last executing test programs: 9.399238038s ago: executing program 1 (id=214): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000020c0)='tasks\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a000340110800450000380000000000019078ac1e0001ac141caa03049078120002282500000000000000002f00007f0000010000fb02000088beffff0000"], 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000000c0)=@l={0x92, 0xe, 0xd0, 0x10, 0x6, 0x26, 0x3}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000cc0)=0x400, 0x4) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @multicast}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x2c, 0x11, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x74, r7, {}, {0x3}, {0x8, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 9.279711233s ago: executing program 1 (id=220): syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@gettaction={0x124, 0x32, 0xff408d88728da95b, 0x70bd26, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x124}}, 0x8815) 9.218286752s ago: executing program 1 (id=223): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x80f0f007, 0x1}) 8.316480243s ago: executing program 1 (id=246): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r2, 0x0) r3 = getpgid(r2) setpgid(0x0, r3) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) syz_open_procfs$namespace(r4, &(0x7f0000000080)='ns/pid_for_children\x00') r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000680), 0x4400, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r5, 0x401870cc, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r6, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x118, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x106, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x1, 0x0, 0x0, @fd=r7}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x8, 0x3d, 0x0, 0x0, @u32}]}]}, 0x118}], 0x1}, 0x0) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r6], 0x1a0}, 0x1, 0x0, 0x0, 0xc084}, 0x0) 8.250498191s ago: executing program 1 (id=249): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601801e13d0801512f38004008f8004002b804ce04a0db85a6a74ea331e654e04004d80e5050ab39a0dee0674f4c8045b9deed6c1a3e7dc0ae33046922bb73e3064ccfeddf70c2a1380a557ecf40abbde0344fb740e6aabf5e0525e7a34420b60b70cc6c553d1f4cf8abd52ef8125a7", @ANYRESOCT=r0, @ANYRES32, @ANYBLOB="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"], 0x26c0}}, 0x4010) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='mm_collapse_huge_page\x00', r1, 0x0, 0x9}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 7.778762138s ago: executing program 1 (id=257): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002840)={0x80, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$bt_hci(r3, 0x0, 0x2, 0x0, &(0x7f0000000540)) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x68, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5cd4fdec, 0x44}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008040}, 0x8000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=r0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0xfdd6}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 7.692504209s ago: executing program 32 (id=257): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002840)={0x80, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$bt_hci(r3, 0x0, 0x2, 0x0, &(0x7f0000000540)) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x68, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5cd4fdec, 0x44}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008040}, 0x8000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=r0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0xfdd6}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.081189178s ago: executing program 4 (id=332): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000222803001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYRESDEC=r4], 0xe4}}, 0x0) 2.080616991s ago: executing program 4 (id=333): r0 = socket$caif_stream(0x25, 0x1, 0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000006380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c400) socket$caif_stream(0x25, 0x1, 0x3) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) sendmmsg(r0, &(0x7f0000006380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c400) (async) 1.970595325s ago: executing program 4 (id=334): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1ac}}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000002400)) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) unshare(0x6a040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="c65f928af5f49c8df74fe0fc7598ef731ed88a7107a75c13e417cab4b3655ae5da3df69f68ea99a5bd8db44294a581fef5d71a2e4126f0ff685aff92eb2442dc5dfd7f8ea5280371905dd4569f1a655aadac84b2d5780deb1581dd4e2bd9087c2554a11db804a2746fc9cf7f1301d09c6e383ca26fe573ec9b777295cf970aaf8a5b46566a0eb9b7524f109e84cf05d75ef3bc358a8bfa0ad1b145e3a9def4e3a7326b3b8d7024d0c26cad10dfd263e7593c5c459ddac9fa9d7f232c8f081f37e64bad", 0xc3}], 0x1) writev(r0, &(0x7f0000000180), 0x100000000000003c) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0xd, 0xc9, "c90dd09f59d054a3"}}}, 0xe) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x10000}}, './file0\x00'}) statx(r5, &(0x7f0000000200)='./file0\x00', 0x800, 0x800, &(0x7f00000002c0)) 1.680973232s ago: executing program 4 (id=336): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902"], 0x0) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580)) (async) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000001c0)={0x1, &(0x7f0000005700)=[{0x6, 0x0, 0x0, 0xfc}]}) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x38, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x69, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) (async) mount$9p_unix(0x0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x45021, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00)) sendmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="0281", 0x2}], 0x1}}], 0x1, 0x24005805) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r5, 0x5761, &(0x7f0000000040)={0x3, 0x0, [{0x7f, 0x80000000, 0x9, [0x0, 0x6, 0x4, 0x9, 0x4, 0x9, 0x2, 0x3]}, {0x6, 0x0, 0xffff8001, [0x2, 0x6, 0x8000, 0x4, 0x5, 0x7e3, 0x4, 0x1]}, {0x3ff, 0x7, 0x538, [0x3, 0x4, 0xffff0000, 0x8, 0x4, 0x240, 0x140000, 0x61]}]}) (async) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000200)=0x8001100) 1.678155332s ago: executing program 4 (id=337): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, {0x4000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRESHEX=r1], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0x4800) 1.620735641s ago: executing program 4 (id=338): r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc623, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x50, 0x4, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x2d8, 0x6, 0x1, {0x22, 0xcae}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x1, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x5, 0xe, 0x8}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x2, 0x1, 0x4, 0x20, 0x26}, 0x10c, &(0x7f0000000300)={0x5, 0xf, 0x10c, 0x4, [@generic={0xef, 0x10, 0x4, "b8d83fec7c7c62a8ab1e482beac938e860e8f64fc04c86622e2d079a6cf1127039f449d6eb8b3a3754c1731b2e23b04a6700593c6ee35ae255dbcef71435a799086638b16c75de8a54413f2900a5b2e71be4c3852517c7b28f7f18b7897bfe4fb98fda743e50d2660121eb313b2cc57c9ad1580861d95e8d4c87c85ea9d76b9ab171e59ad83dd7090fa48ce2444bfcbf6c4cf7f540959419d5f125c7429044731260bfe05022371e5767bf9aa7f5139987394566f659fc86790fb08d8092cbb0cec938a599837afda6baa72e07c7279b02e14f142c9e4f193905000000000000008244000a50b53687da9b19"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x5, 0xfad2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xb9, 0xf, 0xff}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x0, 0x1, 0x1c1}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x861}}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r3, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[], 0x54) r10 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) syz_usb_connect$printer(0x6, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x80, 0xf7, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x8c663746785b3337, 0x1, 0x0, 0x90}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x6, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000440)={0xffffffffffffff03, 0x6, 0x300, 0x3, 0x81, 0x6, 0x40, 0x20}, 0x19, &(0x7f0000000480)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "0e92c2d3095714a5ae6bbe5dd7c4ed39"}]}, 0x6, [{0xda, &(0x7f00000004c0)=@string={0xda, 0x3, "5a44f7c58a80ddca4890f8aa025399ff1051e54a70f08d90be7bd54f9e3a6c33d27bce19cd8aa57686c202929c86bf0a55f5215f229e443cabbb48634d6879e5b5f9d23ff77c58662dd24bd0ff10773bdb0647220f15e5d8863bcb9723392c5848fff04700347fea61e28270acbecb3b4725ad1cc07ded406b7bfa1a4ec4b9e4e48b1bba97893271392f1b67728e6f434f54ed7317cca3bf269c8a6af0cfdf7f73c8a3e410c1d6399a0cd3a89e975ba79add7d824281171ad5c597075d7f32a203ba9e67b7c01872bcd4b00806bbfd761a9a0ce527fc3bb2"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x827}}, {0xde, &(0x7f0000000640)=@string={0xde, 0x3, "cf8af1399a406f261d40ef70d2c78bce59fde8060023dbbd16c69a9dfa8a9c41880a50ae74003997a7cbc02333584864f901dd45db9071091ff6722db53c894f2bc7cd44ded0004ca86df4e0101aeae99922c172eca8f628ad5ce1f9ca9357d632f48eca43c1766c2e0983cd770e2416fc9c84769893f23881c1ef5017dd0c73891c1aab4fd87c72821143d74994ef3f7c65c770b60f6c72cf00493529cb2dbfc2807add46ea93026bb55def5b28f9561adf3442a1bf2cc5828a075fb6b618b99ed7b9ea91987ce764a0d0342d3e9b289205c680b3e044e804bc3646"}}, {0xd6, &(0x7f0000000740)=@string={0xd6, 0x3, "953374d171fccd667a212f9c61120e02a776e720481eb7f820bf2d01f342e388a233824144216d371d2226cacfa8fdbea4e965804b279de8143ba55c79858869c56baa6f0f94a438424c7bbbf5eb311b6b1403bd8d41090eeb6d1981babe0e173ef0dcf245e08395e66bcd2e74ccea41bfaf2698525ec12361b5406d8fba58f72be4947b43bc9bd7191b3fd18f8191ced707b5a44d1cba64f49304aa4157b40ea79fd70f98a4441dcb31dfdea79b8849d8ba551783abf8419cdece7cc01bb1410f014d2fc06462932e23e77a6676e80726cee257"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x408}}]}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 1.390759489s ago: executing program 0 (id=343): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xd755, 0x80c00) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x4b52, &(0x7f0000000000)) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000040)={0x7, 0x6204, 0x2}) close(0x3) 1.390383083s ago: executing program 0 (id=345): timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async, rerun: 64) r0 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x2, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x5, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newneigh={0x50, 0x1c, 0x403, 0x70bd2b, 0x25dfdbfe, {0x1c, 0x0, 0x0, r1, 0x40, 0x38, 0x2}, [@NDA_LLADDR={0xa}, @NDA_PROBES={0x8, 0x4, 0x100}, @NDA_PROTOCOL={0x5, 0xc, 0x2}, @NDA_PROTOCOL={0x5, 0xc, 0x5}, @NDA_VLAN={0x6, 0x5, 0x2}, @NDA_PROTOCOL={0x5, 0xc, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r3 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x19, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x5, 0x5, {0xff, 0x5}}]}, 0x90}}, 0x0) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async, rerun: 64) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) (rerun: 64) 1.191163349s ago: executing program 0 (id=349): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={[&(0x7f00000001c0)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x401c0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}}, 0x0) 1.141105852s ago: executing program 0 (id=351): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x24000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_cmd={0x14, 0xe, 0x6, 0x107, 0x5, 0x60, 0x8, 0xea, 0x8, 0x1, 0x6, 0xfff, 0x101, 0x4, 0x7, 0x10009895, [0x862]}}) r5 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000040)) 1.14048516s ago: executing program 2 (id=352): syz_open_dev$loop(&(0x7f0000000140), 0x4048000000000000, 0x10f282) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 1.13983284s ago: executing program 2 (id=353): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x4}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x8de13c6b70ae92c3, 0x41003, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8804}, 0x840) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x8de13c6b70ae92c3, 0x41003, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8804}, 0x840) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@local}, &(0x7f0000000040)=0xfffffffffffffff1) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@local}, &(0x7f0000000040)=0xfffffffffffffff1) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)="bb", 0x2000}], 0x1}}], 0x1, 0x4001c00) 991.168226ms ago: executing program 0 (id=354): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000a, 0x110, r3, 0x846e8000) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) setfsuid(0xffffffffffffffff) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x840) socket$inet6(0xa, 0x0, 0xd22b) 288.745107ms ago: executing program 3 (id=357): r0 = userfaultfd(0x80001) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x12}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x14}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x224}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 286.254027ms ago: executing program 2 (id=358): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x26) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x103bff, 0x111) r3 = syz_open_dev$dri(&(0x7f0000000080), 0xc6, 0x208000) flock(r3, 0x4) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x5, 0x4, r3, 0x0, 0x29, 0x0, 0x0, 0x1}]) r4 = syz_clone(0x8080080, 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_mark(r1, 0x40, 0x0, r2, &(0x7f00000000c0)='./file0\x00') ptrace(0x10, r4) ptrace$setregs(0x1a, r4, 0xc, &(0x7f0000000000)) 285.496417ms ago: executing program 3 (id=359): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) prctl$PR_PAC_RESET_KEYS(0x36, 0xb) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) (async) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000640)="000000001beaea7a9644ef158011", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) (async) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) (async) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000840)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000880)="6653e7c7d68c2386ff21623f09379c8dc81c6f3d5604c744732be14bb47729824ddc908f4d5927fdefc50036b714c8db5a35e98be8d4e566c645265330f9857a5e7f7a23396e1c6094b2df187195851937de3813818ef1f1a0b0f23a5f37b1fc2020d82ca13c3f987e879ed59c8c52aad8b8c15bd11b2fc5ee966c173097dc55b4ddd4f432c38e16c1654bc0c475304689654800"/161, 0xa1}, {&(0x7f0000000180)="702e99929c54bf764459f16fb8c46c5c58fce642452581b994fd88ce4e27da8e378ab2cf4988134451a0343f2e9792b1bb7421b0c6550a6bdc387867b0f04d7d0c8db6906d2dabc17bc6e0258141ec1b7a766915880756932ece42d9ec36991aae1ae74abad49ce893f8c2c91511cc026198b1a0aa84a1e2dc86", 0x7a}, {&(0x7f0000000200)="2599809ce29a31eb0a43fdfb478470297574ce83906ee517cfbae083bec0bfec5b640d0c57978679d49b3c89f8d714c170810f7b3abf86058165a9888ec377a0c54d330e069282325503871554e49ec9ec4cfac0be13977cd7bb925932a6c6e7db30b8a853907c68b22c595a876aa6bf5e081bcf7cc56ef678b4b5dad0f9e288c0438173bd5203ded9418c42179ce409b01329bd585bc3d3e758643bea1ee8ae59af229d70622f25", 0xa8}, {&(0x7f00000002c0)="001513cdaf772567a7abea9b91456939e6645ff28bc53c5234e9ffa14bbef01c40717414ac05b44e5c27370893c858c30fd219878becbb93c12e59eb56056f2b3c2b234e3e8f641c14a7c466ef26c8b2ff6739187a24151686a9778e42bcd3a5077a5e59d043b38a46413874ec5bb6b26017a3007e7fadedfd19fbc22d13f701fca6778ff09324d325002d2db9dc7674ffe6438036896868f18b1ac086c3e7ff99ea89d2b354a3e04511611ae8863dcb5da2776b9deb4f4ef966994121c1d3ce35d177b93527e56755361cadeba50831219ffa95880b127f4552caa1", 0xdc}, {&(0x7f00000003c0)="0edcd8c0bee3bf78584a4e1888ed69c21672a8dde10b5ce10dae37b6db3df621c7809c7fd0bfc7ca4500d683e3be16b8098cf2507204607346877fd88cd7d0dde7c08539fb7edd70140af645d1bd7a84deb2ad89a54e2d847f247cf6bad35c533e9c1c0042d14cf8491490a7719f11d7bf0329c5f97276181e9ba7c7760eee036a195234a767b00dd5d18ba75a3de44d27afde7fe20f491dc0bf18fdd1a5a2971d3279413d24426b9b2764672e83c983a725d03e8064c689aed2ed0d4ae80255c5096dc2af59", 0xc6}, {&(0x7f00000004c0)="00a32bc54528a5c3866bf432f74dd540c3e0434d252c833812e212a1e011bad3de674bb011dba2568df69163149a35f2beecbc958287e29129f8b4bc050a1a8eba04d8cf2364304e9da050618431f3865fdcd14addf0f1d86b5746a7ce5757a1cbc2cf33b2f9897af9276367acf08072999052ec95ea701290f7990fd10d7c42c24dedce058c86b8b8ba68c2bcc25fe3d15df923aafe07c6f54e92925562563c7cd7b98dbbb5b77a873ae9f02afc1ae784f2d697657ab3c0193c93a8e99b7fc54792620753583c517e", 0xc9}, {&(0x7f00000005c0)="2ded5f0abb8a49a5fcd469682053948e14fd6b1ce74f05646dfa5a2d0492c9c811feff5c56be52858939afe451f38cbef32a", 0x32}, {&(0x7f0000000600)="b2733a0eca08c571a7db2a7da719137378316e8119cdad3ee4c4c475aad71b81fb5430a9dbdee450b6e391218dffb7ecda2979c308dd9efc048581f7386d5af2ec197671f8fbe2786d78ea466e720c19d4c55f920a64c938267203b528113898c0f6bad11bbb4e7ae2c3e3921da650086504f1f485c8be4c71", 0x79}, {&(0x7f0000000680)="9257d5a9b53e3d929e1c91b18b8c211ae38cc1948cefec55cb9a629179794b81341aa932e9e6e68d6d157a6fd3309eef376f057433b2f784dc7c3716060ba9b7f4411abd08d695ad1d8440b26aaf98095de20745201f39d83140fdd6b8ada5109d016a00005b062081b31c16aaf8e2bc9421e713a12362b7ac96772d466315c15b138f04c75e645c493dd8a94a66", 0x8e}, {&(0x7f0000000740)="c64d8af0c1623d79e45af9180e8b385378a4", 0x12}], 0xa, 0x0, 0x0, 0x40800}, 0x40020c4) 211.217508ms ago: executing program 2 (id=360): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) (async) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) (async) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1b0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000140)=0x7ff, 0x4) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000000001010400000a000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000100005800a000100482e3234558c62e98a4093a6ec186d7887c78e4d94841a1750b80889e153a9546665d5ce4644c22f5d1bdb827066457439b6d9b3b5eed26373f65335ae16c7bef35428a77847c92ab2e175fe361d6a682203cf36a938b2d890fa6d4365ec31f6059ac04f2cf8de28882d9fe408ae306cc80ce0225c8b0c0e02d3d7be5f"], 0x48}}, 0x0) (async) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 210.059023ms ago: executing program 3 (id=361): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000f08000240000000000800044000000000080003400000000008000540000000080900010073797a30000000000900020073797a32"], 0x98}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xf4, 0x17}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000280)={0x1, [0x6]}, &(0x7f00000002c0)=0x6) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r8, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) ioctl$TCSETS(r9, 0x5402, &(0x7f0000000200)={0xfdfd, 0x10000003, 0x41ff, 0xa89, 0x10, "c187b3c1e5c979b0d066d45eb27803ea28bc0c"}) 140.655495ms ago: executing program 0 (id=362): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = getuid() mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1400, &(0x7f0000000080)={[{@uuid_null}, {@redirect_dir_nofollow}, {@verity_on}, {@verity_off}, {@xino_on}], [{@euid_gt}, {@appraise}, {@appraise}, {@dont_hash}, {@dont_appraise}, {@fowner_gt={'fowner>', r1}}, {@audit}, {@fsmagic={'fsmagic', 0x3d, 0x6e9}}]}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) faccessat2(r2, &(0x7f0000000180)='./file0\x00', 0x84, 0x100) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x200, 0x7, 0x5}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r3, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0xe, 0x0, 0xe, 0x1, 0x0, 0x8, 0xb}, 0x9c) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getresgid(&(0x7f0000002640), &(0x7f0000002680), &(0x7f00000026c0)=0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000002700)={0x0, 0x80000, 0xffffffffffffffff}) r8 = openat$cgroup_devices(r2, &(0x7f0000002740)='devices.deny\x00', 0x2, 0x0) r9 = getpgrp(0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000002780)=0x0) r11 = getegid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000027c0)={0x0, 0x0}) r13 = fcntl$getown(r2, 0x9) getresgid(&(0x7f0000002840)=0x0, &(0x7f0000002880), &(0x7f00000028c0)) sendmsg$netlink(r2, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000002340)={0x26c, 0x34, 0x420, 0x70bd2a, 0x25dfdbff, "", [@typed={0x8, 0xf6, 0x0, 0x0, @uid=r4}, @generic="ddb33a89dc505f0de41f68557fbf485008805aca135c910a2e811c5ababc66b561054f08389ac81f", @typed={0x14, 0x11b, 0x0, 0x0, @ipv6=@empty}, @nested={0x10, 0x6f, 0x0, 0x1, [@typed={0xc, 0x43, 0x0, 0x0, @u64=0xfffffffffffffffb}, @generic]}, @typed={0x4, 0xce}, @nested={0x156, 0xdb, 0x0, 0x1, [@generic="7190ce309eaaab4a76a71f7afa174f4a21158df90f91d09b9d039b46bc28de3c636e40015153f65cde24660aa97b2516afe41ebfbe41d5b7395b3a96ed715e89bf27cb6d07ba652eacc7a0925fe3bdf51a4e5f2695833619639000889683a2a95d877d9155f5cff0341d9a81b627d38b3c713edebe33bfa8d8f399174f0866e6ab0c53fa47f67a7de58a936377699e7488d708c2b08df8e1b028afc218f68288d85abe04d399afa97f1e9328f792ff876be1aa78409bc8d950ee9dd7a00913ed326c1e790e6a55b0433fb9a13aecf0786753988d62965d2d2d", @typed={0x8, 0x4c, 0x0, 0x0, @u32}, @generic="b00856389634f5be51adfe3cfcee15632a9e4a125bb4918b1ec862a80bcacdd3f9834b15b53aa6d3884c14a5ece40444ee86af0a3be367e8934ed3abd84ff2791a5e8ca4d7d4d378b0215ef2ab06ef6fceb6d038152733045fe3b69550e59047558ed4019f", @typed={0x8, 0xe7, 0x0, 0x0, @uid=r1}, @nested={0x4, 0x9d}]}, @generic="a3d33ddc27003385ef83685e9a566095c882e71c7777b2f008e28ee659d6ae7f5b713b2acf591121e117d8ea3ff35091b5f1f5103184229987261904d2a5850d0fe7451e5040b4f40d296a31c064b3b943ed715fec19c085343079aa6bb0754d4d07e196a99690ce326bdcb6a6b945354cb80fe2e98fdcb5d56d366b8d3e0716d6623b284b73aa51e46f50a740178ebfd1ad3f096a7e0b6f1ee605ff7361039ac3b89081d7fd03a11eb2b3"]}, 0x26c}, {&(0x7f00000025c0)={0x18, 0x12, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@nested={0x8, 0x130, 0x0, 0x1, [@nested={0x4, 0xc3}]}]}, 0x18}], 0x2, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r1, r5}}}, @rights={{0x1c, 0x1, 0x1, [r2, r6, r0]}}, @rights={{0x20, 0x1, 0x1, [r7, r8, r2, r2]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r1, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r13, r1, r14}}}], 0xd8, 0xc0}, 0x0) sendmmsg$inet6(r0, &(0x7f0000002d40)=[{{&(0x7f0000002a40)={0xa, 0x4e23, 0x2, @local, 0x8}, 0x1c, &(0x7f0000002b80)=[{&(0x7f0000002a80)="b80e5ffa82f7c7e19061c9e383750cb1594356513cf2dd9bcf999406a4cd05467b43a972ffba21e9d62e8458eda721e7190273df488e6b05d19b0f2a68c0e7a278893545b3c57ea1d2dbab937ed80fec9f2382235be9759faabb35f4ffa4bea64283d4030a9fa884e71b07d6b17ae0340816e0ef5d6c856aff559800f4b360e1035fda4bdd7a850462f790040b7305546305c6ea9fe1de3586f3cab91394974ccdc76b1460932591ead0babb6322f03604f65ee2d06e51b78d550b0b1e8649448f0f77f9dceae274b4abc7c6e7d1c164caf5", 0xd2}], 0x1, &(0x7f0000002bc0)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}, @hopopts_2292={{0xf8, 0x29, 0x36, {0x1d, 0x1b, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x1, [0x0]}, @generic={0x0, 0xb9, "c149e5aad7fd42a4f80643a5188872736296f1dacfe4c235ab433a8ce24639342ab6233f19150490465c5ba73eb77a0ca44166491507620381921fec774d360cebf63ae34c823165e37af6c70b5068516decfcef96f0c6b8535a7abbad08e808fb3c95f14361370408a3ab0a1215f09d918e7731ec20e51928a8040fbcbd9a425fed101f9b4bc96e7e3add8ba30e4eacb2c50183fb3ff5f12f59e79597e9c43d233eb0256602bdb5399c2a9cc422366292a215c1ed1b756cff"}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x99fa}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x1a, 0x1, '\x00', [@ra={0x5, 0x2, 0xff}, @ra={0x5, 0x2, 0xfff}]}}}, @tclass={{0x14, 0x29, 0x43, 0x8000}}], 0x148}}], 0x1, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) bind(r2, &(0x7f0000002d80)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80) ptrace(0x8, r12) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002fc0)={0x60, 0x0, &(0x7f0000002ec0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002e00)={@fda={0x66646185, 0x1, 0x0, 0x1a}, @fda={0x66646185, 0x3, 0x0, 0x34}, @flat=@weak_binder={0x77622a85, 0x100, 0x2}}, &(0x7f0000002e80)={0x0, 0x20, 0x40}}}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x1}], 0x64, 0x0, &(0x7f0000002f40)="460613927b9358da840b799ace760f94543d8bb940f3bb6fd12cc3402a689d4d0fded4a78a5ea72ad946e6d2b822da2039e59995f025151483d1144b095fafdcb0d288b90fdae13ea4443d4a33ca8441ce8f367151132aa7efc19b8964e74595ff96214e"}) write$binfmt_script(r2, &(0x7f0000003000)={'#! ', './file0', [{}, {0x20, 'fsmagic'}, {}, {0x20, 'redirect_dir=nofollow'}, {}], 0xa, "cf420d544b0a634e8fd61eab99c1d70a3fc34a0ccd2523967273fadae9e23840b00c555bdd66d94803b4e83c8b4edddbba94c79dd7afd9a27f4fb24b49fa291c9c8fbfa20d1a231efa70e8b08690545c52f5313fbbaa07f51975ee12c61e01bac1cd23bfc4b51537ecafee4b25e5863c4cb1fb19255e00092120c13e62a13259fef680cb2195399e2a5295c4e077d2d14b16c90320e3fb9044d37b7ff94715ea"}, 0xcc) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000003100)=0xffffffffffffffff, 0x4) write$P9_RATTACH(r2, &(0x7f0000003140)={0x14, 0x69, 0x1, {0x8, 0x2, 0x8}}, 0x14) fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000003180), &(0x7f00000031c0)='./file0\x00', 0x8, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000032c0)={r2, 0x58, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000003400)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003300)=@newpolicy={0xb8, 0x13, 0x20, 0x70bd2a, 0x25dfdbfe, {{@in6=@local, @in=@loopback, 0x4e21, 0x3ff, 0x4e22, 0x40, 0xa, 0x20, 0xa0, 0x3c, r15, r10}, {0xff, 0x2, 0x0, 0xd, 0x2, 0x7, 0x34, 0x922}, {0x49, 0x0, 0x747, 0xff}, 0x8, 0x0, 0x1, 0x0, 0x2, 0x93db825227b9f9c8}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x20008804) 140.284165ms ago: executing program 3 (id=363): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000040)="cb", 0xfffffdef) 90.796383ms ago: executing program 2 (id=364): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xcf, &(0x7f0000000000), 0x4) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x7a, 0x0, @void}}}}}}}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$inet6_int(r1, 0x29, 0xcf, &(0x7f0000000000), 0x4) (async) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) (async) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x7a, 0x0, @void}}}}}}}, 0x0) (async) 89.257733ms ago: executing program 2 (id=365): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) recvfrom(r1, 0x0, 0x0, 0x1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0xc0c0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x2, 0x24000840) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='cifs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f00000001c0)={0x4376ea830d45549b, 0x0, [0xffffffffffffffff, 0x8d, 0x20000006, 0x7fff, 0x8c45, 0x3, 0xfffffffffffffffc, 0x800000]}) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000000)={0x1, 0x0, [0x4, 0x7, 0x4, 0x2, 0x5, 0x7, 0x5, 0x5]}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@deltaction={0x134, 0x31, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x88, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x68a6}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff7}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'lo\x00', {'dummy0\x00'}}) r8 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r8, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r12, @ANYBLOB="2800508011f16f162471050000030800030000000000000000"], 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 628.881µs ago: executing program 3 (id=366): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='qgroup_meta_convert\x00', r1, 0x0, 0x3}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r2 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f00000003c0)=0x10, 0x800) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e20, @private=0xa010100}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000380)={'macvtap0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x4048000000000000, 0x10f282) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) sendmmsg$inet(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001040)="b1e348273274e43acaba71d6af2c1c55762088122de51b3c80d3fb8c4cd05ab9e60f5aac2acd46f3397ae4ee8952f821997482dc231fe1e821e0eaca948b3dcc1d025cdf52b55e7e71b5c544116b2645cf21ed83ecf09bffd55847583f72635bae16c5bffc9202ae6dc45c40ff9334f1576605cb26e70943ee0e2c628426a080507493bdf8968e96ed0ccd6c60488d61bd87143a1a60be22343aea5f7a42e97abbb7b6482bcd482fa09f30d624f92d42d1ca54e6120467fc3715102445b82be151502923a22c5c776b3b3e9eaaca5d8fd2db6f896e72a7f99adbb816150770c3069795e9f4ad59eddf8dc0308e443230ef71eb8bf195", 0xf6}, {&(0x7f0000001140)="ff510695176b65593a3773d2346416295f09728194ee105c04d99feffd5f73bb33039cc9e709e469a340d0e63c3c5db671e55700d218ef559b24c4e36a2ab4e70b0617808a9919b3f617481d2964d878760c58e5281495cb626942a1cfe3f9f3bdeaed72c4e53de7b0e2d9a57a47cfe52ad8945b906e908ef4fcbdd1a11f828447470d927ab2154574629701f57ce20856614150c3bdc6d72eebc016c08406f8c56797783530b70a281d0fe97850ef00c67bed33724e285f2e1c82d871d2932b64eb2d0efe785c537f34364a123a7ca9ed42e2719159b67dc88b7a1ab485276b493b2106f90a070de978", 0xea}, {&(0x7f0000001240)="8bde08059b54ea3c71ac973063d2975a62a49d56a640474ff0fea8648f3090d9efc09a96bfdceba1eba06762f68c4dabfa1392f10e96d622fa321af3cef34f291a8587fc5c0a016aca9c6dc81c22bc2d252034ad1c362f65c41f8c0c330b0ef9", 0x60}, {&(0x7f00000012c0)="33cb9d7f51aa2f0cb95e38d06bcce1e89659fbe7aa1fc57914899bb78609aeb465949a1a8e1a5c5e70c210bec1b6c7a3e0b62564b649559fe9a0278a179459fd6835d1608b9b4c8ac75185b6e2de9ec3f220f6cc8d90dbc8340e3e76753ef5bbbe0979039e7affd9f7ac09ff84772547471ebb6096cdfc3e24ed1814db1f3f5787a4ebc042f0d0c2584b5a1e5455288bd650c7091112aa2a11858311a94a723338b59b6a945bc88f222493", 0xab}, {&(0x7f0000001380)="f3641597d4b62d634d788ea0e0890244cd2ccb3a7492c1c9", 0x18}, {&(0x7f00000013c0)="34f8d527d6aabb059516823df0918599b9aa23664ed090b96033b1cd0d8a7d3c66f723b4613f127111722dd03303b111cf151a05adf4deab7b6296b491779725a190e6a211fe3a60b5ebb60469432d316d3482f640f108db90d6ba7bca52b3799816f9c4e1b7015d82237284009e40a84cfb1e6c398938b7f77da59ff0c4ad8491b5cc7b64037fb65bf9a44f42a1106eaf1bbb5714cf4a061ee0235b3d3176b00e", 0xa1}, {&(0x7f0000001480)="a6ab7b3de8dc62afbcd1518346545c4f20dc794bce275cf03be1bfb9345ea3879f9537657358354524f04c509a375e7fed17a08ac7d7ead916d29c4395af43389bd02ed19a4c65f1ac310d0b055f828694e19888e5fd155b7fd051ff7273b5662ffa3bc9b3d1e541fd3395b46e747f15198d2c96ee", 0x75}], 0x7, &(0x7f00000016c0)}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r5 = add_key$user(&(0x7f0000000340), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000240)="d04da4715d36c0a97bf3b23823035307c5dbe047f1603cc05c2c6594e98d66eb6d0244a9f90bee7efcc2486cbb5063a06ad8d2d021b4871f919f25c138985c31b22b30424c30b77edd7ea1f7b142e7b16e84bd0a7b117f131694fa26bb6d6fc4603eb2722ea9", 0x66, 0xfffffffffffffffe) keyctl$reject(0x13, r5, 0x5, 0x97, r4) 0s ago: executing program 3 (id=367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) write(r1, &(0x7f0000000980)="a9", 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) r2 = syz_io_uring_setup(0x40109, &(0x7f0000000240)={0x0, 0x114dc, 0x0, 0x5, 0x8b}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) r5 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10) sendto$inet6(r5, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r2, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) socket$pppl2tp(0x18, 0x1, 0x1) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6fc39b61702c6d706f6c3d696e7465726c656176652c00"]) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r8, &(0x7f0000000000)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31253733", 0x3f, 0x2) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r7, 0x0) 0s ago: executing program 2 (id=368): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, 0xfffffffffffffffd) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001f40), r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0xc0089364, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x10000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000a00)=0x1, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r7}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$tun(r8, &(0x7f0000000600)={@void, @val={0x0, 0x4, 0x401, 0x9, 0xf4a}, @mpls={[], @ipv6=@generic={0x9, 0x6, "8be56b", 0x0, 0x62, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x700, 0x7, 0x9, 0x2, {{0xd, 0x4, 0x0, 0x3, 0x34, 0x65, 0x0, 0x5, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x13, 0x5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty, @remote]}, @generic={0x83, 0xd, "d6f26336dadc8be5eccd63"}]}}}}}) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xc065836042331eb0}, 0xc, &(0x7f00000004c0)={&(0x7f0000000a40)=@delqdisc={0x198, 0x25, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff3, 0x10}, {0xfff0, 0xf}, {0x4, 0x6}}, [@q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfffc}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfff9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x39}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfffc}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5aa}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}]}}, @q_dsmark={{0xb}, {0x4c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xe}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x29}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc0}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x31}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x400}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x20f}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xa}, @TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x3a}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3ff}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xff}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x60008080}, 0x4010) recvfrom$packet(r8, &(0x7f00000001c0)=""/219, 0xdb, 0x10100, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00 \x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fddbdf250600000006000b0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0xc) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f00001859c0)={0x666666666666675, &(0x7f0000185780)}) kernel console output (not intermixed with test programs): [ 37.938766][ T40] audit: type=1400 audit(1753009203.674:59): avc: denied { write } for pid=5858 comm="sh" path="pipe:[4660]" dev="pipefs" ino=4660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 37.949129][ T40] audit: type=1400 audit(1753009203.674:60): avc: denied { rlimitinh } for pid=5858 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.959463][ T40] audit: type=1400 audit(1753009203.674:61): avc: denied { siginh } for pid=5858 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:15058' (ED25519) to the list of known hosts. [ 38.917623][ T40] audit: type=1400 audit(1753009204.674:62): avc: denied { name_bind } for pid=5865 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 38.940590][ T40] audit: type=1400 audit(1753009204.694:63): avc: denied { write } for pid=5866 comm="sh" path="pipe:[4675]" dev="pipefs" ino=4675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.958079][ T40] audit: type=1400 audit(1753009204.714:64): avc: denied { execute } for pid=5866 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 38.964966][ T40] audit: type=1400 audit(1753009204.714:65): avc: denied { execute_no_trans } for pid=5866 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.967048][ T40] audit: type=1400 audit(1753009206.724:66): avc: denied { mounton } for pid=5866 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 40.969365][ T5866] cgroup: Unknown subsys name 'net' [ 41.136688][ T5866] cgroup: Unknown subsys name 'cpuset' [ 41.141095][ T5866] cgroup: Unknown subsys name 'rlimit' [ 41.368769][ T5910] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.163675][ T5866] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.119411][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 45.119422][ T40] audit: type=1400 audit(1753009210.874:80): avc: denied { execmem } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.333834][ T40] audit: type=1400 audit(1753009211.084:81): avc: denied { create } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.342779][ T40] audit: type=1400 audit(1753009211.084:82): avc: denied { read write } for pid=5951 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.350839][ T40] audit: type=1400 audit(1753009211.084:83): avc: denied { open } for pid=5951 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.358031][ T40] audit: type=1400 audit(1753009211.094:84): avc: denied { ioctl } for pid=5951 comm="syz-executor" path="socket:[6359]" dev="sockfs" ino=6359 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.385322][ T5959] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.387098][ T5964] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.388585][ T5959] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.390665][ T5964] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.392653][ T5959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.395353][ T5964] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.397729][ T5959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.399731][ T5964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.401580][ T5965] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.401825][ T5959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.405415][ T5966] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.407563][ T5959] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.409853][ T40] audit: type=1400 audit(1753009211.154:85): avc: denied { read } for pid=5951 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.410901][ T5966] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.411525][ T5959] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.412811][ T5965] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.413569][ T40] audit: type=1400 audit(1753009211.154:86): avc: denied { open } for pid=5951 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.415383][ T5314] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.424317][ T5965] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.424764][ T40] audit: type=1400 audit(1753009211.154:87): avc: denied { mounton } for pid=5951 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.428707][ T5959] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.428902][ T5965] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.453166][ T5959] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.574503][ T40] audit: type=1400 audit(1753009211.334:88): avc: denied { module_request } for pid=5953 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.616192][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 45.749294][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 45.765570][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.768545][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.771157][ T5953] bridge_slave_0: entered allmulticast mode [ 45.776192][ T5953] bridge_slave_0: entered promiscuous mode [ 45.835555][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.839023][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.841564][ T5953] bridge_slave_1: entered allmulticast mode [ 45.845270][ T5953] bridge_slave_1: entered promiscuous mode [ 45.948869][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.965584][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.967900][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.970199][ T5951] bridge_slave_0: entered allmulticast mode [ 45.972790][ T5951] bridge_slave_0: entered promiscuous mode [ 45.977273][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.980518][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 45.991281][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.993775][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.996210][ T5951] bridge_slave_1: entered allmulticast mode [ 45.998828][ T5951] bridge_slave_1: entered promiscuous mode [ 46.067386][ T5953] team0: Port device team_slave_0 added [ 46.073270][ T5953] team0: Port device team_slave_1 added [ 46.093762][ T5960] chnl_net:caif_netlink_parms(): no params data found [ 46.115795][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.162319][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.213146][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.216467][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.228649][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.262212][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.265192][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.267570][ T5955] bridge_slave_0: entered allmulticast mode [ 46.270207][ T5955] bridge_slave_0: entered promiscuous mode [ 46.273327][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.275826][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.278975][ T5955] bridge_slave_1: entered allmulticast mode [ 46.283022][ T5955] bridge_slave_1: entered promiscuous mode [ 46.297073][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.299772][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.307900][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.314616][ T5951] team0: Port device team_slave_0 added [ 46.399891][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.402222][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.405222][ T5960] bridge_slave_0: entered allmulticast mode [ 46.407697][ T5960] bridge_slave_0: entered promiscuous mode [ 46.412163][ T5951] team0: Port device team_slave_1 added [ 46.429610][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.433031][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.436066][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.438330][ T5960] bridge_slave_1: entered allmulticast mode [ 46.441007][ T5960] bridge_slave_1: entered promiscuous mode [ 46.458148][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.460558][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.469207][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.475461][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.520548][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.523084][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.533269][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.597166][ T5953] hsr_slave_0: entered promiscuous mode [ 46.599515][ T5953] hsr_slave_1: entered promiscuous mode [ 46.603974][ T5955] team0: Port device team_slave_0 added [ 46.607249][ T5960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.612184][ T5960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.642060][ T5955] team0: Port device team_slave_1 added [ 46.748056][ T5951] hsr_slave_0: entered promiscuous mode [ 46.750981][ T5951] hsr_slave_1: entered promiscuous mode [ 46.753021][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.756536][ T5951] Cannot create hsr debugfs directory [ 46.760689][ T5960] team0: Port device team_slave_0 added [ 46.763400][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.765414][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.772360][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.779986][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.782238][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.789237][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.799608][ T5960] team0: Port device team_slave_1 added [ 46.932004][ T5955] hsr_slave_0: entered promiscuous mode [ 46.934513][ T5955] hsr_slave_1: entered promiscuous mode [ 46.936610][ T5955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.938769][ T5955] Cannot create hsr debugfs directory [ 46.940759][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.942977][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.952316][ T5960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.959249][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.961435][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.969402][ T5960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.101229][ T5960] hsr_slave_0: entered promiscuous mode [ 47.103668][ T5960] hsr_slave_1: entered promiscuous mode [ 47.106103][ T5960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.108639][ T5960] Cannot create hsr debugfs directory [ 47.250464][ T5953] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.258717][ T5953] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.266751][ T5953] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.275725][ T5953] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.298243][ T5951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.302984][ T5951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.307475][ T5951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.312746][ T5951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.351116][ T5955] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.355399][ T5955] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.360304][ T5955] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.370513][ T5955] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.415756][ T5960] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.419906][ T5960] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.429091][ T5960] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.433165][ T5960] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.434613][ T5959] Bluetooth: hci1: command tx timeout [ 47.435432][ T5963] Bluetooth: hci0: command tx timeout [ 47.469087][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.490801][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.497286][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.503776][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.506262][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.513948][ T5963] Bluetooth: hci3: command tx timeout [ 47.524199][ T5963] Bluetooth: hci2: command tx timeout [ 47.527705][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.530134][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.539046][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.542916][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.551628][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.553927][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.571611][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.573907][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.598578][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.606414][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.608658][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.617819][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.620065][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.632558][ T5951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.638571][ T40] audit: type=1400 audit(1753009213.394:89): avc: denied { sys_module } for pid=5953 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.643730][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.664772][ T5960] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.673048][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.675541][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.691744][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.694161][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.730423][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.766876][ T5953] veth0_vlan: entered promiscuous mode [ 47.771600][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.776663][ T5953] veth1_vlan: entered promiscuous mode [ 47.803595][ T5953] veth0_macvtap: entered promiscuous mode [ 47.808630][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.816828][ T5951] veth0_vlan: entered promiscuous mode [ 47.819187][ T5953] veth1_macvtap: entered promiscuous mode [ 47.836760][ T5951] veth1_vlan: entered promiscuous mode [ 47.851002][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.860972][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.867324][ T5953] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.870103][ T5953] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.872837][ T5953] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.876047][ T5953] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.885366][ T5960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.900048][ T5951] veth0_macvtap: entered promiscuous mode [ 47.903609][ T5955] veth0_vlan: entered promiscuous mode [ 47.909147][ T5951] veth1_macvtap: entered promiscuous mode [ 47.920960][ T5955] veth1_vlan: entered promiscuous mode [ 47.942582][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.952750][ T1191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.954296][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.956405][ T1191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.965340][ T5951] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.968080][ T5951] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.970823][ T5951] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.973652][ T5951] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.989813][ T5960] veth0_vlan: entered promiscuous mode [ 47.996286][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.996638][ T5955] veth0_macvtap: entered promiscuous mode [ 47.998776][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.002865][ T5960] veth1_vlan: entered promiscuous mode [ 48.010050][ T5955] veth1_macvtap: entered promiscuous mode [ 48.026428][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.045946][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.049008][ T5953] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.052201][ T5955] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.054766][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.057611][ T5955] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.060224][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.062864][ T5955] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.069648][ T5955] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.075932][ T5960] veth0_macvtap: entered promiscuous mode [ 48.087261][ T5960] veth1_macvtap: entered promiscuous mode [ 48.114986][ T6039] team0: entered allmulticast mode [ 48.116988][ T6039] team_slave_0: entered allmulticast mode [ 48.119232][ T6039] team_slave_1: entered allmulticast mode [ 48.131172][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.138411][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.149890][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.153001][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.153334][ T5960] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.158880][ T5960] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.161571][ T5960] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.164633][ T5960] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.166814][ T6041] use of bytesused == 0 is deprecated and will be removed in the future, [ 48.170347][ T6041] use the actual size instead. [ 48.198763][ T217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.201894][ T217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.219713][ T1191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.223024][ T1191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.247072][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.251051][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.277706][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.280719][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.296370][ T6044] trusted_key: encrypted_key: master key parameter 'up.type' is invalid [ 48.435273][ T6060] capability: warning: `syz.0.9' uses deprecated v2 capabilities in a way that may be insecure [ 48.440619][ T6058] netfs: Couldn't get user pages (rc=-14) [ 48.624958][ T6084] process 'syz.0.14' launched './file2' with NULL argv: empty string added [ 48.740070][ T5364] udevd[5364]: worker [5958] terminated by signal 33 (Unknown signal 33) [ 48.742925][ T5364] udevd[5364]: worker [5958] failed while handling '/devices/virtual/vc/vcs21' [ 48.746849][ T5364] udevd[5364]: worker [5969] terminated by signal 33 (Unknown signal 33) [ 48.749500][ T5364] udevd[5364]: worker [5969] failed while handling '/devices/virtual/vc/vcsu21' [ 48.753628][ T5364] udevd[5364]: worker [5961] terminated by signal 33 (Unknown signal 33) [ 48.756885][ T5364] udevd[5364]: worker [5961] failed while handling '/devices/virtual/vc/vcsa21' [ 48.842197][ T6098] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 48.842737][ T6100] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 48.893115][ T6103] loop6: detected capacity change from 0 to 524287999 [ 48.909385][ T6103] syzkaller0: entered promiscuous mode [ 48.911578][ T6103] syzkaller0: entered allmulticast mode [ 49.256748][ T6107] Zero length message leads to an empty skb [ 49.513983][ T5963] Bluetooth: hci1: command tx timeout [ 49.524031][ T53] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 49.524833][ T5963] Bluetooth: hci0: command tx timeout [ 49.594161][ T5963] Bluetooth: hci2: command tx timeout [ 49.595249][ T5959] Bluetooth: hci3: command tx timeout [ 49.647581][ T6116] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23'. [ 49.651027][ T6113] netlink: 'syz.2.23': attribute type 5 has an invalid length. [ 49.653983][ T6113] netlink: 'syz.2.23': attribute type 7 has an invalid length. [ 49.660737][ T6113] : entered promiscuous mode [ 49.673931][ T53] usb 6-1: Invalid ep0 maxpacket: 64 [ 49.803932][ T53] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 49.923824][ T6130] wireguard0: entered promiscuous mode [ 49.925893][ T6130] wireguard0: entered allmulticast mode [ 49.956408][ T53] usb 6-1: Invalid ep0 maxpacket: 64 [ 49.959041][ T53] usb usb6-port1: attempt power cycle [ 50.022969][ T6136] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 50.026423][ T6136] overlayfs: missing 'lowerdir' [ 50.060038][ T6139] netlink: 'syz.2.31': attribute type 23 has an invalid length. [ 50.314086][ T53] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 50.329313][ T40] kauditd_printk_skb: 93 callbacks suppressed [ 50.329323][ T40] audit: type=1400 audit(1753009216.084:183): avc: denied { create } for pid=6145 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.337775][ T53] usb 6-1: Invalid ep0 maxpacket: 64 [ 50.339458][ T40] audit: type=1400 audit(1753009216.094:184): avc: denied { ioctl } for pid=6145 comm="syz.2.34" path="socket:[7101]" dev="sockfs" ino=7101 ioctlcmd=0x891d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.349361][ T40] audit: type=1400 audit(1753009216.104:185): avc: denied { read } for pid=6145 comm="syz.2.34" path="socket:[8109]" dev="sockfs" ino=8109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.457591][ T6159] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 50.461071][ T6156] netlink: 36 bytes leftover after parsing attributes in process `syz.0.36'. [ 50.464082][ T53] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 50.484400][ T53] usb 6-1: Invalid ep0 maxpacket: 64 [ 50.486435][ T53] usb usb6-port1: unable to enumerate USB device [ 50.495999][ T40] audit: type=1400 audit(1753009216.254:186): avc: denied { setopt } for pid=6160 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.501901][ T6156] input: syz1 as /devices/virtual/input/input5 [ 50.502173][ T40] audit: type=1400 audit(1753009216.254:187): avc: denied { read write } for pid=6155 comm="syz.0.36" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.512009][ T40] audit: type=1400 audit(1753009216.254:188): avc: denied { open } for pid=6155 comm="syz.0.36" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.520703][ T40] audit: type=1400 audit(1753009216.254:189): avc: denied { ioctl } for pid=6155 comm="syz.0.36" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.529522][ T40] audit: type=1400 audit(1753009216.274:190): avc: denied { read } for pid=5349 comm="acpid" name="event4" dev="devtmpfs" ino=2846 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.537251][ T40] audit: type=1400 audit(1753009216.274:191): avc: denied { open } for pid=5349 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2846 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.545431][ T40] audit: type=1400 audit(1753009216.274:192): avc: denied { read } for pid=6155 comm="syz.0.36" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.563771][ T6166] Bluetooth: MGMT ver 1.23 [ 50.609380][ T6168] netlink: 36 bytes leftover after parsing attributes in process `syz.2.41'. [ 50.816435][ T6189] comedi comedi1: adq12b: a I/O base address must be specified [ 50.848776][ T6201] netlink: 'syz.2.48': attribute type 5 has an invalid length. [ 50.856433][ T6201] ip6erspan0: entered promiscuous mode [ 50.879451][ T6203] xt_l2tp: v2 tid > 0xffff: 150994944 [ 51.302424][ T6228] overlayfs: missing 'lowerdir' [ 51.338789][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'. [ 51.489348][ T6247] Unknown options in mask 5 [ 51.582875][ T6254] ======================================================= [ 51.582875][ T6254] WARNING: The mand mount option has been deprecated and [ 51.582875][ T6254] and is ignored by this kernel. Remove the mand [ 51.582875][ T6254] option from the mount to silence this warning. [ 51.582875][ T6254] ======================================================= [ 51.596389][ T5954] Bluetooth: hci0: command tx timeout [ 51.598293][ T5963] Bluetooth: hci1: command tx timeout [ 51.629722][ T6262] netlink: 20 bytes leftover after parsing attributes in process `syz.2.69'. [ 51.639496][ T6264] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.672550][ T6270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.674147][ T5963] Bluetooth: hci3: command tx timeout [ 51.675826][ T5954] Bluetooth: hci2: command tx timeout [ 51.678630][ T6270] batadv_slave_0: entered promiscuous mode [ 51.680796][ T6270] batadv_slave_0: entered allmulticast mode [ 51.758441][ T6282] netlink: 'syz.3.76': attribute type 6 has an invalid length. [ 51.760915][ T6282] netlink: 36 bytes leftover after parsing attributes in process `syz.3.76'. [ 51.767456][ T6282] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.770492][ T6282] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.804573][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'. [ 51.878010][ T10] Process accounting resumed [ 51.880588][ T6292] Process accounting resumed [ 52.143900][ T5968] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 52.293878][ T5968] usb 8-1: Using ep0 maxpacket: 8 [ 52.297891][ T5968] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 52.300306][ T5968] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 52.304122][ T5968] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 52.307803][ T5968] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 52.311674][ T5968] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 52.319236][ T5968] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 52.321654][ T5968] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 52.324789][ T6296] netlink: 'syz.1.82': attribute type 4 has an invalid length. [ 52.326424][ T5968] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 52.331557][ T5968] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 52.336023][ T5968] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 52.339965][ T5968] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 52.339987][ T5968] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 52.340001][ T5968] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 52.340014][ T5968] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 52.340027][ T5968] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 52.342219][ T5968] usb 8-1: string descriptor 0 read error: -22 [ 52.361987][ T5968] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 52.362002][ T5968] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.370769][ T5968] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 52.401319][ T6296] netlink: 'syz.1.82': attribute type 1 has an invalid length. [ 52.536731][ T6309] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.86'. [ 52.549249][ T6309] bridge_slave_0: left allmulticast mode [ 52.552075][ T6309] bridge_slave_0: left promiscuous mode [ 52.556778][ T6309] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.561683][ T6309] bridge_slave_1: left allmulticast mode [ 52.563641][ T6309] bridge_slave_1: left promiscuous mode [ 52.566939][ T6309] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.572159][ T6309] bond0: (slave bond_slave_0): Releasing backup interface [ 52.578220][ T6309] bond0: (slave bond_slave_1): Releasing backup interface [ 52.587943][ T6309] team0: Port device team_slave_0 removed [ 52.593067][ T6309] team0: Port device team_slave_1 removed [ 52.596746][ T6309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.599157][ T6309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.603082][ T6309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.606113][ T6309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.626193][ T6312] 9pnet: Unknown protocol version 9p2000.u Æíyf T}¿‹Izð [ 52.644540][ T5959] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 52.680224][ T6311] netlink: 'syz.1.86': attribute type 10 has an invalid length. [ 52.686820][ T6311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.690015][ T6311] team0: Port device bond0 added [ 52.694259][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 52.742357][ T6309] team0 (unregistering): Port device bond0 removed [ 52.808254][ T61] usb 8-1: USB disconnect, device number 2 [ 53.142461][ T6333] syz.1.91 uses obsolete (PF_INET,SOCK_PACKET) [ 53.338165][ T6340] netlink: 164 bytes leftover after parsing attributes in process `syz.1.94'. [ 53.376268][ T6344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48656 sclass=netlink_route_socket pid=6344 comm=syz.2.96 [ 53.415601][ T6346] netlink: 'syz.1.97': attribute type 11 has an invalid length. [ 53.429307][ T217] Bluetooth: Error in BCSP hdr checksum [ 53.573913][ T61] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 53.675107][ T5954] Bluetooth: hci1: command tx timeout [ 53.675135][ T5963] Bluetooth: hci0: command 0x0419 tx timeout [ 53.723917][ T61] usb 8-1: Using ep0 maxpacket: 8 [ 53.727078][ T61] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 53.729704][ T61] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 53.732921][ T61] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 53.736147][ T61] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 53.739180][ T61] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 53.744041][ T61] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 53.747093][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.754492][ T5963] Bluetooth: hci3: command tx timeout [ 53.954336][ T61] usb 8-1: GET_CAPABILITIES returned 0 [ 53.956331][ T61] usbtmc 8-1:16.0: can't read capabilities [ 54.211598][ T6352] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 54.227631][ T5954] Bluetooth: hci5: sending frame failed (-49) [ 54.229933][ T5963] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 54.562911][ T6376] bad cache= option: none [ 54.562911][ T6376] [ 54.565531][ T6376] CIFS: VFS: bad cache= option: none [ 54.823854][ T61] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 54.985568][ T61] usb 5-1: config 0 has no interfaces? [ 54.987661][ T61] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 54.990845][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.996613][ T61] usb 5-1: config 0 descriptor?? [ 55.202150][ T61] usb 5-1: USB disconnect, device number 2 [ 55.433983][ T5963] Bluetooth: hci4: command 0x1003 tx timeout [ 55.436875][ T5959] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 55.755062][ T5959] Bluetooth: hci0: command 0x0419 tx timeout [ 55.793536][ T6383] __nla_validate_parse: 2 callbacks suppressed [ 55.793551][ T6383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.103'. [ 55.800172][ T6383] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 56.005876][ T6398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'. [ 56.021723][ T6398] bridge1: port 1(ip6gretap1) entered blocking state [ 56.024830][ T6398] bridge1: port 1(ip6gretap1) entered disabled state [ 56.027027][ T6398] ip6gretap1: entered allmulticast mode [ 56.029505][ T6398] ip6gretap1: entered promiscuous mode [ 56.049684][ T6398] veth3: entered promiscuous mode [ 56.059244][ T6395] overlayfs: missing 'lowerdir' [ 56.080949][ T40] kauditd_printk_skb: 77 callbacks suppressed [ 56.080959][ T40] audit: type=1400 audit(1753009221.834:270): avc: denied { connect } for pid=6403 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.105834][ T40] audit: type=1400 audit(1753009221.864:271): avc: denied { mounton } for pid=6410 comm="syz.0.112" path="/proc/118/cgroup" dev="proc" ino=9118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 56.107327][ T6411] nsfs: Unknown parameter 'trans' [ 56.112738][ T40] audit: type=1400 audit(1753009221.864:272): avc: denied { mounton } for pid=6410 comm="syz.0.112" path="/proc/118/cgroup" dev="nsfs" ino=4026533320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.122152][ T40] audit: type=1400 audit(1753009221.864:273): avc: denied { remount } for pid=6410 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 56.146670][ T40] audit: type=1400 audit(1753009221.904:274): avc: denied { ioctl } for pid=6414 comm="syz.1.114" path="socket:[9123]" dev="sockfs" ino=9123 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.150993][ T6417] overlayfs: failed to resolve './bus': -2 [ 56.162651][ T40] audit: type=1400 audit(1753009221.914:275): avc: denied { write } for pid=6416 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 56.171580][ T40] audit: type=1400 audit(1753009221.934:276): avc: denied { remount } for pid=6416 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.270701][ T6424] netlink: 20 bytes leftover after parsing attributes in process `syz.0.117'. [ 56.298907][ T40] audit: type=1400 audit(1753009222.054:277): avc: denied { bind } for pid=6425 comm="syz.0.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.304898][ T40] audit: type=1400 audit(1753009222.054:278): avc: denied { write } for pid=6425 comm="syz.0.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.335332][ T6342] overlayfs: statfs failed on './file0' [ 56.351181][ T5968] usb 8-1: USB disconnect, device number 3 [ 56.372673][ T40] audit: type=1400 audit(1753009222.124:279): avc: denied { setopt } for pid=6432 comm="syz.0.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.390921][ T6440] PKCS8: Unsupported PKCS#8 version [ 56.413412][ T6442] program syz.0.123 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.416878][ T6442] ata1.00: invalid transfer count 0 [ 56.460563][ T6449] binder: BINDER_SET_CONTEXT_MGR already set [ 56.462535][ T6449] binder: 6447:6449 ioctl 4018620d 2000000000c0 returned -16 [ 56.466057][ T6449] binder: BINDER_SET_CONTEXT_MGR already set [ 56.468965][ T6449] binder: 6447:6449 ioctl 4018620d 2000000000c0 returned -16 [ 56.472092][ T6450] binder: BINDER_SET_CONTEXT_MGR already set [ 56.474856][ T6450] binder: 6447:6450 ioctl 4018620d 200000000040 returned -16 [ 56.476170][ T6449] binder: BINDER_SET_CONTEXT_MGR already set [ 56.479755][ T6449] binder: 6447:6449 ioctl 4018620d 2000000000c0 returned -16 [ 56.480672][ T6450] binder: 6447:6450 ioctl c0306201 2000000003c0 returned -22 [ 56.584195][ T6460] netlink: 68 bytes leftover after parsing attributes in process `syz.2.128'. [ 56.588121][ T6460] netlink: 156 bytes leftover after parsing attributes in process `syz.2.128'. [ 56.702467][ T6470] nfs: Unknown parameter '\&' [ 57.015308][ T6477] tmpfs: Cannot change global quota limit on remount [ 57.184804][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 57.188305][ T6485] dlm: non-version read from control device 0 [ 57.294885][ T6496] comedi comedi4: comedi_config --init_data is deprecated [ 57.396711][ T6506] xt_ecn: cannot match TCP bits for non-tcp packets [ 57.610996][ T6530] netlink: 20 bytes leftover after parsing attributes in process `syz.3.147'. [ 57.725354][ T6535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.149'. [ 57.771148][ T6538] openvswitch: netlink: Multiple metadata blocks provided [ 58.073933][ T1473] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 58.166705][ T6543] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 58.226178][ T1473] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 58.228970][ T1473] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 58.232172][ T1473] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 58.235340][ T1473] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 58.238753][ T1473] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 58.243344][ T1473] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 58.246440][ T1473] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 58.248926][ T1473] usb 8-1: Product: syz [ 58.250411][ T1473] usb 8-1: Manufacturer: syz [ 58.254439][ T1473] cdc_wdm 8-1:1.0: skipping garbage [ 58.256195][ T1473] cdc_wdm 8-1:1.0: skipping garbage [ 58.259489][ T1473] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 58.261448][ T1473] cdc_wdm 8-1:1.0: Unknown control protocol [ 58.455535][ T10] usb 8-1: USB disconnect, device number 4 [ 58.489900][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.154'. [ 59.272045][ T6574] vxfs: WRONG superblock magic 00000000 at 1 [ 59.274365][ T6574] vxfs: WRONG superblock magic 00000000 at 8 [ 59.276211][ T6574] vxfs: can't find superblock. [ 59.654719][ T6586] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 60.142792][ T6594] netlink: 'syz.0.165': attribute type 4 has an invalid length. [ 60.594523][ T6617] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 60.814007][ T6021] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 60.953992][ T6021] usb 8-1: device descriptor read/64, error -71 [ 61.019979][ T6623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 61.030203][ T6623] netlink: 36 bytes leftover after parsing attributes in process `syz.0.171'. [ 61.100359][ T6624] netlink: 16 bytes leftover after parsing attributes in process `syz.0.171'. [ 61.203971][ T6021] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 61.278204][ T6627] fuse: Unknown parameter 'rootmod(Q¤#ŽîF´œ3ŠWže' [ 61.288739][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 61.288752][ T40] audit: type=1400 audit(1753009227.044:323): avc: denied { ioctl } for pid=6626 comm="syz.0.172" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.335579][ T6021] usb 8-1: device descriptor read/64, error -71 [ 61.339467][ T6631] netlink: 72 bytes leftover after parsing attributes in process `syz.0.174'. [ 61.344644][ T6632] netlink: 72 bytes leftover after parsing attributes in process `syz.0.174'. [ 61.444193][ T6021] usb usb8-port1: attempt power cycle [ 61.784034][ T6021] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 61.805398][ T6021] usb 8-1: device descriptor read/8, error -71 [ 61.977976][ T6652] netlink: 28 bytes leftover after parsing attributes in process `syz.1.180'. [ 61.982041][ T6652] netlink: 16 bytes leftover after parsing attributes in process `syz.1.180'. [ 62.036227][ T6654] IPVS: Scheduler module ip_vs_sip not found [ 62.054090][ T6021] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 62.074330][ T6021] usb 8-1: device descriptor read/8, error -71 [ 62.144579][ T40] audit: type=1400 audit(1753009227.904:324): avc: denied { bind } for pid=6661 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.153486][ T40] audit: type=1400 audit(1753009227.904:325): avc: denied { node_bind } for pid=6661 comm="syz.1.184" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 62.163916][ T40] audit: type=1400 audit(1753009227.904:326): avc: denied { connect } for pid=6661 comm="syz.1.184" laddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.171170][ T40] audit: type=1400 audit(1753009227.904:327): avc: denied { write } for pid=6661 comm="syz.1.184" laddr=172.20.20.187 faddr=172.20.20.35 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.186232][ T6021] usb usb8-port1: unable to enumerate USB device [ 62.186598][ T40] audit: type=1400 audit(1753009227.944:328): avc: denied { ioctl } for pid=6607 comm="syz.3.169" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.197808][ T6663] netlink: 'syz.1.184': attribute type 2 has an invalid length. [ 62.200776][ T6663] netlink: 'syz.1.184': attribute type 1 has an invalid length. [ 62.204323][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 62.296758][ T40] audit: type=1400 audit(1753009228.054:329): avc: denied { read } for pid=6666 comm="syz.0.186" name="qat_adf_ctl" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.297521][ T6667] QAT: Invalid ioctl 1342215183 [ 62.304069][ T40] audit: type=1400 audit(1753009228.054:330): avc: denied { open } for pid=6666 comm="syz.0.186" path="/dev/qat_adf_ctl" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.870771][ T6689] netlink: 20 bytes leftover after parsing attributes in process `syz.1.190'. [ 62.875060][ T6688] syz.1.190: vmalloc error: size 3429728256, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 62.881554][ T6688] CPU: 2 UID: 0 PID: 6688 Comm: syz.1.190 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 62.881579][ T6688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.881590][ T6688] Call Trace: [ 62.881597][ T6688] [ 62.881605][ T6688] dump_stack_lvl+0x16c/0x1f0 [ 62.881703][ T6688] warn_alloc+0x248/0x3a0 [ 62.881732][ T6688] ? __pfx_warn_alloc+0x10/0x10 [ 62.881756][ T6688] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 62.881782][ T6688] ? stack_depot_save_flags+0x3e0/0xa40 [ 62.881825][ T6688] ? kasan_save_stack+0x42/0x60 [ 62.881851][ T6688] ? kasan_save_stack+0x33/0x60 [ 62.881873][ T6688] ? kasan_save_track+0x14/0x30 [ 62.881897][ T6688] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 62.881919][ T6688] ? __vb2_queue_alloc+0x8c9/0x1280 [ 62.881937][ T6688] ? vb2_core_create_bufs+0x559/0xab0 [ 62.881959][ T6688] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 62.881982][ T6688] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 62.882021][ T6688] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 62.882050][ T6688] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 62.882083][ T6688] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 62.882104][ T6688] vmalloc_user_noprof+0x9e/0xe0 [ 62.882127][ T6688] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 62.882149][ T6688] vb2_vmalloc_alloc+0x135/0x3f0 [ 62.882172][ T6688] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 62.882194][ T6688] __vb2_queue_alloc+0x8c9/0x1280 [ 62.882228][ T6688] vb2_core_create_bufs+0x559/0xab0 [ 62.882254][ T6688] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 62.882291][ T6688] vb2_create_bufs+0x5e8/0x840 [ 62.882317][ T6688] ? __pfx_vb2_create_bufs+0x10/0x10 [ 62.882339][ T6688] ? v4l_sanitize_colorspace+0x213/0x400 [ 62.882376][ T6688] vb2_ioctl_create_bufs+0x244/0x3e0 [ 62.882397][ T6688] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 62.882423][ T6688] vidioc_create_bufs+0x7d/0xf0 [ 62.882445][ T6688] v4l_create_bufs+0x156/0x270 [ 62.882474][ T6688] __video_do_ioctl+0xb3d/0xfc0 [ 62.882507][ T6688] ? __might_fault+0xe3/0x190 [ 62.882534][ T6688] ? __pfx___video_do_ioctl+0x10/0x10 [ 62.882574][ T6688] video_usercopy+0x4cd/0x1720 [ 62.882593][ T6688] ? __pfx___video_do_ioctl+0x10/0x10 [ 62.882620][ T6688] ? selinux_kernel_read_file+0x70/0x130 [ 62.882640][ T6688] ? __pfx_video_usercopy+0x10/0x10 [ 62.882677][ T6688] v4l2_ioctl+0x1bd/0x250 [ 62.882704][ T6688] ? __pfx_v4l2_ioctl+0x10/0x10 [ 62.882734][ T6688] __x64_sys_ioctl+0x18e/0x210 [ 62.882762][ T6688] do_syscall_64+0xcd/0x4c0 [ 62.882784][ T6688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.882804][ T6688] RIP: 0033:0x7fc03c18e9a9 [ 62.882821][ T6688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.882839][ T6688] RSP: 002b:00007fc03d0d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.882858][ T6688] RAX: ffffffffffffffda RBX: 00007fc03c3b5fa0 RCX: 00007fc03c18e9a9 [ 62.882871][ T6688] RDX: 0000200000000280 RSI: 00000000c100565c RDI: 0000000000000006 [ 62.882882][ T6688] RBP: 00007fc03c210d69 R08: 0000000000000000 R09: 0000000000000000 [ 62.882893][ T6688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.882904][ T6688] R13: 0000000000000000 R14: 00007fc03c3b5fa0 R15: 00007ffe09238b48 [ 62.882930][ T6688] [ 62.882937][ T6688] Mem-Info: [ 63.019784][ T6688] active_anon:7614 inactive_anon:0 isolated_anon:27 [ 63.019784][ T6688] active_file:5060 inactive_file:47142 isolated_file:0 [ 63.019784][ T6688] unevictable:1768 dirty:1581 writeback:0 [ 63.019784][ T6688] slab_reclaimable:11800 slab_unreclaimable:68395 [ 63.019784][ T6688] mapped:24903 shmem:4107 pagetables:1086 [ 63.019784][ T6688] sec_pagetables:295 bounce:0 [ 63.019784][ T6688] kernel_misc_reclaimable:0 [ 63.019784][ T6688] free:461749 free_pcp:16278 free_cma:0 [ 63.037026][ T6688] Node 0 active_anon:30456kB inactive_anon:0kB active_file:20240kB inactive_file:188360kB unevictable:3536kB isolated(anon):108kB isolated(file):0kB mapped:99612kB dirty:6324kB writeback:0kB shmem:12892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:12752kB pagetables:4128kB sec_pagetables:1180kB all_unreclaimable? no Balloon:0kB [ 63.048711][ T6688] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 63.060313][ T6688] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 63.070260][ T6688] lowmem_reserve[]: 0 1234 1234 1234 1234 [ 63.072393][ T6688] Node 0 DMA32 free:224832kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30480kB inactive_anon:0kB active_file:20240kB inactive_file:188360kB unevictable:3536kB writepending:6324kB present:2080628kB managed:1264296kB mlocked:0kB bounce:0kB free_pcp:51568kB local_pcp:13020kB free_cma:0kB [ 63.083818][ T6688] lowmem_reserve[]: 0 0 0 0 0 [ 63.085297][ T6688] Node 1 Normal free:1606564kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:13384kB local_pcp:2380kB free_cma:0kB [ 63.095322][ T6688] lowmem_reserve[]: 0 0 0 0 0 [ 63.097586][ T6688] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 63.102037][ T6688] Node 0 DMA32: 116*4kB (UME) 775*8kB (UME) 646*16kB (UME) 300*32kB (UME) 214*64kB (UM) 21*128kB (UME) 14*256kB (UM) 6*512kB (UME) 3*1024kB (UM) 8*2048kB (UM) 38*4096kB (UM) = 224744kB [ 63.107922][ T6688] Node 1 Normal: 5*4kB (UE) 10*8kB (UE) 12*16kB (UME) 18*32kB (UE) 17*64kB (UME) 8*128kB (UME) 2*256kB (UE) 3*512kB (M) 0*1024kB 2*2048kB (UM) 390*4096kB (ME) = 1606564kB [ 63.114098][ T6688] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 63.117117][ T6688] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 63.120121][ T6688] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 63.123097][ T6688] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 63.126184][ T6688] 56305 total pagecache pages [ 63.127665][ T6688] 0 pages in swap cache [ 63.128993][ T6688] Free swap = 124996kB [ 63.130378][ T6688] Total swap = 124996kB [ 63.131926][ T6688] 1048443 pages RAM [ 63.133463][ T6688] 0 pages HighMem/MovableOnly [ 63.135680][ T6688] 283040 pages reserved [ 63.137322][ T6688] 0 pages cma reserved [ 63.232624][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 63.238134][ T6698] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.241090][ T6698] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.307525][ T6705] capability: warning: `syz.1.196' uses 32-bit capabilities (legacy support in use) [ 63.336620][ T6709] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 63.396823][ T6711] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 63.468522][ T40] audit: type=1400 audit(1753009229.224:331): avc: denied { write } for pid=6715 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 63.502987][ T6722] kvm: user requested TSC rate below hardware speed [ 63.506199][ T6722] kvm: user requested TSC rate below hardware speed [ 63.509098][ T6722] kvm: user requested TSC rate below hardware speed [ 63.512332][ T6722] kvm: user requested TSC rate below hardware speed [ 63.516775][ T6718] xt_CT: No such helper "syz0" [ 63.517133][ T6722] kvm: user requested TSC rate below hardware speed [ 63.521577][ T6722] kvm: user requested TSC rate below hardware speed [ 63.523745][ T6722] kvm: user requested TSC rate below hardware speed [ 63.526532][ T6722] kvm: user requested TSC rate below hardware speed [ 63.529619][ T6722] kvm: user requested TSC rate below hardware speed [ 63.532957][ T6722] kvm: user requested TSC rate below hardware speed [ 63.583151][ T6729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 63.588202][ T40] audit: type=1400 audit(1753009229.344:332): avc: denied { bind } for pid=6728 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.649400][ T6733] netlink: 'syz.3.203': attribute type 14 has an invalid length. [ 63.870032][ T6749] fuse: blksize only supported for fuseblk [ 64.157568][ T6760] syz.3.212 (6760): drop_caches: 2 [ 64.178788][ T6770] batadv_slave_1: entered promiscuous mode [ 64.191138][ T6778] netlink: 16 bytes leftover after parsing attributes in process `syz.3.216'. [ 64.222475][ T6768] batadv_slave_1: left promiscuous mode [ 64.293599][ T6798] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 64.334902][ T6803] tmpfs: Unknown parameter 'E' [ 64.362378][ T6810] program syz.3.228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.509481][ T6808] mmap: syz.0.227 (6808) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 64.753978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 64.957947][ T6864] binder: 6863:6864 ioctl c018620c 200000000300 returned -1 [ 65.203563][ T6880] ntfs3(sr0): Primary boot signature is not NTFS. [ 65.210216][ T6880] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 65.228279][ T6879] netlink: 'syz.1.246': attribute type 11 has an invalid length. [ 65.465057][ T6896] overlayfs: missing 'lowerdir' [ 65.477407][ T6901] ptrace attach of "/syz-executor exec"[5960] was attempted by ""[6901] [ 65.515004][ T6903] mkiss: ax0: crc mode is auto. [ 65.536473][ T6903] hpfs: hpfs_map_sector(): read error [ 65.804341][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.925470][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.964911][ T5963] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.969101][ T5963] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.973319][ T5963] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.982108][ T5963] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.990336][ T5963] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.011195][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.094197][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.124422][ T6939] mkiss: ax0: crc mode is auto. [ 66.149481][ T6925] chnl_net:caif_netlink_parms(): no params data found [ 66.243936][ T24] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 66.252383][ T6925] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.254977][ T6925] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.257407][ T6925] bridge_slave_0: entered allmulticast mode [ 66.260146][ T6925] bridge_slave_0: entered promiscuous mode [ 66.270609][ T6925] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.273212][ T6925] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.276249][ T6925] bridge_slave_1: entered allmulticast mode [ 66.279121][ T6925] bridge_slave_1: entered promiscuous mode [ 66.403899][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 66.406781][ T24] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 66.409324][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 66.412677][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 66.417338][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 66.420539][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.426192][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 66.429060][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.481176][ T46] bond0 (unregistering): Released all slaves [ 66.489402][ T46] bond1 (unregistering): Released all slaves [ 66.525685][ T6925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.530651][ T6925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.563946][ T6951] __nla_validate_parse: 7 callbacks suppressed [ 66.563956][ T6951] netlink: 32 bytes leftover after parsing attributes in process `syz.2.267'. [ 66.584752][ T6925] team0: Port device team_slave_0 added [ 66.591693][ T6925] team0: Port device team_slave_1 added [ 66.637184][ T24] usb 8-1: usb_control_msg returned -32 [ 66.639062][ T24] usbtmc 8-1:16.0: can't read capabilities [ 66.648809][ T6925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.651555][ T6925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.662970][ T6925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.669327][ T6925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.672368][ T6925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.680295][ T6925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.744117][ T6925] hsr_slave_0: entered promiscuous mode [ 66.746930][ T6925] hsr_slave_1: entered promiscuous mode [ 66.749015][ T6925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.751463][ T6925] Cannot create hsr debugfs directory [ 66.811435][ T46] hsr_slave_0: left promiscuous mode [ 66.813740][ T46] hsr_slave_1: left promiscuous mode [ 66.827701][ T46] veth1_macvtap: left promiscuous mode [ 66.830002][ T46] veth0_macvtap: left promiscuous mode [ 66.831927][ T46] veth1_vlan: left promiscuous mode [ 66.833604][ T46] veth0_vlan: left promiscuous mode [ 67.062615][ T6019] usb 8-1: USB disconnect, device number 9 [ 67.141256][ T6959] Bluetooth: MGMT ver 1.23 [ 67.344413][ T59] Bluetooth: Error in BCSP hdr checksum [ 67.606692][ T59] Bluetooth: Error in BCSP hdr checksum [ 67.712994][ T6957] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.716984][ T6957] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.720641][ T6957] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.724611][ T6957] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.729588][ T6957] vxlan0: entered promiscuous mode [ 67.731796][ T6957] vxlan0: entered allmulticast mode [ 67.751479][ T6959] bond1: entered promiscuous mode [ 67.754072][ T6959] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.841639][ T6925] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.847464][ T6925] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.852029][ T6925] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.857005][ T6925] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.905691][ T6925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.923403][ T6925] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.931546][ T217] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.934224][ T217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.940162][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.942443][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.071531][ T6925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.074145][ T5963] Bluetooth: hci0: command tx timeout [ 68.230268][ T6925] veth0_vlan: entered promiscuous mode [ 68.235788][ T6925] veth1_vlan: entered promiscuous mode [ 68.251914][ T6925] veth0_macvtap: entered promiscuous mode [ 68.259421][ T6925] veth1_macvtap: entered promiscuous mode [ 68.269334][ T6925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.276464][ T6925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.282270][ T6925] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.285199][ T6925] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.287996][ T6925] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.290931][ T6925] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.328895][ T217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.332198][ T217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.344982][ T217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.347643][ T217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.355572][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 68.355582][ T40] audit: type=1400 audit(1753009234.114:373): avc: denied { mounton } for pid=6925 comm="syz-executor" path="/syzkaller.51Qnzv/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.426575][ T40] audit: type=1400 audit(1753009234.184:374): avc: denied { getopt } for pid=6985 comm="syz.4.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.435640][ T6986] futex_wake_op: syz.4.272 tries to shift op by -1; fix this program [ 68.480665][ T6991] netlink: 20 bytes leftover after parsing attributes in process `syz.4.273'. [ 68.483437][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.273'. [ 68.653556][ T40] audit: type=1400 audit(1753009234.404:375): avc: denied { create } for pid=6996 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 68.662353][ T40] audit: type=1400 audit(1753009234.404:376): avc: denied { getopt } for pid=6996 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 68.977890][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'. [ 68.987195][ T7035] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7035 comm=syz.0.284 [ 68.992837][ T40] audit: type=1400 audit(1753009234.744:377): avc: denied { ioctl } for pid=7034 comm="syz.0.284" path="socket:[13293]" dev="sockfs" ino=13293 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.036309][ T7038] loop2: detected capacity change from 0 to 7 [ 69.039738][ T7038] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 69.043246][ T7038] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 69.045581][ T7038] Dev loop2: unable to read RDB block 7 [ 69.047336][ T7038] loop2: AHDI p2 p3 [ 69.048629][ T7038] loop2: partition table partially beyond EOD, truncated [ 69.050976][ T7038] loop2: p3 start 335544320 is beyond EOD, truncated [ 69.080983][ T7040] 9p: Unknown access argument 18446744073709551615: -34 [ 69.172603][ T7045] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 69.207344][ T40] audit: type=1400 audit(1753009234.964:378): avc: denied { name_bind } for pid=7047 comm="syz.0.291" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 69.238828][ T40] audit: type=1400 audit(1753009234.994:379): avc: denied { create } for pid=7050 comm="syz.0.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 69.277580][ T40] audit: type=1400 audit(1753009235.034:380): avc: denied { associate } for pid=7052 comm="syz.0.293" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.364030][ T5963] Bluetooth: hci4: command 0x1003 tx timeout [ 69.364063][ T5959] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 69.483024][ T7057] trusted_key: syz.3.295 sent an empty control message without MSG_MORE. [ 69.484318][ T40] audit: type=1400 audit(1753009235.244:381): avc: denied { ioctl } for pid=7056 comm="syz.3.295" path="socket:[16389]" dev="sockfs" ino=16389 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 69.497437][ T40] audit: type=1400 audit(1753009235.244:382): avc: denied { read } for pid=7056 comm="syz.3.295" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 69.745049][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.762498][ T7083] netlink: 'syz.3.303': attribute type 1 has an invalid length. [ 69.797575][ T7083] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 69.802209][ T7083] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 69.814957][ T7092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 69.820223][ T7092] overlayfs: missing 'lowerdir' [ 69.839343][ T7097] gretap1: entered promiscuous mode [ 69.843544][ T7097] bond2: (slave gretap1): making interface the new active one [ 69.846648][ T7097] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 69.858753][ T7097] macvlan2: entered promiscuous mode [ 69.860606][ T7097] macvlan2: entered allmulticast mode [ 69.863196][ T7097] bond2: entered promiscuous mode [ 69.865902][ T7097] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 69.871293][ T7097] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 69.876835][ T7097] bond2: left promiscuous mode [ 69.899353][ T10] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 69.902961][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 2007, setting to 1024 [ 69.908326][ T10] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 69.915593][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.919078][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.922150][ T10] usb 5-1: Product: syz [ 69.923762][ T10] usb 5-1: Manufacturer: syz [ 69.925724][ T10] usb 5-1: SerialNumber: syz [ 70.130019][ T7114] binder: 7113:7114 ioctl c0306201 2000000003c0 returned -14 [ 70.134154][ T7114] x_tables: duplicate underflow at hook 3 [ 70.154294][ T5959] Bluetooth: hci0: command tx timeout [ 70.312092][ T10] cdc_ncm 5-1:1.0: bind() failure [ 70.318093][ T10] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 70.320512][ T10] cdc_ncm 5-1:1.1: bind() failure [ 70.326288][ T10] usb 5-1: USB disconnect, device number 3 [ 70.335025][ T7137] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.711085][ T7154] overlayfs: missing 'lowerdir' [ 70.759370][ T7157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.320'. [ 70.764840][ T7157] warning: `syz.0.320' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.780972][ T7157] wg2: entered promiscuous mode [ 70.782656][ T7157] wg2: entered allmulticast mode [ 70.832533][ T7159] tipc: Started in network mode [ 70.835077][ T7159] tipc: Node identity 8e83e9e9f131, cluster identity 4711 [ 70.837832][ T7159] tipc: Enabled bearer , priority 0 [ 70.840733][ T7159] syzkaller0: entered promiscuous mode [ 70.842473][ T7159] syzkaller0: entered allmulticast mode [ 70.855591][ T7158] tipc: Resetting bearer [ 70.865280][ T7158] tipc: Disabling bearer [ 71.030920][ T7168] mkiss: ax0: crc mode is auto. [ 71.119336][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.121516][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.423836][ T7197] netlink: 160 bytes leftover after parsing attributes in process `syz.4.332'. [ 71.517023][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.334'. [ 71.930097][ T7224] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 71.937492][ T7226] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 72.159378][ T7251] pimreg: entered allmulticast mode [ 72.244012][ T5959] Bluetooth: hci0: command tx timeout [ 72.246759][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 72.317772][ T7267] bond1: entered promiscuous mode [ 72.374012][ T24] usb 9-1: device descriptor read/64, error -71 [ 72.623912][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 72.753904][ T24] usb 9-1: device descriptor read/64, error -71 [ 72.865014][ T24] usb usb9-port1: attempt power cycle [ 73.145023][ T7287] netlink: 248 bytes leftover after parsing attributes in process `syz.3.355'. [ 73.146600][ T7289] netlink: 248 bytes leftover after parsing attributes in process `syz.3.355'. [ 73.203883][ T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 73.224304][ T24] usb 9-1: device descriptor read/8, error -71 [ 73.292597][ T7304] xt_hashlimit: size too large, truncated to 1048576 [ 73.431159][ T7321] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 73.440162][ T7321] CIFS mount error: No usable UNC path provided in device string! [ 73.440162][ T7321] [ 73.443466][ T7321] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 73.461920][ T7321] netlink: 36 bytes leftover after parsing attributes in process `syz.2.365'. [ 73.463877][ T24] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 73.484676][ T24] usb 9-1: device descriptor read/8, error -71 [ 73.577125][ T7326] tmpfs: Unknown parameter 'noÛap' [ 73.580050][ T7328] ------------[ cut here ]------------ [ 73.580206][ T7326] xt_hashlimit: size too large, truncated to 1048576 [ 73.581853][ T7328] WARNING: CPU: 3 PID: 7328 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 73.587843][ T7328] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 73.589684][ T7328] CPU: 3 UID: 0 PID: 7328 Comm: syz.2.368 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 73.595137][ T7328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.598536][ T7328] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 73.600892][ T7328] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 3f 18 75 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 3d 4a 7d 0e 00 75 0b c6 05 34 4a 7d 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 73.601919][ T24] usb usb9-port1: unable to enumerate USB device [ 73.608013][ T7328] RSP: 0018:ffffc90004107908 EFLAGS: 00010246 [ 73.608049][ T7328] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 73.608058][ T7328] RDX: 0000000000000000 RSI: 0000000000000019 RDI: 0000000000040dc0 [ 73.608066][ T7328] RBP: 0000001000000248 R08: 0000000000000007 R09: 0000000000000000 [ 73.608095][ T7328] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000019 [ 73.608104][ T7328] R13: 1ffff92000820f36 R14: 0000001000000248 R15: 0000000000000019 [ 73.608112][ T7328] FS: 00007fc8afcd16c0(0000) GS:ffff8880d6a20000(0000) knlGS:0000000000000000 [ 73.629724][ T7328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.632058][ T7328] CR2: 00002000001859c0 CR3: 0000000050604000 CR4: 0000000000352ef0 [ 73.634968][ T7328] Call Trace: [ 73.636076][ T7328] [ 73.637026][ T7328] ? __pfx_stack_trace_save+0x10/0x10 [ 73.638736][ T7328] ? stack_depot_save_flags+0x28/0xa40 [ 73.640404][ T7328] ? __lock_acquire+0xb8a/0x1c90 [ 73.641889][ T7328] ? __lock_acquire+0xb8a/0x1c90 [ 73.643722][ T7328] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 73.646090][ T7328] ? __mutex_trylock_common+0xe9/0x250 [ 73.647924][ T7328] ? __lock_acquire+0xb8a/0x1c90 [ 73.649691][ T7328] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 73.651634][ T7328] __alloc_pages_noprof+0xb/0x1b0 [ 73.653161][ T7328] ___kmalloc_large_node+0x84/0x1e0 [ 73.654893][ T7328] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 73.656698][ T7328] __kmalloc_large_node_noprof+0x1c/0x70 [ 73.658469][ T7328] __kmalloc_noprof.cold+0xc/0x61 [ 73.660114][ T7328] comedi_unlocked_ioctl+0x1757/0x2e90 [ 73.661979][ T7328] ? do_raw_spin_unlock+0xb4/0x230 [ 73.664271][ T7328] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.666427][ T7328] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 73.668217][ T7328] ? do_vfs_ioctl+0x523/0x1a60 [ 73.669735][ T7328] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 73.671314][ T7328] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 73.673318][ T7328] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 73.675307][ T7328] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 73.677504][ T7328] ? hook_file_ioctl_common+0x145/0x410 [ 73.679578][ T7328] ? selinux_file_ioctl+0x180/0x270 [ 73.681297][ T7328] ? selinux_file_ioctl+0xb4/0x270 [ 73.683156][ T7328] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 73.685504][ T7328] __x64_sys_ioctl+0x18e/0x210 [ 73.687118][ T7328] do_syscall_64+0xcd/0x4c0 [ 73.688576][ T7328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.690456][ T7328] RIP: 0033:0x7fc8aed8e9a9 [ 73.691872][ T7328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.698124][ T7328] RSP: 002b:00007fc8afcd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.700799][ T7328] RAX: ffffffffffffffda RBX: 00007fc8aefb5fa0 RCX: 00007fc8aed8e9a9 [ 73.703712][ T7328] RDX: 00002000001859c0 RSI: 000000008010640b RDI: 0000000000000003 [ 73.706419][ T7328] RBP: 00007fc8aee10d69 R08: 0000000000000000 R09: 0000000000000000 [ 73.708958][ T7328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.711673][ T7328] R13: 0000000000000000 R14: 00007fc8aefb5fa0 R15: 00007ffdeed5b7d8 [ 73.714411][ T7328] [ 73.715427][ T7328] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 73.717711][ T7328] CPU: 3 UID: 0 PID: 7328 Comm: syz.2.368 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 73.721461][ T7328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.725596][ T7328] Call Trace: [ 73.726695][ T7328] [ 73.727706][ T7328] dump_stack_lvl+0x3d/0x1f0 [ 73.729134][ T7328] panic+0x71c/0x800 [ 73.730382][ T7328] ? __pfx_panic+0x10/0x10 [ 73.731791][ T7328] ? show_trace_log_lvl+0x29b/0x3e0 [ 73.733486][ T7328] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 73.735437][ T7328] check_panic_on_warn+0xab/0xb0 [ 73.737233][ T7328] __warn+0xf6/0x3c0 [ 73.738616][ T7328] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 73.740640][ T7328] report_bug+0x3c3/0x580 [ 73.742033][ T7328] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 73.744437][ T7328] handle_bug+0x184/0x210 [ 73.745921][ T7328] exc_invalid_op+0x17/0x50 [ 73.747372][ T7328] asm_exc_invalid_op+0x1a/0x20 [ 73.749070][ T7328] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 73.751634][ T7328] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 3f 18 75 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 3d 4a 7d 0e 00 75 0b c6 05 34 4a 7d 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 73.758144][ T7328] RSP: 0018:ffffc90004107908 EFLAGS: 00010246 [ 73.760096][ T7328] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 73.762571][ T7328] RDX: 0000000000000000 RSI: 0000000000000019 RDI: 0000000000040dc0 [ 73.765551][ T7328] RBP: 0000001000000248 R08: 0000000000000007 R09: 0000000000000000 [ 73.768151][ T7328] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000019 [ 73.770924][ T7328] R13: 1ffff92000820f36 R14: 0000001000000248 R15: 0000000000000019 [ 73.773782][ T7328] ? __pfx_stack_trace_save+0x10/0x10 [ 73.775494][ T7328] ? stack_depot_save_flags+0x28/0xa40 [ 73.777218][ T7328] ? __lock_acquire+0xb8a/0x1c90 [ 73.778885][ T7328] ? __lock_acquire+0xb8a/0x1c90 [ 73.780504][ T7328] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 73.782835][ T7328] ? __mutex_trylock_common+0xe9/0x250 [ 73.784682][ T7328] ? __lock_acquire+0xb8a/0x1c90 [ 73.786452][ T7328] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 73.788334][ T7328] __alloc_pages_noprof+0xb/0x1b0 [ 73.789954][ T7328] ___kmalloc_large_node+0x84/0x1e0 [ 73.791623][ T7328] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 73.793455][ T7328] __kmalloc_large_node_noprof+0x1c/0x70 [ 73.795246][ T7328] __kmalloc_noprof.cold+0xc/0x61 [ 73.796880][ T7328] comedi_unlocked_ioctl+0x1757/0x2e90 [ 73.798735][ T7328] ? do_raw_spin_unlock+0xb4/0x230 [ 73.800481][ T7328] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.802436][ T7328] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 73.804275][ T7328] ? do_vfs_ioctl+0x523/0x1a60 [ 73.805995][ T7328] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 73.807632][ T7328] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 73.810030][ T7328] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 73.812400][ T7328] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 73.814858][ T7328] ? hook_file_ioctl_common+0x145/0x410 [ 73.816700][ T7328] ? selinux_file_ioctl+0x180/0x270 [ 73.818366][ T7328] ? selinux_file_ioctl+0xb4/0x270 [ 73.819993][ T7328] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 73.821887][ T7328] __x64_sys_ioctl+0x18e/0x210 [ 73.823731][ T7328] do_syscall_64+0xcd/0x4c0 [ 73.825263][ T7328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.827150][ T7328] RIP: 0033:0x7fc8aed8e9a9 [ 73.828650][ T7328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.834808][ T7328] RSP: 002b:00007fc8afcd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.837390][ T7328] RAX: ffffffffffffffda RBX: 00007fc8aefb5fa0 RCX: 00007fc8aed8e9a9 [ 73.839897][ T7328] RDX: 00002000001859c0 RSI: 000000008010640b RDI: 0000000000000003 [ 73.842356][ T7328] RBP: 00007fc8aee10d69 R08: 0000000000000000 R09: 0000000000000000 [ 73.844877][ T7328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.847523][ T7328] R13: 0000000000000000 R14: 00007fc8aefb5fa0 R15: 00007ffdeed5b7d8 [ 73.850094][ T7328] [ 73.851922][ T7328] Kernel Offset: disabled [ 73.853548][ T7328] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:00:39 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffffffff8e5c4e00 RCX=000000005c2097c2 RDX=0000000000000000 RSI=0000000000000001 RDI=ffffffff8de0ad6d RBP=0000000000000002 RSP=ffffc900041ae4d8 R8 =1fbba9704ed283fc R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b868540 RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6720000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c27eec6 CR3=0000000063e4c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe15039d30 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6f07211d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6f07211d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6f07211d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6f07211d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6f07211de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6f07211ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000c0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000c0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080080783 RBX=ffff888029d80000 RCX=ffffffff86a70722 RDX=00000000ffffffff RSI=ffffffff86a7072f RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc900006a0eb8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffff888029d816b8 R14=ffff888029d812d0 R15=0000000000000000 RIP=ffffffff86a70769 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f0193743300 ffffffff 00c00000 GS =0000 ffff8880d6820000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff7b9ee7d60 CR3=000000002503f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=2e1dbd35559f014f 33714b1e61e4986e 2e1dbd35559f014f 33714b1e61e4986e 2e1dbd35559f014f 33714b1e61e4986e 2e1dbd35559f014f 33714b1e61e4986e ZMM18=1d5bef823f860366 9bc6a9eb021a1635 1d5bef823f860366 9bc6a9eb021a1635 1d5bef823f860366 9bc6a9eb021a1635 1d5bef823f860366 9bc6a9eb021a1635 ZMM19=9e04000000000000 0000000000000005 9e04000000000000 0000000000000004 9e04000000000000 0000000000000003 9e04000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9003088080048800 0f880302b8c40484 000f84031404000f 80033810000f8004 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000008060601 0000000118080006 1000201000060171 921810000d800401 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000806060101 da08dffffffffe08 000d90030008000d 88030004000d8403 ZMM24=021a1635021a1635 021a1635021a1635 021a1635021a1635 021a1635021a1635 021a1635021a1635 021a1635021a1635 021a1635021a1635 021a1635021a1635 ZMM25=9bc6a9eb9bc6a9eb 9bc6a9eb9bc6a9eb 9bc6a9eb9bc6a9eb 9bc6a9eb9bc6a9eb 9bc6a9eb9bc6a9eb 9bc6a9eb9bc6a9eb 9bc6a9eb9bc6a9eb 9bc6a9eb9bc6a9eb ZMM26=3f8603663f860366 3f8603663f860366 3f8603663f860366 3f8603663f860366 3f8603663f860366 3f8603663f860366 3f8603663f860366 3f8603663f860366 ZMM27=1d5bef821d5bef82 1d5bef821d5bef82 1d5bef821d5bef82 1d5bef821d5bef82 1d5bef821d5bef82 1d5bef821d5bef82 1d5bef821d5bef82 1d5bef821d5bef82 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9c0400009c040000 9c0400009c040000 9c0400009c040000 9c0400009c040000 9c0400009c040000 9c0400009c040000 9c0400009c040000 9c0400009c040000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffffc9000386f1b8 RCX=ffffc9000386f04c RDX=1ffff9200070de37 RSI=ffffffff8b86110d RDI=ffffc9000386f1c4 RBP=000000000000000f RSP=ffffc9000386f0d8 R8 =ffffffff9138b21e R9 =0000000000000000 R10=0000000000000000 R11=0000000000002c16 R12=ffffffff81a78d30 R13=ffffc9000386f1b8 R14=0000000000000000 R15=ffff88802c3fa440 RIP=ffffffff81a78ddf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6920000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb6f32e7d60 CR3=000000002b57a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6f27866a3 00007fb6f27866a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee09cfae0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555591da473d 0000555591da4400 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555591d9e805 0000555591d9dac0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04448002080dbc00 080db4000a00040a 0dd0030004000dd8 0301f402000dd603 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010fffffffffffff 040d80045c100006 0172d20002000728 0d9c000200040a0d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b003180dc4000430 800204448002080d bc00080db4000a00 040a0dd003000400 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0dd80301f402000d d6030420b0808200 0dd4030010a88082 000dd40302508080 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 82000dd403000484 000dd00318048400 0dcc0302b8c00484 000dc80300048400 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000049 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855a5665 RDI=ffffffff9b0b9e60 RBP=ffffffff9b0b9e20 RSP=ffffc90004107270 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000049 R14=ffffffff9b0b9e20 R15=ffffffff855a5600 RIP=ffffffff855a568f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc8afcd16c0 ffffffff 00c00000 GS =0000 ffff8880d6a20000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000001859c0 CR3=0000000050604000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffe00 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8aee11d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8aee11d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8aee11d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8aee11d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8aee11de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8aee11ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8aef86488 00007fc8aef86480 00007fc8aef86478 00007fc8aef86450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8afaed100 00007fc8aef86440 00007fc8aef86458 00007fc8aef864a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8aef86498 00007fc8aef86490 00007fc8aef86488 00007fc8aef86480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 000000000000018c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000