last executing test programs: 4.316205959s ago: executing program 0 (id=495): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) pipe2$9p(&(0x7f0000005ec0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) (async) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) (async, rerun: 32) write$P9_RREADLINK(r4, &(0x7f0000005f00)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) (rerun: 32) readv(r3, &(0x7f00000060c0)=[{&(0x7f0000006000)=""/158, 0x9e}], 0x1) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000000314010002000000000000000900020073797a30000000000800410072780700140033006c6f"], 0x38}}, 0x0) 3.448198766s ago: executing program 0 (id=512): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, &(0x7f0000001200), 0x4) semget$private(0x0, 0x3, 0x0) r0 = semget(0x0, 0x3, 0x214) semop(r0, &(0x7f0000000000)=[{0x1, 0x7, 0x1000}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)={0x1c, r6, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44884}, 0x0) sendmsg$nl_generic(r7, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0x88, 0x40, 0x200, 0x70bd27, 0x25dfdbfd, {0x4}, [@generic="a006ea35fa6573094e125b9aa606232691b63e49ec3b4618f31a212d9483d27982ef4677bdaee640ccc615b289cfaf8088a7ce4832f3071462798355bac7f7939dfca8d62a90e3af92d1352388fef8199cbbe27b0b526ef16192032c93f3ec8a06d062e5caa22ca42e69264f7fc65fb891ea"]}, 0x88}}, 0x20008000) r8 = socket(0x2, 0x80805, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0xd01, 0x1, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) ptrace$setregs(0xd, r9, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r9, 0x2, &(0x7f0000000200)={0x0, 0xfffffffffffffe64}) getsockopt$bt_hci(r8, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) 935.898759ms ago: executing program 3 (id=584): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x55}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040014}, 0x0) 894.715585ms ago: executing program 2 (id=585): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (fail_nth: 1) 817.956994ms ago: executing program 3 (id=587): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x521d00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000180)=0x50000024) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x8080000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a"], 0xa0}}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x22400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="06007855", @ANYRES16=r5, @ANYBLOB="00042bbd7000fbdbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x20044001}, 0x4800) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000200)={0xf0003, 0x0, [0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b80a0000000f23c80f21f866350c00a0000f23f866b9800000c00f326635000400000f300fc76a002e0f080f23742e3b5753baf80c66b8f494f78e66efbafc0c66b83ac8000066efda6509", 0x4f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="9322ce6cd2df2f5b08ce73bd8fb0ddc148a0ca46abad9d8c0a30420d1691240f222f0929678a28396cad0143bba86390ed1e50dc298e83f252f4186890cd2a23f743de320d4d920db95fc4bd6d376aeb475844b3e6e2dbb42dd27aaa17291fd7fe4d8016202e16ba6d0b088d5d64275a023a99cf93f37c170ef3dd97c137044f8886aadb", 0x84}], 0x1, 0x0, 0x0, 0x340408a0}], 0x1, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r7, 0x3b87, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r9 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x0) fstat(r9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r10, 0x0) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r8, 0x0, 0x0, 0x0, 0x68a2}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f00000004c0)={0x0, 0x40000000000ab, [0x0, 0x80, 0x0, 0xfffffffffffffffc, 0x5, 0x14]}) recvmmsg(r6, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000002640)=""/130, 0x82}], 0x1}, 0x8}], 0x1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0xe, 0xb, &(0x7f0000000500)=@framed={{0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x10, r6}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x41, 0x0) 717.305851ms ago: executing program 2 (id=589): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x20000, 0x41) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(r0, 0x0, 0x8) mkdirat(r0, &(0x7f0000000440)='./bus\x00', 0x41) mount$overlay(0x2010000000000000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f0000000040)='./file0\x00') 717.097517ms ago: executing program 3 (id=590): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff00", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) 716.435897ms ago: executing program 2 (id=591): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10, 0x80000) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)=0x7) (async) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000080)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f00000000c0)=0x2c) (async) write(r0, &(0x7f0000000100)="87a0ef7f", 0x4) (async) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000140)={{0x2, 0x4e23, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x8, {0x2, 0x4e20, @loopback}, 'bridge_slave_1\x00'}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e20, @empty}, {0x1, @remote}, 0x12, {0x2, 0x4e24, @empty}, 'vxcan1\x00'}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x81, 0xf7, 0x200, 0x14, @mcast2, @mcast1, 0x20, 0x8000, 0x4, 0x4}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x700, 0x8, 0x101, 0x80, {{0x9, 0x4, 0x0, 0x4, 0x24, 0x64, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @loopback, {[@rr={0x7, 0xb, 0x9a, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x2f, 0xf, 0x0, 0x9, 0xe, @mcast2, @private0, 0x8000, 0x80, 0x8, 0xf0c}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x1a, 0x5ea, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x12}, 0x1, 0x0, 0x2, 0x5}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xee, &(0x7f0000000780)=[{}, {}], 0x10, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xb6, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'ip_vti0\x00', 0x0, 0x7, 0x1, 0x8, 0x4, {{0x10, 0x4, 0x3, 0x1, 0x40, 0x64, 0x0, 0x8, 0x29, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0xe7, 0x3, 0xe, [{@multicast2, 0x2}]}, @timestamp={0x44, 0x14, 0xe8, 0x0, 0x9, [0x4, 0x40, 0x3, 0x7ff]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xcc, [@private=0xa010100]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a80)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x9, 0xf, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x700, 0x0, 0x9}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl1\x00', &(0x7f0000000b40)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x7, 0x6, 0x21, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x700}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000c80)={'ip6gre0\x00', &(0x7f0000000c00)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0xfe, 0x1, 0x6, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x20, 0x7fff, 0xc8c0}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000cc0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d80)={'ip6gre0\x00', &(0x7f0000000d00)={'syztnl2\x00', 0x0, 0x29, 0xa, 0x7, 0x3, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x7800, 0x20, 0x9, 0xff}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000e80)={'sit0\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x8, 0x8000, 0x0, 0xffffffff, {{0x1b, 0x4, 0x0, 0x6, 0x6c, 0x64, 0x0, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x17, 0x14, [@broadcast, @loopback, @empty, @local, @empty]}, @cipso={0x86, 0x3f, 0x3, [{0x7, 0x4, "d041"}, {0x5, 0x10, "05930455be60df132c9956e789b5"}, {0x7, 0xb, "52ca983f2d385b0195"}, {0x2, 0xd, "db99677bd2aeaa0fc65602"}, {0x1, 0xd, "cec8f24906aa35039df676"}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000f40)={'gretap0\x00', &(0x7f0000000ec0)={'syztnl1\x00', 0x0, 0x8, 0x700, 0x1c000, 0x5, {{0xc, 0x4, 0x0, 0x34, 0x30, 0x66, 0x0, 0x9, 0x29, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xb}, {[@timestamp_prespec={0x44, 0x1c, 0xd6, 0x3, 0x8, [{@loopback, 0x8}, {@multicast2, 0x8}, {@rand_addr=0x64010102, 0x8000}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001040)={'sit0\x00', &(0x7f0000000f80)={'syztnl0\x00', 0x0, 0x40, 0x1, 0x9, 0x4, {{0x1f, 0x4, 0x1, 0x8, 0x7c, 0x65, 0x0, 0xb4, 0x2f, 0x0, @multicast1, @loopback, {[@generic={0x88, 0x3, "cb"}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x2, [{@multicast1, 0x562c}, {@local, 0x2}, {@multicast1, 0x3}, {@empty, 0x2}]}, @rr={0x7, 0x27, 0xd6, [@loopback, @local, @remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote, @private=0xa010102, @broadcast]}, @timestamp_addr={0x44, 0x14, 0x79, 0x1, 0x3, [{@loopback, 0x7}, {@multicast1, 0x1000}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001980)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400010}, 0xc, &(0x7f0000001940)={&(0x7f00000010c0)={0x84c, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x98, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7, 0x9, 0x9, 0x2}, {0x9, 0x2d, 0xd, 0x5ded}, {0x9, 0x1, 0x8, 0x7ff}, {0x0, 0x8, 0x4, 0x7}]}}}]}}, {{0x8, 0x1, r11}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x380}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r14}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r18}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x48}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff59}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x772}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x298b57ff}}, {0x8}}}]}}]}, 0x84c}, 0x1, 0x0, 0x0, 0x80d0}, 0x4005) (async) r20 = syz_genetlink_get_family_id$team(&(0x7f0000001a00), r1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001a40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000024c0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002480)={&(0x7f0000001d40)={0x738, r20, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r21}, {0x108, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r4}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xec}}}]}}, {{0x8, 0x1, r8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r14}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r14}}}]}}, {{0x8}, {0x254, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa00}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1bc3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe83}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x738}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) 658.216203ms ago: executing program 3 (id=592): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000300)=0x1, 0x4) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}, 0x1, 0x0, 0x0, 0x100100}, 0xee) 658.045907ms ago: executing program 3 (id=593): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b7000000000000004e00001f00000000870a000000000000950000000000000026e1cd0bef5dc2eec87f979f205a355188cc0dc897cbb266b0cdc6429a84d7f00c11821f92cb581543330650512f0cd0183ef42629a2f5dcf115c230f8d5637385ab7cafcf94abdd29f1a1c82f41ea62464d442c83400ff6fadf22d1d25b9f63f3b5945c6258b59319d9282e0ab499d7914801fcd4a00e00"/163], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xb5d5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 583.086052ms ago: executing program 3 (id=595): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000340)) ioctl$PPPIOCGFLAGS1(r1, 0x4004743c, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x1) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 582.584474ms ago: executing program 2 (id=596): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix={0x8, 0x2, 0xa0363159, 0x5, 0xe, 0xd, 0xc, 0xf5e4, 0x0, 0x0, 0x2, 0x2}}) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') getdents64(r1, &(0x7f0000001f00)=""/4111, 0x100f) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)=0x2) 508.052783ms ago: executing program 2 (id=598): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0xa4050000, 0x0, 0x4000}, 0x48) 397.576181ms ago: executing program 2 (id=601): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ff00000}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x2, 0x74496deb67e4b40, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f00000001c0)=[{r1, 0x6205}, {r2, 0x2000}, {r1, 0x8}, {r3, 0x4080}, {r0, 0x4}, {r2}], 0x6, &(0x7f0000000280)={r4, r5+60000000}, &(0x7f00000002c0)={[0x7]}, 0x8) r6 = io_uring_setup(0x54e1, &(0x7f0000000080)={0x0, 0xdb35, 0x2, 0x2, 0x344}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "2130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) syz_io_uring_setup(0x2b78, &(0x7f0000000000)={0x0, 0x6c44, 0x62, 0x0, 0x1, 0x0, r6}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ff00000}]}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) (async) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x2, 0x74496deb67e4b40}) (async) clock_gettime(0x0, &(0x7f0000000240)) (async) ppoll(&(0x7f00000001c0)=[{r1, 0x6205}, {r2, 0x2000}, {r1, 0x8}, {r3, 0x4080}, {r0, 0x4}, {r2}], 0x6, &(0x7f0000000280)={r4, r5+60000000}, &(0x7f00000002c0)={[0x7]}, 0x8) (async) io_uring_setup(0x54e1, &(0x7f0000000080)={0x0, 0xdb35, 0x2, 0x2, 0x344}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "2130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) (async) syz_io_uring_setup(0x2b78, &(0x7f0000000000)={0x0, 0x6c44, 0x62, 0x0, 0x1, 0x0, r6}, 0x0, 0x0) (async) 397.196842ms ago: executing program 1 (id=602): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_int(r1, 0x0, 0xd) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr$security_capability(r2, &(0x7f00000004c0), &(0x7f0000000500)=@v1={0x1000000, [{0x4, 0x1}]}, 0xc, 0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)={'trans=rdma,', {}, 0x2c, {[{@common=@privport}]}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}]}, 0x40}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x0, @val=@netfilter={0x5, 0x1, 0xfffffffb}}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}}}}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000e40000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES8=r9, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000ffffffffffffffff00000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060f5d9"], 0xb8}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close_range(r0, r10, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'sit0\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f0000001c00)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000200)="2b5e1739d0b636629b99cd9e7acb5e44c2bd8f0311e243485a080968ae66fa707d2a2742285fdba0824ac887b5ba9a52b5221fd8391d679b87b562789780652ed296e413ea0d316e5fd7d839e0136080d891a08937c8f19081e0a3ae858c07bcbe7132482969", 0x66}, {&(0x7f0000000300)="6bf365eeea19f6e63de5e27d8af708979deb828d59fa741dbc9687369bb13c5baa4d934df8969ad6", 0x28}, {&(0x7f0000000340)="4c0246a1beb26ddb1536efb66e0d8898a22c09e0af0367121b43502654881cc26da4ae1dd786ec54887c964bab07a983", 0x30}, {&(0x7f00000003c0)="ec9aec18275ed84e519a88e7710f75aa0a26b4729a2699f4c5465bf5f94e339f83a1691502e4f682e4edb98f0a54c089b30277", 0x33}], 0x4, &(0x7f00000005c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @hopopts={{0x38, 0x29, 0x36, {0x3f, 0x3, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xcc03}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim, @jumbo={0xc2, 0x4, 0x77f10243}, @enc_lim={0x4, 0x1, 0x9}, @pad1]}}}, @dstopts={{0x28, 0x29, 0x37, {0x93, 0x1, '\x00', [@ra={0x5, 0x2, 0xc9}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x2f, 0x0, '\x00', [@enc_lim]}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x2, 0x3, '\x00', [@pad1, @generic={0x3, 0xc, "b0361796fb6842a0f5bb9841"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x32, 0xc, 0x2, 0x38, 0x0, [@remote, @mcast2, @private1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x23}, @ipv4={'\x00', '\xff\xff', @broadcast}]}}}], 0x148}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000440)="6caa2d46ab035475806c64e2e011c9c27e4b22c68c6ef87b8896acde0eadaf02e49f42e0e50ef6ccb26386b0a8b744accf15d62f5a61fcc0f5d4bcfa07137674f9cd", 0x42}, {&(0x7f0000001cc0)="157bfd9cf022c4ad7f6129f33947627dc0a42931bfa673b1a15a471795e5f00c5239e2a98ee9f3dcfc6797f7943daac9f30d3065263440ce50980a4f35864c7614fd2279c4bbe89f88d67dea8dec13487ab3e0df8ac91d820b6c6b8e5569541ebcdec62eb2fe066db9da3f460600f531caa8d863f53b6f4cba8a35aebf77d83a869c620bcdfd3921480d41f96e71ecc4e2abd44b0b562badc73dd25123098a352fd73aaf9a832db0edbe290455eced9f7b7b8c0d1cd96f1626c60000000065280aa6af0fa28c2dab11e99ae58642cfaf466212035e7ce67307f726dc201b3b0f455422131628bd3b44d5a4dce93053462e339d80ea0b", 0xf6}, {&(0x7f0000000740)="6ce1e08111bb4d9905e6838792e185c15899ee9e62911bfa9cfa33d0c4c6d8237037582f5a5678becc5096bbf7c21493d25e69aefac757d4f03d1c653c0875b847385812474f41884477c16812c54999c6ab7941d99851b831596cd8fa4a", 0x5e}, {&(0x7f0000000540)="192a25986b4588542b098f2281274f28b83eb49bf16103fabddc542f85580582bd78c9caa3c91ce4a575a884171b15ec442786cda93a8e78bc9f5f255134", 0x3e}, {&(0x7f00000007c0)='8:', 0x2}], 0x5, &(0x7f0000000a40)=[@hopopts={{0x1b8, 0x29, 0x36, {0x26a5f7ffba39571d, 0x33, '\x00', [@hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x26}, @generic={0x9, 0xfc, "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"}, @generic={0xfc, 0x6d, "6e4ed359b024bba9b4f43d856b8fe6e328ed382b2c7005208271698a6892e22b50dcf55d3a2c4e12d863203cd3450d8a4b02631364938f991ee59be45c5027a1669d946b5c42f87b6268e0f9f95c02c218605f804dfc9f2105a61a2e1d31d450c47ebc247e74e0b349e687770f"}, @hao={0xc9, 0x10, @local}]}}}], 0x1b8}}, {{&(0x7f0000000880)={0xa, 0x4e24, 0x2, @mcast2, 0xfffffffa}, 0x1c, &(0x7f0000000980)=[{&(0x7f00000008c0)="17144feeda71ac424eeba1e9a845c00f8242e8bf36e0dce042300edac8e391649a33ba16936e6423e0266165ce61fe031e67fc4b8d4e8d4f2b1a79656d9871edc7baea241601cc3b5ad79664575a8b29bc8637ee4073a14ba53e35f16e9b2e6da916df757786908761606cf2c349fea5fee7d80ba3d1bcbb9401185d119823d176409a8d354e71680cb0addfa914af36b2b64e3532af000c93add4b08821366eb59010353b1dbac99894bd607e837990655877", 0xb3}, {&(0x7f0000000c00)="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", 0x1000}], 0x2}}], 0x3, 0x20040c04) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x403, 0x1, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x6}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x60}, 0x1, 0xba01, 0x0, 0x4005}, 0x0) 277.794258ms ago: executing program 0 (id=603): r0 = syz_io_uring_setup(0x7ea9, &(0x7f0000000080)={0x0, 0x40003, 0x10300, 0x0, 0x3}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20004008}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x4, r3, 0x0, 0x0, 0x0, 0x30162}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x80, 0x9, 0x6, 0x5, 0x0, 0x0, {0x9, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0xc080) r5 = accept4$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14, 0x80800) accept$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) io_uring_enter(r0, 0x1fd0, 0xffffffff, 0x0, 0x0, 0x0) 277.554684ms ago: executing program 1 (id=604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x40}, 0x1, 0xfff5, 0x0, 0x404c084}, 0x40800) 277.360218ms ago: executing program 1 (id=605): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x20004014) sendmsg$key(0xffffffffffffffff, &(0x7f0000000580)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000480)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012100200010000d200000000000030006c54020300ac7eae020000002db20200000000f52c000000cdff00000001020014bb0000010000000023000013000300050000200000027a96830ada4f81b4364d319bf346673bc894970bdb17a49e611b5c73b243c37d743f6a77870ebcb52e70e34521068c3c"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@inode32}]}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0x12000021) r4 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) mprotect(&(0x7f000040a000/0xe000)=nil, 0xe000, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x21, &(0x7f0000000440), 0x1) r5 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) ioctl$GIO_FONT(r6, 0x4b60, &(0x7f0000000800)=""/154) sendmsg$inet(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="140200000000000000000001000000bcc20000000000001c00000000000000000000000800000000", @ANYRES32=0x0, @ANYBLOB="ffffffff7f00000100000000fc00000000000000000000000700000044242921ffffffff0000008064010100000000030a01010200000003ac1414bbfffffffa07139664010102640101000a010100ac1414aa862900000002020c7abbd21f916a981b8c1d020670ed68950202050ff9816bae0f0d18b765d4e5e11044241ba3ac1414bb000000d6ac1e00010000000dac14140d00000004ac1414bbfffffffd8667000000030111618c54fb3b1f51723509be5ba45359010d05ffb551e2ae022def6201010ec644b870c5782a1e08a2dc7801104ad0df7e067443b84eac023efeaf060619554e5c0008703865592b09070cdec75c7de699f8c21d5f050bdc8b21daa246d35d950000000000"], 0x138}, 0x8000) sendto$inet6(r3, &(0x7f00000002c0)="9e", 0x1, 0x40014, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, 0x8) sendto$inet6(r3, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) r7 = syz_clone(0x20940200, 0x0, 0x9, 0x0, 0x0, 0x0) tgkill(r7, r7, 0x11) sendmsg$inet6(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r8, 0x4b72, &(0x7f0000000440)={0x3, 0x1, 0x20, 0x9, 0x7a, &(0x7f0000000040)}) ioctl$KDFONTOP_SET(r8, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) 188.189664ms ago: executing program 0 (id=606): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000480)={0x0, "b500e2279c2996817bb959eb2b238deda525e1dbdeffafbf2500"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000480)={0x0, "b500e2279c2996817bb959eb2b238deda525e1dbdeffafbf2500", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)=[{}]}) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000300)=@sg0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='xfs\x00', 0x0, &(0x7f0000000000)='usrquota') r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540100001000010000001000ffdbdf25fe880000000000000000000000000001"], 0x154}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540100001000010000001000ffdbdf25fe880000000000000000000000000001"], 0x154}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$nl_crypto(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@delrng={0x10, 0x14, 0x2, 0x70bd27, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x480d0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r5, 0x104, 0x4, 0x0, &(0x7f0000000080)) (async) getsockopt$rose(r5, 0x104, 0x4, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@empty, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x6, 0x80, 0xffffffffffffffff}, {0xe, 0x6}, {0x391a, 0x0, 0x4}, 0x0, 0x0, 0xa, 0x0, 0xfe, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2b, 0x0, 0x70bd2d, 0x0, 0x2}}]}, 0x154}}, 0x0) 108.083514ms ago: executing program 0 (id=607): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="551c44007f2d71b2000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc6, &(0x7f0000000840)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000440)=r0}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') ppoll(&(0x7f0000000100)=[{r5, 0x25c0}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000004c0), &(0x7f0000000700)=r0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r8 = socket(0x11, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), r8) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r8, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c6b245f", @ANYRES16=r10, @ANYBLOB="10002abd7000fedbdf250a0000000800020005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x95}, 0x40084) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r8, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e4108296a3d206163944f8afc1bf505602da9168d6f9ce320068ff1f7e345a170d1423c2e18c8ed410c8aab9a20b514d2b583b90a86da4483488c0fdc6c2"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x4000000, 0xfffffed4, 0x20}}, 0x12) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) 107.854931ms ago: executing program 1 (id=608): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1a}, 0x60) sendto(r0, &(0x7f0000000080)="388c76", 0x3, 0x14004010, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x2, @local}}, 0x80) (async) r1 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = gettid() kcmp(r2, r1, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 8.057654ms ago: executing program 1 (id=609): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000300)=0x1, 0x4) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}, 0x1, 0x0, 0x0, 0xee0000}, 0xee) 6.392514ms ago: executing program 0 (id=610): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, 0x0, 0x4000}, 0x48) 0s ago: executing program 1 (id=611): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x55}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040014}, 0x0) kernel console output (not intermixed with test programs): [ 38.126527][ T39] audit: type=1400 audit(1738972281.877:80): avc: denied { write } for pid=5852 comm="sh" path="pipe:[6441]" dev="pipefs" ino=6441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.133178][ T39] audit: type=1400 audit(1738972281.877:81): avc: denied { rlimitinh } for pid=5852 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.140512][ T39] audit: type=1400 audit(1738972281.877:82): avc: denied { siginh } for pid=5852 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.406139][ T39] audit: type=1400 audit(1738972283.177:83): avc: denied { read } for pid=5336 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.412378][ T39] audit: type=1400 audit(1738972283.177:84): avc: denied { append } for pid=5336 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.419199][ T39] audit: type=1400 audit(1738972283.177:85): avc: denied { open } for pid=5336 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.425807][ T39] audit: type=1400 audit(1738972283.177:86): avc: denied { getattr } for pid=5336 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:42614' (ED25519) to the list of known hosts. [ 40.216677][ T39] audit: type=1400 audit(1738972283.987:87): avc: denied { name_bind } for pid=5894 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.899915][ T5903] cgroup: Unknown subsys name 'net' [ 42.027963][ T5903] cgroup: Unknown subsys name 'cpuset' [ 42.031370][ T5903] cgroup: Unknown subsys name 'rlimit' [ 42.238569][ T5930] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.900668][ T5903] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.676799][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 44.676815][ T39] audit: type=1400 audit(1738972288.447:105): avc: denied { execmem } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.861758][ T39] audit: type=1400 audit(1738972288.627:106): avc: denied { create } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.870361][ T39] audit: type=1400 audit(1738972288.627:107): avc: denied { read write } for pid=5937 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.886267][ T39] audit: type=1400 audit(1738972288.627:108): avc: denied { open } for pid=5937 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.891731][ T5940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.896654][ T39] audit: type=1400 audit(1738972288.637:109): avc: denied { ioctl } for pid=5937 comm="syz-executor" path="socket:[2965]" dev="sockfs" ino=2965 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.906773][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.907627][ T67] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.912831][ T67] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.917048][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.920093][ T67] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.923514][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.926947][ T67] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.930348][ T67] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.933623][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.938205][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.939021][ T5949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.941678][ T67] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 44.943798][ T5949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.946749][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.948502][ T5949] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.949132][ T5950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.951175][ T5950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.953436][ T5949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.953952][ T5951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.955668][ T5950] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 44.960188][ T5292] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.961303][ T39] audit: type=1400 audit(1738972288.727:110): avc: denied { read } for pid=5947 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.961493][ T39] audit: type=1400 audit(1738972288.727:111): avc: denied { open } for pid=5947 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.962209][ T39] audit: type=1400 audit(1738972288.727:112): avc: denied { mounton } for pid=5947 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 44.962379][ T5950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.990218][ T5940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.114691][ T39] audit: type=1400 audit(1738972288.887:113): avc: denied { module_request } for pid=5947 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.161281][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 45.171200][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 45.258579][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 45.268042][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 45.346058][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.349695][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.352831][ T5947] bridge_slave_0: entered allmulticast mode [ 45.356463][ T5947] bridge_slave_0: entered promiscuous mode [ 45.413373][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.415741][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.417877][ T5947] bridge_slave_1: entered allmulticast mode [ 45.420408][ T5947] bridge_slave_1: entered promiscuous mode [ 45.424032][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.427080][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.430239][ T5937] bridge_slave_0: entered allmulticast mode [ 45.433572][ T5937] bridge_slave_0: entered promiscuous mode [ 45.496862][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.499667][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.502637][ T5937] bridge_slave_1: entered allmulticast mode [ 45.506048][ T5937] bridge_slave_1: entered promiscuous mode [ 45.523926][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.527265][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.530151][ T5944] bridge_slave_0: entered allmulticast mode [ 45.533277][ T5944] bridge_slave_0: entered promiscuous mode [ 45.561345][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.576976][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.580072][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.582860][ T5944] bridge_slave_1: entered allmulticast mode [ 45.585858][ T5944] bridge_slave_1: entered promiscuous mode [ 45.600020][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.632275][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.634479][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.637226][ T5941] bridge_slave_0: entered allmulticast mode [ 45.639909][ T5941] bridge_slave_0: entered promiscuous mode [ 45.651724][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.655656][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.658434][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.660591][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.662697][ T5941] bridge_slave_1: entered allmulticast mode [ 45.664961][ T5941] bridge_slave_1: entered promiscuous mode [ 45.675821][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.679311][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.713802][ T5947] team0: Port device team_slave_0 added [ 45.764774][ T5947] team0: Port device team_slave_1 added [ 45.770472][ T5937] team0: Port device team_slave_0 added [ 45.774253][ T5944] team0: Port device team_slave_0 added [ 45.777024][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.789020][ T5937] team0: Port device team_slave_1 added [ 45.792687][ T5944] team0: Port device team_slave_1 added [ 45.795489][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.843462][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.846920][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.855726][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.869948][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.872391][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.880233][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.903885][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.906378][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.913570][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.917119][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.920090][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.929533][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.933989][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.938034][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.946265][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.953253][ T5941] team0: Port device team_slave_0 added [ 45.959469][ T5941] team0: Port device team_slave_1 added [ 45.979507][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.982397][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.992474][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.058596][ T5947] hsr_slave_0: entered promiscuous mode [ 46.061643][ T5947] hsr_slave_1: entered promiscuous mode [ 46.066290][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.068359][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.076173][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.101684][ T5937] hsr_slave_0: entered promiscuous mode [ 46.105340][ T5937] hsr_slave_1: entered promiscuous mode [ 46.107933][ T5937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.111200][ T5937] Cannot create hsr debugfs directory [ 46.113888][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.116753][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.127449][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.147643][ T5944] hsr_slave_0: entered promiscuous mode [ 46.150474][ T5944] hsr_slave_1: entered promiscuous mode [ 46.152965][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.156186][ T5944] Cannot create hsr debugfs directory [ 46.311759][ T5941] hsr_slave_0: entered promiscuous mode [ 46.316273][ T5941] hsr_slave_1: entered promiscuous mode [ 46.318876][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.321917][ T5941] Cannot create hsr debugfs directory [ 46.536394][ T5937] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.543111][ T5937] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.548986][ T5937] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.559033][ T5937] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.590050][ T5944] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.595426][ T5944] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.601589][ T5944] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.610479][ T5944] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.652259][ T5947] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.657738][ T5947] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.663051][ T5947] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.668339][ T5947] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.720247][ T5941] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.726531][ T5941] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.737660][ T5941] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.746018][ T5941] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.772988][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.795150][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.811668][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.831501][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.838397][ T213] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.841618][ T213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.863641][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.866629][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.876365][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.879284][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.894571][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.908169][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.911176][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.920570][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.935841][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.949943][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.962009][ T213] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.965576][ T213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.980255][ T5937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.993062][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.996113][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.004374][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.005766][ T5940] Bluetooth: hci2: command tx timeout [ 47.005846][ T5951] Bluetooth: hci3: command tx timeout [ 47.006202][ T5943] Bluetooth: hci0: command tx timeout [ 47.006965][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.010735][ T39] audit: type=1400 audit(1738972290.777:114): avc: denied { sys_module } for pid=5937 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.020544][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.026519][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.074710][ T5940] Bluetooth: hci1: command tx timeout [ 47.090846][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.126002][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.139520][ T5937] veth0_vlan: entered promiscuous mode [ 47.145431][ T5937] veth1_vlan: entered promiscuous mode [ 47.174569][ T5944] veth0_vlan: entered promiscuous mode [ 47.184761][ T5937] veth0_macvtap: entered promiscuous mode [ 47.187948][ T5944] veth1_vlan: entered promiscuous mode [ 47.193065][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.205918][ T5937] veth1_macvtap: entered promiscuous mode [ 47.219395][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.241027][ T5944] veth0_macvtap: entered promiscuous mode [ 47.246996][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.253274][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.269799][ T5944] veth1_macvtap: entered promiscuous mode [ 47.273739][ T5937] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.279305][ T5937] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.282770][ T5937] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.286484][ T5937] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.299833][ T5947] veth0_vlan: entered promiscuous mode [ 47.314007][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.319107][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.323865][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.328494][ T5941] veth0_vlan: entered promiscuous mode [ 47.333618][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.338205][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.343221][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.352476][ T5947] veth1_vlan: entered promiscuous mode [ 47.367771][ T5941] veth1_vlan: entered promiscuous mode [ 47.372807][ T5944] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.375906][ T5944] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.379302][ T5944] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.382911][ T5944] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.426793][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.426920][ T5941] veth0_macvtap: entered promiscuous mode [ 47.429219][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.432836][ T5941] veth1_macvtap: entered promiscuous mode [ 47.452434][ T5947] veth0_macvtap: entered promiscuous mode [ 47.458625][ T5947] veth1_macvtap: entered promiscuous mode [ 47.462442][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.467458][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.468258][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.473409][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.476475][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.479486][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.483035][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.488625][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.489315][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.491550][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.497635][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.500811][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.504174][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.508338][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.520587][ T5941] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.523835][ T5941] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.527777][ T5941] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.530689][ T5941] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.535957][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.540469][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.544749][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.548072][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.550793][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.553977][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.558750][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.561128][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.564653][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.576343][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.580321][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.584223][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.588541][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.592281][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.597026][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.602242][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.606891][ T5947] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.609545][ T5947] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.611929][ T5947] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.614671][ T5947] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.621927][ T5944] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.663019][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.663386][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 47.666747][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.673694][ T6003] gre0: Master is either lo or non-ether device [ 47.687588][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.690515][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.710137][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.717546][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.726897][ T6008] capability: warning: `syz.0.5' uses 32-bit capabilities (legacy support in use) [ 47.736833][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.739092][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.787945][ T6011] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 47.895056][ T6029] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.899353][ T6029] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9'. [ 47.902921][ T6029] Zero length message leads to an empty skb [ 47.949853][ T6035] Cannot find del_set index 85 as target [ 47.976220][ T6038] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13'. [ 48.023382][ T6040] syzkaller0: entered promiscuous mode [ 48.026069][ T6040] syzkaller0: entered allmulticast mode [ 48.030481][ T6040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14'. [ 48.066515][ T6041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12'. [ 48.074297][ T6004] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 48.234211][ T6004] usb 7-1: Using ep0 maxpacket: 8 [ 48.238432][ T6004] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 48.241377][ T6004] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 48.244678][ T6004] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 48.247937][ T6004] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 48.251137][ T6004] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 48.255256][ T6004] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 48.258045][ T6004] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.465614][ T6018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.471922][ T6018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.478472][ T6018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.482547][ T6018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.487383][ T6018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.491150][ T6018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.495646][ T6018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.500340][ T6018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.513523][ T6018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.517968][ T6018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.532936][ T6004] usb 7-1: usb_control_msg returned -32 [ 48.541115][ T6004] usbtmc 7-1:16.0: can't read capabilities [ 48.566227][ T64] usb 7-1: USB disconnect, device number 2 [ 48.675800][ T6063] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 48.678577][ T6063] UDF-fs: Scanning with blocksize 2048 failed [ 48.682515][ T6063] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 48.686820][ T6063] UDF-fs: Scanning with blocksize 4096 failed [ 48.793864][ T6073] netlink: 'syz.2.20': attribute type 3 has an invalid length. [ 48.800987][ T6073] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.20'. [ 48.841216][ T6077] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22'. [ 48.910254][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25'. [ 48.912962][ T6089] gre0: Master is either lo or non-ether device [ 48.940997][ T6093] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 48.985622][ T6100] xt_hashlimit: size too large, truncated to 1048576 [ 49.074352][ T5940] Bluetooth: hci2: command tx timeout [ 49.076053][ T5940] Bluetooth: hci0: command tx timeout [ 49.078061][ T5943] Bluetooth: hci3: command tx timeout [ 49.119235][ T6096] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 49.154334][ T5940] Bluetooth: hci1: command tx timeout [ 49.194602][ T6115] netlink: 'syz.3.34': attribute type 3 has an invalid length. [ 49.196841][ T6115] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.34'. [ 49.216910][ T6117] i2c i2c-1: Invalid block write size 34 [ 49.686611][ T39] kauditd_printk_skb: 121 callbacks suppressed [ 49.686625][ T39] audit: type=1400 audit(1738972293.457:236): avc: denied { sys_module } for pid=6159 comm="syz.3.50" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 49.702270][ T6160] netlink: 24 bytes leftover after parsing attributes in process `syz.3.50'. [ 50.170543][ T39] audit: type=1400 audit(1738972293.937:237): avc: denied { create } for pid=6168 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 50.176581][ T39] audit: type=1400 audit(1738972293.937:238): avc: denied { connect } for pid=6168 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 50.177565][ T6169] netlink: 'syz.0.52': attribute type 3 has an invalid length. [ 50.212251][ T39] audit: type=1400 audit(1738972293.977:239): avc: denied { mounton } for pid=6171 comm="syz.2.53" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 50.214625][ T6173] fuse: Unknown parameter 'smackfshat' [ 50.223214][ T39] audit: type=1400 audit(1738972293.987:240): avc: denied { module_load } for pid=6171 comm="syz.2.53" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=10359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 50.240272][ T6173] Invalid ELF header magic: != ELF [ 50.285370][ T39] audit: type=1400 audit(1738972294.047:241): avc: denied { create } for pid=6175 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.293774][ T39] audit: type=1400 audit(1738972294.057:242): avc: denied { write } for pid=6175 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.295671][ T6176] syz_tun: entered promiscuous mode [ 50.314258][ T6176] syz_tun: left promiscuous mode [ 50.321395][ T6184] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.350815][ T6186] netlink: 'syz.2.58': attribute type 3 has an invalid length. [ 50.377549][ T39] audit: type=1400 audit(1738972294.137:243): avc: denied { create } for pid=6187 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 50.399228][ T39] audit: type=1400 audit(1738972294.157:244): avc: denied { sys_admin } for pid=6187 comm="syz.3.59" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 50.411552][ T39] audit: type=1400 audit(1738972294.167:245): avc: denied { ioctl } for pid=6190 comm="syz.1.60" path="socket:[10361]" dev="sockfs" ino=10361 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.433640][ T6197] fuse: Bad value for 'fd' [ 50.497455][ T6197] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.501350][ T6197] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.504599][ T6197] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.507495][ T6197] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.511692][ T6197] vxlan0: entered promiscuous mode [ 50.513241][ T6197] vxlan0: entered allmulticast mode [ 50.520586][ T6205] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 50.520659][ T6197] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.527857][ T6205] Error validating options; rc = [-22] [ 50.529669][ T6197] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.529702][ T6197] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.529727][ T6197] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.561503][ T6209] SELinux: Context system_u:object_r:scanner_device_t:s0 is not valid (left unmapped). [ 50.720943][ T6216] netlink: 'syz.2.69': attribute type 3 has an invalid length. [ 50.761451][ T6218] qnx4: no qnx4 filesystem (no root dir). [ 51.009263][ T6225] netlink: 'syz.2.72': attribute type 1 has an invalid length. [ 51.027954][ T6225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.087231][ T6231] fuse: Bad value for 'user_id' [ 51.089177][ T6231] fuse: Bad value for 'user_id' [ 51.094771][ T6234] ======================================================= [ 51.094771][ T6234] WARNING: The mand mount option has been deprecated and [ 51.094771][ T6234] and is ignored by this kernel. Remove the mand [ 51.094771][ T6234] option from the mount to silence this warning. [ 51.094771][ T6234] ======================================================= [ 51.164247][ T5951] Bluetooth: hci2: command tx timeout [ 51.166894][ T5943] Bluetooth: hci3: command tx timeout [ 51.169850][ T5940] Bluetooth: hci0: command tx timeout [ 51.246697][ T6253] xt_HMARK: spi-set and port-set can't be combined [ 51.369879][ T6264] netlink: 'syz.0.86': attribute type 3 has an invalid length. [ 51.416142][ T6267] syz.0.88 uses obsolete (PF_INET,SOCK_PACKET) [ 51.570988][ T6287] netlink: 'syz.0.93': attribute type 3 has an invalid length. [ 51.650039][ T6292] netlink: 'syz.3.96': attribute type 7 has an invalid length. [ 51.691872][ T6299] netlink: 'syz.3.97': attribute type 3 has an invalid length. [ 51.725299][ T6301] gre0: Master is either lo or non-ether device [ 51.763974][ T6305] process 'syz.0.100' launched './file2' with NULL argv: empty string added [ 51.768906][ T6308] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.771507][ T6308] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.774150][ T6308] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.776734][ T6308] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.926669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.037373][ T6326] dns_resolver: Unsupported server list version (0) [ 52.210519][ T6328] mmap: syz.0.107 (6328) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.360613][ T6336] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.363171][ T6336] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.366061][ T6336] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.368858][ T6336] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.399723][ T6338] gre0: Master is either lo or non-ether device [ 52.525284][ T6344] trusted_key: syz.0.114 sent an empty control message without MSG_MORE. [ 52.771091][ T6353] __nla_validate_parse: 24 callbacks suppressed [ 52.771107][ T6353] netlink: 260 bytes leftover after parsing attributes in process `syz.1.116'. [ 52.848838][ T6361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.120'. [ 52.865873][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'. [ 52.870036][ T6363] team0: Cannot enslave team device to itself [ 52.872053][ T6365] gre0: Master is either lo or non-ether device [ 53.070880][ T6369] capability: warning: `syz.2.123' uses deprecated v2 capabilities in a way that may be insecure [ 53.093915][ T6385] netlink: 24 bytes leftover after parsing attributes in process `syz.3.129'. [ 53.109707][ T6385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.129'. [ 53.192884][ T6389] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.195639][ T6389] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.198142][ T6389] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.200803][ T6389] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.234689][ T5940] Bluetooth: hci0: command tx timeout [ 53.236968][ T5940] Bluetooth: hci3: command tx timeout [ 53.239268][ T5943] Bluetooth: hci2: command tx timeout [ 53.291180][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'. [ 53.294013][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 53.297405][ T6398] netlink: 44 bytes leftover after parsing attributes in process `syz.2.135'. [ 53.367428][ T6404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'. [ 53.409490][ T6408] overlayfs: missing 'lowerdir' [ 53.434974][ T6411] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.140'. [ 53.519716][ T6415] gre0: Master is either lo or non-ether device [ 53.725029][ T5940] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 53.727689][ T5940] Bluetooth: hci1: Injecting HCI hardware error event [ 53.730673][ T5951] Bluetooth: hci1: hardware error 0x00 [ 53.814271][ T6438] validate_nla: 6 callbacks suppressed [ 53.814286][ T6438] netlink: 'syz.3.150': attribute type 21 has an invalid length. [ 53.820150][ T6438] netlink: 'syz.3.150': attribute type 4 has an invalid length. [ 53.826320][ T6438] netlink: 'syz.3.150': attribute type 5 has an invalid length. [ 53.855946][ T6444] gre0: Master is either lo or non-ether device [ 53.898638][ T6448] overlayfs: failed to get index nlink (file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa, err=-61) [ 53.965091][ T6452] netlink: 'syz.3.157': attribute type 21 has an invalid length. [ 53.968977][ T6460] tc_dump_action: action bad kind [ 54.098561][ T6469] vlan2: entered promiscuous mode [ 54.100598][ T6469] erspan0: entered promiscuous mode [ 54.192685][ T6478] gre0: Master is either lo or non-ether device [ 54.232021][ T6408] overlayfs: statfs failed on './file0' [ 54.833716][ T39] kauditd_printk_skb: 59 callbacks suppressed [ 54.833732][ T39] audit: type=1400 audit(1738972298.597:305): avc: denied { create } for pid=6503 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 54.843680][ T39] audit: type=1400 audit(1738972298.597:306): avc: denied { connect } for pid=6503 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 54.860493][ T39] audit: type=1400 audit(1738972298.597:307): avc: denied { listen } for pid=6503 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 54.862362][ T6508] gre0: Master is either lo or non-ether device [ 54.879808][ T39] audit: type=1400 audit(1738972298.607:308): avc: denied { accept } for pid=6503 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 55.067138][ T6493] Set syz1 is full, maxelem 65536 reached [ 55.095901][ T39] audit: type=1400 audit(1738972298.867:309): avc: denied { write } for pid=6514 comm="syz.3.178" path="socket:[12571]" dev="sockfs" ino=12571 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 55.102825][ T39] audit: type=1400 audit(1738972298.867:310): avc: denied { nlmsg_read } for pid=6514 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 55.202614][ T39] audit: type=1400 audit(1738972298.967:311): avc: denied { create } for pid=6531 comm="syz.2.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 55.203405][ T6532] netlink: 'syz.2.184': attribute type 25 has an invalid length. [ 55.238871][ T6537] netlink: 'syz.2.185': attribute type 1 has an invalid length. [ 55.247757][ T6537] bond2: entered promiscuous mode [ 55.249444][ T6537] 8021q: adding VLAN 0 to HW filter on device bond2 [ 55.258220][ T6537] 8021q: adding VLAN 0 to HW filter on device bond2 [ 55.260356][ T6537] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 55.263222][ T6537] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 55.268993][ T6537] bond2: (slave ip6gre1): making interface the new active one [ 55.271597][ T6537] ip6gre1: entered promiscuous mode [ 55.273955][ T6537] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 55.360641][ T6550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.417049][ T6550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.472665][ T6563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.477021][ T6550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.482377][ T6562] xt_cgroup: path and classid specified [ 55.486185][ T39] audit: type=1400 audit(1738972299.257:312): avc: denied { create } for pid=6561 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.497828][ T39] audit: type=1400 audit(1738972299.257:313): avc: denied { getopt } for pid=6561 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.518748][ T39] audit: type=1400 audit(1738972299.287:314): avc: denied { ioctl } for pid=6566 comm="syz.0.198" path="mnt:[4026532886]" dev="nsfs" ino=4026532886 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.696926][ T6595] netlink: 'syz.1.208': attribute type 1 has an invalid length. [ 55.795846][ T5951] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 56.018602][ T6613] netlink: 'syz.2.215': attribute type 4 has an invalid length. [ 56.098532][ T6621] netlink: 'syz.1.217': attribute type 1 has an invalid length. [ 56.248443][ T6629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.288835][ T6634] ieee802154 phy0 wpan0: encryption failed: -22 [ 56.363678][ T6645] gre0: Master is either lo or non-ether device [ 56.397234][ T6652] snd_dummy snd_dummy.0: control 0:33554432:0:syz1:0 is already present [ 56.400428][ T6652] snd_dummy snd_dummy.0: control 0:33554432:0:syz1:0 is already present [ 56.402838][ T6652] snd_dummy snd_dummy.0: control 0:33554432:0:syz1:0 is already present [ 56.405379][ T6652] snd_dummy snd_dummy.0: control 0:33554432:0:syz1:0 is already present [ 56.409481][ T6652] snd_dummy snd_dummy.0: control 0:33554432:0:syz1:0 is already present [ 56.412177][ T6652] snd_dummy snd_dummy.0: control 0:33554432:0:syz1:0 is already present [ 56.414751][ T6652] snd_dummy snd_dummy.0: control 0:33554432:0:syz1:0 is already present [ 56.417292][ T6652] snd_dummy snd_dummy.0: control 0:33554432:0:syz1:0 is already present [ 56.420714][ T6652] snd_dummy snd_dummy.0: control 0:33554432:0:syz1:0 is already present [ 56.423585][ T6652] snd_dummy snd_dummy.0: control 0:33554432:0:syz1:0 is already present [ 56.426945][ T6652] snd_dummy snd_dummy.0: control 0:33554432:0:syz1:0 is already present [ 56.429358][ T6652] snd_dummy snd_dummy.0: control 0:33554432:0:syz1:0 is already present [ 56.432024][ T6652] snd_dummy snd_dummy.0: control 0:33554432:0:syz1:0 is already present [ 56.434844][ T6652] snd_dummy snd_dummy.0: control 0:33554432:0:syz1:0 is already present [ 56.437333][ T6652] snd_dummy snd_dummy.0: control 0:33554432:0:syz1:0 is already present [ 56.440244][ T6652] snd_dummy snd_dummy.0: control 0:33554432:0:syz1:0 is already present [ 56.442893][ T6652] snd_dummy snd_dummy.0: control 0:33554432:0:syz1:0 is already present [ 56.445813][ T6652] snd_dummy snd_dummy.0: control 0:33554432:0:syz1:0 is already present [ 56.451704][ T6656] netlink: 'syz.0.232': attribute type 6 has an invalid length. [ 56.591708][ T6675] gre0: Master is either lo or non-ether device [ 56.792407][ T6708] gre0: Master is either lo or non-ether device [ 56.840573][ T6720] tipc: Enabling not permitted [ 56.842862][ T6720] tipc: Enabling of bearer rejected, failed to enable media [ 56.847053][ T6722] tipc: Enabling not permitted [ 56.849762][ T6722] tipc: Enabling of bearer rejected, failed to enable media [ 56.878629][ T6724] bond3: entered promiscuous mode [ 56.880467][ T6724] 8021q: adding VLAN 0 to HW filter on device bond3 [ 56.985973][ T6738] overlay: ./bus is not a directory [ 56.996471][ T6740] gre0: Master is either lo or non-ether device [ 57.297640][ T6792] Cannot find del_set index 2 as target [ 57.537423][ T6826] IPVS: set_ctl: invalid protocol: 108 100.1.1.1:20000 [ 57.778204][ T6858] __nla_validate_parse: 28 callbacks suppressed [ 57.778219][ T6858] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.308'. [ 57.786814][ T6858] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 58.056544][ T6881] dns_resolver: Unsupported server list version (0) [ 58.224642][ T6883] can: request_module (can-proto-0) failed. [ 58.303802][ T6893] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.307718][ T6893] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.391224][ T6893] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.397507][ T6893] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.496983][ T6893] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.501249][ T6893] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.534720][ T6916] netlink: 52 bytes leftover after parsing attributes in process `syz.3.326'. [ 58.583190][ T6893] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.587081][ T6893] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.596360][ T6920] netlink: 696 bytes leftover after parsing attributes in process `syz.3.328'. [ 58.683736][ T6893] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.694138][ T6893] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.699765][ T6893] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.702139][ T6893] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.707372][ T6893] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.709753][ T6893] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.714945][ T6893] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.717311][ T6893] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.750988][ T6930] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.332'. [ 58.793869][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'. [ 58.796764][ T6932] gre0: Master is either lo or non-ether device [ 58.835374][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'. [ 58.894519][ T6938] netlink: 16 bytes leftover after parsing attributes in process `syz.0.335'. [ 58.943662][ T6941] vivid-000: ================= START STATUS ================= [ 58.946103][ T6941] vivid-000: Test Pattern: 75% Colorbar [ 58.947840][ T6941] vivid-000: Fill Percentage of Frame: 100 [ 58.949545][ T6941] vivid-000: Horizontal Movement: No Movement [ 58.951294][ T6941] vivid-000: Vertical Movement: No Movement [ 58.953005][ T6941] vivid-000: OSD Text Mode: All [ 58.956919][ T6941] vivid-000: Show Border: false [ 58.958365][ T6941] vivid-000: Show Square: false [ 58.959786][ T6941] vivid-000: Sensor Flipped Horizontally: false [ 58.961590][ T6941] vivid-000: Sensor Flipped Vertically: false [ 58.963344][ T6941] vivid-000: Insert SAV Code in Image: false [ 58.965991][ T6941] vivid-000: Insert EAV Code in Image: false [ 58.968356][ T6941] vivid-000: Insert Video Guard Band: false [ 58.970077][ T6941] vivid-000: Reduced Framerate: false [ 58.971629][ T6941] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 58.973832][ T6941] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 58.976786][ T6941] vivid-000: Enable Capture Cropping: true [ 58.978686][ T6941] vivid-000: Enable Capture Composing: true [ 58.980529][ T6941] vivid-000: Enable Capture Scaler: true [ 58.982213][ T6941] vivid-000: Timestamp Source: End of Frame [ 58.984029][ T6941] vivid-000: Colorspace: sRGB [ 58.986316][ T6941] vivid-000: Transfer Function: Default [ 58.989109][ T6941] vivid-000: Y'CbCr Encoding: Default [ 58.990919][ T6941] vivid-000: HSV Encoding: Hue 0-179 [ 58.992512][ T6941] vivid-000: Quantization: Default [ 58.995595][ T6941] vivid-000: Apply Alpha To Red Only: false [ 58.997429][ T6941] vivid-000: Standard Aspect Ratio: 4x3 [ 58.999558][ T6941] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 59.002584][ T6941] vivid-000: DV Timings: 640x480p59 inactive [ 59.006154][ T6941] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 59.010769][ T6941] vivid-000: Maximum EDID Blocks: 2 [ 59.012769][ T6941] vivid-000: Limited RGB Range (16-235): false [ 59.015920][ T6941] vivid-000: Rx RGB Quantization Range: Automatic [ 59.017870][ T6941] vivid-000: Power Present: 0x00000001 [ 59.019540][ T6941] tpg source WxH: 320x180 (Luma) [ 59.021122][ T6941] tpg field: 1 [ 59.022168][ T6941] tpg crop: 320x180@0x0 [ 59.023548][ T6941] tpg compose: 320x180@0x0 [ 59.025599][ T6941] tpg colorspace: 8 [ 59.026739][ T6941] tpg transfer function: 0/0 [ 59.028139][ T6941] tpg quantization: 0/0 [ 59.029427][ T6941] tpg RGB range: 0/2 [ 59.030619][ T6941] vivid-000: ================== END STATUS ================== [ 59.158844][ T6960] validate_nla: 7 callbacks suppressed [ 59.158859][ T6960] netlink: 'syz.3.344': attribute type 1 has an invalid length. [ 59.169567][ T6960] bond1: entered promiscuous mode [ 59.171920][ T6960] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.254954][ T6967] sctp: [Deprecated]: syz.3.347 (pid 6967) Use of struct sctp_assoc_value in delayed_ack socket option. [ 59.254954][ T6967] Use struct sctp_sack_info instead [ 59.331849][ T6977] loop6: detected capacity change from 0 to 524287999 [ 59.335681][ T6977] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 59.339209][ T6977] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 59.342129][ T6977] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 59.345658][ T6977] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 59.380301][ T6989] netlink: 'syz.2.356': attribute type 1 has an invalid length. [ 59.388286][ T6989] bond4: entered promiscuous mode [ 59.389984][ T6989] 8021q: adding VLAN 0 to HW filter on device bond4 [ 59.390791][ T6992] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6992 comm=syz.0.355 [ 59.507874][ T7007] netlink: 40 bytes leftover after parsing attributes in process `syz.2.361'. [ 59.595442][ T7019] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 59.598284][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'. [ 59.615900][ T7019] bond5: entered promiscuous mode [ 59.618327][ T7019] 8021q: adding VLAN 0 to HW filter on device bond5 [ 59.621045][ T7022] gre0: Master is either lo or non-ether device [ 59.660704][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 59.834696][ T39] kauditd_printk_skb: 55 callbacks suppressed [ 59.834706][ T39] audit: type=1400 audit(1738972303.607:370): avc: denied { accept } for pid=7053 comm="syz.2.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 59.860953][ T7056] gre0: Master is either lo or non-ether device [ 59.866204][ T7058] netlink: 'syz.2.382': attribute type 1 has an invalid length. [ 59.875106][ T7058] bond6: entered promiscuous mode [ 59.876766][ T7058] 8021q: adding VLAN 0 to HW filter on device bond6 [ 60.000955][ T39] audit: type=1400 audit(1738972303.767:371): avc: denied { create } for pid=7075 comm="syz.1.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 60.031272][ T7085] gre0: Master is either lo or non-ether device [ 60.035697][ T39] audit: type=1400 audit(1738972303.807:372): avc: denied { write } for pid=7084 comm="syz.1.391" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.076211][ T7090] netlink: 'syz.1.394': attribute type 1 has an invalid length. [ 60.083373][ T7090] bond1: entered promiscuous mode [ 60.085699][ T7090] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.220998][ T7112] gre0: Master is either lo or non-ether device [ 60.268932][ T7119] netlink: 'syz.3.404': attribute type 1 has an invalid length. [ 60.283149][ T7119] bond2: entered promiscuous mode [ 60.285355][ T7119] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.304200][ T35] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 60.457527][ T35] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 60.460819][ T35] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 60.465538][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 60.469642][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 60.474297][ T35] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 60.479643][ T35] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.483234][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.494653][ T35] usb 7-1: config 0 descriptor?? [ 60.502760][ T7088] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 60.506496][ T39] audit: type=1400 audit(1738972304.277:373): avc: denied { rename } for pid=5336 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.513547][ T39] audit: type=1400 audit(1738972304.277:374): avc: denied { unlink } for pid=5336 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.520187][ T39] audit: type=1400 audit(1738972304.277:375): avc: denied { create } for pid=5336 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.523906][ T7135] cgroup2: Unknown parameter 'memoryGrecursiveprot' [ 60.529297][ T39] audit: type=1400 audit(1738972304.297:376): avc: denied { listen } for pid=7134 comm="syz.1.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.537106][ T39] audit: type=1400 audit(1738972304.297:377): avc: denied { accept } for pid=7134 comm="syz.1.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.544965][ T39] audit: type=1400 audit(1738972304.297:378): avc: denied { create } for pid=7134 comm="syz.1.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 60.551610][ T39] audit: type=1400 audit(1738972304.297:379): avc: denied { ioctl } for pid=7134 comm="syz.1.410" path="socket:[11161]" dev="sockfs" ino=11161 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 60.912450][ T35] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 60.919194][ T35] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 60.929529][ T35] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 61.114001][ T7088] netlink: 'syz.2.393': attribute type 10 has an invalid length. [ 61.123838][ T7088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.203149][ T25] usb 7-1: USB disconnect, device number 3 [ 61.564031][ T7143] selinuxfs: Unknown parameter 'rdma ' [ 61.759350][ T7146] kvm: kvm [7144]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 61.779511][ T7146] kvm: kvm [7144]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 61.782412][ T7146] kvm: kvm [7144]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 61.796620][ T7146] kvm_intel: kvm [7144]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 63.189465][ T7163] __nla_validate_parse: 7 callbacks suppressed [ 63.189476][ T7163] netlink: 40 bytes leftover after parsing attributes in process `syz.1.418'. [ 63.403706][ T7173] netlink: 'syz.0.421': attribute type 3 has an invalid length. [ 63.407567][ T7173] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.421'. [ 63.461813][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 63.464931][ T7183] gre0: Master is either lo or non-ether device [ 63.520180][ T7188] tipc: Can't bind to reserved service type 2 [ 63.577526][ T7192] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 63.579415][ T7192] syzkaller0: group set to 0 [ 63.664896][ T7193] Invalid logical block size (580) [ 63.733260][ T7202] netlink: 'syz.1.433': attribute type 3 has an invalid length. [ 63.737136][ T7202] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.433'. [ 63.763283][ T7204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.434'. [ 63.769195][ T7204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.434'. [ 63.805520][ T7209] sctp: [Deprecated]: syz.1.436 (pid 7209) Use of struct sctp_assoc_value in delayed_ack socket option. [ 63.805520][ T7209] Use struct sctp_sack_info instead [ 63.878814][ T7220] netlink: 24 bytes leftover after parsing attributes in process `syz.0.439'. [ 63.918359][ T7226] netlink: 'syz.1.441': attribute type 10 has an invalid length. [ 63.922443][ T7226] syz_tun: entered promiscuous mode [ 63.929605][ T7226] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 64.175393][ T5939] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 64.328987][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.333019][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.337001][ T5939] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 64.340904][ T5939] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 64.344528][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.352246][ T5939] usb 6-1: config 0 descriptor?? [ 64.401322][ T7255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.442'. [ 64.519907][ T7265] netlink: 'syz.0.443': attribute type 3 has an invalid length. [ 64.522322][ T7265] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.443'. [ 64.551757][ T7268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.444'. [ 64.647956][ T7282] netlink: 'syz.3.448': attribute type 1 has an invalid length. [ 64.693373][ T7284] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 64.758854][ T5939] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 64.764888][ T5939] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 64.961958][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 64.961973][ T39] audit: type=1400 audit(1738972308.727:390): avc: denied { setattr } for pid=7306 comm="iou-wrk-7307" name="" dev="pipefs" ino=5818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 65.212708][ T7312] netlink: 'syz.3.458': attribute type 5 has an invalid length. [ 65.852608][ T7335] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 65.859623][ T39] audit: type=1400 audit(1738972309.627:391): avc: denied { ioctl } for pid=7333 comm="syz.2.465" path="/dev/ptp1" dev="devtmpfs" ino=1288 ioctlcmd=0x3d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 65.860730][ T7335] ata1.00: invalid multi_count 1 ignored [ 65.869778][ T39] audit: type=1400 audit(1738972309.627:392): avc: denied { ioctl } for pid=7333 comm="syz.2.465" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.277843][ T7357] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.281264][ T7357] IPv6: NLM_F_CREATE should be set when creating new route [ 66.283482][ T7357] IPv6: NLM_F_CREATE should be set when creating new route [ 66.352162][ T39] audit: type=1400 audit(1738972310.117:393): avc: denied { bind } for pid=7363 comm="syz.3.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 66.359728][ T39] audit: type=1400 audit(1738972310.117:394): avc: denied { name_bind } for pid=7363 comm="syz.3.473" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 66.366165][ T39] audit: type=1400 audit(1738972310.117:395): avc: denied { node_bind } for pid=7363 comm="syz.3.473" saddr=::ffff:224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 66.373406][ T39] audit: type=1400 audit(1738972310.127:396): avc: denied { name_connect } for pid=7363 comm="syz.3.473" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 66.382575][ T39] audit: type=1400 audit(1738972310.157:397): avc: denied { name_connect } for pid=7366 comm="syz.0.474" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 66.392294][ T39] audit: type=1400 audit(1738972310.157:398): avc: denied { mount } for pid=7366 comm="syz.0.474" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 66.398943][ T39] audit: type=1400 audit(1738972310.157:399): avc: denied { unmount } for pid=7366 comm="syz.0.474" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 66.402494][ T7367] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request [ 66.507023][ T7381] 9pnet: p9_errstr2errno: server reported unknown error @ [ 66.570764][ T7388] netlink: 'syz.3.483': attribute type 3 has an invalid length. [ 66.599642][ T7390] bad cache= option: none [ 66.599642][ T7390] [ 66.601648][ T7390] CIFS: VFS: bad cache= option: none [ 66.611402][ T7390] netlink: 'syz.3.484': attribute type 1 has an invalid length. [ 66.613879][ T7390] netlink: 'syz.3.484': attribute type 2 has an invalid length. [ 66.659397][ T7396] NILFS (nbd2): device size too small [ 66.715749][ T7405] overlayfs: failed to clone upperpath [ 66.719300][ T7403] overlayfs: failed to clone upperpath [ 66.752128][ T7409] netlink: 'syz.2.493': attribute type 3 has an invalid length. [ 66.774926][ T7411] RDS: rds_bind could not find a transport for fe80::13, load rds_tcp or rds_rdma? [ 66.877501][ T5939] usb 6-1: USB disconnect, device number 2 [ 66.988962][ T7449] netlink: 'syz.1.505': attribute type 3 has an invalid length. [ 67.974698][ T7479] netlink: 'syz.2.515': attribute type 3 has an invalid length. [ 68.067212][ T7484] 8021q: adding VLAN 0 to HW filter on device bond7 [ 68.079411][ T7485] 8021q: adding VLAN 0 to HW filter on device bond7 [ 68.082383][ T7485] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 68.086098][ T7485] bond7: (slave wireguard0): Error -95 calling set_mac_address [ 68.097292][ T5979] hid-generic 0008:0007:0006.0004: item fetching failed at offset 0/6 [ 68.101389][ T5979] hid-generic 0008:0007:0006.0004: probe with driver hid-generic failed with error -22 [ 68.110011][ T7492] netlink: 'syz.1.519': attribute type 3 has an invalid length. [ 68.219201][ T7501] 9pnet: Found fid 0 not clunked [ 68.366458][ T7507] __nla_validate_parse: 17 callbacks suppressed [ 68.366470][ T7507] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.525'. [ 68.571803][ T7524] xt_CT: You must specify a L4 protocol and not use inversions on it [ 68.629948][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.533'. [ 68.637654][ T7527] vlan3: entered allmulticast mode [ 68.762407][ T7536] overlayfs: failed to resolve './file0': -2 [ 68.771756][ T7536] tipc: Started in network mode [ 68.773318][ T7536] tipc: Node identity 7, cluster identity 4711 [ 68.775453][ T7536] tipc: Node number set to 7 [ 69.057414][ T7551] netlink: 40 bytes leftover after parsing attributes in process `syz.3.542'. [ 69.134366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.186544][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 69.189492][ T7561] gre0: Master is either lo or non-ether device [ 69.230629][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'. [ 69.296175][ T7576] Trying to write to read-only block-device nullb0 [ 69.324354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.426896][ T7587] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 69.504823][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 69.507745][ T7593] gre0: Master is either lo or non-ether device [ 69.582271][ T7603] netlink: 16 bytes leftover after parsing attributes in process `syz.1.563'. [ 69.678463][ T7610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.565'. [ 69.688818][ T7610] program syz.1.565 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.846525][ T7637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.572'. [ 70.085790][ T39] kauditd_printk_skb: 20 callbacks suppressed [ 70.085805][ T39] audit: type=1400 audit(1738972313.857:420): avc: denied { bind } for pid=7656 comm="syz.1.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 70.098695][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.581'. [ 70.161331][ T7662] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.165576][ T7662] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.166423][ T7661] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=52 sclass=netlink_tcpdiag_socket pid=7661 comm=syz.2.582 [ 70.169118][ T7662] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.178859][ T7662] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.183849][ T39] audit: type=1400 audit(1738972313.947:421): avc: denied { ioctl } for pid=7660 comm="syz.2.582" path="socket:[16843]" dev="sockfs" ino=16843 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 70.267491][ T7671] FAULT_INJECTION: forcing a failure. [ 70.267491][ T7671] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 70.272893][ T7671] CPU: 0 UID: 0 PID: 7671 Comm: syz.2.585 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 70.272915][ T7671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.272924][ T7671] Call Trace: [ 70.272929][ T7671] [ 70.272936][ T7671] dump_stack_lvl+0x16c/0x1f0 [ 70.272975][ T7671] should_fail_ex+0x50a/0x650 [ 70.273006][ T7671] _copy_from_user+0x2e/0xd0 [ 70.273022][ T7671] copy_msghdr_from_user+0x99/0x160 [ 70.273040][ T7671] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 70.273059][ T7671] ? __lock_acquire+0xcc5/0x3c40 [ 70.273089][ T7671] ___sys_sendmsg+0xff/0x1e0 [ 70.273116][ T7671] ? __pfx____sys_sendmsg+0x10/0x10 [ 70.273144][ T7671] ? trace_lock_acquire+0x14e/0x1f0 [ 70.273177][ T7671] __sys_sendmmsg+0x201/0x420 [ 70.273200][ T7671] ? __pfx___sys_sendmmsg+0x10/0x10 [ 70.273227][ T7671] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 70.273253][ T7671] ? fput+0x67/0x440 [ 70.273273][ T7671] ? ksys_write+0x1ba/0x250 [ 70.273297][ T7671] ? __pfx_ksys_write+0x10/0x10 [ 70.273325][ T7671] __x64_sys_sendmmsg+0x9c/0x100 [ 70.273345][ T7671] ? lockdep_hardirqs_on+0x7c/0x110 [ 70.273360][ T7671] do_syscall_64+0xcd/0x250 [ 70.273379][ T7671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.273399][ T7671] RIP: 0033:0x7f437998cde9 [ 70.273411][ T7671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.273426][ T7671] RSP: 002b:00007f437a7ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 70.273441][ T7671] RAX: ffffffffffffffda RBX: 00007f4379ba5fa0 RCX: 00007f437998cde9 [ 70.273451][ T7671] RDX: 0492492492492627 RSI: 00004000000000c0 RDI: 0000000000000003 [ 70.273459][ T7671] RBP: 00007f437a7ba090 R08: 0000000000000000 R09: 0000000000000000 [ 70.273468][ T7671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.273476][ T7671] R13: 0000000000000000 R14: 00007f4379ba5fa0 R15: 00007ffc323d7cf8 [ 70.273494][ T7671] [ 70.535938][ T7696] xt_socket: unknown flags 0x8 [ 70.568432][ T7702] FAULT_INJECTION: forcing a failure. [ 70.568432][ T7702] name failslab, interval 1, probability 0, space 0, times 1 [ 70.572628][ T7702] CPU: 0 UID: 0 PID: 7702 Comm: syz.1.599 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 70.572640][ T7702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.572645][ T7702] Call Trace: [ 70.572649][ T7702] [ 70.572653][ T7702] dump_stack_lvl+0x16c/0x1f0 [ 70.572666][ T7702] should_fail_ex+0x50a/0x650 [ 70.572680][ T7702] ? fs_reclaim_acquire+0xae/0x150 [ 70.572694][ T7702] should_failslab+0xc2/0x120 [ 70.572704][ T7702] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 70.572714][ T7702] ? __alloc_skb+0x2b1/0x380 [ 70.572726][ T7702] __alloc_skb+0x2b1/0x380 [ 70.572736][ T7702] ? __pfx___alloc_skb+0x10/0x10 [ 70.572747][ T7702] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 70.572760][ T7702] netlink_alloc_large_skb+0x69/0x130 [ 70.572771][ T7702] netlink_sendmsg+0x689/0xd70 [ 70.572782][ T7702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.572797][ T7702] ____sys_sendmsg+0xaaf/0xc90 [ 70.572810][ T7702] ? copy_msghdr_from_user+0x10b/0x160 [ 70.572821][ T7702] ? __pfx_____sys_sendmsg+0x10/0x10 [ 70.572833][ T7702] ? __lock_acquire+0xcc5/0x3c40 [ 70.572850][ T7702] ___sys_sendmsg+0x135/0x1e0 [ 70.572861][ T7702] ? __pfx____sys_sendmsg+0x10/0x10 [ 70.572877][ T7702] ? trace_lock_acquire+0x14e/0x1f0 [ 70.572894][ T7702] __sys_sendmmsg+0x201/0x420 [ 70.572906][ T7702] ? __pfx___sys_sendmmsg+0x10/0x10 [ 70.572921][ T7702] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 70.572935][ T7702] ? fput+0x67/0x440 [ 70.572945][ T7702] ? ksys_write+0x1ba/0x250 [ 70.572957][ T7702] ? __pfx_ksys_write+0x10/0x10 [ 70.572972][ T7702] __x64_sys_sendmmsg+0x9c/0x100 [ 70.572983][ T7702] ? lockdep_hardirqs_on+0x7c/0x110 [ 70.572992][ T7702] do_syscall_64+0xcd/0x250 [ 70.573002][ T7702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.573014][ T7702] RIP: 0033:0x7fe8f638cde9 [ 70.573022][ T7702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.573030][ T7702] RSP: 002b:00007fe8f71c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 70.573039][ T7702] RAX: ffffffffffffffda RBX: 00007fe8f65a5fa0 RCX: 00007fe8f638cde9 [ 70.573044][ T7702] RDX: 0492492492492627 RSI: 00004000000000c0 RDI: 0000000000000003 [ 70.573050][ T7702] RBP: 00007fe8f71c5090 R08: 0000000000000000 R09: 0000000000000000 [ 70.573055][ T7702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.573059][ T7702] R13: 0000000000000000 R14: 00007fe8f65a5fa0 R15: 00007ffee783f968 [ 70.573070][ T7702] [ 70.683765][ T39] audit: type=1326 audit(1738972314.447:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.2.601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437998cde9 code=0x7ff00000 [ 70.684624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.691093][ T39] audit: type=1326 audit(1738972314.447:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.2.601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437998cde9 code=0x7ff00000 [ 70.694058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.700771][ T39] audit: type=1326 audit(1738972314.447:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.2.601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437998cde9 code=0x7ff00000 [ 70.710853][ T39] audit: type=1326 audit(1738972314.447:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.2.601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437998cde9 code=0x7ff00000 [ 70.719288][ T39] audit: type=1326 audit(1738972314.447:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.2.601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437998cde9 code=0x7ff00000 [ 70.726389][ T39] audit: type=1326 audit(1738972314.447:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.2.601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437998cde9 code=0x7ff00000 [ 70.733145][ T39] audit: type=1326 audit(1738972314.447:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.2.601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437998cde9 code=0x7ff00000 [ 70.740397][ T39] audit: type=1326 audit(1738972314.447:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.2.601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437998cde9 code=0x7ff00000 [ 70.928768][ T7720] /dev/sg0: Can't lookup blockdev [ 71.158282][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.160446][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.163367][ T1418] ================================================================== [ 71.165817][ T1418] BUG: KASAN: slab-use-after-free in tty_write_room+0x7d/0x90 [ 71.168171][ T1418] Read of size 8 at addr ffff88804e679020 by task aoe_tx0/1418 [ 71.173054][ T1418] [ 71.173991][ T1418] CPU: 1 UID: 0 PID: 1418 Comm: aoe_tx0 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 71.174002][ T1418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.174008][ T1418] Call Trace: [ 71.174012][ T1418] [ 71.174015][ T1418] dump_stack_lvl+0x116/0x1f0 [ 71.174029][ T1418] print_report+0xc3/0x620 [ 71.174039][ T1418] ? __virt_addr_valid+0x5e/0x590 [ 71.174048][ T1418] ? __phys_addr+0xc6/0x150 [ 71.174057][ T1418] kasan_report+0xd9/0x110 [ 71.174066][ T1418] ? tty_write_room+0x7d/0x90 [ 71.174081][ T1418] ? tty_write_room+0x7d/0x90 [ 71.174094][ T1418] tty_write_room+0x7d/0x90 [ 71.174106][ T1418] handle_tx+0x151/0x630 [ 71.174120][ T1418] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 71.174136][ T1418] dev_hard_start_xmit+0x9a/0x7b0 [ 71.174146][ T1418] __dev_queue_xmit+0x7f0/0x43e0 [ 71.174157][ T1418] ? __pfx___dev_queue_xmit+0x10/0x10 [ 71.174165][ T1418] ? __pfx___lock_acquire+0x10/0x10 [ 71.174179][ T1418] ? lock_acquire.part.0+0x11b/0x380 [ 71.174191][ T1418] ? find_held_lock+0x2d/0x110 [ 71.174200][ T1418] ? find_held_lock+0x2d/0x110 [ 71.174213][ T1418] tx+0xcc/0x190 [ 71.174226][ T1418] ? __pfx_tx+0x10/0x10 [ 71.174238][ T1418] kthread+0x1e7/0x3c0 [ 71.174249][ T1418] ? __pfx_kthread+0x10/0x10 [ 71.174260][ T1418] ? __pfx_default_wake_function+0x10/0x10 [ 71.174273][ T1418] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.174282][ T1418] ? __kthread_parkme+0x148/0x220 [ 71.174291][ T1418] ? __pfx_kthread+0x10/0x10 [ 71.174302][ T1418] kthread+0x3af/0x750 [ 71.174312][ T1418] ? __pfx_kthread+0x10/0x10 [ 71.174327][ T1418] ? __pfx_kthread+0x10/0x10 [ 71.174337][ T1418] ret_from_fork+0x45/0x80 [ 71.174348][ T1418] ? __pfx_kthread+0x10/0x10 [ 71.174358][ T1418] ret_from_fork_asm+0x1a/0x30 [ 71.174370][ T1418] [ 71.174374][ T1418] [ 71.228814][ T1418] Allocated by task 7716: [ 71.230297][ T1418] kasan_save_stack+0x33/0x60 [ 71.231722][ T1418] kasan_save_track+0x14/0x30 [ 71.233133][ T1418] __kasan_kmalloc+0xaa/0xb0 [ 71.234508][ T1418] alloc_tty_struct+0x98/0x8d0 [ 71.235982][ T1418] tty_init_dev.part.0+0x1e/0x660 [ 71.237479][ T1418] tty_init_dev+0x60/0x80 [ 71.238764][ T1418] ptmx_open+0x10d/0x360 [ 71.240036][ T1418] chrdev_open+0x237/0x6a0 [ 71.241367][ T1418] do_dentry_open+0x735/0x1c40 [ 71.242793][ T1418] vfs_open+0x82/0x3f0 [ 71.244017][ T1418] path_openat+0x1e88/0x2d80 [ 71.245423][ T1418] do_filp_open+0x20c/0x470 [ 71.246927][ T1418] do_sys_openat2+0x17a/0x1e0 [ 71.248497][ T1418] __x64_sys_openat+0x175/0x210 [ 71.250160][ T1418] do_syscall_64+0xcd/0x250 [ 71.251506][ T1418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.253249][ T1418] [ 71.253970][ T1418] Freed by task 35: [ 71.255119][ T1418] kasan_save_stack+0x33/0x60 [ 71.256526][ T1418] kasan_save_track+0x14/0x30 [ 71.257913][ T1418] kasan_save_free_info+0x3b/0x60 [ 71.259395][ T1418] __kasan_slab_free+0x51/0x70 [ 71.260841][ T1418] kfree+0x2c4/0x4d0 [ 71.262235][ T1418] process_one_work+0x9c5/0x1ba0 [ 71.263797][ T1418] worker_thread+0x6c8/0xf00 [ 71.265453][ T1418] kthread+0x3af/0x750 [ 71.266669][ T1418] ret_from_fork+0x45/0x80 [ 71.268149][ T1418] ret_from_fork_asm+0x1a/0x30 [ 71.269633][ T1418] [ 71.270357][ T1418] Last potentially related work creation: [ 71.272061][ T1418] kasan_save_stack+0x33/0x60 [ 71.273470][ T1418] kasan_record_aux_stack+0xb8/0xd0 [ 71.275051][ T1418] insert_work+0x36/0x230 [ 71.276590][ T1418] __queue_work+0x97e/0x1080 [ 71.277967][ T1418] queue_work_on+0x11a/0x140 [ 71.279346][ T1418] release_tty+0x4de/0x5d0 [ 71.280693][ T1418] tty_release_struct+0xb7/0xe0 [ 71.282251][ T1418] tty_release+0xe25/0x1410 [ 71.284002][ T1418] __fput+0x3ff/0xb70 [ 71.285343][ T1418] task_work_run+0x14e/0x250 [ 71.286752][ T1418] do_exit+0xad8/0x2d70 [ 71.288251][ T1418] __x64_sys_exit+0x42/0x50 [ 71.289802][ T1418] x64_sys_call+0xe97/0x1720 [ 71.291392][ T1418] do_syscall_64+0xcd/0x250 [ 71.292929][ T1418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.294871][ T1418] [ 71.295651][ T1418] The buggy address belongs to the object at ffff88804e679000 [ 71.295651][ T1418] which belongs to the cache kmalloc-cg-2k of size 2048 [ 71.299933][ T1418] The buggy address is located 32 bytes inside of [ 71.299933][ T1418] freed 2048-byte region [ffff88804e679000, ffff88804e679800) [ 71.304558][ T1418] [ 71.305316][ T1418] The buggy address belongs to the physical page: [ 71.307338][ T1418] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4e678 [ 71.309872][ T1418] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 71.312369][ T1418] memcg:ffff888030a1e901 [ 71.313616][ T1418] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 71.315932][ T1418] page_type: f5(slab) [ 71.317125][ T1418] raw: 00fff00000000040 ffff88801b050140 ffffea00013b7200 dead000000000002 [ 71.319668][ T1418] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff888030a1e901 [ 71.322290][ T1418] head: 00fff00000000040 ffff88801b050140 ffffea00013b7200 dead000000000002 [ 71.325236][ T1418] head: 0000000000000000 0000000000080008 00000000f5000000 ffff888030a1e901 [ 71.327842][ T1418] head: 00fff00000000003 ffffea0001399e01 ffffffffffffffff 0000000000000000 [ 71.330933][ T1418] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 71.333564][ T1418] page dumped because: kasan: bad access detected [ 71.335460][ T1418] page_owner tracks the page as allocated [ 71.337171][ T1418] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5944, tgid 5944 (syz-executor), ts 47642850290, free_ts 47601196479 [ 71.343582][ T1418] post_alloc_hook+0x181/0x1b0 [ 71.345060][ T1418] get_page_from_freelist+0xfce/0x2f80 [ 71.346641][ T1418] __alloc_frozen_pages_noprof+0x221/0x2470 [ 71.348436][ T1418] alloc_pages_mpol+0x1fc/0x540 [ 71.349854][ T1418] new_slab+0x23d/0x330 [ 71.351076][ T1418] ___slab_alloc+0xc5d/0x1720 [ 71.352484][ T1418] __slab_alloc.constprop.0+0x56/0xb0 [ 71.354130][ T1418] __kmalloc_node_noprof+0x2f0/0x510 [ 71.355746][ T1418] __kvmalloc_node_noprof+0xad/0x1a0 [ 71.357313][ T1418] xt_alloc_table_info+0x3e/0xa0 [ 71.358819][ T1418] ip6t_register_table+0xad/0x430 [ 71.360305][ T1418] ip6table_nat_table_init+0x4b/0x250 [ 71.362107][ T1418] xt_find_table_lock+0x2dc/0x520 [ 71.363741][ T1418] xt_request_find_table_lock+0x28/0xf0 [ 71.365789][ T1418] get_info+0x19a/0x7c0 [ 71.367461][ T1418] do_ip6t_get_ctl+0x16a/0xaf0 [ 71.369101][ T1418] page last free pid 5947 tgid 5947 stack trace: [ 71.371042][ T1418] free_frozen_pages+0x6db/0xfb0 [ 71.372622][ T1418] __put_partials+0x14c/0x170 [ 71.374046][ T1418] qlist_free_all+0x4e/0x120 [ 71.375457][ T1418] kasan_quarantine_reduce+0x195/0x1e0 [ 71.377059][ T1418] __kasan_slab_alloc+0x69/0x90 [ 71.378497][ T1418] __kmalloc_cache_noprof+0x243/0x410 [ 71.380165][ T1418] netdevice_event+0x367/0x9d0 [ 71.381763][ T1418] notifier_call_chain+0xb7/0x410 [ 71.383247][ T1418] call_netdevice_notifiers_info+0xbe/0x140 [ 71.385045][ T1418] __dev_notify_flags+0x12d/0x2e0 [ 71.386525][ T1418] dev_change_flags+0x10c/0x160 [ 71.387962][ T1418] do_setlink.constprop.0+0x699/0x3f80 [ 71.389717][ T1418] rtnl_newlink+0x1306/0x1d60 [ 71.391112][ T1418] rtnetlink_rcv_msg+0x95b/0xea0 [ 71.392610][ T1418] netlink_rcv_skb+0x16b/0x440 [ 71.393998][ T1418] netlink_unicast+0x53c/0x7f0 [ 71.395419][ T1418] [ 71.396135][ T1418] Memory state around the buggy address: [ 71.397756][ T1418] ffff88804e678f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 71.400298][ T1418] ffff88804e678f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 71.402980][ T1418] >ffff88804e679000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.405522][ T1418] ^ [ 71.406997][ T1418] ffff88804e679080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.409319][ T1418] ffff88804e679100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.411728][ T1418] ================================================================== [ 71.414242][ T1418] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 71.416381][ T1418] CPU: 1 UID: 0 PID: 1418 Comm: aoe_tx0 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 71.419400][ T1418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.423127][ T1418] Call Trace: [ 71.424157][ T1418] [ 71.425043][ T1418] dump_stack_lvl+0x3d/0x1f0 [ 71.426376][ T1418] panic+0x71d/0x800 [ 71.427530][ T1418] ? mark_held_locks+0x9f/0xe0 [ 71.428936][ T1418] ? __pfx_panic+0x10/0x10 [ 71.430335][ T1418] ? irqentry_exit+0x3b/0x90 [ 71.431758][ T1418] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.433283][ T1418] ? check_panic_on_warn+0x1f/0xb0 [ 71.434799][ T1418] check_panic_on_warn+0xab/0xb0 [ 71.436260][ T1418] end_report+0x117/0x180 [ 71.437528][ T1418] kasan_report+0xe9/0x110 [ 71.439006][ T1418] ? tty_write_room+0x7d/0x90 [ 71.440463][ T1418] ? tty_write_room+0x7d/0x90 [ 71.441960][ T1418] tty_write_room+0x7d/0x90 [ 71.443288][ T1418] handle_tx+0x151/0x630 [ 71.444533][ T1418] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 71.446299][ T1418] dev_hard_start_xmit+0x9a/0x7b0 [ 71.447770][ T1418] __dev_queue_xmit+0x7f0/0x43e0 [ 71.449318][ T1418] ? __pfx___dev_queue_xmit+0x10/0x10 [ 71.450992][ T1418] ? __pfx___lock_acquire+0x10/0x10 [ 71.452601][ T1418] ? lock_acquire.part.0+0x11b/0x380 [ 71.454163][ T1418] ? find_held_lock+0x2d/0x110 [ 71.455609][ T1418] ? find_held_lock+0x2d/0x110 [ 71.457039][ T1418] tx+0xcc/0x190 [ 71.458382][ T1418] ? __pfx_tx+0x10/0x10 [ 71.460082][ T1418] kthread+0x1e7/0x3c0 [ 71.461801][ T1418] ? __pfx_kthread+0x10/0x10 [ 71.463662][ T1418] ? __pfx_default_wake_function+0x10/0x10 [ 71.466171][ T1418] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.468347][ T1418] ? __kthread_parkme+0x148/0x220 [ 71.470435][ T1418] ? __pfx_kthread+0x10/0x10 [ 71.472275][ T1418] kthread+0x3af/0x750 [ 71.474130][ T1418] ? __pfx_kthread+0x10/0x10 [ 71.476055][ T1418] ? __pfx_kthread+0x10/0x10 [ 71.477903][ T1418] ret_from_fork+0x45/0x80 [ 71.479647][ T1418] ? __pfx_kthread+0x10/0x10 [ 71.481628][ T1418] ret_from_fork_asm+0x1a/0x30 [ 71.483752][ T1418] [ 71.485809][ T1418] Kernel Offset: disabled [ 71.487511][ T1418] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:51:55 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a63fe00 RCX=ffffffff81ade8c4 RDX=ffff88801dac8000 RSI=ffffffff81ade89f RDI=0000000000000005 RBP=ffffc90000167d10 RSP=ffffc90000167c40 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1c38f3e R12=1ffff9200002cf8c R13=0000000000000001 R14=0000000000000003 R15=ffffed100d4c7fc1 RIP=ffffffff81ade8a1 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000400000000000 CR3=000000004b484000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000040 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc323d8080 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4379a0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4379a0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4379a0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4379a0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4379a0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4379a0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85403ad5 RDI=ffffffff9ab79740 RBP=ffffffff9ab79700 RSP=ffffc90006b6f430 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000066 R14=ffffffff9ab79700 R15=0000000000000000 RIP=ffffffff85403aff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1d3852af98 CR3=0000000023dc4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee783fcf0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8f640f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8f640f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8f640f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8f640f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8f640f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8f640f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=ffff88802a784210 RCX=ffffc9000c803000 RDX=ffff88801207c880 RSI=ffffffff84ca6f36 RDI=ffff88802a784210 RBP=ffff88802a78afe0 RSP=ffffc9000478e9e8 R8 =0000000000000001 R9 =00000000000009af R10=0000000000000000 R11=ffff88802a780030 R12=dffffc0000000000 R13=ffff88802a78c210 R14=0000000000000842 R15=ffff88802a780000 RIP=ffffffff81b9d256 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5e0d3866c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa507a4e5e8 CR3=0000000050d9e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000000000 Opmask02=000000000000ffdf Opmask03=2040000404420020 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556b4899f390 0000556b48a06a00 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff0000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000000000000000 44455a494c414954 494e495f43455355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 660746688b2ff989 0000000556b48990 0000000000000251 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616e66690074656e 0000556b4899d8bc 0000000000000021 0000000000003430 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa45c5f2280 00007fa45c5f2280 0000000000013a51 0000003177617264 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3c3a3a26323c3a3a 264e393a3a264839 3a3a264b393a3a26 32393a3a263d393a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff888026315370 RCX=0000000000000001 RDX=0000000000000000 RSI=ffff8880335715e0 RDI=ffff888026315370 RBP=ffff8880335715e0 RSP=ffffc90003c1f6a0 R8 =0000000000000005 R9 =0000000000000300 R10=0000000000000300 R11=0000000000000002 R12=ffff888026314880 R13=0000000000000001 R14=00000000ffffffff R15=0000000000000000 RIP=ffffffff8b565673 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa5fc53d270 CR3=000000002b59a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000