last executing test programs: 1m22.934995318s ago: executing program 0 (id=250): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) (rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000040)='.\x00', r1, &(0x7f0000000140)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='\x06\x00\x04\xc9o\xd6\x19\xe8\xa2\xc6j\x96\x00\x00') (async) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c0000000000000800fe8000000000000000000000000000bbe000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000101"], 0xb8}}, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe880000000000000000000000000001ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000200100000000000000000000000000020000000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023500000200010000000000000000004c00140073686131000000000000000000000000cf78a9d7631c88b600"/244], 0x13c}}, 0x0) 1m22.875255825s ago: executing program 0 (id=251): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r1, 0x5501) preadv(r0, &(0x7f0000002480)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 1m22.814937588s ago: executing program 0 (id=252): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000c3", 0x39}], 0x1) 1m22.744098176s ago: executing program 0 (id=254): mlockall(0x5) (async) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "804479", 0x18, 0x6, 0x0, @private2, @local, {[], {{0x4e24, 0x4e22, 0x41424344, r0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x8}, {"a406acb3"}}}}}}}, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x7) (async) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f00000000c0)=0x5) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (async) mincore(&(0x7f0000001000/0x4000)=nil, 0x4000, &(0x7f0000000100)) (async) munlockall() 1m22.625488184s ago: executing program 0 (id=255): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x700, 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0xf}}, './file1\x00'}) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87}, './file0\x00'}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00r0, {0xc, 0x4}}, './file0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000740)=@newtaction={0x94, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x80, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x40) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000600)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x3, 0x4, 0x52c, 0x65, 0x0, 0x4, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}, {[@end]}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x145, 0x80, 0xf1, 0x0, 0x8, {[@eol, @exp_fastopen={0xfe, 0x12, 0xf989, "443cab1d7d9082965179c6b2b2fd"}, @mptcp=@remove_addr={0x1e, 0x4ea, 0x2, 0x0, "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"}]}}}}}, 0x53a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x7, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$CDROM_SELECT_DISK(r3, 0x5323, 0x800000000000006) 1m21.725357116s ago: executing program 3 (id=261): r0 = socket$tipc(0x1e, 0x5, 0x0) accept4(r0, &(0x7f00000007c0)=@nfc, &(0x7f0000000840)=0x80, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000600)=""/107, 0x6b, 0x0, &(0x7f0000000680)=""/142, 0x8e}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffff0180c2000003090045000090f2fba94e9978"], 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="0200"], 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r6, r5, 0x2, 0x0, 0x4000, @void, @value}, 0x10) (async) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r7 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) (async) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000200)={0x100, r8}, 0x0) listen(r0, 0x0) (async) r9 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) userfaultfd(0x80000) accept4(r9, 0x0, 0x0, 0x0) 1m21.724399778s ago: executing program 3 (id=262): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0xf8, 0x3f, 0x9, 0x0, 0x0, {0x6}, [@generic="a2420f59e307727b7e7013ef5723baabd257b23782aec36ca99586e3412761717b4bfe9337a93619fce717eb483493bd78eea498cc1481d6893426459ec37a687affd1e6e51dac52514a7c77b38d02c322622c6c89feb26ca9c8aaa5eb452e2b79b3f5f143277a5b0a04d98e7b78657ec0d0afa45e39ec6dfc21fdea6fa37a2b1293d12a20939f1a12d27cc45b6f2255e94d4fee7d5653aa56e176e736674c0c4e07a970b3876ba7bf3b5d848356b9b84aa7dd029b68c3d6aa1a34d8b0d78a1549a77b49bee36ba6c26e29f30065cdbde04d68c6efe6c9c6cd8952871466c4c5147894bc"]}, 0xf8}, 0x1, 0x0, 0x0, 0x8850}, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@debug={'debug', 0x3d, 0x4}}, {@mmap}, {@nodevmap}, {@directio}, {@posixacl}, {@cache_loose}, {@loose}, {@loose}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/video#\x00'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<', 0xee01}}, {@obj_type={'obj_type', 0x3d, '))!'}}, {@appraise}, {@subj_user={'subj_user', 0x3d, '[{!^-'}}, {@obj_type={'obj_type', 0x3d, 'D~\xfa(\xd3\x1b\b\xee\x8d\x8d\xad\fN\rF\xcd*\xa5K\x92Ys!P\x82u\xfe\xab\xaf\xa2\x8b\xf4\xec\x86uX4\xc6\x8b@\x83A\x8c\xd7\'0\x96\xd1\xf6\x9c\xd0N\xec5\xf2Xs\xd8\xc1\x12Y\xd0 \xaaG@a\\\xf7-\x9d\x7f\xd2.\x03\x13\xfa\xfbYA\xb5\xc83\xce\x02nS\xf0\x0e\xfd\xf2\xaa?n\v\x8d\xf9\xbe\x13\x1e\x96t\x87\x89\xc3iV\x1a\x17\x19\xa2\x05\x15vW\x17\xcd\x84\x88\xc8v\x81\x9e+\x14\xa2\xb9\xf4\xa6\xe5\xd7\x93\x8bS\xb9\xb4Bw3cV\x10\xb9Q\xa3\xf7]+\x8d>\xfc\xfe\x85\xb7\xb78\x8f!\xf0\x96\n\xf1T\xd4>\xc5\x80\x8es\xb2\x9c\f\xb0M9\xc7\xff\xcf\xa0\x01\x13\xb7:\a\xc7\xf0\xa3`0\xa1!\x15a\x93-\xb9\x9b\xb2\xe7\xb8\v\xb2\xd6])\xb1a\x11-\x94\xf5\xbc\xdb\x92P\n\xc4r\tG\xab]\x96\x15\xdf\xef\xe7\x87'}}, {@obj_type={'obj_type', 0x3d, 'posixacl'}}, {@fsmagic={'fsmagic', 0x3d, 0x4e81}}, {@dont_measure}]}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x2, 0x0, 0x1}) 1m21.235294765s ago: executing program 3 (id=267): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @rand_addr=0x64010101}}, 0x0, 0x0, 0x37, 0x0, "c3218d82c5896754d7cdb23c72887c897926a8856263b50c578ef1f9f362f16f21f5c872b1737718103bbde1a9d99011d25bbdff9c1351ba69e297337d6a5e4a948c1cbf827d6e95ad5bbfb5b3bd1929"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x28011, r2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r7, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}}, 0x20) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/119, 0x77}], 0x1, 0xe, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000080)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x5f0f, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1m15.222596868s ago: executing program 1 (id=293): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000009c0)={0x13, 0x10, 0xfa00, {&(0x7f00000007c0), r3, 0x1}}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 1m15.175617225s ago: executing program 1 (id=294): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1m15.175275826s ago: executing program 3 (id=267): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @rand_addr=0x64010101}}, 0x0, 0x0, 0x37, 0x0, "c3218d82c5896754d7cdb23c72887c897926a8856263b50c578ef1f9f362f16f21f5c872b1737718103bbde1a9d99011d25bbdff9c1351ba69e297337d6a5e4a948c1cbf827d6e95ad5bbfb5b3bd1929"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x28011, r2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r7, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}}, 0x20) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/119, 0x77}], 0x1, 0xe, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000080)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x5f0f, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1m14.725570248s ago: executing program 1 (id=295): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000140)={{0x6, @bcast, 0x2}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x1ad72f7) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000440)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) connect$netrom(r0, &(0x7f0000000140)={{0x6, @bcast, 0x2}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) listen(r0, 0x1ad72f7) (async) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000440)) (async) 1m14.632023704s ago: executing program 1 (id=296): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) syz_emit_ethernet(0x5a, &(0x7f0000001100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff8100000086dd6000000000200600fc000000000000000000000000000000fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a6ba0100"/20], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe83, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000004040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) shutdown(r3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r2}, 0x10) r4 = syz_open_dev$audion(&(0x7f00000000c0), 0x32c9, 0x400001) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) sendmsg$can_j1939(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r5, 0x2, {0x0, 0xfe, 0x4}, 0x1}, 0x18, &(0x7f0000000280)={&(0x7f0000000240)="34ddd29f4e2ea88b1b9ad08b4a2bac16c77fc4419bdbb417764d9cfeaa68139ce508b83231658a15c3373ab217d9d0a407d58d", 0x33}}, 0x80) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r1, 0x965fc000) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') 1m14.631359361s ago: executing program 1 (id=297): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0xd0001}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000001c0)="65d80cf3666636260f2195f30f38f620f33e80cf280f00da66b9e502000066b800a0000066ba000000000f300f32b850008ee86766c74424000e0000006766c7442402000000006766c744240600000000670f01142426660f01df", 0x5b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 1m14.385616157s ago: executing program 1 (id=298): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3}, 0x10, 0x0) r2 = io_uring_setup(0x6f6, &(0x7f0000005100)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) landlock_restrict_self(r1, 0x0) setresuid(0xee01, 0x0, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 1m14.378962708s ago: executing program 32 (id=298): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3}, 0x10, 0x0) r2 = io_uring_setup(0x6f6, &(0x7f0000005100)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) landlock_restrict_self(r1, 0x0) setresuid(0xee01, 0x0, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 1m6.903720464s ago: executing program 33 (id=256): r0 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x30, r2, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8}, @val={0xc, 0x99, {0x1, 0x9}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000040}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) open(&(0x7f0000000540)='./bus\x00', 0x20480, 0x48) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x149182, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xc, 0x4}}, './file0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000740)=@newtaction={0x94, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x80, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x40) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000600)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x3, 0x4, 0x52c, 0x65, 0x0, 0x4, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}, {[@end]}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x145, 0x80, 0xf1, 0x0, 0x8, {[@eol, @exp_fastopen={0xfe, 0x12, 0xf989, "443cab1d7d9082965179c6b2b2fd"}, @mptcp=@remove_addr={0x1e, 0x4ea, 0x2, 0x0, "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"}]}}}}}, 0x53a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x7, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$CDROM_SELECT_DISK(r3, 0x5323, 0x800000000000006) 54.394391904s ago: executing program 3 (id=267): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @rand_addr=0x64010101}}, 0x0, 0x0, 0x37, 0x0, "c3218d82c5896754d7cdb23c72887c897926a8856263b50c578ef1f9f362f16f21f5c872b1737718103bbde1a9d99011d25bbdff9c1351ba69e297337d6a5e4a948c1cbf827d6e95ad5bbfb5b3bd1929"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x28011, r2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r7, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}}, 0x20) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/119, 0x77}], 0x1, 0xe, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000080)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x5f0f, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 33.013375923s ago: executing program 3 (id=267): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @rand_addr=0x64010101}}, 0x0, 0x0, 0x37, 0x0, "c3218d82c5896754d7cdb23c72887c897926a8856263b50c578ef1f9f362f16f21f5c872b1737718103bbde1a9d99011d25bbdff9c1351ba69e297337d6a5e4a948c1cbf827d6e95ad5bbfb5b3bd1929"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x28011, r2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r7, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}}, 0x20) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/119, 0x77}], 0x1, 0xe, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000080)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x5f0f, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 15.231359895s ago: executing program 5 (id=465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x241) pwritev(r1, &(0x7f0000000940)=[{&(0x7f0000000480)="80fd", 0x2}], 0x1, 0x0, 0x0) r2 = syz_io_uring_setup(0x206c, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x5, 0x0}) io_uring_enter(r2, 0x568, 0x0, 0x2e, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}], {0x14, 0x10}}, 0xac}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040e001c8d645b"], 0x7) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x110000}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text64={0x40, &(0x7f0000001840)="f3470fbc06c74424000600007848b800280000000000000f23c00f21f835030004000f23f8c7442406000000000f0114246aa2450f0012124424001afa0000c744240216383d27c7442406000000000f011c2466b8f0000f00d0400f060f00e4c4a1c1edba2500000066baa00066b8000066ef66b82f008ed0", 0x79}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) signalfd4(r6, &(0x7f0000000000)={[0x3]}, 0x8, 0x80000) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) 15.053977748s ago: executing program 4 (id=470): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0xda, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) (async) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount(&(0x7f0000000100)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='qnx6\x00', 0x80081f, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_bridge\x00', &(0x7f0000000080)=@ethtool_test={0x1a, 0x800, 0xe5}}) 15.053561675s ago: executing program 4 (id=471): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0) 14.854111766s ago: executing program 4 (id=472): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "5a5f0000008a3f00"}) r3 = syz_open_pts(r2, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x9) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = dup(r3) read$FUSE(r7, &(0x7f00000023c0)={0x2020}, 0x2020) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, 0x40c89}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty}}}], 0x20}}], 0x1, 0x0) 14.750062292s ago: executing program 5 (id=474): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0xc, 0x0, 0x0, 0x9, [0x5, 0x5]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x9}, {@remote, 0x8}, {@broadcast, 0x3}, {@empty}, {@multicast1, 0xffd200}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x8, [{@dev}, {@multicast2}, {@broadcast, 0x52b1}, {@multicast2, 0x2}]}, @noop, @noop, @noop, @rr={0x7, 0x13, 0x0, [@dev, @remote, @private=0xa010102, @remote]}]}}}}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = dup(r3) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xef, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x5, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c010000100013070000000000000000ffffffff0000000000000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x14c}}, 0x0) r9 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r9}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(r10) r11 = gettid() tkill(r11, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 14.234948601s ago: executing program 5 (id=475): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.271123464s ago: executing program 4 (id=476): r0 = socket$netlink(0x10, 0x3, 0x0) times(0xfffffffffffffffe) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e425000000190040000400000007fd17e5ffff087375b62083800000000000000000000000000000f8ffffff", 0x39}], 0x1) socket$netlink(0x10, 0x3, 0x0) (async) times(0xfffffffffffffffe) (async) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e425000000190040000400000007fd17e5ffff087375b62083800000000000000000000000000000f8ffffff", 0x39}], 0x1) (async) 243.859004ms ago: executing program 4 (id=478): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x9, 0x6, @local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socket$inet(0x2, 0x3, 0x2) socket$inet(0x2, 0x3, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r5, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4082, 0xff2}], 0x1, 0x15f, 0x0) socket$inet6(0xa, 0x0, 0x7a) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100"], 0x57) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback}, {@in=@multicast1, 0x0, 0x32}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x22, 0x1}]}, 0x140}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x32822}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x4080) 242.540904ms ago: executing program 2 (id=479): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(&(0x7f0000002340)='./file0\x00', 0x68) (async, rerun: 64) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (rerun: 64) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring) (async, rerun: 64) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (rerun: 64) r3 = dup(r1) (async) r4 = socket$nl_audit(0x10, 0x3, 0x9) fcntl$addseals(r4, 0x11, 0xb1c25ce47c749b08) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000780)='netlink_extack\x00', r5}, 0x10) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r6, 0x3) (async) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async, rerun: 64) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) (rerun: 64) syz_emit_ethernet(0x8f, &(0x7f0000000400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1d, 0x81, 0x66, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xd, 0x8, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "c7c1ce07b7324b110e4eb9496b811183"}, @eol, @nop, @window={0x3, 0x3, 0x3}, @mss={0x2, 0x4, 0x7c}]}}, {"4a96b07b5857033f6ac4fb56ee6651fd3e1809dfda0f56eb713034afa2bce4957d1d0701e781267d1620980b2adf597cafb6cb7913be02849e"}}}}}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x30, 0x8, &(0x7f0000002340)=ANY=[@ANYRES64=r1], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="2f0000000020000004000000", @ANYRES32, @ANYBLOB="e3c58e1a9d7a75a4538de4492a461a35a608263d4c566205a7bbf1688bb1ff8ea0c75717bbe1146eebe72e940b5468b53884530972651d64dfa4d42b06736c0625501d0c02d4581d39e6d365723489601668", @ANYRES64=0x0], 0x20) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0xeeee8000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (rerun: 64) write(0xffffffffffffffff, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe00", 0x17) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000180)=0x8000) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x2e, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) (async, rerun: 32) ioctl$KVM_CAP_HYPERV_VP_INDEX(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) (rerun: 32) ioctl$KVM_NMI(r8, 0xae9a) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 240.955901ms ago: executing program 5 (id=480): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000100)=0xfffffff9, 0x4) (async) getsockopt$inet6_tcp_int(r1, 0x6, 0x8, 0x0, &(0x7f00000000c0)) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'virt_wifi0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'bond_slave_0\x00', &(0x7f00000004c0)=@ethtool_rxfh_indir={0x39}}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000dc0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r9 = io_uring_setup(0x63d6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) io_uring_register$IORING_REGISTER_BUFFERS2(r9, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) (async) io_uring_register$IORING_UNREGISTER_RING_FDS(r9, 0x15, &(0x7f0000000d80)=[{0x4, 0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}], 0x1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r11 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfff00002}, {0x16}]}, 0x10) (async) sendto$inet6(r11, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r10], 0x50}}, 0x0) 140.500962ms ago: executing program 4 (id=481): socket$packet(0x11, 0x3, 0x300) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000017c0)=[{&(0x7f0000000040)="273eebfe167c0e923301b61c42cb1d11f41d00bdab2aae0e00005a56", 0x1c}], 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES64=r5, @ANYRESDEC=r4], 0x74}}, 0x0) syz_usb_control_io(r4, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002600), 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x80000, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r8, r9, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r11, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r7, 0x46f6, 0x0, 0x0, 0x0, 0x0) write(r10, &(0x7f0000000080)="0e9e", 0x2) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="54010000100013070000010000000000000000000000000077fb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004000700"/268], 0x154}}, 0x0) r12 = syz_usbip_server_init(0x3) write$usbip_server(r12, &(0x7f0000000080)=@ret_unlink={{0x4, 0x5, 0x0, 0x0, 0x3}, {0x5}}, 0x30) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) read$FUSE(0xffffffffffffffff, &(0x7f00000016c0)={0x2020}, 0x2020) openat$cgroup_subtree(r3, &(0x7f0000000280), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000001280)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="850000002f000000840000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dcfe61b4fb9f600344d592fee49e176fe6ad28fbcb1f9259bfc63e9030971917e30b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b91c37b3437347f6058b4489c759783b9d4dfb55d0085a26e41201a6d8c8ced33e10048e756a40538b32bf653fa3c831a4e60599ed7a0f999d18de9984522a7cdb6fc30015633a0132c9578b7da5bd7280a5f7e28fd858ba712020b23ef8a2785b6c146c48b48ca7e232d0489661396e9303b38aa5d26d06e2e676795fd2733f95da570bab301000000ffffffff2a2792a630d8fcdc"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$sndpcmp(&(0x7f0000000000), 0xb9e, 0x400) 139.468353ms ago: executing program 2 (id=482): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 54.787607ms ago: executing program 2 (id=483): syz_emit_ethernet(0x7e, &(0x7f0000000cc0)={@link_local, @local, @val={@void, {0x88a8, 0x2}}, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "0961d3", 0x44, 0x2f, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @private2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x8, 0x3, 0x0, 0x0, 0x3, 0x2}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x1, 0x3, 0x1, 0x3, 0x7, 0x6}, 0x2, {0x9, 0x10, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}}}, {0x8, 0x6558, 0x20002}}}}}}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x200000000000009, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x4, 0x8ed9, "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", 0xff, 0xc, 0x4, 0x32, 0x8, 0xe, 0x2, 0x1}, r1}}, 0x120) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002d80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xcd) syz_open_procfs(r3, &(0x7f0000000000)='net/rt6_stats\x00') 54.466433ms ago: executing program 5 (id=484): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="68f567633d6164762c00"]) chdir(&(0x7f0000000140)='./file0\x00') (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000001"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xa, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950036000000000018400000feffffff480000000000000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x34, &(0x7f0000000100)=""/198, 0x41000, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000980), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = open(&(0x7f0000000180)='./bus\x00', 0x283fe, 0x0) mmap(&(0x7f0000577000/0x3000)=nil, 0x3000, 0x0, 0x4002011, r1, 0x0) 54.043737ms ago: executing program 2 (id=485): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x240000, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFULA_CFG_MODE={0xa, 0x2, {0x5, 0x1}}, @NFULA_CFG_MODE={0xa, 0x2, {0x60000}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000000)={0x3, 0xfff, 0xfffffffffffffff9, 0x6, 0x359d, 0x3, 0x7ff, 0x7}, &(0x7f0000000040)={0x8000000000000001, 0x7, 0x2, 0x1f81, 0x7fffffff, 0x1, 0x9a18, 0x5}, &(0x7f00000001c0)={0x4, 0x8, 0xfffffffffffff001, 0x7f, 0x80, 0x3, 0xfffffffffffffff8, 0x3}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x2]}, 0x8}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0) 4.278781ms ago: executing program 5 (id=486): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) syz_usb_connect(0x1, 0xdd1, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x310, 0x40, 0x2, 0xb, 0x58, 0x83}, 0x1ff, &(0x7f0000000340)={0x5, 0xf, 0x1ff, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0xd, 0x5, 0x8, 0x0, 0xa, [0x0, 0xc0, 0x30, 0xff0030, 0xff00]}, @generic={0x102, 0x10, 0xb, "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"}, @ssp_cap={0x1c, 0x10, 0xa, 0x98, 0x4, 0x3, 0x7700, 0x7ff, [0xffc000, 0xc030, 0xc000, 0xff00]}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x7ffffff, 0xf000, 0x200, [0xff0000, 0xf, 0x30, 0x1bfc0, 0x3f00]}, @generic={0x9c, 0x10, 0xb, "749b4eddfaac4390a02e04809e3f8d03de4febe5f6abd6931cc19694c36d04c87ba0deedffbc8d8844af15115c0e2ca1ac5316aa0f002ec3088a1b567de8317f42f077aa6247db38c8d846251e67cee689a077ab60710bb2e56200b8133ee5baf9cddd63e19b7bfcbbb69b50688a581c5cdd90ccf28ddedab0dd165db4fdfcb2af2ff6c74b5d39894a90d92e33fc9a5f4793aca236ef37c5a0"}]}, 0x3, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xf8fc}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xeca0}}]}) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x158, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "a882d163718152de7f6a83085b14b7f8ca61d995"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "26e247e45b9f3f1415bf675bddf9f26c90951f611ae40d2b7c2b6a3b"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x91c}, @TIPC_NLA_NODE_ID={0x47, 0x3, "74c77b91e06c105023dcfa8b64653a17b5974ea31905437b683e9e41d3b8dc77a64a4c4e463989e15b7644117c25990c6c4d535fc4eb68f2969be26a3781f45e0fed68"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xeb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x10}, 0x810) iopl(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x34}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x8, 0x31, 0x0, 0x0, @ipv4=@local}]}, 0x28}], 0x1}, 0x0) 3.576534ms ago: executing program 2 (id=487): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2640, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000040)=0x2) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x40}}, './file0\x00'}) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x4, 0x10}, 0xc) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1b, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000140)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x17, &(0x7f00000001c0)=""/23, 0x41100, 0x0, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000280)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x1, 0x10001, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0xffffffffffffffff, r4, 0x1, r5, r6, r0, r7], 0x0, 0x10, 0x4, @void, @value}, 0x94) (async) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000540)={0x9, {0x1, 0x9, 0x3, 0x100, 0x7e4a, 0x8}}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz1\x00', 0x200002, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000002b80)={&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @local}, 0x2, 0x0, 0x4, 0x4}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000640)="884a28d40dcc72433bed1f430a809bfd75441ea16fc5c1598ff760dd2100f80013e3f057676f590b9f7fd480800178488b9c55dedf243af9c99a696dd19f63a173048fa39d59c39423c865d8440c816cca9b83968da99424963e4356af8d2d698152c57db56b6bbe576f0ad5349ba931e999dfb89336ca36b0d7600f3689003264362948f108442fe6bc21a5a094677e132faf8f22f6d7e6b98bf2ff8a528e09c25a28c4bf93d75ac212e11003be7413a1a90af83c7c8afe0f9165bb31a2fdf5851bd8bebf61ba41e8230b7ce0384904699d5829c9ad595283b62dac361af567cb1188e8b3", 0xe5}], 0x1, &(0x7f0000000780)=[{0xa0, 0x119, 0x8, "1f4c136bcd264a79ae9c05c91e4bd13e72618a23ec1e9b38e5d7371bfcbc83f877c0fda49284702dd2be92a28ad946423934de3674a72fdcdfc18c39d9c18b9c4618ea9fad2ca4ac680b1a290f6b3d1b6a5693efc7933e75944da8d562fb462968dcec537cd2e5104e9c942c0217cba0bb190fdac7ee379b4037797ab98b0ce787e0fed6507c92a0a75207b87d338b"}, {0xa0, 0x113, 0x7ff, "3d04742d2481dd8e7154f7a5f294ec28ae3e9fb591daeda75d6061627c7c8dfa1fe5a79311871fa8765bed9578980c4c0c61b56ff20cfd965f8777dadfc96a50ec0b3d71c561d632d5dc04c3d6f1912e1cefe0e9a0b72a61d61d1dd5545a3d0cfd4ca1e2acbb6b8b0d0cf8d4ed3544b6a17d0b08bc6f6576aa1f25635d5b67f2fa9d80806238625050ac"}, {0x1010, 0x116, 0x140000, "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"}, {0x98, 0x10e, 0x2, "c9b476672e911de33cc9e5a5460aac97889941d9ff84be15056d0b2761cac420d892c8f9c6e63bad27737a310147d013319f531807637604924e5950393781b99f971b3b617885c90effbabeb491caafe8c62d5cc13fd6f8461138bc9aa7d8a9246899066eb288c8fe948373679d3f3a7fdebadbac5aebe44f2575b7efc6f8bba76a3c6be1"}, {0x1010, 0x113, 0x2, "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"}, {0xd8, 0x107, 0x8, "ab53a0999adbd71854b611c90773b3c3c69f3400de3c460e4e2ec1940bfcf3733e16ecc4fb062ad96d9a75e09145f9153d9fd6422b21bdd3eba6818680d0db5a40b12200aa6f1bde7c1d74e136b0525f9e0620fc1b9a82640ea4f4e5261113844c94afca87b54332160036fc2a870f341ca5185a20d9553bbe7716e8bbccdae280636f3e905673a1594b8ab902ae257ae601a5dc7426e94c646ea34deee3ef61b70ede6b1a12795da0aab899cce6dbd4f233274b6c196f742f92887af0b4fd38de8ef3ec34"}, {0x50, 0x11, 0x800, "47ca74cf9bbf29f52ff34e39de129e88d00c944fba529762cab022c20477a906affcf2861a2f27d05550cdc64fb8452700c5dcd3c455795c6b67"}, {0xb0, 0xff, 0xc0000000, "7a0830adef894771e4c53c1a366d8ea00b5fe16501a413a17eca6b37c5184e32a44df60a5b06a81b614e359819c91f044643914435dc79982a6f940d675ad573234c66cd0e896013443da44126f927584a72b1f1f5204f1182e72f9700fe33d70586d45da07bc62ed485ea2a1d4e9518c578a9754872dd715e9e98530be534a5ba9b2254ba7ddf502d3f0da7c6d6c3da7dcb65e12e2a437d973a0d310cb343"}], 0x23d0}, 0x20000040) (async) recvmmsg(r4, &(0x7f0000003880)=[{{&(0x7f0000002bc0)=@alg, 0x80, &(0x7f0000003140)=[{&(0x7f0000002c40)=""/78, 0x4e}, {&(0x7f0000002cc0)=""/67, 0x43}, {&(0x7f0000002d40)=""/77, 0x4d}, {&(0x7f0000002dc0)=""/68, 0x44}, {&(0x7f0000002e40)=""/24, 0x18}, {&(0x7f0000002e80)=""/96, 0x60}, {&(0x7f0000002f00)=""/193, 0xc1}, {&(0x7f0000003000)=""/16, 0x10}, {&(0x7f0000003040)=""/60, 0x3c}, {&(0x7f0000003080)=""/154, 0x9a}], 0xa, &(0x7f0000003200)=""/114, 0x72}, 0x1}, {{&(0x7f0000003280)=@ax25={{0x3, @null}, [@null, @remote, @rose, @bcast, @rose, @netrom, @netrom, @default]}, 0x80, &(0x7f0000003340)=[{&(0x7f0000003300)=""/32, 0x20}], 0x1, &(0x7f0000003380)}, 0x7ff}, {{&(0x7f00000033c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000003780)=[{&(0x7f0000003440)=""/27, 0x1b}, {&(0x7f0000003480)=""/88, 0x58}, {&(0x7f0000003500)=""/51, 0x33}, {&(0x7f0000003540)=""/217, 0xd9}, {&(0x7f0000003640)=""/235, 0xeb}, {&(0x7f0000003740)=""/31, 0x1f}], 0x6, &(0x7f0000003800)=""/89, 0x59}, 0x992}], 0x3, 0x2100, &(0x7f0000003940)={0x77359400}) (async) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000003980), 0x4) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003b80)={r4, 0x20, &(0x7f0000003b40)={&(0x7f00000039c0)=""/194, 0xc2, 0x0, &(0x7f0000003ac0)=""/108, 0x6c}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003bc0)=r9, 0x4) write$cgroup_subtree(r4, &(0x7f0000003c00)={[{0x2b, 'pids'}, {0x2b, 'devices'}, {0x0, 'memory'}]}, 0x17) preadv(r3, &(0x7f0000003e00)=[{&(0x7f0000003c40)=""/90, 0x5a}, {&(0x7f0000003cc0)=""/43, 0x2b}, {&(0x7f0000003d00)=""/206, 0xce}], 0x3, 0xc42, 0xfffffeff) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000003e40)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000003e80)=0x18) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000003ec0)={r10, 0xae, "c901b140e81ec2cf57aeecf856ad560c755d0153fd722d496c545bbc55c4b1eaf8fe6f488cafc71b02c0a3c697646b3ca53c79eb8723565febd0688278f0264ba9b79a4c74f9c2b39b6014f1da1b779155c2b3da40110a353fcf19624a04d90e4fce590c41ff6aaa6cb346fbab4b99f4c3c816e7e89565bfcc5acf281f2994b59b4463c84435c5845f514f15d453b5fb447f51f90bdd30697fa74e110c101b43f07320fed219b43aaecad508f581"}, &(0x7f0000003f80)=0xb6) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000003fc0)=0x3, 0x4) (async) sendmmsg$inet(r8, &(0x7f0000004b00)=[{{&(0x7f0000004000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000004440)=[{&(0x7f0000004040)="a4df6f82a611c7e979f1ae975a808cb08c02d8dc7b9df00b2fe40f58d10013bf411e4af96af890f72cf5be7f59cf0063612f50ce3c58fc839f505fd7efaa3e8753120ebfa8ea2353b6c8bf88c31875938937b679b3701ce9810a3815a79ad00fe89972d8cb440d89e9ab30d9365f263616178f4cc4eeb7d4ccf2e03e11452186f44a8aba0d23805e7c79e170cdbff24d686d60f250b1e53315f273d2b1996824dd905c1b996e3d4a308c7d63816b46b8c99fdd43e7733775b8b3", 0xba}, {&(0x7f0000004100)="e553b920fd9a4e999ae3b78e1fa3a0b2a32b301ab53b524113ee0528dd9674a3089a513012d0e372f25ae9b3ac0776a53ff7f2b4e9a89e0d572d3a51f7abc341a192bc9d2e7662b6e27d2810bc2c76482a1a47abdf1a09ce9f8a198c2c8043f6a388fb9bee53f2784d6f97254bcb80822ba93dea2687195c5c7085aba2cdebe11c9275a22b73df43f5e1fcc6fd44840a8cff89de10", 0x95}, {&(0x7f00000041c0)="49f1378fef85a7c168bf44c6ab16321504", 0x11}, {&(0x7f0000004200)="ad9c2c80a0052c7f653805879445bec9d2c9f2a88d0d122e6dc4e6593a4cb928ca650e887d9a7d43490e3ba50522efa70929a98cd080951300d2cc2ff5ee5e1f9c16c9319c6ad1a7558183664326d896a58640171dcc5aa9a3ba55d43d35eb4ff8c41183d5b46c1c6a01735de8693dc4d01f0d4b1f56722cc500d44605dc05ec1073fb346f63697a4f3c64980e36bdb1f7e1ccfb04914607893d5e9951d77f335cd5dc2cc048e1", 0xa7}, {&(0x7f00000042c0)="92a6a7569e27e3d6e1b1f7f5ef50a06099335ecde0e3c80b7f6c6453eb3ff974f173e12ecc9f52acee96edac4a8f6f566199b14408ca6f9c8c48dadf541eb8", 0x3f}, {&(0x7f0000004300)="154fe4c33730bd936947a4684e93e788d8336a283e86df274e194b469e8791cf06105205b6066d2d935f464bca5fa3fe178c71b3875223c1a9f16f427f3c003e56be", 0x42}, {&(0x7f0000004380)="a155b8c705ed8f5109b726c859d9b86791edc101630accca79853c4bdf706857b2be6302ab536b192e4cc773cd1083c77ebc9f3d54e37139f07e448c1102dd3037d556a45ba9b7a7250e97dd47e6b7a541edcc3d6cbfdf8db850862c38f1f75fe324959d9440fad76ad6d3d558674a2f5b633841bd5be6e5cc24d1d1c78f323aaa6bc1807a69de67", 0x88}], 0x7, &(0x7f00000044c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @rand_addr=0x64010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x452e}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffa}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@rr={0x7, 0x13, 0x11, [@local, @remote, @empty, @broadcast]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xcd5e}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000004740)=[{&(0x7f00000045c0)="1f5384e94d0cace1b850e4fed1c81a0117ffe8c83d0e525580462ab5e3fc8e895f6c861d0484335e682e2bb8a41fb5e00d3296e24db9264aad508250361f4ab990453acc433fbf53f0219ff3c5e3ca14bacdeeefe04fcdbd4dd280bfb159e746748a588e0e2814c0ff6e3b967c5ad119f9aeef0cd06f7280049b66fea03aa16206bc1688f74b2e4076ec96d4e0db55c196c723b5ddd7cfa8db4f54d5a5603aa7892750063175711dea7030d3397575f51b8b7dda5972c355c0d5e7ea7295a7b590461ff2d6515f9d76bc6426c127c159765e654377d15f6fde9d0193e41c8abf54f3d588a228ede1d79b89aeaf8b05e10d0b3d874bbf", 0xf6}, {&(0x7f00000046c0)="2160b9c3347d6e447767a6b10cbb0e1fa83c4c97f4a196460417bc190ba016295db93291b950f2348128274f1d36a16fcc8cc93d75cc9499b2723c2372b1c7bdaf7af51847", 0x45}], 0x2, &(0x7f0000004780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @loopback}}}], 0x70}}, {{&(0x7f0000004800)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000049c0)=[{&(0x7f0000004840)="7e2d74089a46c0cda2d29c1fa33df9ee7232097c7ec9f7caa40c149b2fe18d", 0x1f}, {&(0x7f0000004880)="e07b1fafe9560b0eb12b6b073e0f484b4d82d5ac35bcaa04131bbbcdb79766787c20795a9c4113df18e09acb1e9a544bb85b1d30c700563d97ee428c8686c9ad2349b24fc550aff4975b99998b966fd2adf084e34f9cee5c56a65597c727ed445ada78ddd98e", 0x66}, {&(0x7f0000004900)="9b2bd167491461d4a6a6086a92f44ec71ce03c89f34063e4f419d1a8cca0e6ea2306275b3d540c32ce514373ac0b8798081b4cd9d4488c6aa393669168b0cfeecfb948610d2e7ef4fc659ccf1b7ab0d73ddd82b8167e2193565cc364d42390154b0c8247c8c0f5a0ac02f834742af546970c7e747aa92e777dec7e6fb1d7bc00573844bf39d90e73aed5dd867f2192f43b136920c4032c00f86c5e19c488f2de945be13b75", 0xa5}], 0x3, &(0x7f0000004a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @loopback}}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@noop, @noop, @end, @end, @generic={0x83, 0xa, "dc11fb0896a8328d"}, @end, @rr={0x7, 0x1b, 0x1c, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1, @remote, @multicast2]}]}}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xca57}}], 0xf0}}], 0x3, 0xc4) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r11, 0x894c, &(0x7f0000004bc0)=0xf75) write$P9_RVERSION(r4, &(0x7f0000004c00)={0x13, 0x65, 0xffff, 0xed8, 0x6, '9P2000'}, 0x13) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000004c80)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000004c40), r12) (async) r13 = fsmount(r4, 0x0, 0x1) read$FUSE(r13, &(0x7f0000004cc0)={0x2020}, 0x2020) 0s ago: executing program 2 (id=488): writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="2609d9dff0123406f64204828c58d74a5bd57b003aa0f0b28cdbe2a2af6d8339cc0b193608dd76f976f746a3be5214dfafefdfdeb5b5686c75320fa376ba18a959e4dddf3620396afebe4a7fe0c1a4b60b9635c058b4fd0898300c5fc0251fa6620e185e9e2822893aab4a36099d5595a3ebfe0d87e9d32e686ff5baea67f3888f0e255c4bc8f3cedebc1cf6dde52cdb4ada69d0496355a7690394084463521070d6e97367d1be06061776c46105d387ea2961ea64c89a48abe78e671a050433fc29a78cfc12", 0xc6}, {&(0x7f0000000100)="98978b964c4bed104d634f1a4185052d1ea60290ab19736bebdaa6888bd195a3263d277e99b968ae47e98e52d4142942d4c54de1cc433905c50d8b9599593b8673c92615840bf36e022abbbeb3b19e8cc45fb066b2f097af521eadcbe46d75f22a8556e43790bcf84b1b20136a13fa90ee", 0x71}, {&(0x7f0000000180)="52c7726e73688313a71b1ad5afef0a7f700398731f967189957e87684b2cf77677e2e752bba12586ba1a7a3c27baa0cc946fa4c1e058cd94d83300efe99d4f4208c1ad", 0x43}, {&(0x7f0000000200)="88ea2c2b7d180ebe4ff42559bb8e01e6c89694bef354446d8a79b696cf2e61b01b37c66a9901b1148da3218f6a93523c748da4c1a96ca8ec4cad8045f025fc55", 0x40}], 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x88, r0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x23}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1000, {0x3, 0xffff, 0x18be, 0x81}}}, @NL80211_ATTR_MAC={0xa, 0x6, @random="84be9c75c96d"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x20, 0x1, 0x1, 0x0, {0xaaa1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x7, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x3) syz_emit_ethernet(0x91, &(0x7f0000000480)={@random="262716a116d8", @random="8454c9869082", @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x2}}, {@generic={0x6558, "fb6bdb87c98babfcec921d38d0d57e5760c3d44bda6c543d6631d513e5561d3c52cf731480050e10b2f2c180b149a5f8c83723915a88f52dfa230187c882ef281cd821b5d6616fe5fa6dc9905a809ef293fdc924589f87c01d2d7eeea52bcc08bc3a365c2839291e346b3fe57190db7b86c033ec5fd0db76afa19d"}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) r2 = open(&(0x7f0000000580)='./file0\x00', 0x8002, 0x0) mkdirat(r2, &(0x7f00000005c0)='./file0\x00', 0x18) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x74, r0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x74}, 0x1, 0x0, 0x0, 0x20020000}, 0x24008040) r3 = socket$nl_crypto(0x10, 0x3, 0x15) mount$overlay(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x5, &(0x7f00000007c0)={[{@redirect_dir_on}, {@xino_off}, {@redirect_dir_off}, {@userxattr}, {@redirect_dir_on}, {@uuid_auto}, {@verity_require}, {@workdir={'workdir', 0x3d, './file0'}}], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@subj_user={'subj_user', 0x3d, '\x84'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x38, 0x65, 0x30, 0x62, 0x65, 0x0, 0x33], 0x2d, [0xb, 0x64, 0x31, 0x37], 0x2d, [0x33, 0x63, 0x35, 0x31], 0x2d, [0x35, 0x38, 0x315e27517964975a, 0x61], 0x2d, [0x61, 0x30, 0x65, 0x33, 0x30, 0x30, 0x66, 0x33]}}}]}) syz_80211_join_ibss(&(0x7f0000000880)='wlan1\x00', &(0x7f00000008c0)=@random="77254fe8f43311", 0x7, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000900)={{0x400, 0x7}, {0x4b, 0x5}, 0x40}) mount$9p_virtio(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x200000, &(0x7f0000000a00)={'trans=virtio,', {[{@noxattr}, {@cachetag={'cachetag', 0x3d, 'nl80211\x00'}}, {@loose}, {@cache_none}, {@cache_fscache}, {@version_u}], [{@subj_user={'subj_user', 0x3d, '\\[--&,$,&){'}}, {@subj_user={'subj_user', 0x3d, 'subj_user'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x97$(%m'}}, {@subj_type={'subj_type', 0x3d, '[-\x8f-.'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@permit_directio}, {@dont_measure}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#'}}]}}) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000b00)=""/98) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000b80)={0xdddd0000, 0x10c000}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000bc0)={'wlan0\x00'}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, &(0x7f0000001c00)={&(0x7f0000000c00)=[0x4, 0x7, 0x4, 0x7, 0x3, 0xcbc, 0x1, 0x9, 0x5, 0x1, 0xa6, 0xeb, 0x2, 0x400, 0x9, 0x5, 0x3, 0x8, 0xffff8001, 0xffffffab, 0x8, 0x0, 0x679dbb3b, 0x67, 0x80, 0x0, 0x3, 0x40, 0x3, 0x177, 0x200, 0x80000001, 0x3, 0x4, 0x7, 0xfffffc01, 0x0, 0xa, 0x7a2e5171, 0x4, 0x7fff, 0x4, 0x2, 0x3, 0x1, 0x0, 0x80, 0x8, 0xffffa600, 0x3, 0x6, 0x80000001, 0x10001, 0x5, 0x9, 0x4, 0x100, 0x5, 0xffffffee, 0x5, 0x8d2d, 0x2, 0x5, 0x6, 0xffffffe6, 0x7, 0x5, 0xffff, 0x401, 0xa3c, 0x65, 0xf, 0x6, 0x5, 0x5, 0x730ec55, 0x9, 0xa398, 0x52, 0x8, 0x5, 0x80, 0x6, 0xa0000000, 0xc, 0x400, 0x5, 0xfffffffc, 0x7, 0x8, 0x1ff, 0x4, 0x4bc, 0x7f, 0x1f0e, 0x9, 0x4, 0x8, 0x8f, 0x6, 0xffffffff, 0x2427, 0x10000, 0x6, 0x5, 0x0, 0x7, 0xfff, 0x8, 0x8, 0x1, 0xff, 0x81, 0xd6a, 0x1389, 0x480000, 0x3, 0x2, 0x3, 0x5822c8db, 0xa, 0xfffffffe, 0x7, 0x7f, 0x8, 0x8, 0x8, 0x6, 0x3, 0x5, 0x6, 0x5, 0x7, 0x3, 0x3, 0x6, 0x5, 0x1a01430, 0x137, 0xa3, 0x0, 0xffffffff, 0x5, 0x6, 0x5, 0xa, 0xe, 0x5, 0x9fe, 0x80, 0x10001, 0x57b, 0xfffffff5, 0xa, 0x9787, 0xc, 0x9, 0x4, 0xd7, 0x8, 0x2, 0xffffffff, 0x18, 0x101, 0x9, 0x8, 0x7fff, 0x0, 0x8, 0x7, 0x4, 0x101, 0x8000, 0xf, 0x8, 0x0, 0x101, 0x7, 0xffffff22, 0x40, 0x2, 0x9, 0x2, 0xea, 0x80000001, 0x3ff, 0x20000, 0xffffff72, 0x4, 0x3, 0x7, 0x8000, 0x4, 0xd2f, 0x101, 0x1, 0x4, 0x1, 0x0, 0x6, 0x35, 0x0, 0x40, 0x3, 0x10001, 0x6, 0x5, 0x7, 0x10, 0x8, 0x3, 0x8, 0xfffffffc, 0x200, 0x1, 0x3, 0x8, 0x70, 0xe7a8, 0x8, 0x2, 0x1, 0xdd, 0x7ff, 0x7, 0x4, 0x101, 0xfffffff7, 0x6, 0x1, 0x400, 0x3, 0x2, 0x7, 0x6, 0x8, 0x7, 0x2, 0x8, 0x0, 0x0, 0x1, 0x8, 0x7ff, 0x80000001, 0x5, 0x1, 0x1000, 0x6, 0xe, 0xffff, 0xa534, 0x8, 0x8, 0x0, 0x9, 0x4, 0xfffffff7, 0x8001, 0xf2c, 0x3, 0x4, 0x10001, 0x30a, 0x2, 0x9, 0x401, 0x4, 0x8, 0xb, 0x0, 0x3, 0x9, 0x8000, 0x40, 0xf, 0xfffffffa, 0x6, 0x4b9c, 0x4, 0x1000, 0xfffffffb, 0xffff, 0x7, 0x5, 0x1, 0xa, 0x8, 0x53a, 0x6, 0x3, 0x8, 0x9dd0, 0x3, 0x4, 0xb32, 0x3, 0x4, 0x3, 0x7fff, 0x3, 0x7ff, 0x8, 0xef1e, 0x8000, 0x9, 0x769a, 0xce, 0x80000000, 0xc, 0x5, 0xa028, 0xc0000000, 0x3fc, 0x0, 0x8, 0x9, 0x1, 0x95ae, 0x7, 0x100, 0xd, 0x3, 0x81, 0x9e81000, 0x0, 0x0, 0x9, 0x0, 0x3, 0x3, 0x3, 0x0, 0x80, 0xe, 0x7f, 0xfffffff3, 0x4, 0x7, 0x1, 0x1, 0x8, 0x10, 0x5, 0x4f4d, 0x9, 0x2, 0xb, 0x4, 0xaf0, 0x7fff, 0x3, 0x5, 0xe, 0x40, 0x80000001, 0x5, 0x8, 0x80000001, 0x7, 0x7, 0x7, 0xf, 0xfff, 0x5, 0x6, 0xfffffff9, 0x0, 0x4, 0x6, 0xffffff1f, 0x80, 0xff, 0x52566a56, 0x1, 0xf, 0xc38, 0x1, 0x1, 0x9, 0x8001, 0xffffe711, 0x1, 0x416e, 0x5, 0x9dbf, 0x6, 0x4, 0x1, 0x7fffffff, 0x6, 0x9, 0x6, 0xbb5, 0xd40, 0x8000, 0xfffffff7, 0x8, 0xea3b, 0x5, 0x6, 0x5, 0x9, 0x2, 0x1, 0x9, 0x88, 0x8, 0x5, 0x1, 0xfff, 0x95, 0x549473f9, 0x3, 0xffffffff, 0x0, 0x4, 0x1000, 0xba, 0x7fffffff, 0x6861, 0x6, 0x800, 0x3, 0xfffffff8, 0x0, 0x48, 0x5, 0x8, 0x6a86944b, 0x2, 0x9, 0x81, 0x8, 0x1, 0x6, 0x5, 0x10, 0x2, 0xffffffff, 0x8000, 0x5, 0x9, 0x7f, 0x1f, 0xd, 0x0, 0x485c, 0xc, 0x8, 0x4, 0x3000000, 0x305, 0x8001, 0x1, 0x7, 0x0, 0x3, 0xfffffff9, 0x8, 0x9b2, 0x5, 0x5, 0x8, 0x3, 0x80000000, 0xfffffff8, 0x0, 0x7fffffff, 0x4, 0x1ff, 0x5, 0x4071, 0x7, 0x6, 0x9, 0x3, 0xe37, 0x6, 0x432, 0x7fffffff, 0x6, 0x1, 0x40, 0x7fffffff, 0x4, 0x1, 0x0, 0x1, 0x80, 0x2, 0x2, 0x1, 0x7, 0x7fff, 0x9cc, 0xe1c, 0x0, 0x9, 0x80000001, 0x7ffe, 0x5, 0x8001, 0x5, 0xd5a, 0x4, 0x11, 0x8, 0xfffffc00, 0x0, 0x0, 0x9, 0x182, 0xffffff8d, 0x6, 0x8, 0x9, 0x2, 0x8, 0xb, 0x9, 0x7, 0x1, 0x3, 0x7, 0x7, 0x9, 0xb9d, 0xe0, 0x7, 0x7, 0x8, 0x7e, 0x1, 0x9, 0x4, 0x3f8, 0x60, 0x7f, 0x0, 0x20c, 0x80, 0x1, 0x7, 0x8, 0x5e14, 0x2, 0xffffffff, 0x5, 0x800, 0x8, 0x435d, 0x7fffffff, 0x6, 0x7fffffff, 0x5, 0x1, 0x120, 0x3, 0xd323, 0xd3, 0x10, 0x3, 0x8, 0x9, 0xe031, 0x4, 0x5ff, 0x8, 0x4, 0x3, 0x2, 0x3, 0x4, 0x0, 0x6, 0x2a, 0x2, 0xffffff4b, 0x5, 0x1e8, 0x400, 0x1, 0x4, 0xba000000, 0x7, 0x7fff, 0x14, 0x6b6, 0x9, 0x5, 0x8a7, 0x4, 0x1, 0x6, 0x7f, 0xffffffac, 0x8, 0xa, 0x0, 0x2, 0x5, 0x7, 0xe, 0x1, 0x6, 0x6, 0x8, 0x0, 0x6, 0x7, 0x83a0, 0x8, 0x1, 0x8, 0x6, 0x8737, 0xd3, 0x50, 0x3, 0xcec, 0x4b11, 0x5, 0x0, 0x3, 0xa39, 0x80000001, 0x9, 0xccd3, 0xa306, 0x1, 0x80000001, 0x1, 0x4, 0x8, 0xffff2ea8, 0x9, 0x5, 0x8, 0xd93, 0x81, 0xffff, 0x9, 0xcf9b, 0x5, 0x3, 0x2, 0x8, 0xfffffff9, 0x3, 0x9, 0x7f29, 0x3, 0x10000000, 0xa, 0x2, 0x6, 0x5, 0x4, 0x4, 0x200, 0x5, 0x3, 0x6, 0x2, 0xc, 0x8000, 0xc25, 0x4, 0x3, 0x8, 0x6da, 0x10, 0x7, 0x0, 0x3, 0x0, 0x1, 0x140, 0xfd9a, 0x9, 0x2, 0x800, 0xfffffffe, 0x5, 0x1, 0x1ff, 0xfffffffc, 0x7, 0x7, 0xbc75, 0x2, 0xdd0, 0xfffffff9, 0x184, 0x87, 0xfffffffe, 0x129, 0x0, 0xb, 0x2, 0x52, 0x1, 0x7, 0xffff66b1, 0x5, 0x3800000, 0x4, 0x7, 0x7, 0x4, 0x8, 0x4, 0x4, 0x101, 0x2, 0xbf81, 0x2, 0x0, 0x200, 0x2, 0x9, 0x0, 0x9, 0x1, 0x3ff, 0x9, 0x20, 0x1000, 0xe, 0xfaca, 0x7, 0x7, 0xf, 0x2, 0x117d7c61, 0x1, 0x3c, 0xffffff80, 0x3ff, 0x40, 0x4, 0x8151, 0x1, 0x4, 0x3, 0xff, 0x8, 0x6, 0x2, 0x3, 0x6, 0x7, 0x80000000, 0x4, 0x1, 0x68, 0xffffff4c, 0x0, 0x7ff00000, 0x5, 0x10000, 0xc0, 0x2, 0xfffffff9, 0x2, 0xcc, 0x4, 0x9, 0x101, 0xc57c, 0x0, 0x401, 0x9, 0x9, 0x8, 0x3, 0x9, 0x4, 0x2, 0x8, 0x7, 0x40, 0x100, 0x9, 0x5, 0x3ff, 0x950, 0x6, 0x1, 0x5, 0xffffff25, 0xfbb, 0x7, 0x7, 0x3, 0x1ff, 0xfff, 0x8000, 0x7, 0xd, 0x3, 0x96, 0x10001, 0x2, 0x8ed, 0x3ff, 0xbdc, 0x2, 0x9, 0x5, 0x3, 0x2, 0x1, 0x110, 0x4000000, 0x80000001, 0x0, 0x1, 0xfffffff7, 0xd54, 0xfff, 0x8c3, 0x60, 0x9, 0x3, 0x9, 0x400, 0x7, 0x1, 0x1, 0xc4f1, 0x1, 0x280, 0x0, 0x10, 0x9, 0x80, 0x7, 0x7fff, 0x85, 0x2, 0x800, 0x10, 0x10001, 0x4, 0xffff, 0x0, 0x9, 0x900, 0x81, 0x1, 0x7, 0x35, 0xa8d, 0x32, 0x92, 0xe, 0x3, 0xa, 0xb, 0x9, 0x4, 0x10, 0xfff, 0x0, 0x8, 0x7, 0x4, 0x90, 0x4, 0x2b2, 0x5, 0x66, 0x0, 0x101, 0x3, 0x3, 0x7fff, 0x8001, 0x601e4bf8, 0x1, 0x6, 0x1000, 0x40, 0x7, 0x717, 0x4144, 0x0, 0x400, 0x700, 0x8001, 0x9, 0x0, 0x737, 0x3816, 0x1ff, 0x2, 0xb2, 0x1, 0x6, 0x4, 0x1000, 0x800, 0x9, 0x6, 0x9, 0x6, 0x2, 0x7, 0xfffffffd, 0x10001, 0x5, 0x6, 0x0, 0x7, 0x1, 0x0, 0x3, 0x4, 0x2, 0x8, 0x3, 0x9, 0x7a84, 0x3, 0x8, 0x5, 0x401, 0x1, 0xd267, 0x101, 0x5, 0x0, 0x1, 0x6, 0x1, 0xffff, 0x0, 0x0, 0x3, 0x7, 0x8000, 0x80000000, 0x4a2b, 0x2, 0x0, 0x4, 0x200, 0x7, 0x301, 0x9, 0x9, 0x7, 0x4b20, 0x4, 0xc, 0x0, 0x4, 0x7fffffff, 0x2, 0xf11e, 0x80, 0x8, 0x400, 0x0, 0x3, 0x9, 0x5, 0x7, 0x0, 0xffffffff, 0x8, 0x2, 0x3ff, 0x9, 0xcde, 0x8001, 0x80, 0x2, 0x7, 0x9000, 0x61f, 0x2, 0x5, 0x4, 0x9506, 0x401, 0xf, 0xfffffff9, 0xfffffffe, 0x8, 0x925, 0x401, 0xeda, 0x6, 0x401, 0x9, 0x847, 0x9, 0x2, 0x5, 0x9, 0x9, 0xdbda, 0x6ec, 0x1, 0x8a, 0xd7f, 0x0, 0x4, 0x8000, 0x8, 0x9, 0x8, 0x6, 0x5, 0x48000000, 0x6, 0x6f, 0x5, 0xa, 0x8c57, 0x1a1], 0x4, 0x400, 0x9}) sendmsg$NFT_BATCH(r4, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x54, 0x8, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xd2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}]}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9300}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f0000001dc0)={0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000001f00)={&(0x7f0000001e00), 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)=@dellink={0x48, 0x11, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x24221, 0x40}, [@IFLA_PHYS_SWITCH_ID={0x1f, 0x24, "4a2444f6d82bfeb5a8dc1203f721f5a17c48527c141073e76c3879"}, @IFLA_GROUP={0x8, 0x1b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x11) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f80), r1) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x20, r6, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f0000002180)={&(0x7f00000020c0)={0xac, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7bd500cb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xae5}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xad}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0xc0850) r8 = open(&(0x7f0000002200)='./file0\x00', 0x40, 0x20) close_range(r8, r2, 0x0) kernel console output (not intermixed with test programs): B 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 45.958077][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 45.960709][ T6001] Node 0 DMA32: 2*4kB (UE) 1*8kB (U) 10*16kB (UME) 1*32kB (M) 1*64kB (M) 3*128kB (ME) 6*256kB (M) 9*512kB (M) 6*1024kB (UM) 5*2048kB (M) 86*4096kB (M) = 375440kB [ 45.969315][ T6001] Node 1 Normal: 0*4kB 6*8kB (ME) 9*16kB (UME) 97*32kB (UME) 63*64kB (UME) 20*128kB (UME) 4*256kB (E) 6*512kB (UME) 3*1024kB (UE) 3*2048kB (UM) 383*4096kB (M) = 1591968kB [ 45.970287][ T6008] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.974716][ T6001] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 45.974731][ T6001] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 45.974739][ T6001] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 45.974747][ T6001] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 45.974754][ T6001] 41754 total pagecache pages [ 45.974759][ T6001] 0 pages in swap cache [ 45.974762][ T6001] Free swap = 124996kB [ 45.974766][ T6001] Total swap = 124996kB [ 45.974771][ T6001] 1048443 pages RAM [ 45.974775][ T6001] 0 pages HighMem/MovableOnly [ 45.974778][ T6001] 281644 pages reserved [ 45.974782][ T6001] 0 pages cma reserved [ 46.033328][ T6012] trusted_key: encrypted_key: insufficient parameters specified [ 46.037651][ T6012] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6'. [ 46.040065][ T6012] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6'. [ 46.105841][ T6021] Zero length message leads to an empty skb [ 46.108802][ T6021] netlink: 'syz.0.9': attribute type 4 has an invalid length. [ 46.130551][ T6021] syz.0.9 (6021) used greatest stack depth: 20928 bytes left [ 46.206774][ T6025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6025 comm=syz.0.12 [ 46.328564][ T6038] CUSE: info not properly terminated [ 46.344137][ T6040] netlink: 'syz.1.15': attribute type 10 has an invalid length. [ 46.346191][ T6040] team0: Device batadv0 is up. Set it down before adding it as a team port [ 46.458382][ T5980] hid-generic 0006:10001:0007.0002: unknown main item tag 0x3 [ 46.460618][ T6044] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17'. [ 46.461060][ T5980] hid-generic 0006:10001:0007.0002: item fetching failed at offset 3/4 [ 46.468056][ T5980] hid-generic 0006:10001:0007.0002: probe with driver hid-generic failed with error -22 [ 46.609582][ T6054] netlink: 'syz.3.19': attribute type 4 has an invalid length. [ 46.640739][ T6056] syz.3.20 uses obsolete (PF_INET,SOCK_PACKET) [ 47.116697][ T6065] QAT: failed to copy from user cfg_data. [ 47.804475][ T6096] netlink: 'syz.0.30': attribute type 4 has an invalid length. [ 47.822655][ T5938] Bluetooth: hci2: command tx timeout [ 47.824181][ T5938] Bluetooth: hci3: command tx timeout [ 47.877516][ T6098] Cannot find set identified by id 0 to match [ 47.902590][ T64] Bluetooth: hci1: command tx timeout [ 47.937174][ T6106] gtp0: entered promiscuous mode [ 47.938494][ T6106] gtp0: entered allmulticast mode [ 48.060442][ T6112] raw_sendmsg: syz.2.35 forgot to set AF_INET. Fix it! [ 48.209301][ T6121] x_tables: duplicate underflow at hook 2 [ 48.211744][ T6121] process 'syz.2.39' launched './file0' with NULL argv: empty string added [ 48.268419][ T6121] x_tables: duplicate underflow at hook 2 [ 48.299367][ T6129] netlink: 'syz.2.40': attribute type 4 has an invalid length. [ 48.333123][ T6131] netlink: 'syz.2.41': attribute type 2 has an invalid length. [ 48.364074][ T6133] xt_hashlimit: size too large, truncated to 1048576 [ 48.422196][ T5995] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 48.470490][ T6136] warning: `syz.2.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 48.479354][ T6136] mac80211_hwsim hwsim2 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 48.592181][ T5995] usb 8-1: Using ep0 maxpacket: 8 [ 48.598263][ T5995] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 48.601141][ T5995] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 48.605758][ T5995] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 48.609657][ T5995] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 48.613553][ T5995] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 48.619117][ T5995] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 48.621687][ T5995] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 48.626329][ T5995] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 48.630173][ T5995] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 48.636703][ T5995] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 48.641440][ T5995] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 48.644186][ T5995] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 48.648291][ T5995] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 48.652784][ T5995] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 48.656446][ T5995] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 48.662811][ T5995] usb 8-1: string descriptor 0 read error: -22 [ 48.664963][ T5995] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 48.667946][ T5995] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.677023][ T5995] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 48.713425][ T39] kauditd_printk_skb: 122 callbacks suppressed [ 48.713435][ T39] audit: type=1400 audit(1732981114.426:237): avc: denied { unmount } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 48.743948][ T39] audit: type=1400 audit(1732981114.456:238): avc: denied { setopt } for pid=6141 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.778408][ T6144] netlink: 'syz.1.45': attribute type 30 has an invalid length. [ 48.781275][ T6144] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 48.783899][ T6144] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 48.879753][ T5995] usb 8-1: USB disconnect, device number 2 [ 48.897684][ T6161] netlink: 'syz.1.51': attribute type 4 has an invalid length. [ 48.929020][ T39] audit: type=1400 audit(1732981114.636:239): avc: denied { create } for pid=6165 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.934903][ T39] audit: type=1400 audit(1732981114.636:240): avc: denied { setopt } for pid=6165 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.939900][ T39] audit: type=1400 audit(1732981114.636:241): avc: denied { write } for pid=6165 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.983336][ T39] audit: type=1400 audit(1732981114.696:242): avc: denied { read } for pid=6165 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.083525][ T39] audit: type=1400 audit(1732981114.796:243): avc: denied { ioctl } for pid=6118 comm="syz.3.38" path="socket:[9566]" dev="sockfs" ino=9566 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.119759][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.54'. [ 49.229153][ T6176] ksmbd: Unknown IPC event: 1, ignore. [ 49.233336][ T39] audit: type=1400 audit(1732981114.946:244): avc: denied { getopt } for pid=6175 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.235860][ T6176] IPv6: Can't replace route, no match found [ 49.293913][ T39] audit: type=1400 audit(1732981115.006:245): avc: denied { getopt } for pid=6177 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 49.332948][ T6183] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.512213][ T6191] netlink: 'syz.0.60': attribute type 4 has an invalid length. [ 49.580894][ T6198] capability: warning: `syz.2.64' uses 32-bit capabilities (legacy support in use) [ 49.584142][ T6198] capability: warning: `syz.2.64' uses deprecated v2 capabilities in a way that may be insecure [ 49.620799][ T39] audit: type=1400 audit(1732981115.326:246): avc: denied { read } for pid=6201 comm="syz.0.66" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 49.725856][ T6207] tun0: tun_chr_ioctl cmd 1074025672 [ 49.727165][ T6207] tun0: ignored: set checksum enabled [ 49.757447][ T6225] netlink: 72 bytes leftover after parsing attributes in process `syz.0.71'. [ 49.799994][ T6227] netlink: 'syz.1.72': attribute type 4 has an invalid length. [ 49.819422][ T6229] netlink: 188 bytes leftover after parsing attributes in process `syz.3.73'. [ 49.837209][ T6233] xt_hashlimit: invalid interval [ 49.902159][ T64] Bluetooth: hci3: command tx timeout [ 49.902587][ T5938] Bluetooth: hci2: command tx timeout [ 49.933447][ T6248] fuse: Unknown parameter 'roúÿÿÿµ¥' [ 49.982208][ T5938] Bluetooth: hci1: command tx timeout [ 50.102184][ T5995] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 50.265153][ T5995] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.267773][ T5995] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 50.270129][ T5995] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 50.272539][ T5995] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.276790][ T5995] usb 8-1: config 0 descriptor?? [ 50.280760][ T5995] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 50.283051][ T5995] dvb-usb: bulk message failed: -22 (3/0) [ 50.287585][ T5995] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 50.290496][ T5995] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 50.292842][ T5995] usb 8-1: media controller created [ 50.295240][ T5995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 50.300552][ T5995] dvb-usb: bulk message failed: -22 (6/0) [ 50.302230][ T5995] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 50.305467][ T5995] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input7 [ 50.311612][ T5995] dvb-usb: schedule remote query interval to 150 msecs. [ 50.313498][ T5995] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 50.474565][ T5995] dvb-usb: bulk message failed: -22 (1/0) [ 50.476174][ T5995] dvb-usb: error while querying for an remote control event. [ 50.532529][ T5995] usb 8-1: USB disconnect, device number 3 [ 50.538654][ T6269] delete_channel: no stack [ 50.542808][ T1143] wlan0: Trigger new scan to find an IBSS to join [ 50.638282][ T5995] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 51.009317][ T6294] syz.1.92[6294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.009363][ T6294] syz.1.92[6294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.042885][ T6292] netlink: 32 bytes leftover after parsing attributes in process `syz.0.91'. [ 51.241069][ T6327] validate_nla: 2 callbacks suppressed [ 51.241079][ T6327] netlink: 'syz.0.103': attribute type 4 has an invalid length. [ 51.274319][ T6333] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 51.276474][ T6333] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 51.279820][ T6333] vhci_hcd vhci_hcd.0: Device attached [ 51.315498][ T6324] kvm: emulating exchange as write [ 51.542333][ T5941] usb 44-1: SetAddress Request (2) to port 0 [ 51.544157][ T5941] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 51.552240][ T5970] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 51.712125][ T5970] usb 8-1: Using ep0 maxpacket: 8 [ 51.715208][ T5970] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 51.718866][ T5970] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 51.721976][ T5970] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.725814][ T5970] usb 8-1: config 0 descriptor?? [ 51.810030][ T6346] overlayfs: conflicting options: metacopy=off,verity=on [ 51.821063][ T6345] 9pnet: Could not find request transport: v [ 51.857150][ T6349] syzkaller1: entered promiscuous mode [ 51.858787][ T6349] syzkaller1: entered allmulticast mode [ 51.931337][ T5970] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 51.992944][ T64] Bluetooth: hci3: command tx timeout [ 51.994427][ T5938] Bluetooth: hci2: command tx timeout [ 52.062248][ T5938] Bluetooth: hci1: command tx timeout [ 52.139842][ T6333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.142788][ T6333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.263179][ T6361] JFS: discard option not supported on device [ 52.267622][ T6361] syz.0.113: attempt to access beyond end of device [ 52.267622][ T6361] loop0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 52.271670][ T6361] syz.0.113: attempt to access beyond end of device [ 52.271670][ T6361] loop0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 52.275612][ T6361] Mount JFS Failure: -5 [ 52.277156][ T6361] jfs_mount failed w/return code = -5 [ 52.310201][ T6364] netlink: 'syz.0.114': attribute type 4 has an invalid length. [ 52.347212][ T6367] usb usb7: usbfs: process 6367 (syz.0.115) did not claim interface 0 before use [ 52.424765][ T62] usb 8-1: USB disconnect, device number 4 [ 52.426386][ T6334] vhci_hcd: connection reset by peer [ 52.431650][ T1135] vhci_hcd: stop threads [ 52.433577][ T1135] vhci_hcd: release socket [ 52.435364][ T1135] vhci_hcd: disconnect device [ 53.060168][ T6380] Bluetooth: MGMT ver 1.23 [ 53.208223][ T6388] netlink: 'syz.0.124': attribute type 4 has an invalid length. [ 53.237261][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.123'. [ 53.339364][ T6412] netlink: 'syz.2.130': attribute type 28 has an invalid length. [ 53.341419][ T6412] netlink: 'syz.2.130': attribute type 3 has an invalid length. [ 53.343992][ T6412] netlink: 132 bytes leftover after parsing attributes in process `syz.2.130'. [ 53.366814][ T1135] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x7d [ 53.369155][ T6416] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 53.448330][ T6422] netlink: 'syz.2.133': attribute type 4 has an invalid length. [ 53.466222][ T6415] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 53.783673][ T6375] orangefs_mount: mount request failed with -4 [ 53.854148][ T62] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 54.002167][ T62] usb 5-1: Using ep0 maxpacket: 16 [ 54.006398][ T62] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 54.009405][ T62] usb 5-1: config 0 has no interface number 0 [ 54.011242][ T62] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 54.014184][ T62] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 54.018353][ T62] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 54.020683][ T62] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 54.022822][ T62] usb 5-1: Product: syz [ 54.023864][ T62] usb 5-1: SerialNumber: syz [ 54.025904][ T62] usb 5-1: config 0 descriptor?? [ 54.028432][ T62] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 54.030613][ T62] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input8 [ 54.102171][ T5998] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 54.228808][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 54.238866][ T6446] netlink: 'syz.1.142': attribute type 4 has an invalid length. [ 54.252144][ T5998] usb 8-1: device descriptor read/64, error -71 [ 54.270793][ T39] kauditd_printk_skb: 60 callbacks suppressed [ 54.270802][ T39] audit: type=1400 audit(1732981119.976:307): avc: denied { execute } for pid=6447 comm="syz.1.143" path="/44/bus/cgroup.stat" dev="overlay" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 54.387276][ T39] audit: type=1400 audit(1732981120.096:308): avc: denied { ioctl } for pid=6456 comm="syz.1.146" path="socket:[10003]" dev="sockfs" ino=10003 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.396823][ T39] audit: type=1400 audit(1732981120.106:309): avc: denied { read } for pid=6456 comm="syz.1.146" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 54.402471][ T39] audit: type=1400 audit(1732981120.106:310): avc: denied { open } for pid=6456 comm="syz.1.146" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 54.433005][ T62] usb 5-1: USB disconnect, device number 2 [ 54.474747][ T62] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 54.484587][ T6463] netlink: 44 bytes leftover after parsing attributes in process `syz.1.147'. [ 54.502157][ T5998] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 54.515271][ T39] audit: type=1400 audit(1732981120.226:311): avc: denied { create } for pid=6461 comm="syz.2.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 54.548131][ T6466] input: syz1 as /devices/virtual/input/input9 [ 54.632366][ T5998] usb 8-1: device descriptor read/64, error -71 [ 54.640039][ T39] audit: type=1400 audit(1732981120.346:312): avc: denied { mounton } for pid=6467 comm="syz.2.150" path="/syzcgroup/unified/syz2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 54.642747][ T39] audit: type=1400 audit(1732981120.356:313): avc: denied { mount } for pid=6467 comm="syz.2.150" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.671420][ T39] audit: type=1400 audit(1732981120.376:314): avc: denied { unmount } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.753763][ T5998] usb usb8-port1: attempt power cycle [ 54.960786][ T6476] netlink: 'syz.0.153': attribute type 4 has an invalid length. [ 54.995740][ T6478] netlink: 'syz.0.154': attribute type 1 has an invalid length. [ 55.102202][ T5998] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 55.122550][ T5998] usb 8-1: device descriptor read/8, error -71 [ 55.313756][ T39] audit: type=1400 audit(1732981121.026:315): avc: denied { nlmsg_read } for pid=6482 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.313778][ T6483] netlink: 24 bytes leftover after parsing attributes in process `syz.1.156'. [ 55.353471][ T6487] netlink: 'syz.1.158': attribute type 27 has an invalid length. [ 55.382605][ T5998] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 55.398039][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.401763][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.402763][ T5998] usb 8-1: device descriptor read/8, error -71 [ 55.405101][ T39] audit: type=1400 audit(1732981121.116:316): avc: denied { read } for pid=6486 comm="syz.1.158" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 55.502228][ T12] wlan0: Trigger new scan to find an IBSS to join [ 55.512443][ T5998] usb usb8-port1: unable to enumerate USB device [ 55.751976][ T6487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.759052][ T6487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.027215][ T6487] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.030281][ T6487] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.033367][ T6487] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.036571][ T6487] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.327125][ T6496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.330176][ T6496] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.383453][ T6496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 56.440404][ T6509] loop8: detected capacity change from 0 to 7 [ 56.446341][ T6509] Dev loop8: unable to read RDB block 7 [ 56.447995][ T6509] loop8: unable to read partition table [ 56.449448][ T6509] loop8: partition table beyond EOD, truncated [ 56.451027][ T6509] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 56.451027][ T6509] ) failed (rc=-5) [ 56.502968][ T1236] wlan0: Creating new IBSS network, BSSID 5a:50:22:ef:75:21 [ 56.598513][ T6523] validate_nla: 1 callbacks suppressed [ 56.598524][ T6523] netlink: 'syz.2.169': attribute type 3 has an invalid length. [ 56.601960][ T6523] netlink: 132 bytes leftover after parsing attributes in process `syz.2.169'. [ 56.634000][ T5941] usb 44-1: device descriptor read/8, error -110 [ 56.782175][ T5998] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 56.930418][ T6534] netlink: 'syz.3.172': attribute type 4 has an invalid length. [ 56.932592][ T5998] usb 6-1: Using ep0 maxpacket: 8 [ 56.935089][ T5998] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 56.937860][ T5998] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 56.940210][ T5998] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.943579][ T5998] usb 6-1: config 0 descriptor?? [ 57.043335][ T5941] usb usb44-port1: attempt power cycle [ 57.150240][ T5998] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 57.308361][ T6554] syzkaller1: entered promiscuous mode [ 57.310127][ T6554] syzkaller1: entered allmulticast mode [ 57.320254][ T6554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6554 comm=syz.0.179 [ 57.396659][ T6561] netlink: 'syz.3.181': attribute type 4 has an invalid length. [ 57.568266][ T6570] netlink: 20 bytes leftover after parsing attributes in process `syz.3.182'. [ 57.610150][ T5938] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 57.613196][ T5941] usb usb44-port1: unable to enumerate USB device [ 57.644737][ T6576] overlayfs: failed to resolve './file0': -2 [ 57.747583][ T6586] netlink: 'syz.2.190': attribute type 4 has an invalid length. [ 57.784170][ T6596] fuse: Unknown parameter 'g'å™ï¼$°00000000000000000000' [ 57.794219][ T6594] binder: BINDER_SET_CONTEXT_MGR already set [ 57.795979][ T6594] binder: 6591:6594 ioctl 4018620d 200002c0 returned -16 [ 57.810696][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'. [ 57.837657][ T6603] trusted_key: syz.3.189 sent an empty control message without MSG_MORE. [ 57.919400][ T6610] libceph: resolve ' [ 57.919400][ T6610] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 57.919400][ T6610] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 57.933938][ T6610] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 6610 comm: syz.0.196) [ 57.950876][ T6613] netlink: 32 bytes leftover after parsing attributes in process `syz.2.197'. [ 58.087877][ T6619] netlink: 'syz.2.199': attribute type 4 has an invalid length. [ 58.147416][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 58.387207][ T830] usb 6-1: USB disconnect, device number 2 [ 58.611749][ T6649] xt_hashlimit: size too large, truncated to 1048576 [ 58.918743][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.920678][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.924749][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.927185][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.929583][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.932025][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.934548][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.936970][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.939321][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.941242][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.945685][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.948012][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.949981][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.951958][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.954045][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.955946][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.957847][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.959866][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.962369][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.964420][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.966771][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.968808][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.970964][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.973632][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.976092][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.978643][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.981067][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.983585][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.985975][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.987906][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.990015][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.992781][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.995205][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.997628][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.999877][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 59.001783][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 59.003872][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 59.005866][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 59.007773][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 59.009822][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 59.011848][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 59.015145][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 59.017070][ T830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 59.026007][ T830] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 59.125727][ T6664] netlink: 'syz.3.210': attribute type 4 has an invalid length. [ 59.209913][ T30] IPVS: starting estimator thread 0... [ 59.275490][ T39] kauditd_printk_skb: 60 callbacks suppressed [ 59.275500][ T39] audit: type=1400 audit(1732981124.986:377): avc: denied { watch watch_reads } for pid=6682 comm="syz.2.217" path="/proc/166" dev="proc" ino=13256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 59.302199][ T6681] IPVS: using max 41 ests per chain, 98400 per kthread [ 59.306581][ T39] audit: type=1400 audit(1732981125.016:378): avc: denied { listen } for pid=6692 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 59.313087][ T39] audit: type=1400 audit(1732981125.016:379): avc: denied { accept } for pid=6692 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 59.348483][ T39] audit: type=1400 audit(1732981125.056:380): avc: denied { create } for pid=6700 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 59.354539][ T39] audit: type=1400 audit(1732981125.056:381): avc: denied { setopt } for pid=6700 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 59.356336][ T6704] netlink: 'syz.1.222': attribute type 4 has an invalid length. [ 59.360568][ T39] audit: type=1400 audit(1732981125.066:382): avc: denied { write } for pid=6700 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 59.402819][ T39] audit: type=1400 audit(1732981125.106:383): avc: denied { map } for pid=6708 comm="syz.1.224" path="/dev/video5" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 59.409447][ T39] audit: type=1400 audit(1732981125.106:384): avc: denied { execute } for pid=6708 comm="syz.1.224" path="/dev/video5" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 59.436560][ T39] audit: type=1400 audit(1732981125.146:385): avc: denied { compute_member } for pid=6712 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 59.442844][ T39] audit: type=1400 audit(1732981125.146:386): avc: denied { ioctl } for pid=6712 comm="syz.1.225" path="socket:[10176]" dev="sockfs" ino=10176 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.863635][ T6719] overlayfs: conflicting lowerdir path [ 60.223204][ T62] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 60.372241][ T62] usb 5-1: Using ep0 maxpacket: 32 [ 60.374846][ T62] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7B, changing to 0xB [ 60.377799][ T62] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 60.380274][ T62] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 60.386464][ T62] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 60.388821][ T62] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.390878][ T62] usb 5-1: Product: syz [ 60.391962][ T62] usb 5-1: Manufacturer: syz [ 60.393298][ T62] usb 5-1: SerialNumber: syz [ 60.582198][ T5980] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 60.598724][ T62] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 60.712283][ T5980] usb 8-1: device descriptor read/64, error -71 [ 60.803269][ T62] usb 5-1: USB disconnect, device number 3 [ 60.805934][ T62] usblp0: removed [ 60.829475][ T6736] netlink: 'syz.2.232': attribute type 4 has an invalid length. [ 60.962364][ T5980] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 60.998531][ T6744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.235'. [ 61.092221][ T5980] usb 8-1: device descriptor read/64, error -71 [ 61.202287][ T5980] usb usb8-port1: attempt power cycle [ 61.205610][ T6747] pim6reg1: entered promiscuous mode [ 61.207037][ T6747] pim6reg1: entered allmulticast mode [ 61.357349][ T6763] qnx4: no qnx4 filesystem (no root dir). [ 61.399358][ T6764] netlink: 'syz.2.241': attribute type 4 has an invalid length. [ 61.543912][ T5980] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 61.562618][ T5980] usb 8-1: device descriptor read/8, error -71 [ 61.802185][ T5980] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 61.822511][ T5980] usb 8-1: device descriptor read/8, error -71 [ 61.932591][ T5980] usb usb8-port1: unable to enumerate USB device [ 62.245590][ T6787] xt_l2tp: v2 doesn't support IP mode [ 62.432542][ T6794] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 62.433248][ T6792] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 62.437684][ T6794] VFS: Can't find a romfs filesystem on dev nullb0. [ 62.437684][ T6794] [ 62.441006][ T6792] VFS: Can't find a romfs filesystem on dev nullb0. [ 62.441006][ T6792] [ 62.596463][ T6804] input: syz1 as /devices/virtual/input/input11 [ 62.713014][ T6807] netlink: 'syz.0.252': attribute type 4 has an invalid length. [ 62.771363][ T6813] sp0: Synchronizing with TNC [ 63.012322][ T830] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 63.164709][ T830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 63.168566][ T830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 63.171565][ T830] usb 7-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 63.174200][ T830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.177218][ T830] usb 7-1: config 0 descriptor?? [ 63.179589][ T6809] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 63.412269][ T6824] netlink: 28 bytes leftover after parsing attributes in process `syz.3.257'. [ 63.415283][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'. [ 63.457545][ T830] usbhid 7-1:0.0: can't add hid device: -71 [ 63.459711][ T830] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 63.467275][ T830] usb 7-1: USB disconnect, device number 2 [ 63.802632][ T6838] block nbd1: server does not support multiple connections per device. [ 64.073475][ T6852] netlink: 'syz.2.264': attribute type 4 has an invalid length. [ 64.148533][ T6858] ======================================================= [ 64.148533][ T6858] WARNING: The mand mount option has been deprecated and [ 64.148533][ T6858] and is ignored by this kernel. Remove the mand [ 64.148533][ T6858] option from the mount to silence this warning. [ 64.148533][ T6858] ======================================================= [ 64.416145][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.420228][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.422973][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.426467][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.428742][ T64] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.431160][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.440471][ T39] kauditd_printk_skb: 16 callbacks suppressed [ 64.440484][ T39] audit: type=1400 audit(1732981131.142:403): avc: denied { mounton } for pid=6864 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 64.466983][ T39] audit: type=1400 audit(1732981131.172:404): avc: denied { create } for pid=6868 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 64.468458][ T6870] netlink: 16 bytes leftover after parsing attributes in process `syz.2.270'. [ 64.473364][ T39] audit: type=1400 audit(1732981131.172:405): avc: denied { write } for pid=6868 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 64.490879][ T39] audit: type=1400 audit(1732981131.192:406): avc: denied { write } for pid=6868 comm="syz.2.270" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 64.490965][ T6870] random: crng reseeded on system resumption [ 64.495292][ T6833] block nbd1: shutting down sockets [ 64.502747][ T39] audit: type=1400 audit(1732981131.192:407): avc: denied { open } for pid=6868 comm="syz.2.270" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 64.502884][ T6864] chnl_net:caif_netlink_parms(): no params data found [ 64.545811][ T6876] Mount JFS Failure: -22 [ 64.563608][ T6864] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.565853][ T6864] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.568417][ T6864] bridge_slave_0: entered allmulticast mode [ 64.571882][ T6864] bridge_slave_0: entered promiscuous mode [ 64.575184][ T39] audit: type=1400 audit(1732981131.282:408): avc: denied { write } for pid=6879 comm="syz.1.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 64.583889][ T6864] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.585972][ T6864] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.587843][ T6864] bridge_slave_1: entered allmulticast mode [ 64.589943][ T6864] bridge_slave_1: entered promiscuous mode [ 64.614176][ T6882] netlink: 'syz.1.273': attribute type 4 has an invalid length. [ 64.624154][ T6864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.627825][ T6864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.657437][ T39] audit: type=1400 audit(1732981131.362:409): avc: denied { write } for pid=6868 comm="syz.2.270" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 64.668580][ T6864] team0: Port device team_slave_0 added [ 64.669966][ T39] audit: type=1400 audit(1732981131.372:410): avc: denied { mounton } for pid=6868 comm="syz.2.270" path="/proc/243/task" dev="proc" ino=14760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 64.671550][ T6864] team0: Port device team_slave_1 added [ 64.689386][ T6887] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 64.691722][ T6887] overlayfs: missing 'lowerdir' [ 64.704895][ T6864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.707332][ T6864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.716971][ T6864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.719422][ T6887] netlink: 'syz.1.275': attribute type 10 has an invalid length. [ 64.721972][ T6864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.725245][ T6864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.734404][ T6864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.739371][ T6887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.742534][ T6887] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 64.746647][ T6887] netlink: 'syz.1.275': attribute type 1 has an invalid length. [ 64.748680][ T6887] netlink: 228 bytes leftover after parsing attributes in process `syz.1.275'. [ 64.751083][ T6887] netlink: 11 bytes leftover after parsing attributes in process `syz.1.275'. [ 64.768485][ T6887] can0: slcan on ttynull. [ 64.834255][ T6864] hsr_slave_0: entered promiscuous mode [ 64.902591][ T6864] hsr_slave_1: entered promiscuous mode [ 64.962157][ T6864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.964152][ T6864] Cannot create hsr debugfs directory [ 65.033759][ T6886] can0 (unregistered): slcan off ttynull. [ 65.076990][ T6864] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.223107][ T6864] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.323000][ T6864] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.404448][ T6864] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.480328][ T39] audit: type=1400 audit(1732981132.182:411): avc: denied { name_bind } for pid=6891 comm="syz.2.277" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 65.586503][ T6892] wg2: entered promiscuous mode [ 65.587969][ T6892] wg2: entered allmulticast mode [ 65.621073][ T6896] xt_connbytes: Forcing CT accounting to be enabled [ 65.623316][ T6896] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 65.627078][ T6896] xt_bpf: check failed: parse error [ 65.633848][ T39] audit: type=1400 audit(1732981132.342:412): avc: denied { mount } for pid=6895 comm="syz.2.278" name="/" dev="pstore" ino=6095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 65.639837][ T6896] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 65.700214][ T6864] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.705068][ T6864] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.708594][ T6864] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.712350][ T6864] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.733107][ T6908] netlink: 'syz.1.282': attribute type 4 has an invalid length. [ 65.755901][ T6864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.764433][ T6864] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.769310][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.771277][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.771840][ T6910] netlink: 48 bytes leftover after parsing attributes in process `syz.2.283'. [ 65.776772][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.776804][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.796386][ T6864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.799222][ T6920] netlink: 32 bytes leftover after parsing attributes in process `syz.1.285'. [ 65.817437][ T6920] overlay: Unknown parameter 'func' [ 65.859756][ T6924] kvm: kvm [6922]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0xffff55f600000003 [ 65.873164][ T6864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.876627][ T6924] kvm: kvm [6922]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0xffff55f600000003 [ 65.879435][ T6924] kvm: kvm [6922]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0xffff55f600000003 [ 65.887240][ T6864] veth0_vlan: entered promiscuous mode [ 65.891981][ T6864] veth1_vlan: entered promiscuous mode [ 65.892004][ T6924] kvm_intel: kvm [6922]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0xffff55f600000003 [ 65.906822][ T6929] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 65.908258][ T6864] veth0_macvtap: entered promiscuous mode [ 65.919557][ T6864] veth1_macvtap: entered promiscuous mode [ 65.925074][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.927784][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.930338][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.933259][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.935763][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.938491][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.943181][ T6864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.946289][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.949328][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.952444][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.955173][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.957638][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.960424][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.964518][ T6864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.969525][ T6864] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.971803][ T6864] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.974349][ T6864] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.976604][ T6864] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.473544][ T64] Bluetooth: hci1: command tx timeout [ 67.982269][ T6920] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 67.982866][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 67.986749][ T6920] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 68.542291][ T64] Bluetooth: hci1: command tx timeout [ 68.803438][ T6920] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 68.806894][ T6920] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 68.809259][ T6920] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 68.815378][ T6920] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 68.817654][ T6920] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 68.819291][ T6920] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 68.821291][ T6920] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 68.843259][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.845347][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.864738][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.867652][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.941527][ T6932] netlink: 80 bytes leftover after parsing attributes in process `syz.1.287'. [ 69.202280][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 69.362241][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 69.365706][ T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 69.368512][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 69.371110][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 69.373919][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 69.376586][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.380025][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 69.382748][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.588709][ T9] usb 7-1: usb_control_msg returned -32 [ 69.590414][ T9] usbtmc 7-1:16.0: can't read capabilities [ 70.073223][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 70.078632][ T6948] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 70.264174][ T6953] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.267995][ T6953] bond0: (slave bond1): Enslaving as an active interface with an up link [ 70.306792][ T6955] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 70.360774][ T6958] netlink: 'syz.1.294': attribute type 4 has an invalid length. [ 70.381378][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 70.381388][ T39] audit: type=1400 audit(1732981137.082:425): avc: denied { execute } for pid=6961 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 70.389199][ T39] audit: type=1400 audit(1732981137.082:426): avc: denied { execute_no_trans } for pid=6961 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 70.502930][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.505839][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.508413][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.513375][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.516288][ T5938] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.518653][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.605130][ T5970] usb 7-1: USB disconnect, device number 3 [ 70.753209][ T39] audit: type=1400 audit(1732981137.462:427): avc: denied { create } for pid=6965 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 70.758376][ T39] audit: type=1400 audit(1732981137.462:428): avc: denied { connect } for pid=6965 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 70.806889][ T39] audit: type=1400 audit(1732981137.512:429): avc: denied { listen } for pid=6965 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 70.807271][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.846201][ T39] audit: type=1400 audit(1732981137.552:430): avc: denied { mount } for pid=6970 comm="syz.1.296" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 70.854132][ T39] audit: type=1400 audit(1732981137.562:431): avc: denied { mounton } for pid=6970 comm="syz.1.296" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 70.862428][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.870695][ T39] audit: type=1400 audit(1732981137.572:432): avc: denied { unmount } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 70.933407][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.025729][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.027496][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.037551][ T6963] chnl_net:caif_netlink_parms(): no params data found [ 71.084603][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.148397][ T6963] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.150814][ T6963] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.152820][ T6963] bridge_slave_0: entered allmulticast mode [ 71.155059][ T6963] bridge_slave_0: entered promiscuous mode [ 71.222966][ T5938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.226956][ T5938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.230145][ T5938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.234358][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.240949][ T6963] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.242705][ T5938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.243003][ T6963] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.246573][ T5938] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.247120][ T6963] bridge_slave_1: entered allmulticast mode [ 71.249784][ T5938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.251525][ T6963] bridge_slave_1: entered promiscuous mode [ 71.275987][ T6963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.283144][ T6963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.306695][ T6963] team0: Port device team_slave_0 added [ 71.311510][ T6963] team0: Port device team_slave_1 added [ 71.333765][ T6963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.335641][ T6963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.342583][ T6963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.347868][ T6963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.349674][ T6963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.356854][ T6963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.444367][ T6963] hsr_slave_0: entered promiscuous mode [ 71.482313][ T6963] hsr_slave_1: entered promiscuous mode [ 71.522156][ T6963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.524162][ T6963] Cannot create hsr debugfs directory [ 71.577092][ T42] bridge_slave_1: left allmulticast mode [ 71.578794][ T42] bridge_slave_1: left promiscuous mode [ 71.581512][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.587205][ T42] bridge_slave_0: left allmulticast mode [ 71.589374][ T42] bridge_slave_0: left promiscuous mode [ 71.591550][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.142197][ T5938] Bluetooth: hci2: command 0x0c1a tx timeout [ 72.542336][ T5938] Bluetooth: hci1: command tx timeout [ 72.944979][ T5938] Bluetooth: hci3: command 0x0c1a tx timeout [ 73.262572][ T5938] Bluetooth: hci0: command tx timeout [ 73.435318][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.494386][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.586610][ T42] bond0 (unregistering): Released all slaves [ 73.616637][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.302'. [ 73.661992][ T6992] netlink: 'syz.2.303': attribute type 4 has an invalid length. [ 73.699622][ T6981] chnl_net:caif_netlink_parms(): no params data found [ 73.701997][ T39] audit: type=1400 audit(1732981140.402:433): avc: denied { search } for pid=5650 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.709439][ T39] audit: type=1400 audit(1732981140.402:434): avc: denied { read } for pid=5650 comm="dhcpcd" name="n105" dev="tmpfs" ino=3159 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 73.851577][ T5938] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 74.048109][ T6981] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.050848][ T6981] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.053664][ T6981] bridge_slave_0: entered allmulticast mode [ 74.056795][ T6981] bridge_slave_0: entered promiscuous mode [ 74.061621][ T6981] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.065052][ T6981] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.067770][ T6981] bridge_slave_1: entered allmulticast mode [ 74.070690][ T6981] bridge_slave_1: entered promiscuous mode [ 74.253814][ T6981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.326604][ T6981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.383773][ T42] hsr_slave_0: left promiscuous mode [ 74.435582][ T42] hsr_slave_1: left promiscuous mode [ 74.532503][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.534633][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.537908][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.540003][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.561214][ T42] veth1_macvtap: left promiscuous mode [ 74.563199][ T42] veth0_macvtap: left promiscuous mode [ 74.564851][ T42] veth1_vlan: left promiscuous mode [ 74.566405][ T42] veth0_vlan: left promiscuous mode [ 74.622299][ T5938] Bluetooth: hci1: command tx timeout [ 75.022253][ T5938] Bluetooth: hci3: command 0x0c1a tx timeout [ 75.342294][ T5938] Bluetooth: hci0: command tx timeout [ 75.851148][ T7016] overlayfs: failed to resolve './file0': -2 [ 75.895080][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 75.895090][ T39] audit: type=1400 audit(1732981142.602:447): avc: denied { write } for pid=7017 comm="syz.2.307" name="/" dev="9p" ino=36837346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.903361][ T39] audit: type=1400 audit(1732981142.602:448): avc: denied { add_name } for pid=7017 comm="syz.2.307" name="blkio.bfq.io_merged_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.910136][ T39] audit: type=1400 audit(1732981142.602:449): avc: denied { create } for pid=7017 comm="syz.2.307" name="blkio.bfq.io_merged_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 75.917823][ T39] audit: type=1400 audit(1732981142.602:450): avc: denied { associate } for pid=7017 comm="syz.2.307" name="blkio.bfq.io_merged_recursive" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 75.970290][ T39] audit: type=1400 audit(1732981142.672:451): avc: denied { mounton } for pid=7017 comm="syz.2.307" path="/94/file0/bus" dev="9p" ino=36837529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.970995][ T7018] (syz.2.307,7018,3):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 75.981795][ T7018] (syz.2.307,7018,3):ocfs2_fill_super:1178 ERROR: status = -22 [ 76.541325][ T39] audit: type=1400 audit(1732981143.242:452): avc: denied { write } for pid=7028 comm="syz.2.310" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 76.562354][ T39] audit: type=1400 audit(1732981143.262:453): avc: denied { write } for pid=7031 comm="syz.2.311" path="socket:[16843]" dev="sockfs" ino=16843 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 76.570787][ T39] audit: type=1400 audit(1732981143.272:454): avc: denied { nlmsg_read } for pid=7031 comm="syz.2.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 76.640420][ T7035] netlink: 'syz.2.312': attribute type 4 has an invalid length. [ 76.702231][ T5938] Bluetooth: hci1: command tx timeout [ 77.424482][ T5938] Bluetooth: hci0: command tx timeout [ 78.708755][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.711880][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.714577][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.718517][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.721234][ T64] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.725087][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.792260][ T5938] Bluetooth: hci1: command tx timeout [ 79.502286][ T5938] Bluetooth: hci0: command tx timeout [ 80.782270][ T5938] Bluetooth: hci3: command tx timeout [ 81.263867][ T35] cfg80211: failed to load regulatory.db [ 81.607485][ T42] team0 (unregistering): Port device team_slave_1 removed [ 82.389200][ T42] team0 (unregistering): Port device team_slave_0 removed [ 82.862195][ T5938] Bluetooth: hci3: command tx timeout [ 84.942416][ T5938] Bluetooth: hci3: command tx timeout [ 87.022442][ T5938] Bluetooth: hci3: command tx timeout [ 87.662318][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 88.061127][ T6981] team0: Port device team_slave_0 added [ 88.066416][ T6981] team0: Port device team_slave_1 added [ 88.120026][ T6981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.121798][ T6981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.130923][ T6981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.150482][ T6981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.152812][ T6981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.159408][ T6981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.254420][ T6981] hsr_slave_0: entered promiscuous mode [ 88.322308][ T6981] hsr_slave_1: entered promiscuous mode [ 88.372131][ T6981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.374124][ T6981] Cannot create hsr debugfs directory [ 88.399231][ T6963] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.403870][ T6963] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.407778][ T6963] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.423096][ T6963] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.447022][ T7037] chnl_net:caif_netlink_parms(): no params data found [ 88.530939][ T7037] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.533505][ T7037] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.535888][ T7037] bridge_slave_0: entered allmulticast mode [ 88.538377][ T7037] bridge_slave_0: entered promiscuous mode [ 88.541698][ T6981] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.547765][ T6981] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.553604][ T7037] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.556012][ T7037] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.558218][ T7037] bridge_slave_1: entered allmulticast mode [ 88.561587][ T7037] bridge_slave_1: entered promiscuous mode [ 88.577484][ T6981] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.581187][ T6981] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.596147][ T7037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.601164][ T7037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.667434][ T7037] team0: Port device team_slave_0 added [ 88.671825][ T7037] team0: Port device team_slave_1 added [ 88.698979][ T7037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.701320][ T7037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.711616][ T7037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.718568][ T7037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.720894][ T7037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.730347][ T7037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.813963][ T7037] hsr_slave_0: entered promiscuous mode [ 88.882533][ T7037] hsr_slave_1: entered promiscuous mode [ 88.922172][ T7037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.924732][ T7037] Cannot create hsr debugfs directory [ 88.924986][ T39] audit: type=1400 audit(1732981155.632:455): avc: denied { write } for pid=7076 comm="syz.2.317" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 88.931843][ T6963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.983730][ T6963] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.008876][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.010756][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.027349][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.029240][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.062884][ T6981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.068967][ T6963] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.071679][ T6963] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.078668][ T7037] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.083639][ T7037] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 89.092883][ T7037] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 89.097521][ T7037] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 89.104931][ T6981] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.109800][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.111657][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.126126][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.128591][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.164207][ T6963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.180859][ T7037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.195126][ T7037] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.200817][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.202731][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.214918][ T39] audit: type=1400 audit(1732981155.922:456): avc: denied { append } for pid=7089 comm="syz.2.320" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 89.217125][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.222600][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.236057][ T6963] veth0_vlan: entered promiscuous mode [ 89.242713][ T6963] veth1_vlan: entered promiscuous mode [ 89.256463][ T6981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.264080][ T6963] veth0_macvtap: entered promiscuous mode [ 89.267345][ T6963] veth1_macvtap: entered promiscuous mode [ 89.276998][ T6963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.279765][ T6963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.286057][ T7090] uprobe: syz.2.320:7090 failed to unregister, leaking uprobe [ 89.288121][ T6963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.290807][ T6963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.293791][ T6963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.296505][ T6963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.299643][ T6963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.304266][ T6963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.306952][ T6963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.309467][ T6963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.312239][ T6963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.314743][ T6963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.318185][ T6963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.321953][ T6963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.326831][ T6963] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.329764][ T6963] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.333028][ T6963] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.335941][ T6963] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.364954][ T7037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.367357][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.369429][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.381238][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.384433][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.398229][ T6981] veth0_vlan: entered promiscuous mode [ 89.402839][ T6981] veth1_vlan: entered promiscuous mode [ 89.415643][ T6981] veth0_macvtap: entered promiscuous mode [ 89.418854][ T6981] veth1_macvtap: entered promiscuous mode [ 89.425814][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.429305][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.442103][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.444845][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.447640][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.450897][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.453722][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.456453][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.459796][ T6981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.464519][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.467736][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.470642][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.473505][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.476045][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.478741][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.481246][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.484072][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.487672][ T6981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.494000][ T6981] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.496421][ T6981] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.498671][ T6981] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.500946][ T6981] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.530615][ T7037] veth0_vlan: entered promiscuous mode [ 89.542576][ T7113] netlink: 'syz.2.321': attribute type 4 has an invalid length. [ 89.546120][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.546426][ T7037] veth1_vlan: entered promiscuous mode [ 89.547980][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.560071][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.561840][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.569386][ T7037] veth0_macvtap: entered promiscuous mode [ 89.572499][ T7037] veth1_macvtap: entered promiscuous mode [ 89.578366][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.580494][ T39] audit: type=1400 audit(1732981156.282:457): avc: denied { append } for pid=7114 comm="syz.2.322" name="nbd2" dev="devtmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 89.581100][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.581108][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.583908][ T7115] block nbd2: NBD_DISCONNECT [ 89.595009][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.597508][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.600569][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.603701][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.606410][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.609227][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.611899][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.615039][ T7037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.619211][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.621998][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.625038][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.627713][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.630216][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.633023][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.635532][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.637093][ T7116] nfs: Unknown parameter '@' [ 89.638202][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.638216][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.645243][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.648407][ T7037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.652669][ T7037] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.654988][ T7037] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.657265][ T7037] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.659559][ T7037] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.764237][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.766314][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.806403][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.808608][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.839104][ T7119] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 89.940303][ T7139] netlink: 100 bytes leftover after parsing attributes in process `syz.5.326'. [ 90.046952][ T7148] netlink: 'syz.5.329': attribute type 4 has an invalid length. [ 90.135244][ T39] audit: type=1400 audit(1732981156.842:458): avc: denied { write } for pid=7155 comm="syz.5.331" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.546829][ T7179] ucma_write: process 26 (syz.4.336) changed security contexts after opening file descriptor, this is not allowed. [ 90.567096][ T39] audit: type=1400 audit(1732981157.272:459): avc: denied { ioctl } for pid=7180 comm="syz.5.337" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 90.591923][ T7186] (syz.4.338,7186,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 90.595086][ T7186] (syz.4.338,7186,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 90.619481][ T7188] netlink: 'syz.5.339': attribute type 4 has an invalid length. [ 90.624374][ T39] audit: type=1400 audit(1732981157.332:460): avc: denied { write } for pid=7189 comm="syz.4.340" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 90.648547][ T7193] xt_hashlimit: size too large, truncated to 1048576 [ 90.651746][ T7193] syz.5.341: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 90.657021][ T7193] CPU: 1 UID: 0 PID: 7193 Comm: syz.5.341 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 90.659676][ T7193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.662478][ T7193] Call Trace: [ 90.663596][ T7193] [ 90.664487][ T7193] dump_stack_lvl+0x16c/0x1f0 [ 90.665790][ T7193] warn_alloc+0x24d/0x3a0 [ 90.667240][ T7193] ? __pfx_warn_alloc+0x10/0x10 [ 90.667259][ T39] audit: type=1400 audit(1732981157.372:461): avc: denied { create } for pid=7192 comm="syz.4.342" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 90.668608][ T7193] ? __get_vm_area_node+0x1b0/0x2f0 [ 90.675208][ T7193] ? __get_vm_area_node+0x1dc/0x2f0 [ 90.676678][ T7193] __vmalloc_node_range_noprof+0x1105/0x1530 [ 90.678238][ T7193] ? __pfx___lock_acquire+0x10/0x10 [ 90.679618][ T7193] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 90.681174][ T7193] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 90.682817][ T7193] ? __pfx_lock_release+0x10/0x10 [ 90.684143][ T7193] ? trace_lock_acquire+0x14e/0x1f0 [ 90.685645][ T7193] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 90.687816][ T7193] vmalloc_noprof+0x6b/0x90 [ 90.689235][ T7193] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 90.690737][ T7193] hashlimit_mt_check_common+0x8b0/0x1450 [ 90.692190][ T7193] hashlimit_mt_check+0x71/0x90 [ 90.693460][ T7193] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 90.694977][ T7193] xt_check_match+0x284/0xa50 [ 90.696232][ T7193] ? __init_zone_device_page+0x252/0x540 [ 90.697696][ T7193] ? __pfx_xt_check_match+0x10/0x10 [ 90.699071][ T7193] ? pcpu_alloc_noprof+0x126/0x1680 [ 90.700442][ T7193] ? xt_find_match+0x1f2/0x290 [ 90.701697][ T7193] find_check_entry.constprop.0+0x34d/0xa20 [ 90.703234][ T7193] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 90.705169][ T7193] ? kvfree+0x47/0x50 [ 90.706649][ T7193] translate_table+0xd06/0x17b0 [ 90.708259][ T7193] ? __pfx_translate_table+0x10/0x10 [ 90.709642][ T7193] ? __might_fault+0xe3/0x190 [ 90.710888][ T7193] do_ip6t_set_ctl+0x605/0xc40 [ 90.712156][ T7193] ? __mutex_lock+0x1cc/0xa60 [ 90.713392][ T7193] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 90.714813][ T7193] ? __mutex_unlock_slowpath+0x164/0x690 [ 90.716281][ T7193] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 90.717848][ T7193] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 90.719424][ T7193] nf_setsockopt+0x8a/0xf0 [ 90.720597][ T7193] ipv6_setsockopt+0x135/0x170 [ 90.721857][ T7193] rawv6_setsockopt+0xd7/0x680 [ 90.723108][ T7193] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 90.724705][ T7193] ? selinux_socket_setsockopt+0x6a/0x80 [ 90.726170][ T7193] ? sock_common_setsockopt+0x2e/0xf0 [ 90.727570][ T7193] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 90.729155][ T7193] do_sock_setsockopt+0x222/0x480 [ 90.730485][ T7193] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 90.731961][ T7193] ? lock_acquire+0x2f/0xb0 [ 90.733280][ T7193] __sys_setsockopt+0x1a0/0x230 [ 90.734582][ T7193] __x64_sys_setsockopt+0xbd/0x160 [ 90.735964][ T7193] ? do_syscall_64+0x91/0x250 [ 90.737226][ T7193] ? lockdep_hardirqs_on+0x7c/0x110 [ 90.738602][ T7193] do_syscall_64+0xcd/0x250 [ 90.739812][ T7193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.741373][ T7193] RIP: 0033:0x7f13d0780849 [ 90.742638][ T7193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.748360][ T7193] RSP: 002b:00007f13d164d058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 90.750482][ T7193] RAX: ffffffffffffffda RBX: 00007f13d0945fa0 RCX: 00007f13d0780849 [ 90.752588][ T7193] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 90.754633][ T7193] RBP: 00007f13d07f3986 R08: 0000000000000598 R09: 0000000000000000 [ 90.756685][ T7193] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000000 [ 90.758748][ T7193] R13: 0000000000000000 R14: 00007f13d0945fa0 R15: 00007fff062ae7b8 [ 90.760804][ T7193] [ 90.770969][ T7193] Mem-Info: [ 90.771917][ T7193] active_anon:4681 inactive_anon:0 isolated_anon:0 [ 90.771917][ T7193] active_file:10773 inactive_file:38373 isolated_file:0 [ 90.771917][ T7193] unevictable:1768 dirty:103 writeback:0 [ 90.771917][ T7193] slab_reclaimable:11729 slab_unreclaimable:79725 [ 90.771917][ T7193] mapped:23443 shmem:2454 pagetables:648 [ 90.771917][ T7193] sec_pagetables:307 bounce:0 [ 90.771917][ T7193] kernel_misc_reclaimable:0 [ 90.771917][ T7193] free:468014 free_pcp:1440 free_cma:0 [ 90.785709][ T7193] Node 0 active_anon:18600kB inactive_anon:0kB active_file:43044kB inactive_file:153416kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:93724kB dirty:372kB writeback:0kB shmem:6280kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12176kB pagetables:2344kB sec_pagetables:1228kB all_unreclaimable? no [ 90.794018][ T39] audit: type=1400 audit(1732981157.502:462): avc: denied { setopt } for pid=7198 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.794208][ T7193] Node 1 active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:76kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:40kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 90.807372][ T7193] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 90.815396][ T7193] lowmem_reserve[]: 0 1212 0 0 0 [ 90.816735][ T7193] Node 0 DMA32 free:267716kB boost:0kB min:27608kB low:34508kB high:41408kB reserved_highatomic:0KB active_anon:18600kB inactive_anon:0kB active_file:43044kB inactive_file:153416kB unevictable:3536kB writepending:372kB present:2080628kB managed:1269912kB mlocked:0kB bounce:0kB free_pcp:2724kB local_pcp:732kB free_cma:0kB [ 90.824702][ T7193] lowmem_reserve[]: 0 0 0 0 0 [ 90.825996][ T7193] Node 1 Normal free:1590244kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:76kB unevictable:3536kB writepending:40kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:3052kB local_pcp:1256kB free_cma:0kB [ 90.834796][ T7193] lowmem_reserve[]: 0 0 0 0 0 [ 90.836091][ T7193] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 90.839657][ T7193] Node 0 DMA32: 37*4kB (ME) 371*8kB (UME) 475*16kB (UME) 392*32kB (UME) 319*64kB (UME) 21*128kB (UME) 17*256kB (UM) 9*512kB (UM) 5*1024kB (ME) 9*2048kB (UM) 46*4096kB (UM) = 267292kB [ 90.844475][ T7193] Node 1 Normal: 1*4kB (U) 6*8kB (ME) 5*16kB (E) 41*32kB (UME) 65*64kB (UME) 20*128kB (UME) 4*256kB (E) 6*512kB (UME) 3*1024kB (UE) 3*2048kB (UM) 383*4096kB (M) = 1590244kB [ 90.849282][ T7193] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 90.851840][ T7193] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 90.854510][ T7193] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 90.856974][ T7193] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 90.859366][ T7193] 51600 total pagecache pages [ 90.860600][ T7193] 0 pages in swap cache [ 90.863188][ T7193] Free swap = 124704kB [ 90.864469][ T7193] Total swap = 124996kB [ 90.865947][ T7193] 1048443 pages RAM [ 90.867132][ T7193] 0 pages HighMem/MovableOnly [ 90.868478][ T7193] 281644 pages reserved [ 90.869807][ T7193] 0 pages cma reserved [ 90.915316][ T39] audit: type=1400 audit(1732981157.622:463): avc: denied { create } for pid=7213 comm="syz.5.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.921614][ T39] audit: type=1400 audit(1732981157.622:464): avc: denied { setopt } for pid=7213 comm="syz.5.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.974041][ T7216] dummy0: entered promiscuous mode [ 91.023209][ T7216] dummy0: left promiscuous mode [ 91.217052][ T7231] netlink: 'syz.5.350': attribute type 4 has an invalid length. [ 91.243023][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.248269][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.251317][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.254290][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.256473][ T64] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.258443][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.484226][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.608735][ T7236] chnl_net:caif_netlink_parms(): no params data found [ 91.617469][ T7248] program syz.4.353 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.792705][ T7236] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.795012][ T7236] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.797404][ T7236] bridge_slave_0: entered allmulticast mode [ 91.800123][ T7236] bridge_slave_0: entered promiscuous mode [ 91.804126][ T7236] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.806460][ T7236] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.808789][ T7236] bridge_slave_1: entered allmulticast mode [ 91.811815][ T7236] bridge_slave_1: entered promiscuous mode [ 91.841382][ T7236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.846033][ T7236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.874059][ T7236] team0: Port device team_slave_0 added [ 91.877965][ T7236] team0: Port device team_slave_1 added [ 91.903784][ T7236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.912111][ T7236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.918947][ T7236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.924155][ T7236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.926682][ T7236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.933469][ T7236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.004447][ T7236] hsr_slave_0: entered promiscuous mode [ 92.072549][ T7236] hsr_slave_1: entered promiscuous mode [ 92.112426][ T7236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.114659][ T7236] Cannot create hsr debugfs directory [ 92.312185][ T7080] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 92.324302][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.472313][ T7080] usb 7-1: Using ep0 maxpacket: 8 [ 92.478035][ T7080] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.481921][ T7080] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.485879][ T7080] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 92.489365][ T7080] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 92.493091][ T7080] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 92.496414][ T7080] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 92.502894][ T7080] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.506155][ T7080] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.508836][ T7080] usb 7-1: Product: syz [ 92.509923][ T7080] usb 7-1: Manufacturer: syz [ 92.511190][ T7080] usb 7-1: SerialNumber: syz [ 92.694173][ T7284] netlink: 'syz.4.360': attribute type 4 has an invalid length. [ 92.721959][ T7080] cdc_ncm 7-1:1.0: bind() failure [ 92.728585][ T7080] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 92.730396][ T7080] cdc_ncm 7-1:1.1: bind() failure [ 92.733156][ T7080] usb 7-1: USB disconnect, device number 4 [ 92.780400][ T7286] overlayfs: conflicting lowerdir path [ 92.814009][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.920269][ T7292] Cannot find map_set index 0 as target [ 92.953250][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.200353][ T11] bridge_slave_1: left allmulticast mode [ 93.202408][ T11] bridge_slave_1: left promiscuous mode [ 93.203976][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.206672][ T11] bridge_slave_0: left allmulticast mode [ 93.208192][ T11] bridge_slave_0: left promiscuous mode [ 93.209690][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.259191][ T7300] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 93.262249][ T5938] Bluetooth: hci1: command tx timeout [ 93.569514][ T7311] netlink: 'syz.4.369': attribute type 4 has an invalid length. [ 94.955822][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.035044][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.103887][ T11] bond0 (unregistering): Released all slaves [ 95.188632][ T7317] ipvlan2: entered promiscuous mode [ 95.190596][ T7317] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 95.198025][ T7317] team0: Device ipvlan2 is already an upper device of the team interface [ 95.271297][ T7318] ipvlan2: entered promiscuous mode [ 95.274112][ T7318] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 95.277002][ T7318] team0: Device ipvlan2 is already an upper device of the team interface [ 95.342164][ T5938] Bluetooth: hci1: command tx timeout [ 95.475479][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 95.475489][ T39] audit: type=1400 audit(1732981162.182:473): avc: denied { getopt } for pid=7329 comm="syz.4.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 95.522966][ T5971] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 95.682201][ T5971] usb 7-1: Using ep0 maxpacket: 8 [ 95.685591][ T5971] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 95.688292][ T5971] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 95.692471][ T5971] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.696600][ T5971] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 95.700684][ T5971] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 95.705151][ T5971] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 95.707159][ T5971] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 95.710088][ T5971] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.713207][ T5971] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 95.716060][ T5971] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 95.719693][ T5971] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 95.722500][ T5971] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 95.725424][ T5971] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.728399][ T5971] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 95.733144][ T5971] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 95.739921][ T5971] usb 7-1: string descriptor 0 read error: -22 [ 95.741593][ T5971] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 95.744467][ T5971] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.750951][ T5971] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 95.931959][ T7342] tmpfs: Invalid uid '0x00000000ffffffff' [ 96.032319][ T7350] Driver unsupported XDP return value 0 on prog (id 47) dev N/A, expect packet loss! [ 96.036632][ T11] hsr_slave_0: left promiscuous mode [ 96.061792][ T56] usb 7-1: USB disconnect, device number 5 [ 96.062255][ T7328] usb 7-1: Couldn't submit interrupt_out_urb -19 [ 96.084097][ T11] hsr_slave_1: left promiscuous mode [ 96.162223][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.164220][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.166678][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.168972][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.192161][ T11] veth1_macvtap: left promiscuous mode [ 96.193673][ T11] veth0_macvtap: left promiscuous mode [ 96.195164][ T11] veth1_vlan: left promiscuous mode [ 96.196599][ T11] veth0_vlan: left promiscuous mode [ 96.282211][ T830] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 96.422410][ T830] usb 10-1: device descriptor read/64, error -71 [ 96.465614][ T7357] netlink: 'syz.4.380': attribute type 4 has an invalid length. [ 96.662345][ T830] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 96.792147][ T830] usb 10-1: device descriptor read/64, error -71 [ 96.902784][ T830] usb usb10-port1: attempt power cycle [ 97.242250][ T830] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 97.264690][ T830] usb 10-1: device descriptor read/8, error -71 [ 97.432224][ T5938] Bluetooth: hci1: command tx timeout [ 97.502262][ T830] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 97.523176][ T830] usb 10-1: device descriptor read/8, error -71 [ 97.637272][ T830] usb usb10-port1: unable to enumerate USB device [ 99.069290][ T39] audit: type=1400 audit(1732981165.772:474): avc: denied { append } for pid=7360 comm="syz.5.382" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 99.502371][ T5938] Bluetooth: hci1: command tx timeout [ 103.005971][ T11] team0 (unregistering): Port device team_slave_1 removed [ 103.815949][ T11] team0 (unregistering): Port device team_slave_0 removed [ 109.921433][ T7236] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 109.930748][ T7236] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 109.938698][ T7236] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 109.950504][ T7236] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 109.967517][ T39] audit: type=1400 audit(1732981176.682:475): avc: denied { map } for pid=7364 comm="syz.5.383" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 109.997536][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 110.005654][ T39] audit: type=1400 audit(1732981176.712:476): avc: denied { listen } for pid=7368 comm="syz.4.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 110.119162][ T7370] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 110.206901][ T7236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.223892][ T7380] overlayfs: conflicting lowerdir path [ 110.224595][ T7236] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.239001][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.241378][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.246998][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.248794][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.269171][ T39] audit: type=1400 audit(1732981176.972:477): avc: denied { create } for pid=7383 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 110.286268][ T39] audit: type=1400 audit(1732981176.972:478): avc: denied { accept } for pid=7383 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 110.293431][ T7236] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 110.297623][ T39] audit: type=1400 audit(1732981176.992:479): avc: denied { read } for pid=5335 comm="acpid" name="mouse6" dev="devtmpfs" ino=2841 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 110.299576][ T7394] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 110.301702][ T7236] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.305284][ T39] audit: type=1400 audit(1732981176.992:480): avc: denied { open } for pid=5335 comm="acpid" path="/dev/input/mouse6" dev="devtmpfs" ino=2841 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 110.315857][ T39] audit: type=1400 audit(1732981176.992:481): avc: denied { ioctl } for pid=5335 comm="acpid" path="/dev/input/mouse6" dev="devtmpfs" ino=2841 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 110.322894][ T39] audit: type=1326 audit(1732981177.012:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7393 comm="syz.4.391" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3c1980849 code=0x0 [ 110.392516][ T39] audit: type=1400 audit(1732981177.092:483): avc: denied { search } for pid=5650 comm="dhcpcd" name="netdev:wlan2" dev="debugfs" ino=20720 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 110.404092][ T39] audit: type=1400 audit(1732981177.112:484): avc: denied { mounton } for pid=7400 comm="syz.4.392" path="/33/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 110.481664][ T7236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.505771][ T7236] veth0_vlan: entered promiscuous mode [ 110.511225][ T7236] veth1_vlan: entered promiscuous mode [ 110.525739][ T7417] bridge0: entered promiscuous mode [ 110.528299][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.392'. [ 110.531065][ T7236] veth0_macvtap: entered promiscuous mode [ 110.539165][ T7417] bridge_slave_1: left allmulticast mode [ 110.541100][ T7417] bridge_slave_1: left promiscuous mode [ 110.544606][ T7417] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.549917][ T7417] bridge_slave_0: left allmulticast mode [ 110.551450][ T7417] bridge_slave_0: left promiscuous mode [ 110.553157][ T7417] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.592137][ T7409] nbd5: detected capacity change from 0 to 131072 [ 110.597213][ T7287] block nbd5: Send control failed (result -89) [ 110.599334][ T7287] block nbd5: Request send failed, requeueing [ 110.603957][ T2245] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.605928][ T7404] block nbd5: shutting down sockets [ 110.606535][ T2245] Buffer I/O error on dev nbd5, logical block 0, async page read [ 110.610964][ T2245] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.613357][ T2245] Buffer I/O error on dev nbd5, logical block 0, async page read [ 110.613917][ T7417] bridge0 (unregistering): left promiscuous mode [ 110.615392][ T2245] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.619273][ T2245] Buffer I/O error on dev nbd5, logical block 0, async page read [ 110.621368][ T2245] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.623824][ T2245] Buffer I/O error on dev nbd5, logical block 0, async page read [ 110.626025][ T2245] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.628438][ T2245] Buffer I/O error on dev nbd5, logical block 0, async page read [ 110.630570][ T2245] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.633367][ T2245] Buffer I/O error on dev nbd5, logical block 0, async page read [ 110.635403][ T2245] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.637758][ T2245] Buffer I/O error on dev nbd5, logical block 0, async page read [ 110.639830][ T2245] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.642232][ T2245] Buffer I/O error on dev nbd5, logical block 0, async page read [ 110.644239][ T7287] ldm_validate_partition_table(): Disk read failed. [ 110.646587][ T2245] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.648887][ T2245] Buffer I/O error on dev nbd5, logical block 0, async page read [ 110.667420][ T121] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.669843][ T121] Buffer I/O error on dev nbd5, logical block 0, async page read [ 110.673161][ T7287] Dev nbd5: unable to read RDB block 0 [ 110.675148][ T7287] nbd5: unable to read partition table [ 110.680231][ T7287] ldm_validate_partition_table(): Disk read failed. [ 110.682495][ T7287] Dev nbd5: unable to read RDB block 0 [ 110.684154][ T7287] nbd5: unable to read partition table [ 110.706087][ T7236] veth1_macvtap: entered promiscuous mode [ 110.714110][ T7429] ieee802154 phy0 wpan0: encryption failed: -22 [ 110.716428][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.719281][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.721773][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.724694][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.727258][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.730357][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.732830][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.735362][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.737802][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.740534][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.743683][ T7236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.784783][ T7433] netlink: 'syz.2.397': attribute type 4 has an invalid length. [ 110.827863][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.828220][ T7439] NILFS (nullb0): couldn't find nilfs on the device [ 110.830679][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.830687][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.838079][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.840629][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.843283][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.845770][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.848483][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.850950][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.853930][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.857007][ T7236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.860231][ T7236] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.863168][ T7236] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.866439][ T7236] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.869279][ T7236] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.988337][ T1209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.990374][ T1209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.002931][ T1209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.005298][ T1209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.071782][ T7463] dccp_invalid_packet: invalid packet type [ 111.076261][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.405'. [ 111.132556][ T7465] trusted_key: encrypted_key: master key parameter '' is invalid [ 111.187202][ T7467] netlink: 'syz.4.406': attribute type 4 has an invalid length. [ 112.183695][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.414'. [ 112.183730][ T7495] netlink: 'syz.2.415': attribute type 4 has an invalid length. [ 112.191406][ T7493] 8021q: adding VLAN 0 to HW filter on device team1 [ 112.226930][ T7499] binder: 7498:7499 ioctl c018620c 20000000 returned -1 [ 112.231001][ T7497] IPVS: Error connecting to the multicast addr [ 112.231916][ T7501] binder: 7498:7501 ioctl c018620c 20000000 returned -1 [ 112.296417][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'. [ 112.301065][ T7506] ubi0: attaching mtd0 [ 112.304197][ T7506] ubi0: scanning is finished [ 112.305927][ T7506] ubi0: empty MTD device detected [ 112.343562][ T7508] openvswitch: netlink: Message has 1275 unknown bytes. [ 112.345950][ T7508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.393328][ T7506] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 112.393370][ T7506] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 112.393386][ T7506] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 112.393401][ T7506] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 112.393416][ T7506] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 112.393431][ T7506] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 112.393446][ T7506] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2246569676 [ 112.393462][ T7506] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 112.394097][ T7513] ubi0: background thread "ubi_bgt0d" started, PID 7513 [ 112.438701][ T7515] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 112.442641][ T7515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.422'. [ 112.444877][ T7515] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 112.915802][ T1209] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.993020][ T7524] netlink: 'syz.4.424': attribute type 4 has an invalid length. [ 112.999010][ T7523] Can't find a SQUASHFS superblock on sr0 [ 113.068902][ T7535] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 113.083043][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.087178][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.089675][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.092503][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.094566][ T64] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 113.097015][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.113779][ T7543] xt_recent: Unsupported userspace flags (00000042) [ 113.199539][ T7549] netlink: 'syz.5.434': attribute type 4 has an invalid length. [ 113.355522][ T7536] chnl_net:caif_netlink_parms(): no params data found [ 113.407377][ T7536] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.409222][ T7536] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.411084][ T7536] bridge_slave_0: entered allmulticast mode [ 113.413400][ T7536] bridge_slave_0: entered promiscuous mode [ 113.415895][ T7536] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.417757][ T7536] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.419583][ T7536] bridge_slave_1: entered allmulticast mode [ 113.421602][ T7536] bridge_slave_1: entered promiscuous mode [ 113.453418][ T7536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.457378][ T7536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.497086][ T7536] team0: Port device team_slave_0 added [ 113.500782][ T7536] team0: Port device team_slave_1 added [ 113.524138][ T7536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.526127][ T7536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.533880][ T7536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.537797][ T7536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.539590][ T7536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.546520][ T7536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.615860][ T7536] hsr_slave_0: entered promiscuous mode [ 113.672453][ T7536] hsr_slave_1: entered promiscuous mode [ 113.682242][ T5971] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 113.689918][ T7590] netlink: 'syz.2.445': attribute type 4 has an invalid length. [ 113.712290][ T7536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.714239][ T7536] Cannot create hsr debugfs directory [ 113.790701][ T7582] netlink: 'syz.4.443': attribute type 29 has an invalid length. [ 113.842253][ T5971] usb 10-1: Using ep0 maxpacket: 8 [ 113.845740][ T5971] usb 10-1: config 0 has an invalid interface number: 52 but max is 0 [ 113.848704][ T5971] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.852580][ T5971] usb 10-1: config 0 has no interface number 0 [ 113.854815][ T5971] usb 10-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.858957][ T5971] usb 10-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 113.863175][ T5971] usb 10-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 113.867149][ T5971] usb 10-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.871751][ T5971] usb 10-1: config 0 interface 52 has no altsetting 0 [ 113.874420][ T5971] usb 10-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 113.877694][ T5971] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.883174][ T5971] usb 10-1: config 0 descriptor?? [ 114.089546][ T5971] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.52/input/input12 [ 114.153244][ T1209] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.274148][ T1209] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.384417][ T1209] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.393326][ T7606] netlink: 'syz.4.449': attribute type 4 has an invalid length. [ 114.490774][ T7609] sit0: entered promiscuous mode [ 114.493768][ T7609] netlink: 'syz.4.450': attribute type 1 has an invalid length. [ 114.495802][ T7609] netlink: 1 bytes leftover after parsing attributes in process `syz.4.450'. [ 114.608465][ T1209] bridge_slave_1: left allmulticast mode [ 114.609927][ T1209] bridge_slave_1: left promiscuous mode [ 114.611863][ T1209] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.620905][ T1209] bridge_slave_0: left allmulticast mode [ 114.622900][ T1209] bridge_slave_0: left promiscuous mode [ 114.624460][ T1209] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.638525][ T830] usb 10-1: USB disconnect, device number 6 [ 114.640685][ C0] synaptics_usb 10-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 115.192711][ T64] Bluetooth: hci1: command tx timeout [ 115.224634][ T7622] netlink: 'syz.5.454': attribute type 4 has an invalid length. [ 115.325426][ T7624] Bluetooth: MGMT ver 1.23 [ 116.454322][ T1209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.524269][ T1209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.573389][ T1209] bond0 (unregistering): Released all slaves [ 116.592353][ T7618] smc: net device wg0 applied user defined pnetid SYZ0 [ 116.717541][ T39] kauditd_printk_skb: 20 callbacks suppressed [ 116.717556][ T39] audit: type=1400 audit(1732981183.422:505): avc: denied { read } for pid=7645 comm="syz.2.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 116.723061][ T7647] netlink: 47 bytes leftover after parsing attributes in process `syz.5.459'. [ 116.776537][ T39] audit: type=1804 audit(1732981183.482:506): pid=7649 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.459" name="/newroot/40/file1" dev="fuse" ino=1 res=1 errno=0 [ 116.782186][ T39] audit: type=1800 audit(1732981183.482:507): pid=7649 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.459" name="/" dev="fuse" ino=1 res=0 errno=0 [ 116.787514][ T39] audit: type=1804 audit(1732981183.482:508): pid=7641 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.459" name="/newroot/40/file1" dev="fuse" ino=1 res=1 errno=0 [ 116.793408][ T39] audit: type=1804 audit(1732981183.482:509): pid=7641 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.459" name="/newroot/40/file1" dev="fuse" ino=1 res=1 errno=0 [ 116.798869][ T39] audit: type=1800 audit(1732981183.482:510): pid=7641 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.459" name="/" dev="fuse" ino=1 res=0 errno=0 [ 116.888845][ T64] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 117.262403][ T64] Bluetooth: hci1: command tx timeout [ 118.386818][ T64] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 118.389199][ T64] Bluetooth: hci3: Injecting HCI hardware error event [ 118.393053][ T64] Bluetooth: hci3: hardware error 0x00 [ 119.022501][ T1135] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 119.342440][ T5938] Bluetooth: hci1: command tx timeout [ 120.703754][ T64] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 120.944774][ T64] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 120.947180][ T64] Bluetooth: hci2: Injecting HCI hardware error event [ 120.950341][ T64] Bluetooth: hci2: hardware error 0x00 [ 121.422280][ T5938] Bluetooth: hci1: command tx timeout [ 123.023438][ T64] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 130.220818][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.461'. [ 130.251650][ T39] audit: type=1400 audit(1732981196.952:511): avc: denied { nlmsg_write } for pid=7670 comm="syz.2.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 130.269266][ T39] audit: type=1400 audit(1732981196.972:512): avc: denied { write } for pid=7670 comm="syz.2.466" path="socket:[20988]" dev="sockfs" ino=20988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.269955][ T7674] 9pnet_virtio: no channels available for device [ 130.435807][ T7683] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 130.439157][ T7683] qnx6: wrong signature (magic) in superblock #1. [ 130.441397][ T7683] qnx6: unable to read the first superblock [ 130.471520][ T7689] netlink: 'syz.2.469': attribute type 4 has an invalid length. [ 130.680957][ T1209] hsr_slave_0: left promiscuous mode [ 130.745476][ T1209] hsr_slave_1: left promiscuous mode [ 130.842337][ T1209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.847913][ T1209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.853749][ T1209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.855895][ T1209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.889865][ T1209] veth1_macvtap: left promiscuous mode [ 130.891366][ T1209] veth0_macvtap: left promiscuous mode [ 130.892906][ T1209] veth1_vlan: left promiscuous mode [ 130.894293][ T1209] veth0_vlan: left promiscuous mode [ 131.379267][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.5.475'. [ 131.472920][ T7701] Falling back ldisc for ttyS3. [ 132.474583][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.477071][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.343182][ T1209] team0 (unregistering): Port device team_slave_1 removed [ 138.144566][ T1209] team0 (unregistering): Port device team_slave_0 removed [ 144.179293][ T7723] vlan2: entered promiscuous mode [ 144.180715][ T7723] vlan2: entered allmulticast mode [ 144.182529][ T7723] hsr_slave_1: entered allmulticast mode [ 144.198156][ T7731] netlink: 25 bytes leftover after parsing attributes in process `syz.4.476'. [ 144.250265][ T7735] netlink: 25 bytes leftover after parsing attributes in process `syz.4.476'. [ 144.294685][ T39] audit: type=1400 audit(1732981211.002:513): avc: denied { watch } for pid=7737 comm="syz.2.477" path="/153" dev="tmpfs" ino=844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 144.300376][ T39] audit: type=1400 audit(1732981211.002:514): avc: denied { watch_sb } for pid=7737 comm="syz.2.477" path="/153" dev="tmpfs" ino=844 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 145.023551][ T7725] hsr_slave_1 (unregistering): left allmulticast mode [ 145.144471][ T7725] hsr_slave_1 (unregistering): left promiscuous mode [ 145.201055][ T7739] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 145.240368][ T7536] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 145.254978][ T7536] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 145.261526][ T7536] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 145.269384][ T7536] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 145.314110][ T7536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.326585][ T7536] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.330614][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.332558][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.340379][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.342277][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.386896][ T7765] netlink: 'syz.2.482': attribute type 4 has an invalid length. [ 145.441854][ T7536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.443504][ T7772] tmpfs: Unknown parameter 'hõgc' [ 145.460391][ T7775] netlink: 'syz.2.485': attribute type 4 has an invalid length. [ 145.464222][ T7536] veth0_vlan: entered promiscuous mode [ 145.467984][ T7536] veth1_vlan: entered promiscuous mode [ 145.478517][ T7536] veth0_macvtap: entered promiscuous mode [ 145.481388][ T7536] veth1_macvtap: entered promiscuous mode [ 145.489843][ T39] audit: type=1400 audit(1732981212.192:515): avc: denied { append } for pid=7778 comm="syz.2.487" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 145.492418][ T7536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.498509][ T7536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.501013][ T7536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.504044][ T7536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.507331][ T7536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.510036][ T7536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.512616][ T7536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.515295][ T7536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.517796][ T7536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.520476][ T7536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.523662][ T7536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.529175][ T7784] ------------[ cut here ]------------ [ 145.530883][ T7784] WARNING: CPU: 1 PID: 7784 at drivers/net/wireless/virtual/mac80211_hwsim.c:1445 mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 145.534533][ T7784] Modules linked in: [ 145.536234][ T7784] CPU: 1 UID: 0 PID: 7784 Comm: syz.2.488 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 145.540373][ T7784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 145.543621][ T7784] RIP: 0010:mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 145.546017][ T7784] Code: 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 3f 02 00 00 0f b7 6b 04 31 ff 44 09 fd 89 ee e8 5a ef d9 fa 85 ed 75 09 e8 11 ed d9 fa 90 <0f> 0b 90 e8 08 ed d9 fa 31 ff 44 89 f6 e8 3e ef d9 fa 45 85 f6 75 [ 145.551858][ T7784] RSP: 0018:ffffc90004bc7768 EFLAGS: 00010287 [ 145.553625][ T7784] RAX: 000000000000d3ee RBX: ffff888029686e32 RCX: ffffc9000c001000 [ 145.555712][ T7784] RDX: 0000000000080000 RSI: ffffffff86b4d80f RDI: 0000000000000005 [ 145.557768][ T7784] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 145.559840][ T7784] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88804ceb30a0 [ 145.561933][ T7784] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 145.564200][ T7784] FS: 00007f28b425e6c0(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 145.566533][ T7784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.568270][ T7784] CR2: 0000000020001000 CR3: 00000000502f2000 CR4: 0000000000352ef0 [ 145.570742][ T7784] DR0: 0000000000002800 DR1: 0000000000000000 DR2: 0000000000000000 [ 145.572919][ T7784] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 145.575070][ T7784] Call Trace: [ 145.576022][ T7784] [ 145.576833][ T7784] ? __warn+0xea/0x3c0 [ 145.577956][ T7784] ? mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 145.579718][ T7784] ? report_bug+0x3c0/0x580 [ 145.581551][ T7784] ? handle_bug+0x54/0xa0 [ 145.582798][ T7784] ? exc_invalid_op+0x17/0x50 [ 145.584057][ T7784] ? asm_exc_invalid_op+0x1a/0x20 [ 145.585375][ T7784] ? mac80211_hwsim_config_mac_nl.isra.0+0xdf/0x330 [ 145.587089][ T7784] ? mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 145.588834][ T7784] ? mac80211_hwsim_config_mac_nl.isra.0+0xdf/0x330 [ 145.590561][ T7784] mac80211_hwsim_add_interface+0x2d6/0x370 [ 145.592181][ T7784] drv_add_interface+0x1b4/0x970 [ 145.593482][ T7784] ? ieee80211_set_sdata_offload_flags+0x213/0x480 [ 145.595159][ T7784] ieee80211_do_open+0x127f/0x1e80 [ 145.596507][ T7784] ieee80211_open+0x18a/0x260 [ 145.597750][ T7784] ? __pfx_ieee80211_open+0x10/0x10 [ 145.599144][ T7784] __dev_open+0x2d4/0x4e0 [ 145.600286][ T7784] ? __pfx___dev_open+0x10/0x10 [ 145.601563][ T7784] ? __local_bh_enable_ip+0xa4/0x120 [ 145.602991][ T7784] __dev_change_flags+0x561/0x720 [ 145.604318][ T7784] ? __pfx___dev_change_flags+0x10/0x10 [ 145.605748][ T7784] dev_change_flags+0x8f/0x160 [ 145.606979][ T7784] devinet_ioctl+0x11d9/0x1f50 [ 145.608273][ T7784] ? __pfx_devinet_ioctl+0x10/0x10 [ 145.609615][ T7784] ? _copy_from_user+0x59/0xd0 [ 145.610870][ T7784] inet_ioctl+0x3aa/0x3f0 [ 145.612039][ T7784] ? __pfx_inet_ioctl+0x10/0x10 [ 145.613426][ T7784] ? __pfx_lock_release+0x10/0x10 [ 145.614762][ T7784] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 145.616339][ T7784] sock_do_ioctl+0x116/0x280 [ 145.617583][ T7784] ? __pfx_sock_do_ioctl+0x10/0x10 [ 145.618940][ T7784] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 145.620638][ T7784] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 145.622395][ T7784] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 145.624182][ T7784] sock_ioctl+0x228/0x6c0 [ 145.625316][ T7784] ? __pfx_sock_ioctl+0x10/0x10 [ 145.626607][ T7784] ? selinux_file_ioctl+0x180/0x270 [ 145.627971][ T7784] ? selinux_file_ioctl+0xb4/0x270 [ 145.629310][ T7784] ? __pfx_sock_ioctl+0x10/0x10 [ 145.630583][ T7784] __x64_sys_ioctl+0x190/0x200 [ 145.631861][ T7784] do_syscall_64+0xcd/0x250 [ 145.633124][ T7784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.634663][ T7784] RIP: 0033:0x7f28b338044b [ 145.635843][ T7784] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 145.640807][ T7784] RSP: 002b:00007f28b425ce80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.643047][ T7784] RAX: ffffffffffffffda RBX: 00007f28b425cfa0 RCX: 00007f28b338044b [ 145.645243][ T7784] RDX: 00007f28b425cf00 RSI: 0000000000008914 RDI: 0000000000000006 [ 145.647998][ T7784] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 145.650640][ T7784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 145.653484][ T7784] R13: 0000000000000048 R14: 00007f28b425cfc0 R15: 00007f28b425cf00 [ 145.656146][ T7784] [ 145.657141][ T7784] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 145.659049][ T7784] CPU: 1 UID: 0 PID: 7784 Comm: syz.2.488 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 145.661692][ T7784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.664481][ T7784] Call Trace: [ 145.665369][ T7784] [ 145.666189][ T7784] dump_stack_lvl+0x3d/0x1f0 [ 145.667706][ T7784] panic+0x71d/0x800 [ 145.668966][ T7784] ? __pfx_panic+0x10/0x10 [ 145.670365][ T7784] ? show_trace_log_lvl+0x29d/0x3d0 [ 145.671996][ T7784] ? mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 145.673752][ T7784] check_panic_on_warn+0xab/0xb0 [ 145.675103][ T7784] __warn+0xf6/0x3c0 [ 145.676166][ T7784] ? mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 145.678075][ T7784] report_bug+0x3c0/0x580 [ 145.679209][ T7784] handle_bug+0x54/0xa0 [ 145.680318][ T7784] exc_invalid_op+0x17/0x50 [ 145.681532][ T7784] asm_exc_invalid_op+0x1a/0x20 [ 145.682817][ T7784] RIP: 0010:mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 145.684722][ T7784] Code: 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 3f 02 00 00 0f b7 6b 04 31 ff 44 09 fd 89 ee e8 5a ef d9 fa 85 ed 75 09 e8 11 ed d9 fa 90 <0f> 0b 90 e8 08 ed d9 fa 31 ff 44 89 f6 e8 3e ef d9 fa 45 85 f6 75 [ 145.689717][ T7784] RSP: 0018:ffffc90004bc7768 EFLAGS: 00010287 [ 145.691317][ T7784] RAX: 000000000000d3ee RBX: ffff888029686e32 RCX: ffffc9000c001000 [ 145.693384][ T7784] RDX: 0000000000080000 RSI: ffffffff86b4d80f RDI: 0000000000000005 [ 145.695489][ T7784] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 145.697540][ T7784] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88804ceb30a0 [ 145.699642][ T7784] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 145.701701][ T7784] ? mac80211_hwsim_config_mac_nl.isra.0+0xdf/0x330 [ 145.703422][ T7784] ? mac80211_hwsim_config_mac_nl.isra.0+0xdf/0x330 [ 145.705162][ T7784] mac80211_hwsim_add_interface+0x2d6/0x370 [ 145.706754][ T7784] drv_add_interface+0x1b4/0x970 [ 145.708087][ T7784] ? ieee80211_set_sdata_offload_flags+0x213/0x480 [ 145.709800][ T7784] ieee80211_do_open+0x127f/0x1e80 [ 145.711151][ T7784] ieee80211_open+0x18a/0x260 [ 145.712395][ T7784] ? __pfx_ieee80211_open+0x10/0x10 [ 145.713757][ T7784] __dev_open+0x2d4/0x4e0 [ 145.714899][ T7784] ? __pfx___dev_open+0x10/0x10 [ 145.716250][ T7784] ? __local_bh_enable_ip+0xa4/0x120 [ 145.717634][ T7784] __dev_change_flags+0x561/0x720 [ 145.718993][ T7784] ? __pfx___dev_change_flags+0x10/0x10 [ 145.720442][ T7784] dev_change_flags+0x8f/0x160 [ 145.721706][ T7784] devinet_ioctl+0x11d9/0x1f50 [ 145.722963][ T7784] ? __pfx_devinet_ioctl+0x10/0x10 [ 145.724306][ T7784] ? _copy_from_user+0x59/0xd0 [ 145.725556][ T7784] inet_ioctl+0x3aa/0x3f0 [ 145.726686][ T7784] ? __pfx_inet_ioctl+0x10/0x10 [ 145.728004][ T7784] ? __pfx_lock_release+0x10/0x10 [ 145.729329][ T7784] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 145.730888][ T7784] sock_do_ioctl+0x116/0x280 [ 145.732116][ T7784] ? __pfx_sock_do_ioctl+0x10/0x10 [ 145.733459][ T7784] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 145.735150][ T7784] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 145.736848][ T7784] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 145.738657][ T7784] sock_ioctl+0x228/0x6c0 [ 145.739799][ T7784] ? __pfx_sock_ioctl+0x10/0x10 [ 145.741073][ T7784] ? selinux_file_ioctl+0x180/0x270 [ 145.742438][ T7784] ? selinux_file_ioctl+0xb4/0x270 [ 145.743802][ T7784] ? __pfx_sock_ioctl+0x10/0x10 [ 145.745092][ T7784] __x64_sys_ioctl+0x190/0x200 [ 145.746317][ T7784] do_syscall_64+0xcd/0x250 [ 145.747545][ T7784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.749078][ T7784] RIP: 0033:0x7f28b338044b [ 145.750242][ T7784] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 145.755211][ T7784] RSP: 002b:00007f28b425ce80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.757379][ T7784] RAX: ffffffffffffffda RBX: 00007f28b425cfa0 RCX: 00007f28b338044b [ 145.759448][ T7784] RDX: 00007f28b425cf00 RSI: 0000000000008914 RDI: 0000000000000006 [ 145.761485][ T7784] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 145.763413][ T7784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 145.765452][ T7784] R13: 0000000000000048 R14: 00007f28b425cfc0 R15: 00007f28b425cf00 [ 145.767485][ T7784] [ 145.768730][ T7784] Kernel Offset: disabled [ 145.769899][ T7784] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:40:11 Registers: info registers vcpu 0 CPU#0 RAX=000000000017b45d RBX=0000000000000000 RCX=ffffffff8b299bf9 RDX=0000000000000000 RSI=ffffffff8b6ce000 RDI=ffffffff8bd1e580 RBP=fffffbfff1bd2f08 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c6fed R10=ffff88806a637f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97840 R14=ffffffff905f6a10 R15=0000000000000000 RIP=ffffffff8b29afdf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c421b07 CR3=00000000502f2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd09fff2d0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28b33f48bd ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28b33f48ca ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28b33f48c4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28b33f48d8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28b33f495e ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28b33f4a3c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 732064616200786c 6c36313025783000 657a697320780004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5605414447005d49 49131415005d1500 405f4c56055d404d 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 12fc8ca729fc3304 051a678ee7ab489a c864ea6129ea87d3 0561c476170606be ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d16773e9d6701052 634408940369a755 6349d069da4adb2c e5ddf61cbcdecef3 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c84b5c250e8f88f3 67eabaf56f682ed3 e9870dfeeba39555 9d09364aab3a8922 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 289e5e180e62a61f 25c05f0c309808fd b458c035960bb6a4 c1e07f4abefe6a39 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85113d25 RDI=ffffffff9ab14ba0 RBP=ffffffff9ab14b60 RSP=ffffc90004bc70c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000006 R12=0000000000000000 R13=0000000000000020 R14=ffffffff85113cc0 R15=0000000000000000 RIP=ffffffff85113d4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f28b425e6c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020001000 CR3=00000000502f2000 CR4=00352ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffffe0 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28b33f48bd ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28b33f48ca ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28b33f48c4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28b33f48d8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28b33f495e ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28b33f4a3c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28b3510488 00007f28b3510480 00007f28b3510478 00007f28b3510450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000316e616c77 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 12fc8ca729fc3304 051a678ee7ab489a c864ea6129ea87d3 0561c476170606be ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d16773e9d6701052 634408940369a755 6349d069da4adb2c e5ddf61cbcdecef3 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c84b5c250e8f88f3 67eabaf56f682ed3 e9870dfeeba39555 9d09364aab3a8922 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 289e5e180e62a61f 25c05f0c309808fd b458c035960bb6a4 c1e07f4abefe6a39 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000d5bab RBX=0000000000000002 RCX=ffffffff8b299bf9 RDX=0000000000000000 RSI=ffffffff8b6ce000 RDI=ffffffff8bd1e580 RBP=ffffed1003a50000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d506fed R10=ffff88806a837f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d280000 R14=ffffffff905f6a10 R15=0000000000000000 RIP=ffffffff8b29afdf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f28b423cfb8 CR3=00000000286ce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001010002 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3f00000000000000 00000000000080fe ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12f59f4892 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12f59f488a ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12f59f48bd ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12f59f48ca ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12f59f48c4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12f59f48d8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12f59f495e ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12f59f4a3c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6166007265746c69 6620706d6f636365 732074657320746f 6e20646c756f6300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444300574051494c 430555484a464640 560551405605514a 4b054149504a4600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000cdd21 RBX=0000000000000003 RCX=ffffffff8b299bf9 RDX=0000000000000000 RSI=ffffffff8b6ce000 RDI=ffffffff8bd1e580 RBP=ffffed1003a50488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d282440 R14=ffffffff905f6a10 R15=0000000000000000 RIP=ffffffff8b29afdf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffeae475b88 CR3=0000000028516000 CR4=00352ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd09fff530 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28b33f48bd ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28b33f48ca ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28b33f48c4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28b33f48d8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28b33f495e ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28b33f4a3c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000