last executing test programs: 1.714856209s ago: executing program 2 (id=949): unshare(0x68040200) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01001610010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 1.598335096s ago: executing program 2 (id=954): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000bc0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x390, 0x1d8, 0x0, 0x2a8, 0xf8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [0x0, 0x0, 0x0, 0xff000000], 'macvlan1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@common=@mh={{0x28}, {"8aba"}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x0, 0x3}, {}, 0x203, 0x6}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [0x0, 0x0, 0x1f], '\x00', 'bond_slave_0\x00', {}, {}, 0x89}, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) 1.595216159s ago: executing program 2 (id=956): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005880)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r3, 0x0) accept4$rose(r3, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x2, 0x4) (async) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.348927148s ago: executing program 0 (id=963): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) (rerun: 64) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5460, &(0x7f0000001cc0)={{}, 0x0, 0x0, @unused, @devid}) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={{0x14}, [], {0x14}}, 0x28}}, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x4, 0x19, {0x0, 0x0, 0x1}}}}, 0x30}}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_dest={0x18, 0x114, 0x2, {0x3, 0x723}}], 0x18}, 0x0) (async) close_range(r2, r2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 1.238942449s ago: executing program 0 (id=966): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}}], 0x40000cf, 0x0) 999.882876ms ago: executing program 0 (id=974): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40855) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x14) (async) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@random="ff32570143b8", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 949.7971ms ago: executing program 0 (id=975): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) statfs(0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) (fail_nth: 11) 879.702767ms ago: executing program 0 (id=978): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) read(r0, &(0x7f0000000180)=""/19, 0x13) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000240)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}, {&(0x7f0000000000)="1e30f326522e113ff4ff25eb589761de4fe6bab1d5e5b68ac2f8798be97834ad8545d053b811b24cdedfd30bd041a72e9a9198990fb65f08b8ce6b99be9d2db03fcbc13fa0c1186a29a8e344e1cb0a7e1a40351284177c7a", 0x58}], 0x2}, 0x8010) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, @bcast, @netrom={'nr', 0x0}, 0x760c, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7f, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) (async) read(r0, &(0x7f0000000180)=""/19, 0x13) (async) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000240)) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}, {&(0x7f0000000000)="1e30f326522e113ff4ff25eb589761de4fe6bab1d5e5b68ac2f8798be97834ad8545d053b811b24cdedfd30bd041a72e9a9198990fb65f08b8ce6b99be9d2db03fcbc13fa0c1186a29a8e344e1cb0a7e1a40351284177c7a", 0x58}], 0x2}, 0x8010) (async) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, @bcast, @netrom={'nr', 0x0}, 0x760c, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7f, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}) (async) 799.48802ms ago: executing program 0 (id=980): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3006, 0x41d0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x6}]}}}]}, 0x38}}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000740)=0xe) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0xfdd3) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e26, 0x9, @loopback, 0xb92}, 0x1c) read(0xffffffffffffffff, &(0x7f0000000480)=""/171, 0xab) r6 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0xfff, 0x80080) ppoll(&(0x7f00000001c0)=[{r6, 0x40}, {0xffffffffffffffff, 0x120}, {0xffffffffffffffff, 0x1}], 0x3, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 738.353422ms ago: executing program 2 (id=982): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6001010000481100fe8000000000000000000000000000bbfe8000000000000000003f00000000aa4e200e22"], 0x0) 687.516774ms ago: executing program 2 (id=984): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="500100001000130427bd7000fbdbdf25fe800000000000000000000000000000ac1414bb0000000000000000004000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000032000500fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000b00000000000000000000000000000000800000000000000000000000000000fdffffff00000000003500000a000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000040"], 0x150}}, 0x4000080) 684.070384ms ago: executing program 2 (id=986): socket(0x10, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_open_dev$video4linux(&(0x7f0000000000), 0xf, 0x101800) syz_usb_connect(0x6, 0x24, &(0x7f00000001c0)=ANY=[], 0x0) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100000000000018000000000000", @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 289.914122ms ago: executing program 3 (id=992): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0xffffdb4a, @empty, 0x8}, 0x1c) listen(r0, 0x0) r1 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r1, 0x29, 0x24, 0x0, &(0x7f0000000180)) r2 = socket$netlink(0x10, 0x3, 0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000640)={0x0, 0x6}, &(0x7f0000000680)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000006c0)=r3, 0x4) rt_sigaction(0x19, &(0x7f0000000400)={&(0x7f0000000000)="676466f087bc76ded361b62e26c07fff00c4a3a1cea37b07f38af90000d3a41039000000f344aa643e3ef08504dc8319b4fe00c4011d1da1956ce08f080895dd638f4818ee16e6c442e13ae4470f69a342cb0000", 0x1c000000, 0x0}, 0x0, 0x8, &(0x7f0000000440)) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x410, 0x130, 0x218, 0xc, 0x328, 0x410, 0x328, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff013000"}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xa2) r4 = memfd_create(&(0x7f0000000480)='\x00\xac=\x9d\x00\x00\"0\xc5\xe1\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xef\x04;s\xe1\xc4\xcf\xaa\xa0\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbc*A\xdcq\xb7\xc1\xba&\xd1\xff\xffs\xf1\xc3G,](\x1dA\x8a\x97\xb1\xdb\xe4?\x81\x84\xb8\x92P\x99YO\xb8V\xd5p\x90X\xaaf\x00\x00\x00\xe6_\xc9n\x19\x12\xb0m\x06\a\x00\x00\x00\x00\x00\x00', 0x5) fallocate(r4, 0x0, 0x400000000000000, 0x7) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x4e21, 0x9e1, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x1}}, 0x0, 0x0, 0x15, 0x0, "5591005c9494387d5db89f6110ed263422fb397226de650ce32af137d33e704a5c5789aa8d74fd51d0bf5fafacf1e668ed45f116ae2e8060e7d58841c5959505f2ec24720c44ad7b5f42825ad79e9a49"}, 0xd8) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000140)={0x100, r6}, 0x0) landlock_restrict_self(r5, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6005, &(0x7f0000000040)=0x7, 0x7, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r7, &(0x7f0000002140)={0x2020}, 0x2020) r8 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) fallocate(r2, 0x4, 0x8, 0x400) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f00000002c0)={0x20, r9}, 0x0) landlock_restrict_self(r8, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 289.685637ms ago: executing program 3 (id=993): syz_emit_ethernet(0x52, &(0x7f00000001c0)={@random="cf599d3baed5", @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f200", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0x8}], {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x1000}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000013aa11000001"], 0x0) 219.796096ms ago: executing program 3 (id=994): r0 = memfd_create(&(0x7f0000000e80)='prodM\xb0\xea\a\x06\xbe\xaeJ:]\xbb\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\xae\x00\x00\x00\x00\x00\xff\x04\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5U\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262-\x00\x00\x00\x00\xc8X\xdaNz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x00\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[R\xc36b\xa2]\xed\xe8\xb0\xfa\"\xa2\xd27)\xd5yQ\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x99\xc5{&\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\x061] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x00P\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8fC\x91W\xadi\x00\xf2k\xd5v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x1a\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\xf0V\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\xf6]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1n 1\x8d \xc1\xaf\x19\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16\x00\x00\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xd2\a\aR\xba\xae-q\xe0\xe5a\xdd7\xb8\x1b\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xf2\xb5K\x03\x85\x92k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00KT\"0\x16=\x10\xd3\x9a\xf0\xb7\x00\x00\x00\x00\x00\x00\x00UXZ\xf4\xd1+\aO\xa7E\xee-=U\xa7\xa4D\xf9<]v\xe4~-o=\x04\xc0\xabs\x99\xc0\x96\xfe\"\x88\xf8S\x8eG\x0f\xfec\xd6\n\x8cN6\r\xbf[\f\xa3\f\x80\x99\x1f\xa1\xcd\xcd\x81\xe7\x97\xec\xa6\x14l[$qpG\xff\x93\xf6\x18\xf8\xdfy\x98\n/\x18S%\x02;\x13L\xc7A\xfb\xd6\x9c\xe2\xe4,\xdd\xf9E\xb8\xe5c\xc3\n\x97^b\xddL\xb7\xcf\x11\xfe\xa1\xd6\x9c\x1a\x103]/\xd8\xcc\xc9\xee2\x9aaI<\xfd\x80\x17\x1b\xe3IJ\x9f\xfa8\xe9\x99E\xa1\x10\x10FVj0\xdc\xbd\xd4@e.\xe6l\xda)\\\xcen\xbab\x9aJ\x802\xfb\xac@\x1b\x9d!\x1e\x95\xcd@\xda\xb2!\x90\x9b\xeay\xcd#\xae\x9a\xc2\r\xee\x0e\x13\x1fh', 0x3) fcntl$addseals(r0, 0x409, 0x1a) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0585605, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a00000000000000000000001400050000000000000000000000000080fe0002"], 0x30}, 0x1, 0x11}, 0x0) 219.046038ms ago: executing program 3 (id=996): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x8042, 0xd4, 0x8}, 0x18) r1 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r1, &(0x7f00000009c0), 0xd4ba0ff) mount_setattr(r0, &(0x7f0000000980)='./file0\x00', 0x800, &(0x7f00000009c0)={0x8d, 0x9, 0xc0000, {r1}}, 0x20) rt_sigaction(0x17, &(0x7f0000000080)={0x0, 0x98000004, 0x0, {[0xffffffffffffffff]}}, 0x0, 0x8, &(0x7f0000000200)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone3(&(0x7f0000000b80)={0x320400, &(0x7f0000000a00), &(0x7f0000000a40)=0x0, &(0x7f0000000a80), {0x23}, &(0x7f0000000ac0)=""/61, 0x3d, &(0x7f0000000b00)=""/28, &(0x7f0000000b40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) move_pages(r5, 0x5, &(0x7f0000000c00)=[&(0x7f0000400000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000400000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil], &(0x7f0000000c40), &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000ff020000000000000000000000000001e00000020f0000000000000004000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000400)={0xf, 0xfffffff8, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xe, 0x10000}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300), 0xc, &(0x7f0000000440)={&(0x7f0000000500)=@acquire={0x3e4, 0x17, 0x20, 0x70bd2d, 0x25dfdbfb, {{@in=@empty, 0x4d6, 0x6c}, @in6=@private2, {@in=@private=0xa010100, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0x5, 0x4e21, 0x0, 0xd, 0x20, 0x80, 0x32, 0x0, 0xffffffffffffffff}, {{@in=@loopback, @in=@local, 0x4e20, 0x8cde, 0x4e24, 0x8, 0x2, 0x80, 0x20, 0x5e, r3, r6}, {0xa, 0x10000, 0x59, 0x1, 0x1, 0x8, 0x7}, {0xfd1f, 0x1, 0x6, 0x1}, 0x9, 0x6e6bb5, 0x2, 0x0, 0x0, 0x2}, 0x7fffffff, 0x80, 0xa9a2, 0x70bd26}, [@user_kmaddress={0x2c, 0x13, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private2, 0x0, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x6}, @algo_crypt={0x5c, 0x2, {{'salsa20-generic\x00'}, 0xa0, "cd4f4db137bd07d715506cf0b606ac56a68a3bf1"}}, @mark={0xc, 0x15, {0x35075a, 0xfffffffd}}, @sec_ctx={0xeb, 0x8, {0xe7, 0x8, 0x0, 0x8, 0xdf, "f719de3aebfb29d4985fe1d05cf0cad8e3467acee01a1c043e953dac943488d5790efbc7898e3124c37e792daaf26596e8d0c6c76eb67dffa77d60ee106213a6812cb8e007c1c9c90571dcc520c10c608c7e43c0a4dd79bd105a62516d41f9e18e6a1d0bc1ad9e66db7373fa1b0a7eec7414d028d570c0660c0b613df1d877447f6915ee78dcb928e20b55c8d1b9efff440f3f3e30c2ca36c3c21678e640e8a31d07b2921c55b737560969dba869b6e8fc9a589427cc1f829ab2d9199e59691a081b0e1d1f63cd748d2f60f5612e61286b8db73bac3e2b676d94a7fc7f18d5"}}, @migrate={0x134, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x0, 0x0, 0x3507, 0xa, 0xa}, {@in=@remote, @in6=@mcast1, @in=@private=0xa010100, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0x33, 0x0, 0x0, 0x3503, 0x2, 0xa}, {@in=@broadcast, @in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@remote, 0x2b, 0x3, 0x0, 0x3501, 0x2, 0xa}, {@in=@broadcast, @in=@empty, @in=@multicast2, @in=@initdev={0xac, 0x1e, 0x2, 0x0}, 0xff, 0x274cf57b1358240e, 0x0, 0x34ff, 0xa, 0xa}]}]}, 0x3e4}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x5, 0x297400, 0x8, 0xc, 0x401, 0xffffffc7, 0xb, 0x8, 0x5, 0xffffffff, 0x1e, 0xb, 0x1e, 0xd, 0x0, 0x1000}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) r8 = gettid() r9 = syz_open_procfs(r8, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x0, 0x2, 0x600}}, 0x30) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0xfffffffffffffdda, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800, 0x0, r9}) openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) 139.947518ms ago: executing program 1 (id=997): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x2ec}, 0x1, 0x0, 0x0, 0x20008811}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x144, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x107, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0xd5, {0x1, 0x59, 0xf, "60baa1c8461a7eff021e6f4ebdb341c9f72a41cb76a9e5452c859d32627329b5d425e5c5b5386c503c119e47ff881290d6c4be68da545d9d213a1c37e8432af18a282810721b547d17a3466e78d7abeaa7d94294d9f8c973a34fa72781ec22c62bc3e0c956169d59a0bda0e3b6d786e9b25a4c135f2bedf08ae9b22197214440cd06c49d3c0a5318c8a4c8d75dd7a70ab8ebcacfa7c31d4b738322e82fa837ceb23ae0605e116e42db204806eaab73467f3f5d11220a22d710335f857d76b5812cf22c9ddc4fabb791cb953b5140b3ed12bb"}}, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x144}}, 0x0) 139.627859ms ago: executing program 1 (id=998): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000308000/0x3000)=nil, 0x3000, 0x1000002) r0 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0) map_shadow_stack(&(0x7f000016b000/0x2000)=nil, 0x2000, 0x1) 132.625162ms ago: executing program 3 (id=999): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002000000001f00010000000008001e0002"], 0x30}}, 0x4090) 69.9582ms ago: executing program 1 (id=1000): socket$inet6_tcp(0xa, 0x1, 0x0) gettid() syz_open_procfs(0x0, 0x0) io_submit(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000002c0)={0x7, 0x801}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002000000000000060000000008001e0002"], 0x30}, 0x1, 0x34000}, 0x4090) 69.711595ms ago: executing program 3 (id=1001): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r2, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x98, 0x130, 0x130, 0x1c8, 0x130, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2d}, @multicast2, 0xffffff00, 0xffffffff, 'vlan0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x6c, 0x0, 0x2d}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x1}}}, {{@ip={@rand_addr, @private, 0x0, 0xff000000, 'macvtap0\x00', 'bridge_slave_0\x00', {0xff}}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x7, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010102, 0xff000000, 0xff, 'ip6gretap0\x00', 'ip6erspan0\x00', {}, {0x75816b9d8404136c}, 0x0, 0x1, 0x18}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) ioctl$SG_IO(r8, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="558d7acda0b2", 0x0, 0x0, 0x0, 0x4, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181010100000000010000000000000e000a000f00000002800600121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@gettaction={0xec, 0x32, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x52d6}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc57b}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000000) 69.634305ms ago: executing program 1 (id=1002): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsmount(0xffffffffffffffff, 0x0, 0xf2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, r2, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x408c0}, 0x20000051) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x40000c0) 215.32µs ago: executing program 1 (id=1003): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000040)=0xaf, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700303a00fe880000000000000000000000000001ff020000000000000000000000000001040290780003dabe6113ec8800010001fc010000000000000000000000000001fe8800000000000000000000000000017316eefcd40d12f375ed15b096a75e0bcca4cc7537a74b4e358e38afa17ba1387940dba0b94881822f03cd6210b1f228fe38f9a3189aabe3002f63475016d3a387cafac4a57c2e355c01cdc24715302fd15d2973f0ba3b5fa1960fbda85717cf19244b7dc6df57c85a712dd4bc1fc3ea3385fd99706e531a7008f3a8f5"], 0x0) 0s ago: executing program 1 (id=1004): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x5d4, 0x14, 0x2, 0x70bd29, 0x25dfdbfe, {0x20}, [@generic="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"]}, 0x5d4}, 0x1, 0x0, 0x0, 0xd000}, 0x4008021) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x129400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000700)=ANY=[@ANYBLOB="070000000000000207000000ffffffffea"]) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:37388' (ED25519) to the list of known hosts. [ 46.267701][ T40] audit: type=1400 audit(1747792334.045:66): avc: denied { name_bind } for pid=5903 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.304113][ T40] audit: type=1400 audit(1747792334.075:67): avc: denied { write } for pid=5904 comm="sh" path="pipe:[6298]" dev="pipefs" ino=6298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 46.311137][ T40] audit: type=1400 audit(1747792334.085:68): avc: denied { execute } for pid=5904 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.318382][ T40] audit: type=1400 audit(1747792334.085:69): avc: denied { execute_no_trans } for pid=5904 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.314916][ T40] audit: type=1400 audit(1747792336.095:70): avc: denied { mounton } for pid=5904 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.317645][ T5904] cgroup: Unknown subsys name 'net' [ 48.459148][ T5904] cgroup: Unknown subsys name 'cpuset' [ 48.465165][ T5904] cgroup: Unknown subsys name 'rlimit' [ 48.737173][ T5918] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.405717][ T5904] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.407138][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 52.407149][ T40] audit: type=1400 audit(1747792340.185:84): avc: denied { execmem } for pid=5923 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.570395][ T40] audit: type=1400 audit(1747792340.345:85): avc: denied { create } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.577457][ T40] audit: type=1400 audit(1747792340.345:86): avc: denied { read write } for pid=5927 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.585284][ T40] audit: type=1400 audit(1747792340.345:87): avc: denied { open } for pid=5927 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.593049][ T40] audit: type=1400 audit(1747792340.355:88): avc: denied { ioctl } for pid=5927 comm="syz-executor" path="socket:[4053]" dev="sockfs" ino=4053 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.632508][ T5938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.634866][ T5940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.638642][ T5940] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.638782][ T5938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.642270][ T5940] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.646480][ T5939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.647370][ T5940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.648985][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.652158][ T5940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.655824][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.656608][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.659658][ T5941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.661798][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.662465][ T5940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.663939][ T5940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.667177][ T66] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.669232][ T5940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.672926][ T40] audit: type=1400 audit(1747792340.445:89): avc: denied { read } for pid=5930 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.682497][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.682586][ T40] audit: type=1400 audit(1747792340.445:90): avc: denied { open } for pid=5930 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.683754][ T5945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.685123][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.692416][ T40] audit: type=1400 audit(1747792340.445:91): avc: denied { mounton } for pid=5930 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.933387][ T40] audit: type=1400 audit(1747792340.705:92): avc: denied { module_request } for pid=5930 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.974882][ T5930] chnl_net:caif_netlink_parms(): no params data found [ 53.040105][ T5928] chnl_net:caif_netlink_parms(): no params data found [ 53.123534][ T5927] chnl_net:caif_netlink_parms(): no params data found [ 53.158086][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.160381][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.162835][ T5930] bridge_slave_0: entered allmulticast mode [ 53.166119][ T5930] bridge_slave_0: entered promiscuous mode [ 53.187076][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.189393][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.191753][ T5930] bridge_slave_1: entered allmulticast mode [ 53.194982][ T5930] bridge_slave_1: entered promiscuous mode [ 53.258795][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 53.294525][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.304544][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.307089][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.309747][ T5928] bridge_slave_0: entered allmulticast mode [ 53.312408][ T5928] bridge_slave_0: entered promiscuous mode [ 53.316708][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.353318][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.355693][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.357955][ T5928] bridge_slave_1: entered allmulticast mode [ 53.360549][ T5928] bridge_slave_1: entered promiscuous mode [ 53.451078][ T5930] team0: Port device team_slave_0 added [ 53.458103][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.460736][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.463027][ T5927] bridge_slave_0: entered allmulticast mode [ 53.465828][ T5927] bridge_slave_0: entered promiscuous mode [ 53.470262][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.474288][ T5930] team0: Port device team_slave_1 added [ 53.493506][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.496550][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.498896][ T5927] bridge_slave_1: entered allmulticast mode [ 53.501645][ T5927] bridge_slave_1: entered promiscuous mode [ 53.520453][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.541114][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.543344][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.552016][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.611432][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.614476][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.624861][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.631818][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.673068][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.695965][ T5928] team0: Port device team_slave_0 added [ 53.698318][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.700603][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.702878][ T5942] bridge_slave_0: entered allmulticast mode [ 53.705977][ T5942] bridge_slave_0: entered promiscuous mode [ 53.745283][ T5927] team0: Port device team_slave_0 added [ 53.749191][ T5928] team0: Port device team_slave_1 added [ 53.774760][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.777177][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.780286][ T5942] bridge_slave_1: entered allmulticast mode [ 53.784372][ T5942] bridge_slave_1: entered promiscuous mode [ 53.804714][ T5930] hsr_slave_0: entered promiscuous mode [ 53.807548][ T5930] hsr_slave_1: entered promiscuous mode [ 53.811272][ T5927] team0: Port device team_slave_1 added [ 53.893816][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.899275][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.909191][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.934973][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.968741][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.971243][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.981890][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.986742][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.988971][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.997372][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.013412][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.036398][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.038661][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.046872][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.087573][ T5942] team0: Port device team_slave_0 added [ 54.091509][ T5942] team0: Port device team_slave_1 added [ 54.166063][ T5928] hsr_slave_0: entered promiscuous mode [ 54.168282][ T5928] hsr_slave_1: entered promiscuous mode [ 54.170387][ T5928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.172972][ T5928] Cannot create hsr debugfs directory [ 54.180022][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.182392][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.190641][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.229796][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.232144][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.240920][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.286414][ T5927] hsr_slave_0: entered promiscuous mode [ 54.289539][ T5927] hsr_slave_1: entered promiscuous mode [ 54.292302][ T5927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.295440][ T5927] Cannot create hsr debugfs directory [ 54.413452][ T5942] hsr_slave_0: entered promiscuous mode [ 54.415866][ T5942] hsr_slave_1: entered promiscuous mode [ 54.418037][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.420453][ T5942] Cannot create hsr debugfs directory [ 54.605270][ T5930] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.618588][ T5930] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.628459][ T5930] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.640129][ T5930] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.722880][ T5928] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.728883][ T5928] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.734588][ T66] Bluetooth: hci3: command tx timeout [ 54.734634][ T5945] Bluetooth: hci1: command tx timeout [ 54.735064][ T5282] Bluetooth: hci0: command tx timeout [ 54.735218][ T5282] Bluetooth: hci2: command tx timeout [ 54.738281][ T5928] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.748512][ T5928] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.793891][ T5927] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.798315][ T5927] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.807312][ T5927] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.811752][ T5927] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.869329][ T5942] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.874842][ T5942] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.879956][ T5942] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.885594][ T5942] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.913117][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.937968][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.967433][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.977581][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.986117][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.988445][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.992165][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.994525][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.008773][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.011883][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.029049][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.032141][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.054696][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.098425][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.112642][ T5927] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.131491][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.134669][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.149684][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.161149][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.164313][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.179995][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.182818][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.186982][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.189628][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.233084][ T40] audit: type=1400 audit(1747792343.005:93): avc: denied { sys_module } for pid=5930 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.326346][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.351859][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.380740][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.385950][ T5928] veth0_vlan: entered promiscuous mode [ 55.393784][ T5928] veth1_vlan: entered promiscuous mode [ 55.418673][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.421762][ T5930] veth0_vlan: entered promiscuous mode [ 55.437226][ T5928] veth0_macvtap: entered promiscuous mode [ 55.442312][ T5928] veth1_macvtap: entered promiscuous mode [ 55.450079][ T5930] veth1_vlan: entered promiscuous mode [ 55.466961][ T5927] veth0_vlan: entered promiscuous mode [ 55.471048][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.479815][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.483816][ T5927] veth1_vlan: entered promiscuous mode [ 55.496592][ T5928] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.499457][ T5928] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.502176][ T5928] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.505553][ T5928] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.526811][ T5942] veth0_vlan: entered promiscuous mode [ 55.540223][ T5942] veth1_vlan: entered promiscuous mode [ 55.553475][ T5930] veth0_macvtap: entered promiscuous mode [ 55.582274][ T5930] veth1_macvtap: entered promiscuous mode [ 55.582680][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.586574][ T5927] veth0_macvtap: entered promiscuous mode [ 55.587923][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.600557][ T5927] veth1_macvtap: entered promiscuous mode [ 55.636056][ T5942] veth0_macvtap: entered promiscuous mode [ 55.638993][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.642268][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.654440][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.659579][ T5942] veth1_macvtap: entered promiscuous mode [ 55.666289][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.674708][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.682325][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.683979][ T5928] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.687608][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.698962][ T5930] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.702607][ T5930] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.707027][ T5930] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.710635][ T5930] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.719670][ T5927] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.723383][ T5927] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.727837][ T5927] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.731499][ T5927] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.739326][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.746610][ T5942] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.749473][ T5942] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.752211][ T5942] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.755864][ T5942] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.773085][ T5991] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 55.805315][ T5971] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 55.840281][ T101] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 55.849963][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.852526][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.869606][ T101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.872067][ T101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.903043][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.907421][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.926115][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.928613][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.937639][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.939737][ T6002] Cannot find map_set index 0 as target [ 55.942662][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.951945][ T1143] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 55.968020][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.971252][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.020715][ T6008] tipc: Started in network mode [ 56.023410][ T6008] tipc: Node identity ac141417, cluster identity 4711 [ 56.026858][ T5997] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 56.030649][ T6008] tipc: Enabled bearer , priority 10 [ 56.037983][ T6008] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 56.056840][ T6008] netlink: 'syz.2.3': attribute type 3 has an invalid length. [ 56.059396][ T6008] netlink: 151096 bytes leftover after parsing attributes in process `syz.2.3'. [ 56.234386][ T6016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11'. [ 56.238618][ T6020] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13'. [ 56.240876][ T6014] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 56.264193][ T57] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 56.294648][ T6028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14'. [ 56.318903][ T6025] syz.1.15 uses obsolete (PF_INET,SOCK_PACKET) [ 56.415631][ T1147] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 56.418332][ T1147] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 56.513833][ T6047] tipc: Started in network mode [ 56.515816][ T6047] tipc: Node identity ac141417, cluster identity 4711 [ 56.518652][ T6047] tipc: Enabled bearer , priority 10 [ 56.538578][ T6047] netlink: 'syz.3.22': attribute type 3 has an invalid length. [ 56.541621][ T6047] netlink: 151096 bytes leftover after parsing attributes in process `syz.3.22'. [ 56.605685][ T6056] netlink: 'syz.2.24': attribute type 10 has an invalid length. [ 56.624246][ T6058] netlink: 'syz.0.25': attribute type 1 has an invalid length. [ 56.629032][ T6056] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 56.635883][ T6058] vlan2: entered allmulticast mode [ 56.637691][ T6058] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 56.643245][ T6058] team0: Port device vlan2 added [ 56.766279][ T6068] Cannot find map_set index 0 as target [ 56.801096][ T6071] sg_read: process 15 (syz.3.32) changed security contexts after opening file descriptor, this is not allowed. [ 56.815249][ T5945] Bluetooth: hci1: command tx timeout [ 56.824583][ T5945] Bluetooth: hci3: command tx timeout [ 56.824619][ T66] Bluetooth: hci2: command tx timeout [ 56.825177][ T5938] Bluetooth: hci0: command tx timeout [ 56.916721][ T1147] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 56.978432][ T6082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.37'. [ 57.044940][ T29] tipc: Node number set to 2886997015 [ 57.105508][ T6086] tipc: Started in network mode [ 57.107236][ T6086] tipc: Node identity ac141417, cluster identity 4711 [ 57.110263][ T6086] tipc: Enabled bearer , priority 10 [ 57.115816][ T6089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.42'. [ 57.139820][ T6086] netlink: 'syz.1.39': attribute type 3 has an invalid length. [ 57.142381][ T6086] netlink: 151096 bytes leftover after parsing attributes in process `syz.1.39'. [ 57.144410][ T6092] qnx4: no qnx4 filesystem (no root dir). [ 57.231084][ T6100] netlink: 'syz.2.44': attribute type 1 has an invalid length. [ 57.234677][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.44'. [ 57.304779][ T6115] netlink: 'syz.0.50': attribute type 1 has an invalid length. [ 57.436642][ T6127] Cannot find map_set index 0 as target [ 57.479608][ T6137] netlink: 20 bytes leftover after parsing attributes in process `syz.2.60'. [ 57.512310][ T40] kauditd_printk_skb: 83 callbacks suppressed [ 57.512321][ T40] audit: type=1400 audit(57.382:177): avc: denied { shutdown } for pid=6140 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.514325][ T5998] tipc: Node number set to 2886997015 [ 57.515279][ T40] audit: type=1400 audit(57.382:178): avc: denied { getopt } for pid=6140 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.529382][ T40] audit: type=1400 audit(57.382:179): avc: denied { connect } for pid=6140 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.536827][ T40] audit: type=1400 audit(57.382:180): avc: denied { name_connect } for pid=6140 comm="syz.0.62" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 57.543391][ T40] audit: type=1400 audit(57.392:181): avc: denied { setopt } for pid=6140 comm="syz.0.62" lport=58906 faddr=::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.550649][ T40] audit: type=1400 audit(57.402:182): avc: denied { mounton } for pid=6140 comm="syz.0.62" path="/15/file0" dev="tmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 57.650428][ T40] audit: type=1400 audit(57.522:183): avc: denied { mounton } for pid=6155 comm="syz.2.68" path="/22/file1" dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.714791][ T34] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 57.761686][ T40] audit: type=1400 audit(57.632:184): avc: denied { append } for pid=6155 comm="syz.2.68" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.768646][ T40] audit: type=1804 audit(57.632:185): pid=6157 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.68" name="/newroot/22/file1" dev="fuse" ino=1 res=1 errno=0 [ 57.776682][ T40] audit: type=1800 audit(57.632:186): pid=6157 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.68" name="/" dev="fuse" ino=1 res=0 errno=0 [ 57.858584][ T6166] netlink: 'syz.0.72': attribute type 1 has an invalid length. [ 57.876445][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 57.879943][ T34] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 57.883223][ T34] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 57.890283][ T34] usb 8-1: string descriptor 0 read error: -22 [ 57.892417][ T34] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.895613][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.902799][ T6133] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 58.110573][ T34] cdc_ncm 8-1:1.0: bind() failure [ 58.115832][ T34] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 58.118010][ T34] cdc_ncm 8-1:1.1: bind() failure [ 58.123584][ T34] usb 8-1: USB disconnect, device number 2 [ 58.225029][ T75] tipc: Node number set to 2886997015 [ 58.665543][ T6190] Cannot find map_set index 0 as target [ 58.708648][ T6203] netlink: 'syz.2.87': attribute type 13 has an invalid length. [ 58.720719][ T6203] gretap0: refused to change device tx_queue_len [ 58.725828][ T6203] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 58.730810][ T6206] tipc: Enabling of bearer rejected, already enabled [ 58.733367][ T6203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6203 comm=syz.2.87 [ 58.733431][ T6203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6203 comm=syz.2.87 [ 58.742491][ T6203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6203 comm=syz.2.87 [ 58.746864][ T6203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6203 comm=syz.2.87 [ 58.750768][ T6203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6203 comm=syz.2.87 [ 58.752436][ T6206] netlink: 'syz.1.88': attribute type 3 has an invalid length. [ 58.757231][ T6203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6203 comm=syz.2.87 [ 58.757282][ T6203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6203 comm=syz.2.87 [ 58.767910][ T6203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6203 comm=syz.2.87 [ 58.771779][ T6203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6203 comm=syz.2.87 [ 58.778654][ T6203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6203 comm=syz.2.87 [ 58.894284][ T66] Bluetooth: hci2: command tx timeout [ 58.896173][ T6222] vlan2: entered allmulticast mode [ 58.897875][ T6222] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 58.906203][ T66] Bluetooth: hci0: command tx timeout [ 58.906235][ T5945] Bluetooth: hci1: command tx timeout [ 58.913115][ T6223] pim6reg: entered allmulticast mode [ 58.982823][ T6227] Zero length message leads to an empty skb [ 59.105094][ T6240] tipc: Enabling of bearer rejected, already enabled [ 59.286683][ T6249] Cannot find map_set index 0 as target [ 59.388821][ T6262] tipc: Enabling of bearer rejected, already enabled [ 59.454582][ T5945] Bluetooth: hci3: command tx timeout [ 59.777331][ T6282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.785028][ T6282] vlan2: entered allmulticast mode [ 59.786750][ T6282] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 59.793954][ T6282] bond1: (slave vlan2): making interface the new active one [ 59.797267][ T6282] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 59.826229][ T6285] tipc: Enabling of bearer rejected, already enabled [ 59.946296][ T6298] syzkaller1: entered promiscuous mode [ 59.951942][ T6298] syzkaller1: entered allmulticast mode [ 59.972105][ T6303] Cannot find map_set index 0 as target [ 59.996437][ T6306] bridge0: port 3(syz_tun) entered blocking state [ 60.000570][ T6306] bridge0: port 3(syz_tun) entered disabled state [ 60.002769][ T6306] syz_tun: entered allmulticast mode [ 60.005698][ T6306] syz_tun: entered promiscuous mode [ 60.007782][ T6306] bridge0: port 3(syz_tun) entered blocking state [ 60.010343][ T6306] bridge0: port 3(syz_tun) entered forwarding state [ 60.094603][ T6321] tipc: Started in network mode [ 60.096181][ T6321] tipc: Node identity ac141417, cluster identity 4711 [ 60.098597][ T6321] tipc: Enabled bearer , priority 10 [ 60.256788][ T6335] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.280174][ T6347] vlan2: entered allmulticast mode [ 60.287384][ T6347] bond1: (slave vlan2): making interface the new active one [ 60.291504][ T6347] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 60.410574][ T6354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.419518][ T6354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.472071][ T6363] Cannot find map_set index 0 as target [ 60.500809][ T6366] tipc: Enabling of bearer rejected, already enabled [ 60.602355][ T6368] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 60.679915][ T6370] QAT: Device 7 not found [ 60.975021][ T66] Bluetooth: hci2: command tx timeout [ 60.976852][ T66] Bluetooth: hci1: command tx timeout [ 60.978803][ T5945] Bluetooth: hci0: command tx timeout [ 61.023328][ T6390] tipc: Enabling of bearer rejected, already enabled [ 61.030575][ T6392] xt_hashlimit: size too large, truncated to 1048576 [ 61.107875][ T5997] tipc: Node number set to 2886997015 [ 61.253523][ T6407] validate_nla: 8 callbacks suppressed [ 61.253534][ T6407] netlink: 'syz.1.169': attribute type 1 has an invalid length. [ 61.281010][ T6407] 8021q: adding VLAN 0 to HW filter on device bond2 [ 61.324393][ T6414] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 61.338722][ T6418] tipc: Enabling of bearer rejected, already enabled [ 61.409700][ T6426] Cannot find map_set index 0 as target [ 61.442946][ T6432] capability: warning: `syz.2.178' uses 32-bit capabilities (legacy support in use) [ 61.513184][ T6440] __nla_validate_parse: 14 callbacks suppressed [ 61.513196][ T6440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.180'. [ 61.844159][ T5997] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 62.004793][ T5997] usb 6-1: Using ep0 maxpacket: 32 [ 62.007884][ T5997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.011436][ T5997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.014964][ T5997] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 62.017958][ T5997] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.022626][ T5997] usb 6-1: config 0 descriptor?? [ 62.420075][ T6461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.187'. [ 62.440895][ T5997] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 62.457698][ T6463] tipc: Enabling of bearer rejected, already enabled [ 62.773414][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 62.773430][ T40] audit: type=1400 audit(62.642:227): avc: denied { create } for pid=6487 comm="syz.2.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.778134][ T6488] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.784205][ T40] audit: type=1400 audit(62.642:228): avc: denied { setopt } for pid=6487 comm="syz.2.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.791525][ T6488] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 62.832984][ T6490] netlink: 'syz.2.197': attribute type 1 has an invalid length. [ 62.845771][ T6490] 8021q: adding VLAN 0 to HW filter on device bond2 [ 62.877082][ T6493] tipc: Enabling of bearer rejected, already enabled [ 63.039422][ T6501] Cannot find map_set index 0 as target [ 63.052900][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.203'. [ 63.087063][ T6510] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 63.133417][ T6514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.206'. [ 63.162651][ T6519] tipc: Enabling of bearer rejected, already enabled [ 63.167687][ T40] audit: type=1400 audit(63.042:229): avc: denied { name_connect } for pid=6521 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 63.269841][ T6535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.215'. [ 63.279617][ T40] audit: type=1400 audit(63.152:230): avc: denied { sys_module } for pid=6530 comm="syz.2.214" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.307006][ T40] audit: type=1400 audit(63.182:231): avc: denied { connect } for pid=6530 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.313424][ T40] audit: type=1400 audit(63.182:232): avc: denied { connect } for pid=6530 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.313448][ T40] audit: type=1400 audit(63.182:233): avc: denied { write } for pid=6530 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.506324][ T6551] tipc: Enabling of bearer rejected, already enabled [ 63.576866][ T40] audit: type=1400 audit(63.452:234): avc: denied { validate_trans } for pid=6554 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 63.609303][ T6558] netlink: 'syz.2.223': attribute type 1 has an invalid length. [ 63.622888][ T6558] 8021q: adding VLAN 0 to HW filter on device bond3 [ 63.674138][ T5934] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 63.742601][ T40] audit: type=1400 audit(63.612:235): avc: denied { bind } for pid=6562 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.750092][ T40] audit: type=1400 audit(63.612:236): avc: denied { name_bind } for pid=6562 comm="syz.2.225" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 63.830167][ T5934] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 63.833186][ T5934] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.835895][ T5934] usb 8-1: Product: syz [ 63.837451][ T5934] usb 8-1: Manufacturer: syz [ 63.838927][ T5934] usb 8-1: SerialNumber: syz [ 63.842601][ T5934] usb 8-1: config 0 descriptor?? [ 63.884537][ T5959] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 64.020327][ T6568] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 64.051025][ T9] usb 8-1: USB disconnect, device number 3 [ 64.146783][ T6575] tipc: Enabling of bearer rejected, already enabled [ 64.474218][ T5934] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 64.645770][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.232'. [ 64.646932][ T5934] usb 5-1: config 1 interface 0 has no altsetting 0 [ 64.655032][ T5934] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 64.661008][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.663682][ T5934] usb 5-1: Product: syz [ 64.667257][ T5934] usb 5-1: Manufacturer: syz [ 64.669242][ T5934] usb 5-1: SerialNumber: syz [ 64.792342][ T6608] tipc: Enabling of bearer rejected, already enabled [ 64.842485][ T6612] @: renamed from vlan0 (while UP) [ 64.851168][ T6616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.241'. [ 64.890018][ T6613] netlink: 92 bytes leftover after parsing attributes in process `syz.1.240'. [ 64.949481][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 65.068650][ T6636] block device autoloading is deprecated and will be removed. [ 65.114211][ T6651] tipc: Enabling of bearer rejected, already enabled [ 65.195934][ T6663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.253'. [ 65.197002][ T6661] @: renamed from vlan0 (while UP) [ 65.282427][ T5934] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 65.299716][ T5997] usb 6-1: USB disconnect, device number 2 [ 65.343399][ T6677] tipc: Enabling of bearer rejected, already enabled [ 65.456652][ T6695] netlink: 'syz.3.266': attribute type 4 has an invalid length. [ 65.752591][ T6712] tipc: Enabling of bearer rejected, already enabled [ 65.929473][ T6721] Cannot find map_set index 0 as target [ 66.266808][ T6735] netlink: 'syz.2.279': attribute type 4 has an invalid length. [ 66.299416][ T6740] tipc: Enabling of bearer rejected, already enabled [ 66.548454][ T6762] __nla_validate_parse: 7 callbacks suppressed [ 66.548470][ T6762] netlink: 28 bytes leftover after parsing attributes in process `syz.2.289'. [ 66.623158][ T5998] IPVS: starting estimator thread 0... [ 66.652747][ T6774] tipc: Enabling of bearer rejected, already enabled [ 66.734985][ T6772] IPVS: using max 42 ests per chain, 100800 per kthread [ 67.183239][ T5998] usb 5-1: USB disconnect, device number 2 [ 67.191421][ T5998] usblp1: removed [ 67.204194][ T5997] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 67.276916][ T6578] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 67.309103][ T6794] Cannot find map_set index 0 as target [ 67.349644][ T6796] tipc: Enabling of bearer rejected, already enabled [ 67.357683][ T5997] usb 8-1: Using ep0 maxpacket: 8 [ 67.363097][ T5997] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 67.370536][ T5997] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.381609][ T5997] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 67.389832][ T5997] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 67.393981][ T5997] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.400421][ T5997] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 67.405055][ T5997] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.476980][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.308'. [ 67.489381][ T6806] netlink: 'syz.2.307': attribute type 10 has an invalid length. [ 67.506700][ T6806] team0: Device hsr_slave_0 failed to register rx_handler [ 67.517276][ T6814] netlink: 'syz.0.310': attribute type 15 has an invalid length. [ 67.520451][ T6814] netlink: 24 bytes leftover after parsing attributes in process `syz.0.310'. [ 67.612677][ T5997] usb 8-1: usb_control_msg returned -32 [ 67.615318][ T5997] usbtmc 8-1:16.0: can't read capabilities [ 67.687257][ T6830] @: renamed from vlan0 (while UP) [ 67.691091][ T6832] tipc: Enabling of bearer rejected, already enabled [ 67.795966][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'. [ 67.810630][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.323'. [ 67.832357][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 67.832369][ T40] audit: type=1400 audit(67.702:295): avc: denied { connect } for pid=6848 comm="syz.2.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.851449][ T6854] Cannot find map_set index 0 as target [ 67.862698][ T6858] selinux_netlink_send: 55 callbacks suppressed [ 67.862709][ T6858] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6858 comm=syz.0.323 [ 67.870734][ T6843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6843 comm=syz.0.323 [ 67.927355][ T40] audit: type=1400 audit(67.802:296): avc: denied { read } for pid=6862 comm="syz.1.330" name="v4l-subdev5" dev="devtmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.939657][ T40] audit: type=1400 audit(67.802:297): avc: denied { open } for pid=6862 comm="syz.1.330" path="/dev/v4l-subdev5" dev="devtmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.941282][ T6865] @: renamed from vlan0 (while UP) [ 67.949689][ T40] audit: type=1400 audit(67.802:298): avc: denied { write } for pid=6862 comm="syz.1.330" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.968265][ T40] audit: type=1400 audit(67.842:299): avc: denied { write } for pid=6791 comm="syz.3.301" name="usbtmc0" dev="devtmpfs" ino=2876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 67.978394][ T6868] usbtmc 8-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 68.040509][ T40] audit: type=1400 audit(67.912:300): avc: granted { setsecparam } for pid=6866 comm="syz.0.332" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 68.074025][ T6876] tipc: Enabling of bearer rejected, already enabled [ 68.102133][ T6878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.335'. [ 68.126373][ T40] audit: type=1400 audit(68.002:301): avc: denied { write } for pid=6879 comm="syz.0.336" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 68.180369][ T835] usb 8-1: USB disconnect, device number 4 [ 68.723275][ T6912] tipc: Enabling of bearer rejected, already enabled [ 68.728415][ T40] audit: type=1400 audit(68.602:302): avc: denied { execute } for pid=6913 comm="syz.2.349" name="file1" dev="tmpfs" ino=594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.728597][ T6914] process 'syz.2.349' launched './file1' with NULL argv: empty string added [ 68.739945][ T40] audit: type=1400 audit(68.612:303): avc: denied { execute_no_trans } for pid=6913 comm="syz.2.349" path="/112/file1" dev="tmpfs" ino=594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.855981][ T40] audit: type=1400 audit(68.732:304): avc: denied { setopt } for pid=6925 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.862609][ T6928] Cannot find map_set index 0 as target [ 68.912890][ T6934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.358'. [ 69.073760][ T6951] tipc: Enabling of bearer rejected, already enabled [ 69.108807][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'. [ 69.153758][ T6958] sp0: Synchronizing with TNC [ 69.368589][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 69.393172][ T6988] Cannot find map_set index 0 as target [ 69.421117][ T6992] tipc: Enabling of bearer rejected, already enabled [ 69.546094][ T7002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.383'. [ 69.683044][ T7016] tipc: Enabling of bearer rejected, already enabled [ 69.871822][ T7032] netlink: 'syz.3.394': attribute type 39 has an invalid length. [ 70.011785][ T7042] Cannot find map_set index 0 as target [ 70.146304][ T7048] SELinux: failed to load policy [ 70.217528][ T7060] binder: 7059:7060 ioctl c0306201 0 returned -14 [ 70.226486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.965486][ T7110] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 70.969299][ T7110] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 71.105429][ T7118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7118 comm=syz.3.429 [ 71.110836][ T7120] netlink: 'syz.3.429': attribute type 1 has an invalid length. [ 71.123456][ T7120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.128891][ T7118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7118 comm=syz.3.429 [ 71.135706][ T7118] vlan0: entered promiscuous mode [ 71.137513][ T7118] bond1: entered promiscuous mode [ 71.217522][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.219750][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.344392][ T7138] netlink: 'syz.3.437': attribute type 1 has an invalid length. [ 71.371196][ T7138] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.385528][ T7138] vlan2: entered allmulticast mode [ 71.387330][ T7138] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 71.392720][ T7138] bond2: (slave vlan2): making interface the new active one [ 71.396933][ T7138] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 71.429865][ T7145] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 71.505014][ T7156] xt_l2tp: v2 tid > 0xffff: 150994944 [ 71.572249][ T7157] __nla_validate_parse: 10 callbacks suppressed [ 71.572265][ T7157] netlink: 16 bytes leftover after parsing attributes in process `syz.3.445'. [ 71.586528][ T7164] Bluetooth: MGMT ver 1.23 [ 71.617082][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.447'. [ 71.716767][ T7177] xt_hashlimit: size too large, truncated to 1048576 [ 71.768383][ T7182] netlink: 'syz.3.456': attribute type 1 has an invalid length. [ 71.770825][ T7182] netlink: 224 bytes leftover after parsing attributes in process `syz.3.456'. [ 71.778414][ T7185] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 71.847869][ T7191] Mount JFS Failure: -22 [ 71.860250][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.461'. [ 71.912782][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.463'. [ 71.954686][ T7201] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.964848][ T7203] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 72.025808][ T7208] netlink: 'syz.0.466': attribute type 61 has an invalid length. [ 72.117749][ T7211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.468'. [ 72.186386][ T7220] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 72.247628][ T7234] Can't find a SQUASHFS superblock on nullb0 [ 72.357945][ T7234] macvlan0: entered promiscuous mode [ 72.359778][ T7234] macvlan0: entered allmulticast mode [ 72.361694][ T7234] veth1_vlan: entered allmulticast mode [ 72.428129][ T7245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.479'. [ 72.439816][ T7248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.481'. [ 72.475292][ T7256] netlink: 'syz.2.482': attribute type 1 has an invalid length. [ 72.495260][ T7256] 8021q: adding VLAN 0 to HW filter on device bond4 [ 72.660466][ T7269] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 72.847009][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.495'. [ 72.882718][ T7292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.497'. [ 72.921765][ T7295] netlink: 'syz.0.498': attribute type 1 has an invalid length. [ 72.951713][ T7295] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.110090][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 73.110102][ T40] audit: type=1400 audit(72.982:343): avc: denied { create } for pid=7310 comm="syz.0.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 73.110694][ T7312] warning: `syz.0.503' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.112052][ T40] audit: type=1400 audit(72.982:344): avc: denied { ioctl } for pid=7310 comm="syz.0.503" path="socket:[16608]" dev="sockfs" ino=16608 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 73.249938][ T7318] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 73.287798][ T7320] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 73.292417][ T7320] SELinux: failed to load policy [ 73.389386][ T7327] ======================================================= [ 73.389386][ T7327] WARNING: The mand mount option has been deprecated and [ 73.389386][ T7327] and is ignored by this kernel. Remove the mand [ 73.389386][ T7327] option from the mount to silence this warning. [ 73.389386][ T7327] ======================================================= [ 73.694249][ T57] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 73.757314][ T7341] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 73.763373][ T40] audit: type=1400 audit(73.632:345): avc: denied { mount } for pid=7340 comm="syz.1.515" name="/" dev="hugetlbfs" ino=16204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 73.763944][ T7341] hugetlbfs: Bad value 'e' for mount option 'size' [ 73.763944][ T7341] [ 73.770768][ T40] audit: type=1400 audit(73.632:346): avc: denied { remount } for pid=7340 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 73.779163][ T7341] netlink: 'syz.1.515': attribute type 10 has an invalid length. [ 73.824196][ T57] usb 8-1: device descriptor read/64, error -71 [ 73.873324][ T40] audit: type=1400 audit(73.742:347): avc: denied { unmount } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 73.893606][ T7349] IPv6: NLM_F_REPLACE set, but no existing node found! [ 73.939703][ T40] audit: type=1400 audit(73.812:348): avc: denied { create } for pid=7353 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 73.971003][ T7361] netlink: 'syz.0.521': attribute type 1 has an invalid length. [ 73.975332][ T40] audit: type=1400 audit(73.852:349): avc: denied { setopt } for pid=7362 comm="syz.1.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.018524][ T7361] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.058673][ T7370] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 74.064197][ T57] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 74.138189][ T40] audit: type=1400 audit(74.012:350): avc: denied { create } for pid=7375 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.165994][ T7380] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 74.194918][ T57] usb 8-1: device descriptor read/64, error -71 [ 74.213028][ T40] audit: type=1400 audit(74.082:351): avc: denied { create } for pid=7383 comm="syz.0.530" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 74.219571][ T40] audit: type=1400 audit(74.082:352): avc: denied { append } for pid=7383 comm="syz.0.530" name="nbd0" dev="devtmpfs" ino=690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 74.305765][ T57] usb usb8-port1: attempt power cycle [ 74.472104][ T7409] IPv6: NLM_F_REPLACE set, but no existing node found! [ 74.644176][ T57] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 74.665109][ T57] usb 8-1: device descriptor read/8, error -71 [ 74.725971][ T7425] netlink: 'syz.2.543': attribute type 1 has an invalid length. [ 74.740576][ T7425] 8021q: adding VLAN 0 to HW filter on device bond5 [ 74.784468][ T7433] Cannot find map_set index 0 as target [ 74.905951][ T57] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 74.924565][ T57] usb 8-1: device descriptor read/8, error -71 [ 75.034966][ T57] usb usb8-port1: unable to enumerate USB device [ 75.075851][ T7452] mac80211_hwsim hwsim8 `ëÿÿ: renamed from wlan1 (while UP) [ 75.184546][ T7458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16144 sclass=netlink_route_socket pid=7458 comm=syz.2.557 [ 75.188086][ T7460] IPv6: NLM_F_REPLACE set, but no existing node found! [ 75.378583][ T7477] overlayfs: missing 'lowerdir' [ 75.423230][ T7483] netlink: 'syz.2.564': attribute type 1 has an invalid length. [ 75.447178][ T7483] 8021q: adding VLAN 0 to HW filter on device bond6 [ 75.557741][ T7493] Cannot find map_set index 0 as target [ 75.776370][ T7507] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 76.645635][ T7534] IPv6: NLM_F_REPLACE set, but no existing node found! [ 76.668704][ T7538] __nla_validate_parse: 16 callbacks suppressed [ 76.668716][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'. [ 76.743344][ T7544] netlink: 'syz.3.585': attribute type 29 has an invalid length. [ 76.750075][ T7544] netlink: 'syz.3.585': attribute type 29 has an invalid length. [ 76.752704][ T7544] netlink: 'syz.3.585': attribute type 29 has an invalid length. [ 76.753702][ T7547] netlink: 'syz.1.586': attribute type 1 has an invalid length. [ 76.756090][ T7544] netlink: 'syz.3.585': attribute type 29 has an invalid length. [ 76.774466][ T7547] 8021q: adding VLAN 0 to HW filter on device bond3 [ 76.777282][ T7544] netlink: 'syz.3.585': attribute type 29 has an invalid length. [ 76.779844][ T7544] netlink: 'syz.3.585': attribute type 29 has an invalid length. [ 76.782402][ T7544] netlink: 'syz.3.585': attribute type 29 has an invalid length. [ 76.789816][ T7544] netlink: 'syz.3.585': attribute type 29 has an invalid length. [ 76.793429][ T7544] netlink: 'syz.3.585': attribute type 29 has an invalid length. [ 76.860589][ T7557] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 76.890966][ T7555] veth0_vlan: mtu less than device minimum [ 76.893697][ T7555] mac80211_hwsim hwsim3 `ëÿÿ: renamed from wlan1 (while UP) [ 77.364911][ T7520] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 77.369022][ T7524] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 77.700131][ T7587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.599'. [ 77.755933][ T7593] IPv6: NLM_F_REPLACE set, but no existing node found! [ 77.889774][ T7608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.606'. [ 77.927654][ T7610] 8021q: adding VLAN 0 to HW filter on device bond4 [ 78.016802][ T7619] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 78.050638][ T7622] netlink: 68 bytes leftover after parsing attributes in process `syz.0.612'. [ 78.327334][ T7639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.619'. [ 78.353364][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 78.353376][ T40] audit: type=1400 audit(78.222:363): avc: denied { read } for pid=7640 comm="syz.2.620" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 78.358691][ T7641] syz.2.620: attempt to access beyond end of device [ 78.358691][ T7641] loop2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 78.363478][ T40] audit: type=1400 audit(78.222:364): avc: denied { open } for pid=7640 comm="syz.2.620" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 78.369182][ T7641] qnx6: unable to read the first superblock [ 78.378980][ T7641] syz.2.620: attempt to access beyond end of device [ 78.378980][ T7641] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 78.383086][ T7641] qnx6: unable to read the first superblock [ 78.385402][ T7641] qnx6: unable to read the first superblock [ 78.389308][ T7642] syz.2.620: attempt to access beyond end of device [ 78.389308][ T7642] loop2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 78.393713][ T7642] qnx6: unable to read the first superblock [ 78.396350][ T7642] syz.2.620: attempt to access beyond end of device [ 78.396350][ T7642] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 78.401201][ T7642] qnx6: unable to read the first superblock [ 78.403128][ T7642] qnx6: unable to read the first superblock [ 78.571700][ T7653] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 78.571798][ T40] audit: type=1400 audit(78.442:365): avc: denied { watch watch_reads } for pid=7652 comm="syz.2.624" path="/183/file0" dev="tmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 78.575945][ T5945] Bluetooth: hci3: command 0x0401 tx timeout [ 78.582541][ T40] audit: type=1400 audit(78.452:366): avc: denied { relabelto } for pid=7652 comm="syz.2.624" name="183" dev="tmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 78.592482][ T40] audit: type=1400 audit(78.452:367): avc: denied { associate } for pid=7652 comm="syz.2.624" name="183" dev="tmpfs" ino=961 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 78.600823][ T40] audit: type=1400 audit(78.462:368): avc: denied { write } for pid=5930 comm="syz-executor" name="183" dev="tmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 78.610273][ T40] audit: type=1400 audit(78.462:369): avc: denied { remove_name } for pid=5930 comm="syz-executor" name="file0" dev="tmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 78.618635][ T40] audit: type=1400 audit(78.462:370): avc: denied { rmdir } for pid=5930 comm="syz-executor" name="183" dev="tmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 78.739163][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.626'. [ 78.789989][ T7662] 8021q: adding VLAN 0 to HW filter on device bond7 [ 78.832814][ T40] audit: type=1400 audit(78.702:371): avc: denied { create } for pid=7664 comm="syz.1.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 78.841370][ T40] audit: type=1400 audit(78.702:372): avc: denied { write } for pid=7664 comm="syz.1.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 78.848218][ T7665] fuse: Bad value for 'fd' [ 78.898623][ T7671] Cannot find map_set index 0 as target [ 79.908399][ T7704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.641'. [ 79.997121][ T7716] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 80.038981][ T7720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.647'. [ 80.095420][ T7724] 8021q: adding VLAN 0 to HW filter on device bond3 [ 80.203971][ T7737] Cannot find map_set index 0 as target [ 80.274680][ T57] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 80.434184][ T57] usb 6-1: Using ep0 maxpacket: 16 [ 80.437172][ T57] usb 6-1: config 0 has an invalid interface number: 49 but max is 0 [ 80.439900][ T57] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.443298][ T57] usb 6-1: config 0 has no interface number 0 [ 80.445741][ T57] usb 6-1: config 0 interface 49 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 80.451560][ T57] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 80.454675][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.457191][ T57] usb 6-1: Product: syz [ 80.458510][ T57] usb 6-1: Manufacturer: syz [ 80.459970][ T57] usb 6-1: SerialNumber: syz [ 80.464559][ T57] usb 6-1: config 0 descriptor?? [ 80.772218][ T5959] usb 6-1: USB disconnect, device number 3 [ 81.194731][ T7758] xt_l2tp: v2 doesn't support IP mode [ 81.214291][ T7760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.662'. [ 81.459569][ T7780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.669'. [ 81.467186][ T836] cfg80211: failed to load regulatory.db [ 81.667573][ T7788] 8021q: adding VLAN 0 to HW filter on device bond3 [ 81.710052][ T7791] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 81.753079][ T7793] tmpfs: Cannot change global quota limit on remount [ 81.759589][ T7793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7793 comm=syz.3.675 [ 81.766470][ T7793] binder: 7792:7793 ioctl c0306201 2000000001c0 returned -14 [ 82.262539][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.684'. [ 82.308446][ T7825] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 82.334784][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.689'. [ 82.514461][ T75] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 82.605835][ T7834] syz.0.692 (7834): drop_caches: 2 [ 82.675788][ T75] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.678994][ T75] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 82.681876][ T75] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.687138][ T75] usb 7-1: config 0 descriptor?? [ 82.693723][ T75] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 82.769085][ T7835] syz.0.692 (7835): drop_caches: 2 [ 82.832220][ T7841] validate_nla: 21 callbacks suppressed [ 82.832232][ T7841] netlink: 'syz.0.694': attribute type 1 has an invalid length. [ 82.857622][ T7841] 8021q: adding VLAN 0 to HW filter on device bond4 [ 82.900855][ T7846] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 82.950348][ T7851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.953146][ T7851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.959652][ T75] usb 7-1: USB disconnect, device number 2 [ 83.194237][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.703'. [ 83.204692][ T7862] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.208328][ T7862] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.212155][ T7862] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.215856][ T7862] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.223072][ T7862] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.226932][ T7862] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.230609][ T7862] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.238408][ T7862] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.288884][ T7867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.705'. [ 83.347196][ T7871] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 83.390343][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.708'. [ 83.445532][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 83.492176][ T5945] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 83.495270][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 83.495281][ T40] audit: type=1400 audit(83.372:382): avc: denied { map } for pid=7879 comm="syz.2.711" path="socket:[19850]" dev="sockfs" ino=19850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.495291][ T5945] Bluetooth: Wrong link type (-22) [ 83.497331][ T40] audit: type=1400 audit(83.372:383): avc: denied { read } for pid=7879 comm="syz.2.711" path="socket:[19850]" dev="sockfs" ino=19850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.873936][ T7893] netlink: 'syz.3.716': attribute type 1 has an invalid length. [ 83.894360][ T7893] 8021q: adding VLAN 0 to HW filter on device bond4 [ 83.929570][ T7896] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 84.506861][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.727'. [ 84.593052][ T7930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.731'. [ 84.790494][ T7950] netlink: 'syz.0.736': attribute type 1 has an invalid length. [ 84.805957][ T7950] 8021q: adding VLAN 0 to HW filter on device bond5 [ 84.817217][ T7953] Cannot find map_set index 0 as target [ 84.871624][ T40] audit: type=1400 audit(84.742:384): avc: denied { setattr } for pid=7965 comm="syz.0.742" name="RAW" dev="sockfs" ino=19968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.157377][ T7990] netlink: 16 bytes leftover after parsing attributes in process `syz.0.746'. [ 85.163119][ T7990] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.208481][ T7995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.748'. [ 85.221795][ T40] audit: type=1400 audit(85.092:385): avc: denied { name_bind } for pid=7996 comm="syz.3.749" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 85.238907][ T7999] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 85.352643][ T8007] netlink: 'syz.0.754': attribute type 1 has an invalid length. [ 85.375990][ T8007] 8021q: adding VLAN 0 to HW filter on device bond6 [ 85.484233][ T5959] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 85.530062][ T8016] Cannot find map_set index 0 as target [ 85.623546][ T8022] FAULT_INJECTION: forcing a failure. [ 85.623546][ T8022] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 85.628935][ T8022] CPU: 0 UID: 0 PID: 8022 Comm: syz.2.761 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 85.628950][ T8022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.628956][ T8022] Call Trace: [ 85.628960][ T8022] [ 85.628964][ T8022] dump_stack_lvl+0x16c/0x1f0 [ 85.628986][ T8022] should_fail_ex+0x512/0x640 [ 85.629004][ T8022] _copy_from_user+0x2e/0xd0 [ 85.629021][ T8022] copy_msghdr_from_user+0x98/0x160 [ 85.629034][ T8022] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 85.629053][ T8022] ___sys_sendmsg+0xfe/0x1d0 [ 85.629065][ T8022] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.629093][ T8022] __sys_sendmsg+0x16d/0x220 [ 85.629105][ T8022] ? __pfx___sys_sendmsg+0x10/0x10 [ 85.629121][ T8022] ? rcu_is_watching+0x12/0xc0 [ 85.629138][ T8022] do_syscall_64+0xcd/0x260 [ 85.629156][ T8022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.629167][ T8022] RIP: 0033:0x7fce5818e969 [ 85.629175][ T8022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.629185][ T8022] RSP: 002b:00007fce59028038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.629196][ T8022] RAX: ffffffffffffffda RBX: 00007fce583b5fa0 RCX: 00007fce5818e969 [ 85.629202][ T8022] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 85.629208][ T8022] RBP: 00007fce59028090 R08: 0000000000000000 R09: 0000000000000000 [ 85.629214][ T8022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.629220][ T8022] R13: 0000000000000000 R14: 00007fce583b5fa0 R15: 00007fff6562e5d8 [ 85.629233][ T8022] [ 85.636941][ T5959] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 85.699916][ T5959] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.703055][ T5959] usb 8-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 85.705917][ T5959] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.709934][ T5959] usb 8-1: config 0 descriptor?? [ 85.725689][ T40] audit: type=1400 audit(85.602:386): avc: denied { write } for pid=8030 comm="syz.2.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.778255][ T40] audit: type=1400 audit(85.652:387): avc: denied { read write } for pid=8041 comm="syz.0.766" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 85.785828][ T40] audit: type=1400 audit(85.652:388): avc: denied { ioctl open } for pid=8041 comm="syz.0.766" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 85.828873][ T8045] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 85.931471][ T8056] netlink: 'syz.0.770': attribute type 25 has an invalid length. [ 85.967714][ T8060] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 85.988406][ T40] audit: type=1400 audit(85.862:389): avc: denied { setopt } for pid=8061 comm="syz.1.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.322061][ T40] audit: type=1400 audit(86.192:390): avc: denied { append } for pid=7996 comm="syz.3.749" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 86.323580][ T7997] random: crng reseeded on system resumption [ 86.329673][ T40] audit: type=1400 audit(86.192:391): avc: denied { append } for pid=7996 comm="syz.3.749" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 86.434162][ T5998] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 86.522708][ T5959] usbhid 8-1:0.0: can't add hid device: -71 [ 86.524850][ T5959] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 86.529214][ T5959] usb 8-1: USB disconnect, device number 9 [ 86.586759][ T5998] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 86.590616][ T5998] usb 5-1: config 0 has no interface number 0 [ 86.593724][ T5998] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 86.598307][ T5998] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 86.602717][ T5998] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 86.607680][ T5998] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 86.611931][ T5998] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 86.617222][ T5998] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 86.621690][ T5998] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 86.625141][ T5998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.632578][ T5998] usb 5-1: config 0 descriptor?? [ 86.635622][ T8072] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 86.638867][ T8072] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 86.646365][ T5998] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 86.683143][ T8075] netlink: 'syz.2.778': attribute type 1 has an invalid length. [ 86.704473][ T8075] 8021q: adding VLAN 0 to HW filter on device bond8 [ 86.860363][ T8084] Cannot find map_set index 0 as target [ 86.885784][ T8072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10872 sclass=netlink_route_socket pid=8072 comm=syz.0.777 [ 86.968709][ T9] usb 5-1: USB disconnect, device number 3 [ 86.975493][ T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 87.026267][ T8090] FAULT_INJECTION: forcing a failure. [ 87.026267][ T8090] name failslab, interval 1, probability 0, space 0, times 1 [ 87.031422][ T8090] CPU: 3 UID: 0 PID: 8090 Comm: syz.2.784 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 87.031446][ T8090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.031456][ T8090] Call Trace: [ 87.031464][ T8090] [ 87.031472][ T8090] dump_stack_lvl+0x16c/0x1f0 [ 87.031503][ T8090] should_fail_ex+0x512/0x640 [ 87.031528][ T8090] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 87.031549][ T8090] should_failslab+0xc2/0x120 [ 87.031570][ T8090] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 87.031588][ T8090] ? __alloc_skb+0x2b2/0x380 [ 87.031612][ T8090] __alloc_skb+0x2b2/0x380 [ 87.031630][ T8090] ? __pfx___alloc_skb+0x10/0x10 [ 87.031652][ T8090] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 87.031680][ T8090] netlink_alloc_large_skb+0x69/0x130 [ 87.031705][ T8090] netlink_sendmsg+0x6a1/0xdd0 [ 87.031731][ T8090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.031770][ T8090] ____sys_sendmsg+0xa95/0xc70 [ 87.031796][ T8090] ? copy_msghdr_from_user+0x10a/0x160 [ 87.031815][ T8090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.031852][ T8090] ___sys_sendmsg+0x134/0x1d0 [ 87.031874][ T8090] ? __pfx____sys_sendmsg+0x10/0x10 [ 87.031925][ T8090] __sys_sendmsg+0x16d/0x220 [ 87.031946][ T8090] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.031982][ T8090] do_syscall_64+0xcd/0x260 [ 87.032010][ T8090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.032030][ T8090] RIP: 0033:0x7fce5818e969 [ 87.032046][ T8090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.032062][ T8090] RSP: 002b:00007fce59028038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.032080][ T8090] RAX: ffffffffffffffda RBX: 00007fce583b5fa0 RCX: 00007fce5818e969 [ 87.032090][ T8090] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 87.032100][ T8090] RBP: 00007fce59028090 R08: 0000000000000000 R09: 0000000000000000 [ 87.032110][ T8090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.032119][ T8090] R13: 0000000000000000 R14: 00007fce583b5fa0 R15: 00007fff6562e5d8 [ 87.032143][ T8090] [ 87.154349][ T83] bond0: (slave `ëÿÿ): link status definitely down, disabling slave [ 87.411812][ T8120] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 87.413921][ T8120] PKCS7: Only support pkcs7_signedData type [ 87.416143][ T8119] __nla_validate_parse: 42 callbacks suppressed [ 87.416152][ T8119] netlink: 44 bytes leftover after parsing attributes in process `syz.2.794'. [ 87.556507][ T8128] netlink: 'syz.0.796': attribute type 1 has an invalid length. [ 87.574210][ T8128] 8021q: adding VLAN 0 to HW filter on device bond7 [ 87.607343][ T8133] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 87.610674][ T8133] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 87.673240][ T8137] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 87.723118][ T8145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.802'. [ 87.825549][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.805'. [ 88.072956][ T8159] netlink: 'syz.2.806': attribute type 2 has an invalid length. [ 88.076044][ T8159] netlink: 784 bytes leftover after parsing attributes in process `syz.2.806'. [ 88.080276][ T8159] netlink: 'syz.2.806': attribute type 1 has an invalid length. [ 88.082703][ T8159] netlink: 500 bytes leftover after parsing attributes in process `syz.2.806'. [ 88.295397][ T8174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.812'. [ 88.383116][ T8180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.814'. [ 88.781322][ T8198] netlink: 'syz.0.820': attribute type 1 has an invalid length. [ 88.796576][ T8198] 8021q: adding VLAN 0 to HW filter on device bond8 [ 88.832807][ T8202] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 88.839527][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 88.839542][ T40] audit: type=1400 audit(88.712:402): avc: denied { accept } for pid=8200 comm="syz.2.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 88.882165][ T8206] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 88.912391][ T8211] NILFS (loop0): device size too small [ 88.929807][ T8211] NILFS (loop0): device size too small [ 88.930275][ T8207] FAULT_INJECTION: forcing a failure. [ 88.930275][ T8207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.930293][ T8207] CPU: 1 UID: 0 PID: 8207 Comm: syz.2.824 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 88.930307][ T8207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.930313][ T8207] Call Trace: [ 88.930317][ T8207] [ 88.930321][ T8207] dump_stack_lvl+0x16c/0x1f0 [ 88.930358][ T8207] should_fail_ex+0x512/0x640 [ 88.930381][ T8207] _copy_from_iter+0x2a4/0x15b0 [ 88.930399][ T8207] ? __alloc_skb+0x200/0x380 [ 88.930413][ T8207] ? __pfx__copy_from_iter+0x10/0x10 [ 88.930430][ T8207] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 88.930448][ T8207] netlink_sendmsg+0x829/0xdd0 [ 88.930464][ T8207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.930483][ T8207] ____sys_sendmsg+0xa95/0xc70 [ 88.930498][ T8207] ? copy_msghdr_from_user+0x10a/0x160 [ 88.930510][ T8207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.930532][ T8207] ___sys_sendmsg+0x134/0x1d0 [ 88.930544][ T8207] ? __pfx____sys_sendmsg+0x10/0x10 [ 88.930572][ T8207] __sys_sendmsg+0x16d/0x220 [ 88.930584][ T8207] ? __pfx___sys_sendmsg+0x10/0x10 [ 88.930600][ T8207] ? rcu_is_watching+0x12/0xc0 [ 88.930618][ T8207] do_syscall_64+0xcd/0x260 [ 88.930636][ T8207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.930647][ T8207] RIP: 0033:0x7fce5818e969 [ 88.930656][ T8207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.930666][ T8207] RSP: 002b:00007fce59028038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.930677][ T8207] RAX: ffffffffffffffda RBX: 00007fce583b5fa0 RCX: 00007fce5818e969 [ 88.930683][ T8207] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 88.930689][ T8207] RBP: 00007fce59028090 R08: 0000000000000000 R09: 0000000000000000 [ 88.930695][ T8207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.930701][ T8207] R13: 0000000000000000 R14: 00007fce583b5fa0 R15: 00007fff6562e5d8 [ 88.930715][ T8207] [ 89.045115][ T8220] Cannot find map_set index 0 as target [ 89.056114][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.829'. [ 89.062697][ T40] audit: type=1400 audit(88.932:403): avc: denied { create } for pid=8223 comm="syz.3.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 89.071497][ T40] audit: type=1400 audit(88.942:404): avc: denied { create } for pid=8228 comm="syz.2.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 89.078427][ T40] audit: type=1400 audit(88.952:405): avc: denied { bind } for pid=8228 comm="syz.2.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 89.093415][ T8231] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 89.101759][ T40] audit: type=1400 audit(88.972:406): avc: denied { ioctl } for pid=8228 comm="syz.2.831" path="/dev/ptyq8" dev="devtmpfs" ino=135 ioctlcmd=0x5438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 89.124280][ T40] audit: type=1326 audit(88.992:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.3.830" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fcf8e969 code=0x7fc00000 [ 89.199691][ T8245] netlink: 'syz.2.838': attribute type 1 has an invalid length. [ 89.216725][ T8245] 8021q: adding VLAN 0 to HW filter on device bond9 [ 89.279950][ T40] audit: type=1400 audit(89.152:408): avc: denied { allowed } for pid=8255 comm="syz.0.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 89.313115][ T8263] netlink: 'syz.0.846': attribute type 10 has an invalid length. [ 89.324355][ T8263] veth0_vlan: left promiscuous mode [ 89.330162][ T8263] veth0_vlan: entered promiscuous mode [ 89.337163][ T8263] team0: Device veth0_vlan failed to register rx_handler [ 89.358077][ T8266] netlink: 36 bytes leftover after parsing attributes in process `syz.3.840'. [ 89.361094][ T8266] netlink: 16 bytes leftover after parsing attributes in process `syz.3.840'. [ 89.383504][ T8268] FAULT_INJECTION: forcing a failure. [ 89.383504][ T8268] name failslab, interval 1, probability 0, space 0, times 0 [ 89.389895][ T8268] CPU: 3 UID: 0 PID: 8268 Comm: syz.0.848 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 89.389910][ T8268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.389917][ T8268] Call Trace: [ 89.389920][ T8268] [ 89.389925][ T8268] dump_stack_lvl+0x16c/0x1f0 [ 89.389945][ T8268] should_fail_ex+0x512/0x640 [ 89.389963][ T8268] should_failslab+0xc2/0x120 [ 89.389992][ T8268] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 89.390004][ T8268] ? skb_clone+0x190/0x3f0 [ 89.390018][ T8268] skb_clone+0x190/0x3f0 [ 89.390031][ T8268] netlink_deliver_tap+0xabd/0xd30 [ 89.390048][ T8268] netlink_unicast+0x5df/0x7f0 [ 89.390063][ T8268] ? __pfx_netlink_unicast+0x10/0x10 [ 89.390081][ T8268] netlink_sendmsg+0x8d1/0xdd0 [ 89.390098][ T8268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.390117][ T8268] ____sys_sendmsg+0xa95/0xc70 [ 89.390133][ T8268] ? copy_msghdr_from_user+0x10a/0x160 [ 89.390145][ T8268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.390167][ T8268] ___sys_sendmsg+0x134/0x1d0 [ 89.390179][ T8268] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.390208][ T8268] __sys_sendmsg+0x16d/0x220 [ 89.390220][ T8268] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.390242][ T8268] do_syscall_64+0xcd/0x260 [ 89.390259][ T8268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.390270][ T8268] RIP: 0033:0x7f7b5c98e969 [ 89.390279][ T8268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.390290][ T8268] RSP: 002b:00007f7b5d7d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.390300][ T8268] RAX: ffffffffffffffda RBX: 00007f7b5cbb5fa0 RCX: 00007f7b5c98e969 [ 89.390307][ T8268] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 89.390313][ T8268] RBP: 00007f7b5d7d9090 R08: 0000000000000000 R09: 0000000000000000 [ 89.390319][ T8268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.390325][ T8268] R13: 0000000000000000 R14: 00007f7b5cbb5fa0 R15: 00007ffe2dc6bfe8 [ 89.390338][ T8268] [ 89.503228][ T8280] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 89.625897][ T8291] overlayfs: conflicting options: userxattr,verity=on [ 89.814665][ T40] audit: type=1400 audit(89.692:409): avc: denied { read } for pid=8318 comm="syz.0.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.832576][ T40] audit: type=1400 audit(89.702:410): avc: denied { read } for pid=8318 comm="syz.0.866" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 89.845984][ T40] audit: type=1400 audit(89.702:411): avc: denied { open } for pid=8318 comm="syz.0.866" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 90.022220][ T8334] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 90.205171][ T8348] netlink: del zone limit has 8 unknown bytes [ 90.262093][ T8357] netlink: 'syz.1.881': attribute type 1 has an invalid length. [ 90.290153][ T8357] 8021q: adding VLAN 0 to HW filter on device bond5 [ 90.393156][ T8371] Cannot find map_set index 0 as target [ 90.426764][ T8373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=8373 comm=syz.3.889 [ 90.692882][ T8394] netlink: 'syz.1.898': attribute type 1 has an invalid length. [ 90.717649][ T8394] 8021q: adding VLAN 0 to HW filter on device bond6 [ 90.793160][ T8403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=8403 comm=syz.1.902 [ 90.802570][ T8403] xt_connbytes: Forcing CT accounting to be enabled [ 90.804899][ T8403] Cannot find add_set index 0 as target [ 91.037975][ T8431] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 91.098585][ T8426] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8426 comm=syz.3.911 [ 91.142677][ T8444] netlink: 'syz.3.918': attribute type 1 has an invalid length. [ 91.165880][ T8444] 8021q: adding VLAN 0 to HW filter on device bond5 [ 91.345866][ T8470] bridge1: entered promiscuous mode [ 91.347886][ T8470] bridge1: entered allmulticast mode [ 91.426733][ T8481] pim6reg: entered allmulticast mode [ 91.429696][ T8481] pim6reg: left allmulticast mode [ 91.547536][ T8489] netlink: 'syz.0.934': attribute type 1 has an invalid length. [ 91.567752][ T8489] 8021q: adding VLAN 0 to HW filter on device bond9 [ 91.711629][ T8492] ip6erspan0: entered promiscuous mode [ 91.799787][ T8506] IPv6: NLM_F_REPLACE set, but no existing node found! [ 92.006068][ T8541] Cannot find map_set index 0 as target [ 92.132211][ T8552] FAULT_INJECTION: forcing a failure. [ 92.132211][ T8552] name failslab, interval 1, probability 0, space 0, times 0 [ 92.137699][ T8552] CPU: 1 UID: 0 PID: 8552 Comm: syz.3.957 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 92.137714][ T8552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.137721][ T8552] Call Trace: [ 92.137725][ T8552] [ 92.137729][ T8552] dump_stack_lvl+0x16c/0x1f0 [ 92.137749][ T8552] should_fail_ex+0x512/0x640 [ 92.137767][ T8552] should_failslab+0xc2/0x120 [ 92.137780][ T8552] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 92.137792][ T8552] ? skb_clone+0x190/0x3f0 [ 92.137808][ T8552] skb_clone+0x190/0x3f0 [ 92.137820][ T8552] netlink_deliver_tap+0xabd/0xd30 [ 92.137837][ T8552] netlink_unicast+0x6b2/0x7f0 [ 92.137852][ T8552] ? __pfx_netlink_unicast+0x10/0x10 [ 92.137869][ T8552] ? genl_rcv_msg+0x4bb/0x800 [ 92.137900][ T8552] netlink_ack+0x696/0xb80 [ 92.137941][ T8552] netlink_rcv_skb+0x347/0x440 [ 92.137963][ T8552] ? __pfx_genl_rcv_msg+0x10/0x10 [ 92.137990][ T8552] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 92.138013][ T8552] ? __pfx_down_read+0x10/0x10 [ 92.138024][ T8552] ? netlink_deliver_tap+0x1ae/0xd30 [ 92.138039][ T8552] genl_rcv+0x28/0x40 [ 92.138053][ T8552] netlink_unicast+0x53d/0x7f0 [ 92.138068][ T8552] ? __pfx_netlink_unicast+0x10/0x10 [ 92.138086][ T8552] netlink_sendmsg+0x8d1/0xdd0 [ 92.138102][ T8552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.138121][ T8552] ____sys_sendmsg+0xa95/0xc70 [ 92.138137][ T8552] ? copy_msghdr_from_user+0x10a/0x160 [ 92.138149][ T8552] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.138171][ T8552] ___sys_sendmsg+0x134/0x1d0 [ 92.138184][ T8552] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.138213][ T8552] __sys_sendmsg+0x16d/0x220 [ 92.138225][ T8552] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.138241][ T8552] ? rcu_is_watching+0x12/0xc0 [ 92.138259][ T8552] do_syscall_64+0xcd/0x260 [ 92.138276][ T8552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.138287][ T8552] RIP: 0033:0x7fb1fcf8e969 [ 92.138297][ T8552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.138307][ T8552] RSP: 002b:00007fb1fdd56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.138318][ T8552] RAX: ffffffffffffffda RBX: 00007fb1fd1b5fa0 RCX: 00007fb1fcf8e969 [ 92.138325][ T8552] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 92.138331][ T8552] RBP: 00007fb1fdd56090 R08: 0000000000000000 R09: 0000000000000000 [ 92.138337][ T8552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 92.138343][ T8552] R13: 0000000000000000 R14: 00007fb1fd1b5fa0 R15: 00007ffc2d7d63a8 [ 92.138356][ T8552] [ 92.250506][ T8561] IPv6: NLM_F_REPLACE set, but no existing node found! [ 92.286206][ T8565] 8021q: VLANs not supported on wg0 [ 92.652298][ T8605] FAULT_INJECTION: forcing a failure. [ 92.652298][ T8605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.656805][ T8605] CPU: 0 UID: 0 PID: 8605 Comm: syz.0.975 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 92.656821][ T8605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.656827][ T8605] Call Trace: [ 92.656831][ T8605] [ 92.656836][ T8605] dump_stack_lvl+0x16c/0x1f0 [ 92.656856][ T8605] should_fail_ex+0x512/0x640 [ 92.656874][ T8605] _copy_to_user+0x32/0xd0 [ 92.656891][ T8605] simple_read_from_buffer+0xcb/0x170 [ 92.656909][ T8605] proc_fail_nth_read+0x197/0x270 [ 92.656926][ T8605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.656944][ T8605] ? rw_verify_area+0xcf/0x680 [ 92.656958][ T8605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.656974][ T8605] vfs_read+0x1de/0xc70 [ 92.656992][ T8605] ? __pfx___mutex_lock+0x10/0x10 [ 92.657008][ T8605] ? __pfx_vfs_read+0x10/0x10 [ 92.657028][ T8605] ? __fget_files+0x20e/0x3c0 [ 92.657042][ T8605] ksys_read+0x12a/0x240 [ 92.657058][ T8605] ? __pfx_ksys_read+0x10/0x10 [ 92.657073][ T8605] ? rcu_is_watching+0x12/0xc0 [ 92.657090][ T8605] do_syscall_64+0xcd/0x260 [ 92.657107][ T8605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.657119][ T8605] RIP: 0033:0x7f7b5c98d37c [ 92.657127][ T8605] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 92.657138][ T8605] RSP: 002b:00007f7b5d7d9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 92.657149][ T8605] RAX: ffffffffffffffda RBX: 00007f7b5cbb5fa0 RCX: 00007f7b5c98d37c [ 92.657156][ T8605] RDX: 000000000000000f RSI: 00007f7b5d7d90a0 RDI: 0000000000000008 [ 92.657162][ T8605] RBP: 00007f7b5d7d9090 R08: 0000000000000000 R09: 0000000000000000 [ 92.657169][ T8605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 92.657175][ T8605] R13: 0000000000000000 R14: 00007f7b5cbb5fa0 R15: 00007ffe2dc6bfe8 [ 92.657188][ T8605] [ 92.747860][ T8613] netlink: 'syz.0.978': attribute type 4 has an invalid length. [ 92.750270][ T8613] __nla_validate_parse: 22 callbacks suppressed [ 92.750278][ T8613] netlink: 152 bytes leftover after parsing attributes in process `syz.0.978'. [ 92.760440][ T8613] : renamed from bond0 (while UP) [ 92.769952][ T8613] netlink: 152 bytes leftover after parsing attributes in process `syz.0.978'. [ 92.869413][ T8625] 8021q: adding VLAN 0 to HW filter on device bond7 [ 93.304191][ T66] Bluetooth: hci3: command 0x0401 tx timeout [ 93.410701][ T8658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.995'. [ 93.414326][ T8658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.995'. [ 93.456617][ T8662] netlink: 328 bytes leftover after parsing attributes in process `syz.1.997'. [ 93.496818][ T8666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.999'. [ 93.530337][ T8669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1000'. [ 93.549687][ T8671] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 93.634936][ C3] [ 93.665672][ C3] ============================= [ 93.667326][ C3] [ BUG: Invalid wait context ] [ 93.669015][ C3] 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 Not tainted [ 93.673413][ C3] ----------------------------- [ 93.675367][ C3] ksoftirqd/3/33 is trying to lock: [ 93.677156][ C3] ffffc90020a5a410 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x254/0xeb0 [ 93.681062][ C3] other info that might help us debug this: [ 93.683557][ C3] context-{2:2} [ 93.685019][ C3] 1 lock held by ksoftirqd/3/33: [ 93.687050][ C3] #0: ffffc90020a5a958 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x23a/0xeb0 [ 93.691180][ C3] stack backtrace: [ 93.692740][ C3] CPU: 3 UID: 0 PID: 33 Comm: ksoftirqd/3 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 93.692762][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.692772][ C3] Call Trace: [ 93.692780][ C3] [ 93.692787][ C3] dump_stack_lvl+0x116/0x1f0 [ 93.692813][ C3] __lock_acquire+0x3ff/0x1ba0 [ 93.692839][ C3] ? xa_load+0x149/0x2c0 [ 93.692855][ C3] lock_acquire+0x179/0x350 [ 93.692878][ C3] ? kvm_xen_set_evtchn_fast+0x254/0xeb0 [ 93.692906][ C3] _raw_read_lock_irqsave+0x46/0x90 [ 93.692937][ C3] ? kvm_xen_set_evtchn_fast+0x254/0xeb0 [ 93.692958][ C3] kvm_xen_set_evtchn_fast+0x254/0xeb0 [ 93.692981][ C3] ? kvm_xen_set_evtchn_fast+0x23a/0xeb0 [ 93.693005][ C3] ? __pfx_kvm_xen_set_evtchn_fast+0x10/0x10 [ 93.693028][ C3] ? do_raw_spin_unlock+0x172/0x230 [ 93.693045][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 93.693065][ C3] ? debug_object_deactivate+0x1ec/0x3a0 [ 93.693085][ C3] ? __pfx_xen_timer_callback+0x10/0x10 [ 93.693107][ C3] xen_timer_callback+0x1db/0x2a0 [ 93.693122][ C3] ? __pfx_xen_timer_callback+0x10/0x10 [ 93.693146][ C3] ? do_raw_spin_unlock+0x172/0x230 [ 93.693165][ C3] __hrtimer_run_queues+0x5ea/0xad0 [ 93.693185][ C3] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 93.693203][ C3] ? read_tsc+0x9/0x20 [ 93.693226][ C3] hrtimer_interrupt+0x397/0x8e0 [ 93.693249][ C3] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 93.693269][ C3] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 93.693291][ C3] [ 93.693295][ C3] [ 93.693302][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 93.693320][ C3] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 93.693341][ C3] Code: fb 09 00 00 44 8b 05 49 cb fb 0e 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 ff 77 39 00 fb 65 48 8b 1d 8e cd 1a 12 <48> 8d bb 18 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 93.693357][ C3] RSP: 0018:ffffc900006cfbf0 EFLAGS: 00000206 [ 93.693370][ C3] RAX: 000000000011cc03 RBX: ffff88801e2a2440 RCX: ffffffff81c3097f [ 93.693383][ C3] RDX: 0000000000000000 RSI: ffffffff8dbe4615 RDI: ffffffff8bf4a2a0 [ 93.693392][ C3] RBP: ffffc900006cfc38 R08: 0000000000000001 R09: 0000000000000001 [ 93.693401][ C3] R10: ffffffff90852e17 R11: 0000000000000000 R12: ffff88806a739dc0 [ 93.693412][ C3] R13: ffff88805af74880 R14: ffff888033a90a00 R15: ffff88806a73abf0 [ 93.693427][ C3] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 93.693445][ C3] ? __switch_to+0x749/0x1170 [ 93.693468][ C3] __schedule+0x1177/0x5de0 [ 93.693487][ C3] ? kvm_sched_clock_read+0x11/0x20 [ 93.693507][ C3] ? sched_clock+0x38/0x60 [ 93.693532][ C3] ? __lock_acquire+0x5ca/0x1ba0 [ 93.693557][ C3] ? __pfx___schedule+0x10/0x10 [ 93.693578][ C3] ? find_held_lock+0x2b/0x80 [ 93.693597][ C3] ? schedule+0x2d7/0x3a0 [ 93.693617][ C3] schedule+0xe7/0x3a0 [ 93.693636][ C3] smpboot_thread_fn+0x8e6/0xae0 [ 93.693660][ C3] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 93.693682][ C3] kthread+0x3c2/0x780 [ 93.693696][ C3] ? __pfx_kthread+0x10/0x10 [ 93.693707][ C3] ? __pfx_kthread+0x10/0x10 [ 93.693722][ C3] ? __pfx_kthread+0x10/0x10 [ 93.693737][ C3] ? __pfx_kthread+0x10/0x10 [ 93.693751][ C3] ? rcu_is_watching+0x12/0xc0 [ 93.693769][ C3] ? __pfx_kthread+0x10/0x10 [ 93.693785][ C3] ret_from_fork+0x45/0x80 [ 93.693800][ C3] ? __pfx_kthread+0x10/0x10 [ 93.693814][ C3] ret_from_fork_asm+0x1a/0x30 [ 93.693842][ C3] VM DIAGNOSIS: 01:53:01 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81af5231 RDX=0000000000000001 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000e107a70 RSP=ffffc9000e107998 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff92001c20f38 R13=0000000000000000 R14=0000000000000001 R15=ffff888056639f00 RIP=ffffffff81bb413a RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555628a0500 ffffffff 00c00000 GS =0000 ffff8880d69da000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb1fcfec970 CR3=00000000508a0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2d7d6730 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1fd011a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1fd011a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1fd011a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1fd011aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1fd011b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1fd011c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88806a7415c0 RCX=ffffffff81af2e99 RDX=ffff88802d9ca440 RSI=ffffffff81af2e73 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90004d677f8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed100d4e82b9 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88806a53b040 RIP=ffffffff81af2e75 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555572cfa500 ffffffff 00c00000 GS =0000 ffff8880d6ada000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fce58ee56c0 CR3=0000000049e38000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2d7d6730 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1fd011a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1fd011a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1fd011a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1fd011aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1fd011b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1fd011c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a7415a0 RCX=ffffffff81af2e99 RDX=ffff88804fbd4880 RSI=ffffffff81af2e73 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90028e3f708 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed100d4e82b5 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88806a63b040 RIP=ffffffff81af2e7a RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000008000 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2dc6c370 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b5ca11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b5ca11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b5ca11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b5ca11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b5ca11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b5ca11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff854f9cb0 RDI=ffffffff9adfe5a0 RBP=ffffffff9adfe560 RSP=ffffc900006f8640 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e35312e36 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff35bfd06 R15=dffffc0000000000 RIP=ffffffff854f9cd7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c372cd1 CR3=00000000508a0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 eaffffffff000000 0702000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e5d811a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e5d811a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e5d811a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e5d811aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e5d811b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e5d811c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e5d983488 00007f4e5d983480 00007f4e5d983478 00007f4e5d983450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e5e4ed100 00007f4e5d983440 00007f4e5d980004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e5d983498 00007f4e5d983490 00007f4e5d983488 00007f4e5d983480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c817c6ef62fbc68 4f264aefec3875f0 ca9fe00a539e1541 1b3036d7b95cdaa9 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ec3875f0ca9fe00a 539e15411b3036d7 b95cdaa98c6c85f6 0e428283abf4e34a ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4eb6507a03aacecb f2c22a62c52ae706 e244a92f7c817c6e f62fbc684f264aef ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 743581f0945aa8dc c99c36a6ac3a7d0d 64c110e81274064a edacd6c01cfaf68b ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9863137a95a9b39c a128044a91793866 447b3c961e8da912 83617135df2d5873 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000