061] __x64_sys_io_setup+0xc9/0x220 [ 72.540238][ T7061] do_syscall_64+0x123/0x790 [ 72.540276][ T7061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.540289][ T7061] RIP: 0033:0x7f0d6079e199 [ 72.540299][ T7061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.540310][ T7061] RSP: 002b:00007f0d61615028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 72.540321][ T7061] RAX: ffffffffffffffda RBX: 00007f0d60a25fa0 RCX: 00007f0d6079e199 [ 72.540328][ T7061] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 000000000000239f [ 72.540335][ T7061] RBP: 00007f0d60835888 R08: 0000000000000000 R09: 0000000000000000 [ 72.540341][ T7061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.540348][ T7061] R13: 00007f0d60a26038 R14: 00007f0d60a25fa0 R15: 00007ffef02c17e8 [ 72.540362][ T7061] [ 72.542713][ T7061] loop5: detected capacity change from 0 to 7 [ 72.558111][ T7061] Dev loop5: unable to read RDB block 7 [ 72.558131][ T7061] loop5: unable to read partition table [ 72.560224][ T7061] loop5: partition table beyond EOD, truncated [ 72.560243][ T7061] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 72.675083][ T7063] netlink: 76 bytes leftover after parsing attributes in process `syz.1.308'. [ 72.799200][ T7069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7069 comm=syz.2.311 [ 72.833708][ T7067] bpf: Bad value for 'uid' [ 72.833868][ T7067] bpf: Bad value for 'uid' [ 72.837588][ T7067] bpf: Bad value for 'uid' [ 72.837768][ T7067] bpf: Bad value for 'uid' [ 72.837948][ T7067] bpf: Bad value for 'uid' [ 72.838091][ T7067] bpf: Bad value for 'uid' [ 72.838246][ T7067] bpf: Bad value for 'uid' [ 72.838401][ T7067] bpf: Bad value for 'uid' [ 72.841750][ T7067] bpf: Bad value for 'uid' [ 72.841899][ T7067] bpf: Bad value for 'uid' [ 72.842214][ T7067] bpf: Bad value for 'uid' [ 72.842347][ T7067] bpf: Bad value for 'uid' [ 72.842552][ T7067] bpf: Bad value for 'uid' [ 72.842703][ T7067] bpf: Bad value for 'uid' [ 72.842867][ T7067] bpf: Bad value for 'uid' [ 72.843021][ T7067] bpf: Bad value for 'uid' [ 72.843211][ T7067] bpf: Bad value for 'uid' [ 72.843356][ T7067] bpf: Bad value for 'uid' [ 72.843503][ T7067] bpf: Bad value for 'uid' [ 72.843667][ T7067] bpf: Bad value for 'uid' [ 72.843825][ T7067] bpf: Bad value for 'uid' [ 72.844061][ T7067] bpf: Bad value for 'uid' [ 72.844237][ T7067] bpf: Bad value for 'uid' [ 72.846196][ T7067] bpf: Bad value for 'uid' [ 72.846390][ T7067] bpf: Bad value for 'uid' [ 72.850798][ T7067] bpf: Bad value for 'uid' [ 72.850971][ T7067] bpf: Bad value for 'uid' [ 72.851196][ T7067] bpf: Bad value for 'uid' [ 72.851338][ T7067] bpf: Bad value for 'uid' [ 72.851515][ T7067] bpf: Bad value for 'uid' [ 72.851689][ T7067] bpf: Bad value for 'uid' [ 72.851840][ T7067] bpf: Bad value for 'uid' [ 72.851979][ T7067] bpf: Bad value for 'uid' [ 73.056565][ T42] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 73.216546][ T42] usb 7-1: Using ep0 maxpacket: 8 [ 73.217066][ T42] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 73.218059][ T42] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 73.218087][ T42] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.218098][ T42] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.218110][ T42] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 73.218121][ T42] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.218176][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.332983][ T7078] netlink: 'syz.3.313': attribute type 2 has an invalid length. [ 73.332998][ T7078] netlink: 'syz.3.313': attribute type 2 has an invalid length. [ 73.501833][ T42] usb 7-1: usb_control_msg returned -32 [ 73.501857][ T42] usbtmc 7-1:16.0: can't read capabilities [ 73.664372][ T5814] usbhid 5-1:0.0: can't add hid device: -71 [ 73.664419][ T5814] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 73.673175][ T5814] usb 5-1: USB disconnect, device number 5 [ 73.810790][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 73.810838][ T43] audit: type=1400 audit(1791496385.402:573): avc: denied { ioctl } for pid=7087 comm="syz.0.315" path="socket:[16653]" dev="sockfs" ino=16653 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.812552][ T43] audit: type=1400 audit(1791496385.402:574): avc: denied { bind } for pid=7087 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.901864][ T7090] usb 7-1: usbtmc_ioctl_clear_in_halt returned -32 [ 73.936394][ T7092] netlink: 'syz.0.317': attribute type 3 has an invalid length. [ 73.936510][ T7092] netlink: 64 bytes leftover after parsing attributes in process `syz.0.317'. [ 73.945741][ T7092] netlink: 'syz.0.317': attribute type 3 has an invalid length. [ 73.945761][ T7092] netlink: 64 bytes leftover after parsing attributes in process `syz.0.317'. [ 74.128452][ T7101] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 74.133248][ T7101] netlink: 'syz.0.319': attribute type 10 has an invalid length. [ 74.191374][ T43] audit: type=1400 audit(1791496385.782:575): avc: denied { setopt } for pid=7102 comm="syz.3.316" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.192476][ T7103] netlink: 'syz.3.316': attribute type 32 has an invalid length. [ 74.192487][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.316'. [ 74.248782][ T7110] netlink: 'syz.3.316': attribute type 32 has an invalid length. [ 74.248797][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.316'. [ 74.507847][ T7101] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 74.533542][ T7103] bond2: Setting coupled_control to off (0) [ 74.554596][ T7110] bond3: Setting coupled_control to off (0) [ 74.996207][ T43] audit: type=1400 audit(1791496386.582:576): avc: denied { read } for pid=7118 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.082300][ T43] audit: type=1400 audit(1791496386.672:577): avc: denied { bind } for pid=7118 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.407848][ T62] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 75.691775][ T62] usb 6-1: Using ep0 maxpacket: 16 [ 75.792341][ T62] usb 6-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 75.824901][ T42] usb 7-1: USB disconnect, device number 7 [ 75.897080][ T43] audit: type=1400 audit(1791496387.492:578): avc: denied { getopt } for pid=7129 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.929889][ T7130] PM: Enabling pm_trace changes system date and time during resume. [ 75.929889][ T7130] PM: Correct system time has to be restored manually after resume. [ 75.941316][ T62] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.941350][ T62] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.941368][ T62] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.941389][ T62] usb 6-1: config 0 interface 0 has no altsetting 0 [ 75.941416][ T62] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.050373][ T62] usb 6-1: config 0 descriptor?? [ 76.330359][ T7138] netlink: 36 bytes leftover after parsing attributes in process `syz.0.328'. [ 76.347923][ T62] usbhid 6-1:0.0: can't add hid device: -71 [ 76.347973][ T62] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 76.366275][ T62] usb 6-1: USB disconnect, device number 14 [ 76.412937][ T43] audit: type=1400 audit(1791496388.002:579): avc: denied { watch } for pid=7139 comm="syz.1.329" path="/74" dev="tmpfs" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.476737][ T7142] netlink: 24 bytes leftover after parsing attributes in process `syz.2.330'. [ 76.582220][ T7144] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7144 comm=syz.2.330 [ 77.084893][ T7155] netlink: 52 bytes leftover after parsing attributes in process `syz.0.333'. [ 77.102035][ T7155] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.102283][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.112702][ T7155] netlink: 52 bytes leftover after parsing attributes in process `syz.0.333'. [ 77.186474][ C2] net_ratelimit: 109081 callbacks suppressed [ 77.186495][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 77.186548][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 77.186585][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.186651][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 77.186747][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.186781][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 77.186828][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 77.186985][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 77.186997][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 77.187129][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.349448][ T7159] tipc: Started in network mode [ 77.349466][ T7159] tipc: Node identity 00000000000000000000000000000001, cluster identity 5 [ 77.349794][ T7159] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 77.349951][ T7159] tipc: Enabled bearer , priority 10 [ 77.372461][ T43] audit: type=1326 audit(1791496388.962:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7156 comm="syz.3.326" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fefe779e199 code=0x0 [ 77.556799][ T7170] ======================================================= [ 77.556799][ T7170] WARNING: The mand mount option has been deprecated and [ 77.556799][ T7170] and is ignored by this kernel. Remove the mand [ 77.556799][ T7170] option from the mount to silence this warning. [ 77.556799][ T7170] ======================================================= [ 77.559068][ T7170] overlayfs: invalid origin (0000) [ 77.956522][ T42] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 78.108500][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 78.108987][ T42] usb 5-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 78.113902][ T42] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.113919][ T42] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.113930][ T42] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.113943][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 78.113960][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.116907][ T42] usb 5-1: config 0 descriptor?? [ 78.212407][ T43] audit: type=1400 audit(1791496389.802:581): avc: denied { setopt } for pid=7179 comm="syz.3.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.316896][ T7180] netlink: 48 bytes leftover after parsing attributes in process `syz.3.338'. [ 78.318659][ T7180] batman_adv: batadv0: Adding interface: virt_wifi0 [ 78.318673][ T7180] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.318690][ T7180] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active [ 78.358008][ T6524] tipc: Node number set to 1 [ 78.801021][ T7186] syzkaller0: entered promiscuous mode [ 78.801073][ T7186] syzkaller0: entered allmulticast mode [ 79.098268][ T43] audit: type=1400 audit(1791496390.692:582): avc: denied { mounton } for pid=7193 comm="syz.2.341" path="/90/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 79.741056][ T7195] ceph: No mds server is up or the cluster is laggy [ 80.375477][ T7219] ªªªªª): renamed from hsr0 (while UP) [ 80.432272][ T7219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.343'. [ 80.432524][ T7219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.343'. [ 80.730930][ T42] usbhid 5-1:0.0: can't add hid device: -71 [ 80.731009][ T42] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 80.748145][ T42] usb 5-1: USB disconnect, device number 6 [ 80.892063][ T43] audit: type=1400 audit(1791496392.482:583): avc: denied { write } for pid=7220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.324472][ T43] audit: type=1400 audit(1791496392.912:584): avc: denied { write } for pid=7223 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.621526][ T43] audit: type=1326 audit(1791496393.212:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7225 comm="syz.3.346" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fefe779e199 code=0x0 [ 81.854321][ T43] audit: type=1400 audit(1791496393.442:586): avc: denied { write } for pid=7231 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.069838][ T43] audit: type=1400 audit(1791496393.662:587): avc: denied { write } for pid=7238 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.137808][ T7239] lo: entered promiscuous mode [ 82.196479][ C3] net_ratelimit: 121979 callbacks suppressed [ 82.196494][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 82.196522][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.196566][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 82.196598][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 82.196613][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.196700][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.196704][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 82.196745][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 82.196806][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 82.196907][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 82.430433][ T43] audit: type=1400 audit(1791496394.022:588): avc: denied { setopt } for pid=7247 comm="syz.1.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.512671][ T7251] PKCS8: Unsupported PKCS#8 version [ 82.548149][ T7239] bond0: entered promiscuous mode [ 82.548579][ T7239] dummy0: entered promiscuous mode [ 82.549531][ T7239] eql: entered promiscuous mode [ 82.549850][ T7239] ifb0: entered promiscuous mode [ 82.550096][ T7239] ifb1: entered promiscuous mode [ 82.552874][ T7239] e1000 0000:00:06.0 eth0: entered promiscuous mode [ 82.582790][ T7239] e1000e 0000:00:02.0 eth1: entered promiscuous mode [ 82.585983][ T7239] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 82.600530][ T7239] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 82.600902][ T7239] hwsim0: entered promiscuous mode [ 82.601174][ T7239] ieee802154 phy0 wpan0: entered promiscuous mode [ 82.601266][ T7239] ieee802154 phy1 wpan1: entered promiscuous mode [ 82.601369][ T7239] teql0: entered promiscuous mode [ 82.936842][ T5814] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 82.939072][ T43] audit: type=1400 audit(1791496394.532:589): avc: denied { connect } for pid=7262 comm="syz.0.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.976552][ T6524] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 82.991437][ T43] audit: type=1400 audit(1791496394.582:590): avc: denied { mounton } for pid=7262 comm="syz.0.351" path="/76/config" dev="configfs" ino=2092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.116482][ T6524] usb 7-1: device descriptor read/64, error -71 [ 83.116544][ T5814] usb 6-1: Using ep0 maxpacket: 8 [ 83.117060][ T5814] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 83.117980][ T5814] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 83.118002][ T5814] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.118013][ T5814] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 83.118025][ T5814] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 83.118036][ T5814] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.118055][ T5814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.227500][ T1033] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 83.366575][ T6524] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 83.396482][ T1033] usb 8-1: Using ep0 maxpacket: 16 [ 83.396925][ T1033] usb 8-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 83.397780][ T1033] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.397795][ T1033] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.397807][ T1033] usb 8-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.397820][ T1033] usb 8-1: config 0 interface 0 has no altsetting 0 [ 83.397835][ T1033] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.401926][ T1033] usb 8-1: config 0 descriptor?? [ 83.506854][ T6524] usb 7-1: device descriptor read/64, error -71 [ 83.536294][ T43] audit: type=1400 audit(1791496395.122:591): avc: denied { append } for pid=7259 comm="syz.1.350" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.626858][ T6524] usb usb7-port1: attempt power cycle [ 83.639050][ T1033] usbhid 8-1:0.0: can't add hid device: -71 [ 83.639128][ T1033] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 83.654043][ T1033] usb 8-1: USB disconnect, device number 6 [ 83.903562][ T7276] usbtmc 6-1:16.0: simple control status returned 0 [ 83.976602][ T6524] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 83.997260][ T6524] usb 7-1: device descriptor read/8, error -71 [ 84.109716][ T1033] usb 6-1: USB disconnect, device number 15 [ 84.238977][ T6524] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 84.257187][ T6524] usb 7-1: device descriptor read/8, error -71 [ 84.367410][ T6524] usb usb7-port1: unable to enumerate USB device [ 84.487721][ T43] audit: type=1400 audit(1791496396.082:592): avc: denied { ioctl } for pid=7280 comm="syz.0.356" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 84.588935][ T43] audit: type=1400 audit(1791496396.182:593): avc: denied { mounton } for pid=7280 comm="syz.0.356" path="/78/file0" dev="tmpfs" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 84.589074][ T7282] fuse: Unknown parameter 'rooÕ:¾#«î<à„Ïtmode' [ 84.824270][ T7284] dns_resolver: Unsupported content type (95) [ 84.985918][ T43] audit: type=1400 audit(1791496396.572:594): avc: denied { read } for pid=7296 comm="syz.1.359" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 84.986238][ T43] audit: type=1400 audit(1791496396.572:595): avc: denied { open } for pid=7296 comm="syz.1.359" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 85.202476][ T7298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.359'. [ 85.212592][ T7299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.359'. [ 86.039848][ T7328] xt_hashlimit: size too large, truncated to 1048576 [ 86.176629][ T42] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 86.189503][ T7328] netlink: 'syz.0.365': attribute type 4 has an invalid length. [ 86.189520][ T7328] netlink: 152 bytes leftover after parsing attributes in process `syz.0.365'. [ 86.213538][ T7328] .`: renamed from bond0 (while UP) [ 86.247521][ T43] audit: type=1400 audit(1791496397.832:596): avc: denied { accept } for pid=7316 comm="syz.2.362" lport=35549 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.328222][ T7330] netlink: 32 bytes leftover after parsing attributes in process `syz.0.365'. [ 86.328708][ T43] audit: type=1400 audit(1791496397.922:597): avc: denied { listen } for pid=7316 comm="syz.2.362" lport=35549 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.340056][ T42] usb 6-1: Using ep0 maxpacket: 16 [ 86.349356][ T42] usb 6-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 86.361022][ T42] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.361044][ T42] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.361060][ T42] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.361079][ T42] usb 6-1: config 0 interface 0 has no altsetting 0 [ 86.361101][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.363674][ T42] usb 6-1: config 0 descriptor?? [ 86.594248][ T42] usbhid 6-1:0.0: can't add hid device: -71 [ 86.594320][ T42] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 86.607866][ T42] usb 6-1: USB disconnect, device number 16 [ 86.679740][ T43] audit: type=1400 audit(1791496398.272:598): avc: denied { bind } for pid=7335 comm="syz.3.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.680242][ T43] audit: type=1400 audit(1791496398.272:599): avc: denied { write } for pid=7335 comm="syz.3.366" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.685904][ T7336] netlink: 'syz.3.366': attribute type 1 has an invalid length. [ 86.732331][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 87.077444][ T7341] netlink: 76 bytes leftover after parsing attributes in process `syz.3.368'. [ 87.206454][ C3] net_ratelimit: 129688 callbacks suppressed [ 87.206469][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 87.206566][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 87.206604][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 87.206659][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 87.206728][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 87.206769][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 87.206819][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.206851][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 87.206864][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:f0:5f:db:ad:5e, vlan:0) [ 87.206927][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.238518][ T43] audit: type=1400 audit(1791496398.832:600): avc: denied { lock } for pid=7342 comm="syz.3.370" path="socket:[19161]" dev="sockfs" ino=19161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 87.509647][ T43] audit: type=1400 audit(1791496399.102:601): avc: denied { write } for pid=7342 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 87.545971][ T7346] netlink: 52 bytes leftover after parsing attributes in process `syz.3.370'. [ 88.481998][ T7373] gadgetfs: bound to dummy_udc driver [ 88.497635][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 88.726550][ T42] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 88.726769][ C1] gadgetfs: connected [ 88.727031][ T42] gadgetfs: disconnected [ 88.760921][ T7370] netlink: 68 bytes leftover after parsing attributes in process `syz.0.371'. [ 88.805039][ T7371] x_tables: duplicate underflow at hook 2 [ 88.896693][ C1] gadgetfs: connected [ 88.899441][ T42] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 88.899675][ T42] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 88.899693][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.901176][ C1] gadgetfs: configuration #1 [ 88.931343][ T7375] gadgetfs: suspended from state 3 [ 88.931616][ T42] usb 5-1: USB disconnect, device number 7 [ 88.934413][ T7375] gadgetfs: disconnected [ 88.960467][ T5725] ================================================================== [ 88.960488][ T5725] BUG: KASAN: slab-use-after-free in __mutex_lock+0x15c5/0x1bd0 [ 88.960508][ T5725] Read of size 8 at addr ffff88805871a458 by task syz-executor/5725 [ 88.960517][ T5725] [ 88.960524][ T5725] CPU: 1 UID: 0 PID: 5725 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 88.960539][ T5725] Tainted: [L]=SOFTLOCKUP [ 88.960543][ T5725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.960549][ T5725] Call Trace: [ 88.960553][ T5725] [ 88.960558][ T5725] dump_stack_lvl+0x100/0x190 [ 88.960575][ T5725] print_report+0x13d/0x4b0 [ 88.960591][ T5725] ? __virt_addr_valid+0x239/0x430 [ 88.960603][ T5725] ? __mutex_lock+0x15c5/0x1bd0 [ 88.960617][ T5725] kasan_report+0xdf/0x1c0 [ 88.960634][ T5725] ? __mutex_lock+0x15c5/0x1bd0 [ 88.960649][ T5725] __mutex_lock+0x15c5/0x1bd0 [ 88.960664][ T5725] ? ep_open+0x4c/0x2c0 [ 88.960676][ T5725] ? __pfx_avc_has_perm+0x10/0x10 [ 88.960686][ T5725] ? hook_file_open+0x248/0x8e0 [ 88.960698][ T5725] ? __pfx___mutex_lock+0x10/0x10 [ 88.960715][ T5725] ? __pfx_selinux_file_open+0x10/0x10 [ 88.960730][ T5725] ? ep_open+0x4c/0x2c0 [ 88.960742][ T5725] ep_open+0x4c/0x2c0 [ 88.960754][ T5725] do_dentry_open+0x6ab/0x14d0 [ 88.960767][ T5725] ? __pfx_ep_open+0x10/0x10 [ 88.960781][ T5725] vfs_open+0x82/0x3f0 [ 88.960797][ T5725] path_openat+0x19fa/0x2440 [ 88.960813][ T5725] ? __pfx_path_openat+0x10/0x10 [ 88.960830][ T5725] do_file_open+0x20e/0x430 [ 88.960846][ T5725] ? __pfx_do_file_open+0x10/0x10 [ 88.960866][ T5725] ? _raw_spin_unlock+0x28/0x50 [ 88.960877][ T5725] ? alloc_fd+0x471/0x7a0 [ 88.960894][ T5725] do_sys_openat2+0x10f/0x1e0 [ 88.960911][ T5725] ? __pfx_do_sys_openat2+0x10/0x10 [ 88.960930][ T5725] __x64_sys_openat+0x12d/0x210 [ 88.960940][ T5725] ? __pfx___x64_sys_openat+0x10/0x10 [ 88.960949][ T5725] ? putname+0xb1/0x110 [ 88.960967][ T5725] do_syscall_64+0x123/0x790 [ 88.960982][ T5725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.960993][ T5725] RIP: 0033:0x7f2a32b5e9ce [ 88.961002][ T5725] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.961013][ T5725] RSP: 002b:00007ffdca7f7208 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 88.961024][ T5725] RAX: ffffffffffffffda RBX: 0000555588e51500 RCX: 00007f2a32b5e9ce [ 88.961031][ T5725] RDX: 0000000000000000 RSI: 00007ffdca7f7370 RDI: ffffffffffffff9c [ 88.961038][ T5725] RBP: 00007ffdca7f7370 R08: 0000000000000000 R09: 0000000000000000 [ 88.961044][ T5725] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdca7f8460 [ 88.961051][ T5725] R13: 00007f2a32c34ccb R14: 0000555588e514e8 R15: 0000000000000006 [ 88.961061][ T5725] [ 88.961064][ T5725] [ 88.961066][ T5725] Allocated by task 7373: [ 88.961072][ T5725] kasan_save_stack+0x30/0x50 [ 88.961085][ T5725] kasan_save_track+0x14/0x30 [ 88.961098][ T5725] __kasan_kmalloc+0xaa/0xb0 [ 88.961110][ T5725] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 88.961120][ T5725] gadgetfs_bind+0x582/0x890 [ 88.961131][ T5725] gadget_bind_driver+0x28c/0xbf0 [ 88.961145][ T5725] really_probe+0x241/0xa60 [ 88.961160][ T5725] __driver_probe_device+0x210/0x460 [ 88.961174][ T5725] driver_probe_device+0x4a/0x140 [ 88.961189][ T5725] __driver_attach+0x21f/0x5b0 [ 88.961203][ T5725] bus_for_each_dev+0x13e/0x1d0 [ 88.961214][ T5725] bus_add_driver+0x305/0x5b0 [ 88.961227][ T5725] driver_register+0x1e2/0x360 [ 88.961235][ T5725] usb_gadget_register_driver_owner+0x132/0x210 [ 88.961250][ T5725] dev_config+0xdce/0x1610 [ 88.961261][ T5725] vfs_write+0x2aa/0x1050 [ 88.961272][ T5725] ksys_write+0x12a/0x250 [ 88.961283][ T5725] do_syscall_64+0x123/0x790 [ 88.961296][ T5725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.961306][ T5725] [ 88.961308][ T5725] Freed by task 7375: [ 88.961312][ T5725] kasan_save_stack+0x30/0x50 [ 88.961325][ T5725] kasan_save_track+0x14/0x30 [ 88.961338][ T5725] kasan_save_free_info+0x3b/0x70 [ 88.961348][ T5725] __kasan_slab_free+0x5f/0x80 [ 88.961361][ T5725] kfree+0x22b/0x6d0 [ 88.961369][ T5725] put_ep+0x117/0x150 [ 88.961383][ T5725] destroy_ep_files+0x163/0x420 [ 88.961394][ T5725] gadgetfs_unbind+0x139/0x260 [ 88.961404][ T5725] gadget_unbind_driver+0x20c/0x4f0 [ 88.961419][ T5725] device_remove+0xcb/0x180 [ 88.961432][ T5725] device_release_driver_internal+0x44e/0x620 [ 88.961448][ T5725] driver_detach+0xd8/0x1b0 [ 88.961463][ T5725] bus_remove_driver+0x13b/0x2e0 [ 88.961476][ T5725] driver_unregister+0x76/0xb0 [ 88.961484][ T5725] usb_gadget_unregister_driver+0x49/0x70 [ 88.961498][ T5725] dev_release+0x132/0x1b0 [ 88.961508][ T5725] __fput+0x3ff/0xb50 [ 88.961522][ T5725] task_work_run+0x150/0x240 [ 88.961537][ T5725] do_exit+0x8da/0x2a50 [ 88.961549][ T5725] __x64_sys_exit+0x42/0x50 [ 88.961562][ T5725] x64_sys_call+0x156c/0x1570 [ 88.961573][ T5725] do_syscall_64+0x123/0x790 [ 88.961585][ T5725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.961595][ T5725] [ 88.961597][ T5725] The buggy address belongs to the object at ffff88805871a400 [ 88.961597][ T5725] which belongs to the cache kmalloc-512 of size 512 [ 88.961605][ T5725] The buggy address is located 88 bytes inside of [ 88.961605][ T5725] freed 512-byte region [ffff88805871a400, ffff88805871a600) [ 88.961615][ T5725] [ 88.961617][ T5725] The buggy address belongs to the physical page: [ 88.961622][ T5725] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58718 [ 88.961632][ T5725] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 88.961640][ T5725] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 88.961649][ T5725] page_type: f5(slab) [ 88.961658][ T5725] raw: 00fff00000000040 ffff88801d042c80 dead000000000100 dead000000000122 [ 88.961667][ T5725] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 88.961676][ T5725] head: 00fff00000000040 ffff88801d042c80 dead000000000100 dead000000000122 [ 88.961685][ T5725] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 88.961693][ T5725] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 88.961702][ T5725] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 88.961708][ T5725] page dumped because: kasan: bad access detected [ 88.961712][ T5725] page_owner tracks the page as allocated [ 88.961715][ T5725] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5732, tgid 5732 (syz-executor), ts 38903693671 [ 88.961732][ T5725] post_alloc_hook+0xfd/0x120 [ 88.961742][ T5725] get_page_from_freelist+0x110d/0x35d0 [ 88.961753][ T5725] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 88.961764][ T5725] new_slab+0xa9/0x6e0 [ 88.961774][ T5725] refill_objects+0xe3/0x410 [ 88.961784][ T5725] __pcs_replace_empty_main+0x35e/0x650 [ 88.961794][ T5725] __kmalloc_noprof+0x67c/0x840 [ 88.961806][ T5725] fib6_info_alloc+0x40/0x160 [ 88.961820][ T5725] ip6_route_info_create+0x14c/0xad0 [ 88.961835][ T5725] ip6_route_add+0x4b/0x1d0 [ 88.961846][ T5725] addrconf_add_mroute+0x1de/0x350 [ 88.961859][ T5725] addrconf_add_dev+0x14e/0x1a0 [ 88.961874][ T5725] addrconf_init_auto_addrs+0x10e/0x780 [ 88.961889][ T5725] addrconf_notify+0x10af/0x1ba0 [ 88.961900][ T5725] notifier_call_chain+0x99/0x3f0 [ 88.961914][ T5725] call_netdevice_notifiers_info+0xbe/0x110 [ 88.961926][ T5725] page_owner free stack trace missing [ 88.961929][ T5725] [ 88.961932][ T5725] Memory state around the buggy address: [ 88.961936][ T5725] ffff88805871a300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.961943][ T5725] ffff88805871a380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.961951][ T5725] >ffff88805871a400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.961956][ T5725] ^ [ 88.961962][ T5725] ffff88805871a480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.961968][ T5725] ffff88805871a500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.961974][ T5725] ================================================================== [ 88.962010][ T5725] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 89.207620][ T5725] CPU: 1 UID: 0 PID: 5725 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 89.211001][ T5725] Tainted: [L]=SOFTLOCKUP [ 89.212354][ T5725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.215454][ T5725] Call Trace: [ 89.216506][ T5725] [ 89.217444][ T5725] dump_stack_lvl+0x100/0x190 [ 89.218958][ T5725] vpanic+0x553/0x970 [ 89.220214][ T5725] ? __pfx_vpanic+0x10/0x10 [ 89.221592][ T5725] ? rcu_is_watching+0x13/0xc0 [ 89.223056][ T5725] ? irqentry_exit+0x24d/0xa10 [ 89.224496][ T5725] ? __mutex_lock+0x15c5/0x1bd0 [ 89.225992][ T5725] panic+0xd1/0xe0 [ 89.227085][ T5725] ? __pfx_panic+0x10/0x10 [ 89.228499][ T5725] check_panic_on_warn.cold+0x19/0x34 [ 89.230168][ T5725] end_report.part.0+0x3a/0x90 [ 89.231682][ T5725] kasan_report.cold+0xe/0x18 [ 89.233165][ T5725] ? __mutex_lock+0x15c5/0x1bd0 [ 89.234642][ T5725] __mutex_lock+0x15c5/0x1bd0 [ 89.236055][ T5725] ? ep_open+0x4c/0x2c0 [ 89.237296][ T5725] ? __pfx_avc_has_perm+0x10/0x10 [ 89.238865][ T5725] ? hook_file_open+0x248/0x8e0 [ 89.240328][ T5725] ? __pfx___mutex_lock+0x10/0x10 [ 89.241879][ T5725] ? __pfx_selinux_file_open+0x10/0x10 [ 89.243550][ T5725] ? ep_open+0x4c/0x2c0 [ 89.244802][ T5725] ep_open+0x4c/0x2c0 [ 89.246000][ T5725] do_dentry_open+0x6ab/0x14d0 [ 89.247440][ T5725] ? __pfx_ep_open+0x10/0x10 [ 89.248847][ T5725] vfs_open+0x82/0x3f0 [ 89.250074][ T5725] path_openat+0x19fa/0x2440 [ 89.251479][ T5725] ? __pfx_path_openat+0x10/0x10 [ 89.252960][ T5725] do_file_open+0x20e/0x430 [ 89.254320][ T5725] ? __pfx_do_file_open+0x10/0x10 [ 89.255848][ T5725] ? _raw_spin_unlock+0x28/0x50 [ 89.257296][ T5725] ? alloc_fd+0x471/0x7a0 [ 89.258619][ T5725] do_sys_openat2+0x10f/0x1e0 [ 89.260039][ T5725] ? __pfx_do_sys_openat2+0x10/0x10 [ 89.261580][ T5725] __x64_sys_openat+0x12d/0x210 [ 89.263040][ T5725] ? __pfx___x64_sys_openat+0x10/0x10 [ 89.264636][ T5725] ? putname+0xb1/0x110 [ 89.265900][ T5725] do_syscall_64+0x123/0x790 [ 89.267288][ T5725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.269070][ T5725] RIP: 0033:0x7f2a32b5e9ce [ 89.270409][ T5725] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 89.276033][ T5725] RSP: 002b:00007ffdca7f7208 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 89.278514][ T5725] RAX: ffffffffffffffda RBX: 0000555588e51500 RCX: 00007f2a32b5e9ce [ 89.280853][ T5725] RDX: 0000000000000000 RSI: 00007ffdca7f7370 RDI: ffffffffffffff9c [ 89.283503][ T5725] RBP: 00007ffdca7f7370 R08: 0000000000000000 R09: 0000000000000000 [ 89.285980][ T5725] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdca7f8460 [ 89.288463][ T5725] R13: 00007f2a32c34ccb R14: 0000555588e514e8 R15: 0000000000000006 [ 89.290977][ T5725] [ 89.292553][ T5725] Kernel Offset: disabled [ 89.293910][ T5725] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:53:20 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802c67cb40 RCX=ffffffff8ab0a4ed RDX=0000000000000101 RSI=0000000000000001 RDI=ffff88802d314b00 RBP=ffff8880279e2000 RSP=ffffc900000076b0 R8 =0000000000000007 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=ffff88802c67cbf8 R13=0000000000000000 R14=ffff88802c67cb50 R15=ffff88802c67cb98 RIP=ffffffff8ab0a4ed RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f0d616156c0 ffffffff 00c01300 GS =0000 ffff8880d4947000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9cc4224ff8 CR3=0000000035332000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9def66e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9def66e6 00007ffe9def66ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cc3435e6b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cc3435eab ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cc343600f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cc3435e9d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cc35f45f8 00007f9cc35f45c8 00007f9cc35f4600 00007f9cc35f45e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0070bd2a00000000 fffffffc00000002 fffffffffffffffe 000000000000001f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c00080000000600 0b00080000000000 0000010010000a00 0000400018000800 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000006000b000800 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000006574616c 6665640003004800 0000000000002000 0100020000350400 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b29205 RDI=ffffffff9cc7d660 RBP=ffffffff9cc7d620 RSP=ffffc90003fb7000 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3835303838386652 R12=0000000000000000 R13=0000000000000032 R14=0000000000000006 R15=ffffc90003fb7318 RIP=ffffffff85b2922f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555588e51500 ffffffff 00c00000 GS =0000 ffff8880d4a47000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7b686edd69 CR3=00000000511ce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 726573755f757063 7265705f65676173 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9def66e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9def66e6 00007ffe9def66ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cc3435e6b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cc3435eab ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cc343600f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cc3435e9d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000007 RBX=ffffffff8fdec5a0 RCX=ffffc90000657abc RDX=0000000000000007 RSI=ffffffff8e3bc494 RDI=ffffffff8c624f80 RBP=ffffffff81b9b54e RSP=ffffc90000657a88 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=0000000000089a0d R12=ffff888024c08000 R13=ffffc90000657b68 R14=0000000000000202 R15=0000000000000008 RIP=ffffffff8bd409b8 RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4b47000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9cc415da08 CR3=000000000fb96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 726573755f757063 7265705f65676173 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9def66e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9def66e6 00007ffe9def66ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cc3435e6b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cc3435eab ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cc343600f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cc3435e9d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff937e1654 RBX=ffffffff92c22854 RCX=dffffc0000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff92c2283c RBP=ffffffff92c22858 RSP=ffffc900007081f8 R8 =ffffffff937e169c R9 =0000000000000007 R10=0000000000000200 R11=000000000008a27d R12=ffffffff92c22858 R13=ffffffff89a27d5e R14=ffffffff92c2283c R15=ffffffff92c22854 RIP=ffffffff81b9aa0d RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4c47000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0d607eb880 CR3=0000000052aa1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 726573755f757063 7265705f65676173 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9def66e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9def66e6 00007ffe9def66ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cc3435e6b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cc3435eab ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cc343600f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cc3435e9d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000