last executing test programs: 1m7.368572431s ago: executing program 1 (id=873): r0 = syz_clone3(&(0x7f0000000180)={0x6c090280, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x3d}, &(0x7f00000000c0)=""/64, 0x40, &(0x7f0000000100)=""/24, &(0x7f0000000140)=[0x0, 0x0], 0x2}, 0x58) (async) r3 = io_uring_setup(0x5ca8, &(0x7f0000000200)={0x0, 0x4a5f, 0x40, 0x3, 0x103}) r4 = pidfd_getfd(r1, r3, 0x0) syz_clone3(&(0x7f0000000440)={0x80000000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x23}, &(0x7f0000000340)=""/68, 0x44, &(0x7f00000003c0)=""/34, &(0x7f0000000400)=[r2, r0, r2], 0x3, {r4}}, 0x58) r6 = pidfd_getfd(r5, r4, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000004c0)={'wg1\x00', @remote}) (async) syz_emit_ethernet(0x1e, &(0x7f0000000500)={@multicast, @broadcast, @void, {@can={0xc, {{0x0, 0x1, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "f1baf22e75b15b63"}}}}, &(0x7f0000000540)={0x0, 0x3, [0xa3c, 0x30, 0x517, 0xe48]}) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r4) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x84, r7, 0x308, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7e}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) ioctl$UI_DEV_CREATE(r6, 0x5501) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r6, 0xc10c5541, &(0x7f0000000840)={0xb5, 0x8}) (async) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000980)={@in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x0, 0x0, 0x45, 0x0, "445ba42c837f99afeeadb323fa93159b63a29c2115d361294f08071de9ef6fb7e9f4493be9c7696124fe17f3bb363a528c512bfb932c1d5922e5d4955b310124c51d4354a2414959c94c67aad0769255"}, 0xd8) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000b40)={'syztnl2\x00', &(0x7f0000000ac0)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x17, 0x38, 0x0, @private1, @mcast1, 0x10, 0x80, 0x7fffffff, 0x854}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xb8, r7, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r8, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x40, r10, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x0, 0x5a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4000080) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000e40)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x7fff, 0x6, 0x100000001, 0xd, 0x80, 0x2}, {0x40, 0xecc, 0x101, 0x4, 0x1, 0xa}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$CEC_DQEVENT(r4, 0xc0506107, &(0x7f00000010c0)={0x0, 0x0, 0x0, @raw}) (async) accept$phonet_pipe(r4, &(0x7f0000001140), &(0x7f0000001180)=0x10) write$tun(0xffffffffffffffff, &(0x7f00000011c0)={@void, @void, @llc={@snap={0xab, 0xaa, "eb", "0f724a", 0x6005, "be9d205760b54201fb07c9aea397c5675cbdb832fd4562622682d77015630b26e59612c5ce68f11224c4d9d0d28add37bade6f619f7a0350278254450449baf7226c7915074455945f852604dcdb2956435655bb472943592263278284b6e2497a12b37663554d9ba96b678f1b46767663"}}}, 0x79) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000003fc0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003f80)={&(0x7f0000001280)=@deltfilter={0x2cdc, 0x2d, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xa, 0xb}, {0xffe0, 0xa}, {0x0, 0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x184, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_CLASSID={0x8, 0x3, {0x7, 0xa}}, @TCA_BPF_ACT={0x16c, 0x1, [@m_connmark={0xf8, 0x17, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xbb1, 0x2, 0xffffffffdffffffb, 0xabd7, 0x8}, 0x3}}]}, {0xab, 0x6, "97afebec85979e5eb88e09ae94909af1a35ce2b86e432d947cb459242a4c9aaed0a160df66ef20fed1bec02bfbcf746816796785ca6e4b0fbc7b4837bbd930666c1387d19e52ccb09701f11548b40b70fc8c7c5d2217d4dde264988e158f555677eb944fa7da220b85697f2a6848f0b73ac717aab4981371b325ae1967e29a8cb7fac6bd0b58ecffb57ca018a1316f57a8ae3a34b5efdf226a344d5e73ec33e3d77b1229560712"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}, @m_ctinfo={0x70, 0xe, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xfff}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x80}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xc}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x10001}]}, {0xb, 0x6, "1cd93683b5eb32"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x59c34982}, @filter_kind_options=@f_u32={{0x8}, {0x2b1c, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x3}, @TCA_U32_INDEV={0x14, 0x8, 'gre0\x00'}, @TCA_U32_MARK={0x10, 0xa, {0x200, 0x5}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_DIVISOR={0x8, 0x4, 0xa1}, @TCA_U32_SEL={0x2b4, 0x5, {0xc, 0xc, 0x0, 0xa096, 0x8, 0xfc00, 0x5, 0x1000, [{0x1, 0xe, 0xfffffff9, 0x699676e0}, {0xfffffffe, 0x5, 0x0, 0x41}, {0x6, 0x9, 0x4, 0x6}, {0x0, 0x9, 0x40, 0x3}, {0x9, 0x6, 0x0, 0x5}, {0x80, 0xfd4f, 0x4, 0x3}, {0x5, 0xd, 0x1, 0x29}, {0x1, 0x7, 0x8001, 0x7}, {0x5, 0x0, 0x6, 0x5}, {0x3, 0x6, 0x3}, {0x800, 0xc, 0xff, 0x8}, {0xb3c5, 0x7f, 0x400, 0x1ff}, {0x3, 0x40, 0x6}, {0x2, 0xa509, 0x0, 0xfffffffb}, {0x4, 0xfa9, 0x8, 0x8}, {0x6, 0x2, 0x6, 0xfffffff9}, {0x7fffffff, 0x7, 0x400, 0xfffffffb}, {0x0, 0x0, 0x6, 0x8000}, {0x0, 0x80, 0x7, 0x16f}, {0xfff, 0x0, 0x1, 0x9}, {0x100, 0x0, 0x7, 0x7fff}, {0x7, 0x8, 0x8ff}, {0xd118, 0x80000001, 0xec, 0x3}, {0xf34, 0x200, 0x1, 0x30a}, {0x37d, 0x6, 0xffffffff, 0xc}, {0x4c, 0x7, 0x4c, 0x8}, {0x7f, 0x3, 0xbc8, 0x8}, {0x7, 0x8f30, 0x8001, 0x7f}, {0x67, 0x7, 0x82f3, 0x7fffffff}, {0x0, 0x80000001, 0x9, 0x8}, {0xfffffffe, 0x6, 0x9, 0x6}, {0x6, 0x2, 0x3, 0x1}, {0x1, 0x7, 0x1, 0x8}, {0x1b2, 0xffffffff, 0x4, 0x7}, {0x7, 0x4, 0x0, 0x8}, {0x16, 0xff, 0x20000, 0x6}, {0x922, 0x4, 0x1000, 0xdb33}, {0x0, 0x4, 0x925, 0x4}, {0xd, 0x9, 0x8001, 0x6977e4de}, {0x6d6, 0x4, 0xfff, 0xf}, {0x500, 0x3, 0x6}, {0x2, 0x4, 0xfffffff7}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_ACT={0x2820, 0x7, [@m_police={0x21a8, 0x13, 0x0, 0x0, {{0xb}, {0x2170, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x38b3000, 0x5, 0x6, 0x10, 0xfffffff8, 0xf9b, 0x9, 0x1, 0x7fffffff, 0x9, 0x3, 0x0, 0x9, 0x2, 0xa032, 0x86, 0x9, 0x62, 0x8, 0x0, 0xf312, 0x9, 0x2, 0x4, 0x5, 0xfffffff2, 0xffffffff, 0x6, 0x3, 0x9, 0x0, 0xbb5d, 0x4, 0x2, 0x9, 0xed4b, 0x7, 0x8, 0xffff0001, 0x8001, 0x3, 0xf, 0x9, 0xffff, 0x2, 0x3, 0x10, 0x2, 0x81, 0x3, 0xd7f, 0x9894, 0x5, 0x100, 0x9, 0x1, 0xf2e3, 0x7, 0x2, 0x17c2, 0x3, 0x1a9, 0x7fffffff, 0x80000001, 0x3, 0x3, 0x7ff, 0x2, 0x0, 0x80, 0x2, 0x2, 0x7fff, 0x4, 0x2, 0xffc, 0x2, 0x80, 0x101, 0x7, 0x7fff, 0x2, 0x1, 0x40, 0x7fffffff, 0x77, 0x6, 0x8, 0x1, 0x4, 0x8, 0x3, 0xffff, 0x2, 0x0, 0x400000, 0xfffffff2, 0x4, 0x3, 0x7f, 0x8, 0x8, 0x19149d89, 0xd397, 0x5, 0x8, 0x8c, 0x8, 0x5, 0x3, 0x3, 0x9, 0xffffffff, 0x9, 0x2, 0xc76d, 0xaf6, 0x5, 0xc0000, 0x4, 0x5, 0x6, 0x400, 0xd, 0xfff, 0x4, 0x0, 0x3, 0x6d13, 0x0, 0x4, 0x80000000, 0x8001, 0x1, 0x3ff, 0x400, 0x4, 0x8, 0x2, 0x8, 0x1, 0x2, 0x4, 0x9, 0x5, 0x0, 0x1000, 0x10001, 0xc, 0x700000, 0x0, 0x3, 0x400, 0x7, 0x6f88ac7e, 0x0, 0xcc6, 0xffffffff, 0x3ff, 0x9, 0x0, 0x10000, 0x5, 0x10000, 0xffff, 0x1, 0x1, 0x101, 0x68, 0xfffffff7, 0x3ff, 0x2, 0x10001, 0x5, 0x1, 0x13, 0x80000000, 0x7, 0x5, 0x5, 0x5, 0x2, 0x5, 0xfffffff7, 0x7, 0x7, 0x1000, 0x4, 0x6, 0x2, 0x1ff, 0x6, 0x6, 0x6, 0x8, 0xc4, 0x1, 0x10000, 0x1, 0xbaef, 0x9, 0x9, 0x5, 0x3ff, 0x5900, 0x1, 0x6, 0x7, 0x2, 0x3ae4, 0x1, 0x8, 0x8, 0xfffffff8, 0xc8, 0x401, 0xeb, 0x2, 0x9, 0x6, 0x1, 0xd751, 0x80, 0x770e, 0x0, 0x10001, 0x80000001, 0x80000000, 0x3, 0x1, 0x1, 0x2, 0xc280000, 0xffff6fe3, 0x5, 0x0, 0x7ff, 0x4f, 0x8000, 0x5, 0x6, 0x5, 0x3, 0xb, 0x3, 0x7, 0x5, 0x7, 0xfffff475, 0x5, 0x1, 0x9, 0x2, 0x0, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd, 0x6f, 0x9, 0x5, 0xb9c, 0xb, 0x800, 0x6, 0x5, 0xd, 0x9, 0x1, 0x80000001, 0x0, 0x73a0036a, 0x0, 0x3ff, 0x4, 0xc9, 0x3, 0x3, 0x9, 0x8, 0x81, 0x1, 0x8, 0x6, 0xffffff01, 0x8, 0x7, 0xffffffa8, 0x0, 0xfcaa, 0x9, 0x8, 0x760e, 0xffffed9b, 0x40, 0x4, 0x2, 0x1, 0x6, 0x9, 0xfffff885, 0x0, 0x3, 0x1, 0x9, 0xcf, 0x7, 0x84, 0x4, 0x9, 0x3, 0x9, 0x3, 0x3, 0x31567ce3, 0x1, 0x69, 0xfffffe01, 0x8a, 0x9, 0x4, 0xffffffff, 0x1ab1, 0xfffffffa, 0x8, 0x0, 0x5, 0x9, 0x0, 0x3, 0xf, 0x4, 0x10001, 0x21, 0x9, 0x2, 0x80000001, 0x9, 0x2347, 0x4, 0x10001, 0x8, 0x4, 0x4ff2, 0xfffffffc, 0x3, 0x2, 0x8, 0x800, 0x7f, 0x6, 0x5, 0xb, 0xfffffff7, 0x3, 0x5, 0x6, 0x9d83, 0x4, 0x6, 0x401, 0x101, 0xce4c, 0x8001, 0x4, 0x7, 0xffffffff, 0x81, 0x1, 0x2, 0x8, 0x2, 0x2, 0x1, 0x5, 0x6, 0x100, 0xffff8000, 0x115, 0x54, 0x5, 0xcc, 0x4, 0xe9, 0xfffffffb, 0x9f5, 0xac64, 0x17da, 0x10001, 0x724d, 0x8, 0x6, 0x3, 0x47, 0x919, 0x9, 0xffff, 0x0, 0x3, 0x101, 0xe0, 0x1000, 0x9, 0x8, 0x8000, 0x57, 0x800, 0x1, 0x5, 0x0, 0xe0, 0x3, 0x4, 0x1, 0x80000001, 0x80000000, 0x0, 0x0, 0x5, 0xa27b, 0x6, 0x2, 0x5, 0xe1ea, 0x8, 0x4, 0x5f0f1bf4, 0x3, 0x80000000, 0xfffffffe, 0x4, 0x4, 0x8, 0x5, 0x4, 0xb, 0xfffffff8, 0xff, 0x3, 0x8, 0x7, 0x7, 0x4, 0xf735, 0x5, 0x80000001, 0x401, 0x4c, 0x8, 0x9, 0x7, 0x4, 0xde, 0x9, 0x8, 0xfffffffb, 0x3, 0x84, 0x4, 0xfffffffe, 0x5, 0x5, 0x7, 0x8, 0x2, 0x6, 0xfffffffc, 0x9a5, 0xb, 0x8, 0x8, 0x80000000, 0x400, 0x3, 0xffffff01, 0x5, 0x3, 0x40, 0x4, 0xfffffffc, 0xd2d, 0x4, 0x97, 0x8, 0x3ff, 0x1, 0x7fff, 0x4, 0x5, 0x78, 0x9, 0x2, 0x200, 0x2, 0x2, 0x6, 0xd0, 0x0, 0xfffffff7, 0x7, 0xf6eb, 0x655, 0x5, 0xe, 0xd, 0xb44, 0x7f, 0x1, 0x5, 0x7fffffff, 0x40, 0x8, 0x1ab]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x4, 0x9, 0xfffffffa, 0x7, 0x17800000, 0x8, 0x7, 0x8, 0x3a614e45, 0x81, 0xa, 0x1a8, 0x0, 0x0, 0x7ff, 0xc, 0x3, 0x8, 0x10, 0xfe5, 0x3, 0x2, 0xfff, 0x3, 0x0, 0x0, 0x6, 0x2, 0xd, 0x9, 0x3, 0xd, 0x1c33, 0x8, 0x2, 0x9, 0x800, 0x7f4, 0x3, 0x8a, 0x915, 0x2, 0x8, 0x4, 0x200, 0xb, 0x400, 0xb, 0x401, 0x6, 0xffffff00, 0x5, 0xc, 0x1ff, 0x6, 0x9, 0x75, 0x6, 0x0, 0x80000000, 0x3, 0x1, 0x2be0, 0x1, 0x200, 0xe7, 0x2, 0x7, 0x9, 0x40, 0x3, 0x8, 0x1, 0xbe81, 0xf080157, 0x80000000, 0x7, 0x4, 0x7, 0x6, 0x2a1c, 0x6c4b, 0xa3c, 0x74a15175, 0x1, 0x6, 0x2, 0x7, 0x0, 0xb, 0xa, 0x8f, 0xab0, 0x2, 0xffff8000, 0x8, 0x7, 0xfffffffe, 0x5, 0x1, 0x5a, 0xffff, 0xff, 0x0, 0x3, 0x80000001, 0x9, 0x3, 0x5, 0x9, 0x7, 0x6, 0x5, 0xc2, 0xbd1, 0x6, 0x1, 0x1, 0x3, 0x2, 0x4, 0x2, 0x27, 0x6, 0x2, 0x0, 0x7, 0x9, 0x8, 0x5, 0xf, 0x8, 0xa, 0x4, 0x6, 0xf17, 0x1000, 0x9, 0x7, 0x7, 0x4, 0x94, 0x9, 0x7, 0x0, 0x8, 0x8, 0x4, 0x5, 0x70000000, 0x6, 0x9, 0x80000001, 0x7fff, 0x3, 0x4, 0x5, 0x8, 0x0, 0xe22a, 0x8, 0xfffff801, 0xfffffff4, 0xb34dff5, 0x2, 0x5, 0x8, 0x3, 0x0, 0x404, 0xffffffff, 0x7, 0x10001, 0x3, 0x988, 0x2, 0xfffffffb, 0x1, 0x5, 0xffffffc0, 0xd26f, 0x6, 0x10001, 0x7, 0x4, 0x101, 0x5, 0x10, 0x9, 0x80000000, 0x9, 0xf810, 0x8, 0x80000001, 0x2, 0xfffffffc, 0xf, 0x10001, 0x5d, 0x0, 0x2, 0x9, 0x9, 0x5, 0xe47, 0xf04, 0xa, 0x80000000, 0x6, 0x200, 0x3, 0xeb, 0x0, 0xc5, 0x12c, 0xffffffff, 0x7fffffff, 0x3, 0x7, 0x3ff, 0xed, 0x3, 0x7, 0x0, 0x8, 0x7, 0x4, 0x9, 0x9, 0x3, 0x7, 0x1, 0x9, 0xb991, 0x5, 0x8, 0x327, 0x5, 0x7, 0x8, 0x7, 0xa, 0x8, 0x800, 0x40, 0x0, 0x3, 0x8000, 0x5, 0x1, 0x2, 0x5, 0x6, 0x2, 0xd964]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x201}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xa8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x498d}, @TCA_POLICE_RATE64={0xc, 0x8, 0xed99}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x8, 0x401, 0xc, 0x4, 0x10000, 0x10000000, 0xfe7f, 0x101, 0x80000000, 0x3, 0x7f, 0x0, 0x101, 0xd8a, 0x8, 0x1, 0x3, 0x10001, 0x6, 0x800, 0x100, 0x4, 0x80, 0x9, 0x3, 0x5, 0xdcb7, 0xc07b, 0x2, 0x4, 0x6, 0x3, 0x6762, 0x3f, 0x4, 0x2, 0x1be, 0xe, 0x0, 0x100, 0x8000, 0x3, 0x8, 0x4, 0x8, 0x400, 0x4, 0x401, 0x8, 0x7, 0x1, 0xffffff7a, 0x40, 0x855e, 0x50fc, 0xff, 0x8, 0x400, 0xff, 0x2, 0x1, 0x800, 0x4, 0x1, 0x7, 0xff, 0x3, 0x10, 0x0, 0xade, 0x5, 0x4, 0x15, 0xe, 0x2, 0x8fbb, 0x14c, 0x99c1, 0x2, 0xff, 0x3f31fee9, 0xfffffffc, 0x6, 0x7, 0x25e8c555, 0x8, 0x4ca8, 0x7, 0x3, 0x9b, 0x7, 0x1, 0x5, 0x37ad, 0xffffffff, 0x7, 0x2, 0x0, 0x10001, 0x5, 0x4, 0x18, 0x8, 0x2a4c, 0x8, 0x10, 0x9, 0x1, 0x9, 0x4, 0x8, 0x5, 0x1, 0x37cb, 0x4, 0x6f1c, 0x100, 0x9, 0x9, 0xb1, 0x54, 0x5, 0x6, 0x0, 0x7, 0x4, 0x1, 0x6, 0x9b57, 0x4, 0xa8, 0x8, 0x6, 0x10000, 0x2, 0x10001, 0xfffffff2, 0x80000000, 0x7, 0x6, 0x1ae3, 0x9, 0x80000000, 0xfffffffa, 0x69, 0xf1e0, 0xffffffff, 0x0, 0x3fff800, 0x7, 0x1, 0x2d28, 0xc2, 0x80000000, 0x4, 0x18000, 0x9, 0x5, 0x80000001, 0x8, 0x7, 0x4, 0x6, 0x3cd, 0x800, 0x0, 0x712d, 0x5, 0x10001, 0x81, 0x3, 0x3ff, 0x0, 0x9, 0x479, 0xf, 0x10, 0x1, 0x9, 0xc5, 0x6, 0x9, 0xa089, 0xe, 0x3, 0x6, 0x0, 0xfffffc03, 0x2d26b066, 0x2, 0x400, 0x7fff, 0x9, 0x7, 0x2, 0x4, 0x2, 0x1, 0x0, 0xfffffffd, 0xfffffffc, 0xfffff001, 0x4, 0x80000000, 0x1, 0xd, 0x6, 0x4, 0x7fffffff, 0x3, 0x2, 0x9, 0xce8f, 0xcac, 0x10001, 0x6, 0x3, 0x1ff, 0x4, 0x7, 0x70, 0x94d2, 0xffff8001, 0x4, 0x6, 0x0, 0x3, 0xff, 0x6, 0x0, 0x15, 0x0, 0x4, 0x3ff, 0x3, 0x76d, 0x9, 0x9, 0x8000, 0x3, 0x98000000, 0x3, 0xd4b5, 0x9, 0x1, 0x100, 0xffffffff, 0x3, 0x1ff, 0x9, 0xfffffb5f, 0x0, 0x6, 0x0, 0xfffffff8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffcbd}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfbf}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x20000000000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xed2}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x10000000, 0x0, 0x4, 0x98, {0x0, 0x2, 0x6, 0x18f5, 0x6, 0x81}, {0x9, 0x2, 0xfff, 0x6, 0x4, 0x4}, 0x7, 0x4, 0xb4}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x6, 0x10001, 0x10, 0x5, {0x80, 0x2, 0x81, 0x9, 0x3, 0x3}, {0x0, 0x1, 0x8000, 0x2, 0x80, 0xff}, 0x4, 0x4, 0x1ff}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0xe, 0x7973, 0x3, 0x2, 0x6, 0x6080, 0x5, 0x1000, 0x4, 0xfffffffa, 0x81, 0x1, 0x10001, 0x6, 0xfffffffb, 0xf, 0x2, 0x0, 0x5, 0x40000000, 0x4, 0xfffffffe, 0xee, 0xb5, 0xfffffff8, 0x1, 0xbc7, 0x7, 0x4, 0x9, 0x2, 0xfa6, 0x4, 0x9, 0x5, 0x3, 0x5, 0x7fffffff, 0x5, 0x7, 0x2, 0x40, 0xf, 0xe000000, 0x80000000, 0x20b, 0x10000, 0x0, 0x0, 0x1, 0x4, 0x1ff, 0x10001, 0xffff, 0x400, 0x8, 0xc, 0x9, 0x0, 0x7, 0x8, 0x30ec0761, 0x6, 0x8, 0x7ff, 0x1, 0x6, 0x10001, 0x100, 0xfffffff5, 0x9e6, 0x6, 0x8, 0x3, 0x2, 0x200, 0x8, 0x8, 0x2, 0xa, 0xffffffff, 0x5, 0x9, 0x0, 0x9c, 0x8, 0x8b5d, 0xfffffc00, 0x0, 0x400, 0x6, 0x3, 0x3, 0x9, 0x80000000, 0x6, 0x2, 0x463, 0x7, 0x1, 0x5, 0xd0, 0x2, 0x7, 0x0, 0x6, 0x0, 0x101, 0x800, 0x24000000, 0x1ff, 0x2, 0x5, 0x8001, 0x6, 0x0, 0x5, 0x9, 0x401, 0x0, 0x4, 0xdcf8, 0xd9a, 0x3ff, 0xfffffff8, 0x93, 0x80, 0x80000001, 0x2, 0x9, 0x1ff, 0x4, 0x7411eae0, 0x78, 0x3ff, 0x26, 0x7, 0xc8, 0x2a45436f, 0x7fff, 0x80, 0xffff0000, 0x6964551, 0x784aa608, 0x2, 0x10, 0x2fe000, 0x200, 0x7f, 0x1, 0x8, 0x6, 0x5, 0x4, 0x3, 0xcd7, 0x400, 0x1, 0x1, 0x3, 0xff, 0x9, 0x0, 0x4, 0x5, 0xd6df, 0x62c, 0xfffc0000, 0x2, 0xfffffff8, 0x8000, 0x0, 0x4, 0x8, 0x3, 0x2, 0x6, 0xf, 0x8, 0x67, 0x1, 0x200, 0x6, 0x87a, 0x7, 0x101, 0x8, 0xffff, 0x8, 0x2, 0x3, 0xff, 0x5, 0x4e7ad9d3, 0xfffffff0, 0xb50, 0x1, 0x3, 0x7, 0x8, 0xfffffffc, 0x7408, 0x4, 0x2, 0x80, 0x10001, 0x9, 0x0, 0x8, 0x0, 0x1, 0xf18, 0x0, 0x9, 0xffff, 0x8, 0xfffffffa, 0x1, 0x0, 0x2, 0x8, 0x3ff, 0x5, 0x200, 0x6000000, 0x361, 0x1, 0x10000, 0x4, 0x100, 0xe2, 0x0, 0x2a, 0x3, 0xfffffff8, 0x0, 0x5, 0x0, 0x4, 0x6b64, 0x10000, 0x7fff, 0x7f75, 0x7fff, 0x5, 0x77b, 0x95e7, 0x5, 0x8849, 0x8, 0x86d, 0x1d4, 0x324, 0x3, 0x5, 0xffffffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x800, 0x2, 0x1, 0x5, 0xfff, 0xffffffff, 0x7, 0x2, 0x8, 0x10001, 0xffff, 0x0, 0x8001, 0x200, 0x10, 0x2, 0xfffffff1, 0x4, 0x4, 0x3, 0xff, 0x1ff, 0xffff5ba2, 0xba, 0x81, 0xbe17, 0x40, 0x401, 0x2, 0x3, 0x7, 0x6, 0x1, 0x8, 0x4, 0x9508, 0xf19, 0x4, 0x8324, 0x5, 0x0, 0x6, 0x81, 0xf, 0x2, 0x5, 0xa, 0x2, 0xb4, 0x3, 0x6, 0x3, 0xa, 0x10001, 0x4, 0x7, 0x1000, 0xdc, 0x81, 0x1, 0x1, 0xfd9, 0xfff, 0x6, 0x1ff, 0xfffffff9, 0xffff, 0x7f, 0x3, 0x4f58fd1e, 0xa85c, 0x1, 0xd6f, 0x7fffffff, 0x5, 0x17a, 0xb, 0x3, 0x2, 0x1, 0x8, 0x2, 0x8, 0x0, 0x40, 0x7, 0xf2, 0x1ff, 0x7, 0x7, 0x0, 0x101, 0x0, 0x9, 0x12, 0x7, 0x4, 0x100, 0x0, 0x8, 0xcb, 0x7bf, 0x2, 0xa, 0x2, 0x4, 0x1000, 0x5, 0x4, 0x6, 0xb, 0x9, 0x8, 0x3ff, 0xffffff7c, 0x400, 0x4, 0xc, 0x5, 0x6, 0x6, 0x1000, 0xfffffffa, 0xa1ce, 0x1d2, 0x3ff, 0xe04, 0x8, 0x1, 0x6, 0x9, 0x5, 0x4, 0x8, 0xfffffff9, 0x8000, 0x5, 0x0, 0x8, 0x3db0, 0x4, 0x80000000, 0x3, 0x1dcf1af6, 0x5495, 0x2, 0x7, 0x638, 0x40, 0x8, 0x7fff, 0x3, 0x9, 0x12, 0x1, 0x100, 0x10, 0x5d, 0x1, 0x2, 0xe, 0x7, 0xfff80000, 0x0, 0x7f, 0x800, 0xa, 0x7, 0x0, 0x6, 0x4, 0x5, 0x3, 0x6, 0xffff, 0x1b1, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, 0x74bc1726, 0x0, 0x9, 0x7, 0x8, 0x10001, 0x8000, 0x7fffffff, 0x8, 0x3, 0x0, 0x83, 0x3e, 0x2, 0x6, 0xc21f, 0x7, 0x7517, 0x3, 0x10000, 0x3, 0x40, 0x7f, 0x4bb, 0x0, 0xa8b, 0x6, 0x3ff, 0xffffffff, 0x8, 0x7, 0x7, 0x8001, 0xff, 0xe, 0x6, 0x3, 0x6, 0x101, 0x1000, 0x4, 0x56a, 0x3, 0x867, 0x800, 0xffff, 0x2, 0x0, 0x7fffffff, 0xd06, 0x1, 0x2, 0xc, 0x80000000, 0x7b34, 0x4, 0x8, 0x8, 0x5, 0x0, 0x0, 0x7fff, 0x2, 0xf, 0xd16, 0xb1, 0x4, 0xa38e, 0x40, 0x0, 0x0, 0x1, 0x7, 0x14]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x7fff, 0x4f96, 0x7, 0x2, 0xff, 0x4, 0x8d, 0xa8a, 0x1, 0x1, 0x9, 0x2, 0x101, 0x7fffffff, 0x20b0ab45, 0x2, 0xd, 0x1, 0x80, 0x3, 0x3, 0x2, 0x5, 0x2, 0x734, 0x0, 0x7, 0x1, 0x6, 0x4, 0xffff, 0x5, 0x1, 0xa, 0x3, 0x1, 0x8, 0x9, 0x40, 0x992, 0x400, 0x1, 0x2, 0x7, 0x1, 0x5, 0x3, 0x9, 0x2, 0x0, 0x10, 0x5, 0x7, 0x3, 0xb, 0x6, 0x4, 0x7, 0x401, 0x6a42, 0x3, 0x1, 0xdf, 0x2, 0x4, 0x72, 0x3, 0x4, 0x9a, 0xfffffffc, 0x3, 0x8, 0xdd, 0x6, 0x8, 0xe1f, 0x3, 0x8, 0x7fffffff, 0x7, 0x13, 0xf5, 0x0, 0xffffb14b, 0x10000, 0x0, 0x2, 0x9, 0x0, 0x3, 0x100, 0x7f, 0x4, 0x1, 0x1, 0xd, 0x8, 0x0, 0x1, 0x7, 0x2, 0x5, 0x1, 0x0, 0x0, 0x40, 0x7fffffff, 0xf4d, 0xf064, 0x6, 0x1, 0xdb, 0x0, 0x81, 0x8, 0x2e, 0xfffffffe, 0x2, 0xffffffff, 0x1, 0x7, 0x1, 0x8, 0x8, 0xff, 0x8, 0x10, 0x7, 0x5d02, 0xe436, 0xfffffffb, 0x1, 0x4, 0x1, 0x1de75e3c, 0x8, 0x0, 0x7, 0x80000001, 0x2, 0xd3b, 0x4, 0xffffffff, 0x401, 0x6c24, 0x1c, 0x7ff, 0x1, 0x815f, 0x8, 0x9, 0x6, 0x6, 0x0, 0xb83, 0x3, 0x3, 0x740ced48, 0x3, 0x6, 0x8, 0x837, 0xfffffff0, 0x5, 0xaf0, 0x2, 0x2, 0x401, 0x2b7, 0x90b4, 0xb, 0x80000001, 0x7, 0x3, 0x0, 0x10, 0x6, 0x101, 0x4, 0xb8, 0x2, 0x7, 0x0, 0x1, 0x25f4, 0x2f, 0xe, 0x4, 0x3, 0x100, 0x173000, 0x0, 0x5, 0x7, 0x3, 0x100, 0xfffffffb, 0x16d, 0x8000, 0x3, 0xd888, 0xf, 0x9, 0x8, 0x9, 0x7fff, 0x1, 0xb1b, 0x1, 0x8, 0x1, 0x90000000, 0xffff466f, 0x9, 0x13, 0x6, 0xc74, 0x4, 0x4, 0x3, 0x2c, 0xfffffff9, 0x6, 0x1, 0x1ff, 0xb, 0x8, 0x1, 0x110, 0x3, 0x1, 0x10, 0x5, 0x3eb82bca, 0x9d9, 0x2, 0x4, 0x0, 0x7fffffff, 0x2, 0x101, 0x0, 0x3ff, 0x4, 0x1, 0x4, 0x2, 0x8, 0x0, 0x6, 0x7, 0x6, 0x2a, 0x6682edac, 0x8000]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfd6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x80000001, 0x8, 0x5, 0x2, 0x40, 0x4, 0x101, 0x8f, 0x401, 0x8cac, 0x6, 0x8, 0x1, 0x5, 0x8, 0x9, 0x100, 0x96, 0x2000000, 0x6, 0x7, 0x4, 0x7, 0xfffffffd, 0x6, 0x100, 0x1, 0x380, 0xffff, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x42889a49, 0x9, 0xffffffff, 0x401, 0xbe, 0x6, 0xfff, 0x0, 0x0, 0x4, 0x400, 0x3, 0x6, 0x41c, 0x8000, 0xffff234b, 0x5, 0x5, 0x6, 0x1a80, 0xffff1004, 0x0, 0x6, 0x1, 0x6, 0xb, 0x10, 0x7, 0x80000000, 0x380000, 0x5ecc, 0x5, 0x2, 0x3, 0x5a53, 0x0, 0x7, 0x7, 0x3, 0x3, 0x4, 0x1ff, 0x3, 0xfffffff7, 0xf4, 0xdf3, 0xfffffff9, 0xffffffbe, 0x9, 0x9, 0x0, 0x2, 0x7, 0x7f, 0xfffffffb, 0xbfb, 0x80000000, 0x100, 0x5, 0x7fff, 0xffffe9c3, 0x2, 0x4, 0x5, 0x2, 0x0, 0x7, 0xc8, 0x5, 0x3, 0x8, 0x1ff, 0xe2, 0x3ff, 0x0, 0x9, 0x1, 0x80000000, 0x9, 0x1, 0xa57, 0x1, 0x6, 0x8a4, 0xffffffff, 0x0, 0x6, 0x400, 0x6, 0xfffffffb, 0x401, 0x7, 0x72ea, 0x5, 0x0, 0x40, 0xffff8351, 0x26e, 0x5, 0x3ff, 0x8, 0x6fbc, 0x0, 0xfff, 0x10001, 0x9, 0x7, 0x6ab4, 0x5, 0x9, 0x7f, 0x0, 0x7, 0xffffffff, 0x6, 0x8000, 0x3, 0x2000, 0x2, 0x29fa, 0x1, 0x3, 0x4, 0xf, 0x6, 0x4, 0x9, 0x9, 0x1, 0x80000000, 0x4, 0x401, 0xde5, 0xfffffffa, 0x7, 0xffffffff, 0x2, 0x0, 0x80, 0x5, 0x3, 0xfffffffd, 0x5, 0x5, 0x8, 0x8, 0x6, 0x6, 0x7, 0x8, 0x7fffffff, 0x0, 0x3, 0x5, 0x3, 0x3ff, 0x9, 0xfff, 0x83d5, 0xffffffff, 0x7, 0xe4f, 0x1, 0x3ff, 0x800, 0x3be8, 0x0, 0x80, 0x8, 0x2, 0x6, 0x5ae1, 0xdf3, 0x0, 0x8000, 0x4, 0xffffffff, 0x5, 0xb, 0x7fff, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x10000, 0x100, 0x9, 0x2, 0x12, 0xd1c, 0x4, 0x0, 0x3, 0x4, 0x100, 0xffffff8c, 0x6, 0xecfa, 0x1, 0x9, 0x9bb, 0x32a6, 0x3, 0x4, 0x7, 0x3, 0x4, 0x986, 0x80000000, 0x0, 0xb0a, 0x8b4, 0xa8, 0xb, 0xe7, 0x6, 0x4, 0x7, 0x5, 0x3, 0xb668]}]]}, {0xd, 0x6, "22d9a45efff00c09f2"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x570, 0x2, 0x0, 0x0, {{0xb}, {0x50c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x20000000, 0x7f, 0x6, 0x1, {0x4, 0x2, 0x3, 0x4, 0x7, 0xffffffff}, {0xce, 0x0, 0x5d9, 0x101, 0x8, 0x401}, 0x4, 0x2, 0xc}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x35, 0x8, 0xa2e, 0x1000, 0x1, {0xfd, 0x0, 0x3, 0x5, 0x8001, 0x800000}, {0x8, 0x1, 0x3edc, 0x400, 0x1, 0x2}, 0x2, 0x7, 0x80000001}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x2, 0x7fffffff, 0x7, 0x1, {0x75, 0x3, 0x9, 0x0, 0x2, 0xa}, {0x8, 0x2, 0x601, 0x7, 0x5, 0x10}, 0x9, 0x8, 0x2}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x4, 0x0, 0x10, 0x34b, {0x1, 0x0, 0x1, 0x8, 0x8, 0x10000}, {0x40, 0x0, 0x5, 0x6a, 0x5, 0x27aa1729}, 0x3, 0x3, 0x8001}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb}, @TCA_POLICE_RATE={0x404, 0x2, [0xab, 0x3a4e, 0x10, 0x7, 0x3ff, 0x7, 0x8, 0x0, 0x2, 0x3, 0x8, 0x7, 0x7bd, 0xf0, 0x7, 0x9, 0xffffff00, 0x5, 0x2, 0x5ed, 0x4, 0x7fffffff, 0x5, 0x6, 0x80, 0xfffffffb, 0xe99f, 0xf, 0x101, 0xbf, 0xe, 0x0, 0x3, 0x5, 0x2, 0x6, 0x518, 0x9, 0xf, 0x0, 0x9, 0x6, 0x2, 0x5, 0xa000000, 0x4e, 0x5, 0x6, 0x872, 0xe, 0x4, 0x81, 0x427d0103, 0x80, 0x4, 0x1000, 0x4, 0xd, 0x7fffffff, 0x9, 0x8001, 0x80000000, 0x101, 0x10001, 0x3, 0x5, 0x4, 0x800, 0x6, 0xffffffea, 0x1ff, 0x6, 0x8, 0xf1, 0x6, 0x7, 0x9, 0x1, 0x8, 0x1, 0xfffffff5, 0x1, 0x401, 0x7ff, 0xfffff801, 0x8, 0x9, 0x9, 0x5, 0x6, 0x0, 0x80000000, 0x64dd1663, 0x8, 0xfa86, 0x8, 0x80, 0x3, 0xff80, 0x8, 0x8000, 0x1, 0x2, 0x6, 0x6, 0x0, 0xf, 0xff, 0x3, 0xfecc, 0x8000, 0x568a, 0x2, 0x8000, 0x4, 0x6, 0x9, 0x24cdeb65, 0x9, 0x5, 0xc03, 0x106, 0x8, 0x2, 0x9226, 0xfffffffe, 0x5, 0x2, 0x8, 0x8, 0x1, 0x65c7eb44, 0x3, 0x8, 0x7, 0x200, 0xffffffff, 0x7, 0x401, 0x7ff, 0x3, 0x8, 0x3ff, 0x7fff, 0x8, 0x3f2, 0x1e, 0xb0, 0x4, 0xfff, 0x60, 0x5, 0x59b, 0x1, 0x8001, 0x7, 0xfffff000, 0xff, 0x800, 0x3, 0x4, 0x4, 0x2c5e, 0x8000, 0x6, 0x3, 0x3, 0x0, 0x0, 0x0, 0x9, 0x4, 0x1, 0x28000000, 0x7fffffff, 0x8, 0xc, 0x0, 0x0, 0x3, 0x7, 0x6, 0x9, 0x8001, 0x4, 0xfffffbff, 0x3ff, 0x0, 0x7, 0x4, 0x7f, 0x1, 0x41, 0x2, 0x1, 0x7, 0x80000001, 0x1, 0x5, 0x2, 0x3ff, 0x7, 0x8, 0x6, 0xfff, 0x80000, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0xffff, 0x44, 0x400, 0xec2, 0x8, 0x4, 0x3, 0x886, 0x5610, 0x1, 0xfffffff9, 0xb, 0x8, 0xb63, 0x8000, 0x7, 0x6, 0x0, 0x7, 0x7ff, 0x9581, 0xe5, 0x80000001, 0x2, 0x9, 0x100, 0x4, 0x4, 0x8, 0x80000001, 0x6b, 0x6, 0x8, 0x8f, 0xffffffff, 0x6, 0x6, 0x2, 0x3f, 0x2, 0x80000001, 0x420, 0x4, 0x5, 0x8000]}]]}, {0x3b, 0x6, "5dc4edb3382d313a70fa3cb9f36e9ef25feb4fa21758a5c28853a30f7414591c78e7c593d12bb8633f7d46552525d7390af28cb8d285db"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0x104, 0x16, 0x0, 0x0, {{0xb}, {0xb4, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x80000000, 0x0, 0x2, 0x9, 0x1}}, @TCA_DEF_DATA={0xc, 0x3, 'syztnl1\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x101, 0x40, 0x3, 0x401, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x6, 0x0, 0x5}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'syztnl2\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x2, 0x5, 0xe, 0xffff911e}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x3, 0x8, 0x3, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0xd4, 0x6, 0x20000000, 0x3, 0x6}}]}, {0x28, 0x6, "0265eb2b35407e9a145fdceaa31c86d0796839d298155fd0dc2ec18a1ac28c169f6ab0cc"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}}]}, 0x2cdc}, 0x1, 0x0, 0x0, 0x24004000}, 0x4008001) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000004000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x44e, 0x121e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf9, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x101, 0x79, 0x1, {0x22, 0x452}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x35, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x0, 0x3, 0x7}}]}}}]}}]}}, &(0x7f0000004680)={0xa, &(0x7f0000004040)={0xa, 0x6, 0x310, 0x81, 0xb, 0xb6, 0x20, 0x9}, 0x19, &(0x7f0000004080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "1a85eb5f81df0e959e0c8bb1bf7c2787"}]}, 0xa, [{0xaa, &(0x7f00000040c0)=@string={0xaa, 0x3, "de60f6a872ef006b5a4bfe607e9c9eac7db1e149af174df40956670e0fc63ff528a249c3786789ad77be441ecd8f0a37c5fd390345a4aab06bb1015105cce3b1497d7f435b5d2ef1a530f329c8a6a875215e220282934e3ec75440f8888bcc198cb348a488263f987744453ffee28cc2c38a3279e25a7925549796c3d6ebb753ea2942044dcb825bfc0ca9dc260f6675a9e37b8b26779a94587a1a6972ab11d67c5daac055ad94a6"}}, {0x4, &(0x7f0000004180)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f00000041c0)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000004200)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000004240)=@lang_id={0x4, 0x3, 0x1401}}, {0xe0, &(0x7f0000004280)=@string={0xe0, 0x3, "198f95e71151b20aaadd89355c8025e6a291fe7a285a2faa78b22b76296a3230979d57aa0ccba3633607ba37dfbe5d18ea30bea7c65f951770e33a4921c9918fb434c984135d03a2bd79f179821f60302d62614f7102e4642297e7d4fd7c82d9f555cfa4924d54e21f07d65cd96705d58308c392dfb7b017b95434b7606aa70f9b97e741d09fe1428e34209cca2cd7962b78c909889882d736ab79e48e9933b8ee934b2f8e40372ae9b9f4526948ebc5af65d7644ffaee968e28de7738422313cd01d9db52e424bfbdd568264b7adde1236d71100754db9e71d32c04e8d8"}}, {0xf3, &(0x7f0000004380)=@string={0xf3, 0x3, "b69de582654afe48d76b29ae5967717a598191a5949cc4219f3f43894154facfa97d9fa60fae5f7a47488dac63906a1608ba7c8b265dc458b267b4db544a90d53be45f2da96b9dd81325069910712a9fac9fb87ac8fd1b118a31b3ae098e29235078d48790fd7fa21dc53ffa7aa529af68ceaf8ff88254b60a5e6033beaf8dd610e00d58f39a01f3581a0204245211c86bad63b14f48078b68da4ac700479e8eaef26096bead5860c06920e7cf970fc1e2545d99bfa284dc938bcb9731e12ad947a52745ff8817f529fcdc8d3c0f55a25af6cd355fcc327c6cbaf3f56283f483a5f45931b394c72c241ce3f28fc5ce53de"}}, {0x5c, &(0x7f0000004480)=@string={0x5c, 0x3, "3d19c384796c8312169639b6afc9fcfd93d6af9837164e6f906d71426afe0e1992a2d1feabc1269eadb1793c0e53681fce3e03fab869ded8ebbda69534f29039f064c813cbe9a96f39473c1820f13509d8507e29014934cf64f9"}}, {0x57, &(0x7f0000004500)=@string={0x57, 0x3, "07165d2dc0b9ad8bb3569d5b9a33261f107c2cd74a14af3d7068bf0be3ba4a8b5f792d7a4cc6ad14093b11c0ba80b93ad60c89128b8447d650ad08ff6b0fb7d1a5c6771cc34d329cc2aabcd53750c6e757023e6b27"}}, {0xe1, &(0x7f0000004580)=@string={0xe1, 0x3, "45550d877806a1e8a18289fab09b036094d43f5700563994fd5eb2ebfbc49443794a4a898b679670ecf2a67eb68292defa35a74ab05566a28f56d4bfc8796b4686635ca471ea08c97f8c8ec4f38e26ac10247e897823a25dd9e4ef5b1098fbdb1f1fd23986ffa877786449cbf005e2bac0fbb17994e7c70ee50b19e970718b751201732aa5e190fe4677451dcc36e0b2c7108abaf4b066a117af43f1ad0c16e1494e91f3bf630936dd3857b11d99a9b81b972d695b80a74fedc9576f1215fd2db01fec3fc7c3e4311c6c1ad455043740123caa8acaf8eadac17607f92a3d7e"}}]}) (async) write$tun(r4, &(0x7f0000004740)={@void, @void, @llc={@llc={0xf8, 0x0, "c403", "701ed541f1db5456be2995187686440666c2847455c4b2c96284ce5082abef9f5bbfe6aaab526b545958a27d266889c807f5aaa308945a49a798599af85df20b69a09bbf1017faf578c4f3631e43698ae8ad75938a9de88e648217491ba77ff065af878cf2c2d422c54617380f179da07441d608ff5b8414b6c8e7d9601a437a9fff0f4cf4650e1b065aa4de39"}}}, 0x91) (async) socket$nl_route(0x10, 0x3, 0x0) (async) clock_gettime(0x0, &(0x7f0000004800)={0x0, 0x0}) setsockopt$sock_timeval(r12, 0x1, 0x43, &(0x7f0000004840)={r13, r14/1000+60000}, 0x10) 1m7.256973002s ago: executing program 1 (id=876): r0 = syz_io_uring_setup(0x20110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x32, 0x2007, @fd=r0, 0x80, 0x0, 0x0, 0x0, 0x1, {0x5}}) io_uring_enter(r0, 0x4a5a, 0x2ae5, 0x2, 0x0, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1m7.255309385s ago: executing program 1 (id=877): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64=r1, @ANYBLOB="cf0f47b4d694115a384fb5e139b270d3f2fa90886ccc7272581f6756f52f6d3d3cc5d31a80fa311d38a51b95edb3ff8c40d304b58c47c687a4e5f0f4288d877dd972bb", @ANYBLOB="010300000000000000001c0000000c00018008000100", @ANYRESHEX=r2], 0x20}}, 0x60) mount(0x0, 0x0, 0x0, 0x200010, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r3], 0x7c}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000edffffff0000a5c626532a8bd45e233be48315cd6c042b64902ddb83340ed8292a174eb52a1e0db101192aad2e1f13725d915be5f27becefb06cdbf799cfe4c606acfb76e459341303409f944ff04a32d7caba6446298e62f1293dcd8b63cf1108a1b0fc6cb7a9b4ec33e35057c495a6c4dc8b234cf142d727d620782b8df50476a41069067c0bfdee3190cd71c809757df67baf088632bfa40931c51232c5012aa19a8f269b"], 0x48) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r9 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x100, 0x3, 0x41}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRESDEC=r8], 0x118) io_uring_register$IORING_REGISTER_NAPI(r9, 0x1b, &(0x7f0000000100)={0xffffff24, 0x7}, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r12, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x45, 0x185100}) io_uring_enter(r9, 0x7277, 0x0, 0x28, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) 1m7.070389414s ago: executing program 1 (id=878): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) socket$tipc(0x1e, 0x2, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000900)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) (async) 1m7.019577412s ago: executing program 1 (id=881): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x800000, &(0x7f0000000300)={'trans=virtio,', {[{@access_client}, {@version_u}]}}) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) read$alg(r0, &(0x7f0000000040)=""/100, 0x64) 1m6.830689218s ago: executing program 1 (id=885): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xd80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x100) write$FUSE_WRITE(r2, &(0x7f0000000200)={0x18}, 0xe00) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4000000000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m6.765439944s ago: executing program 32 (id=885): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xd80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x100) write$FUSE_WRITE(r2, &(0x7f0000000200)={0x18}, 0xe00) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4000000000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) 43.577473935s ago: executing program 2 (id=409): madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x66) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') socket$nl_audit(0x10, 0x3, 0x9) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) (async) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="8457", 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r2, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) listen(r1, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) exit(0xffffffffffffffff) timerfd_create(0x8, 0x0) (async) r6 = timerfd_create(0x8, 0x0) timerfd_gettime(r6, &(0x7f0000000000)) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x6, 0x37, 0xa, 0x80000001, 0xb, 0x6, 0xffffffff, 0x2, 0x0, 0x14, 0x9, 0x8, 0x6, 0x8bc, 0x6}}]}}]}, 0x170}}, 0x0) bind$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) gettid() getgid() (async) getgid() r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x8042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x183203, 0x0) fcntl$setlease(r7, 0x400, 0x1) (async) fcntl$setlease(r7, 0x400, 0x1) 36.718864624s ago: executing program 2 (id=409): madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x66) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') socket$nl_audit(0x10, 0x3, 0x9) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) (async) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="8457", 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r2, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) listen(r1, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) exit(0xffffffffffffffff) timerfd_create(0x8, 0x0) (async) r6 = timerfd_create(0x8, 0x0) timerfd_gettime(r6, &(0x7f0000000000)) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x6, 0x37, 0xa, 0x80000001, 0xb, 0x6, 0xffffffff, 0x2, 0x0, 0x14, 0x9, 0x8, 0x6, 0x8bc, 0x6}}]}}]}, 0x170}}, 0x0) bind$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) gettid() getgid() (async) getgid() r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x8042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x183203, 0x0) fcntl$setlease(r7, 0x400, 0x1) (async) fcntl$setlease(r7, 0x400, 0x1) 28.846938968s ago: executing program 2 (id=409): madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x66) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') socket$nl_audit(0x10, 0x3, 0x9) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) (async) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="8457", 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r2, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) listen(r1, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) exit(0xffffffffffffffff) timerfd_create(0x8, 0x0) (async) r6 = timerfd_create(0x8, 0x0) timerfd_gettime(r6, &(0x7f0000000000)) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x6, 0x37, 0xa, 0x80000001, 0xb, 0x6, 0xffffffff, 0x2, 0x0, 0x14, 0x9, 0x8, 0x6, 0x8bc, 0x6}}]}}]}, 0x170}}, 0x0) bind$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) gettid() getgid() (async) getgid() r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x8042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x183203, 0x0) fcntl$setlease(r7, 0x400, 0x1) (async) fcntl$setlease(r7, 0x400, 0x1) 21.764778137s ago: executing program 2 (id=409): madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x66) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') socket$nl_audit(0x10, 0x3, 0x9) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) (async) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="8457", 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r2, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) listen(r1, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) exit(0xffffffffffffffff) timerfd_create(0x8, 0x0) (async) r6 = timerfd_create(0x8, 0x0) timerfd_gettime(r6, &(0x7f0000000000)) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x6, 0x37, 0xa, 0x80000001, 0xb, 0x6, 0xffffffff, 0x2, 0x0, 0x14, 0x9, 0x8, 0x6, 0x8bc, 0x6}}]}}]}, 0x170}}, 0x0) bind$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) gettid() getgid() (async) getgid() r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x8042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x183203, 0x0) fcntl$setlease(r7, 0x400, 0x1) (async) fcntl$setlease(r7, 0x400, 0x1) 17.807145861s ago: executing program 4 (id=1391): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000000)=""/188, 0xbc) syz_usb_disconnect(r1) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x6, 0x8, 0xd, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x4, 0x1, 0x3}, {0x6, 0x24, 0x1a, 0x6, 0x9}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xa, 0xfc, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xbd, 0x8, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x22, 0x3, 0x3}}}}}}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) (async) close(r2) (async) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB='/\x00'/11, @ANYRES32, @ANYBLOB="62bf"], 0x20) (async) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x40044160, 0x3) r5 = dup(r0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x8080}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @random='\x00\x00\x00\b\x00'}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004085}, 0x0) 17.739630819s ago: executing program 4 (id=1392): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='bfs\x00', 0x200000, 0x0) 17.736220215s ago: executing program 4 (id=1394): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080026bd7000fd8000000000000008e50200", @ANYRES32=0x0, @ANYBLOB="060065000b000000"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x841) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000580)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/121, 0x79, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x100, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x39}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xc81968c39572c306}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x44, r3, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x767}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000006) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f0032"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 17.669972211s ago: executing program 4 (id=1396): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000181100", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) read$FUSE(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x41, 0x0) write$nbd(r6, 0x0, 0x0) ioctl$HIDIOCGFEATURE(r6, 0xc0404807, &(0x7f0000000000)={0x9, "b74cc4339a22c30e04b84e2c4a5ba2ea2f784af248c52aad134b33671f39dc8829891e1cf92bf4047a3b02396e22ebac8719aac8ebf07b2f2d01ddff3d9a2b9f"}) 16.118209758s ago: executing program 4 (id=1406): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)}, 0x0) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (rerun: 64) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) write(r1, 0x0, 0x0) (async, rerun: 32) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) (rerun: 32) 15.250219614s ago: executing program 4 (id=1425): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = accept$inet(r1, 0x0, &(0x7f0000000500)) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x470, 0x300, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x3d8, 0x230, 0x230, 0x3d8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0xff, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x800}, {}, {}, {}, {}, {0xffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x200}]}}, @common=@unspec=@time={{0x38}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8000, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4d0) 13.610512294s ago: executing program 2 (id=409): madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x66) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') socket$nl_audit(0x10, 0x3, 0x9) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) (async) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="8457", 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r2, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) listen(r1, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) exit(0xffffffffffffffff) timerfd_create(0x8, 0x0) (async) r6 = timerfd_create(0x8, 0x0) timerfd_gettime(r6, &(0x7f0000000000)) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x6, 0x37, 0xa, 0x80000001, 0xb, 0x6, 0xffffffff, 0x2, 0x0, 0x14, 0x9, 0x8, 0x6, 0x8bc, 0x6}}]}}]}, 0x170}}, 0x0) bind$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) gettid() getgid() (async) getgid() r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x8042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x183203, 0x0) fcntl$setlease(r7, 0x400, 0x1) (async) fcntl$setlease(r7, 0x400, 0x1) 5.888378717s ago: executing program 2 (id=409): madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x66) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') socket$nl_audit(0x10, 0x3, 0x9) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) (async) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="8457", 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r2, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) listen(r1, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) exit(0xffffffffffffffff) timerfd_create(0x8, 0x0) (async) r6 = timerfd_create(0x8, 0x0) timerfd_gettime(r6, &(0x7f0000000000)) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x6, 0x37, 0xa, 0x80000001, 0xb, 0x6, 0xffffffff, 0x2, 0x0, 0x14, 0x9, 0x8, 0x6, 0x8bc, 0x6}}]}}]}, 0x170}}, 0x0) bind$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) gettid() getgid() (async) getgid() r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x8042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x183203, 0x0) fcntl$setlease(r7, 0x400, 0x1) (async) fcntl$setlease(r7, 0x400, 0x1) 2.67963697s ago: executing program 3 (id=1527): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 2.460097934s ago: executing program 0 (id=1530): timerfd_create(0x7, 0x80000) 2.459540663s ago: executing program 0 (id=1531): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0x8, 0x8, 0xd, 0xa, "15765906715403e798d62c37b7e1c8bc29bd6d"}) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x105000, 0x0) close_range(r1, r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="6766c7442400000000006766c74424023cc100476766c744240600000000670f011c240f01c80f01caba4300b8f59bef9a3000170166b80500000066b97e5d00000f01d90fc7aea544c4e2bddf6cb666b9800000c00f326635001000000f300f08", 0x61}], 0x1, 0x12, &(0x7f0000000140)=[@dstype0={0x6, 0x9}, @efer={0x2, 0x1}], 0x2) r2 = accept4(r1, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000200)=0x80, 0x80000) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000240)) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x2c580, 0x0) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x0, &(0x7f00000002c0)=""/49, &(0x7f0000000300)=0x31) r5 = epoll_create1(0x0) pread64(r5, &(0x7f0000000340)=""/226, 0xe2, 0x9) clock_settime(0x5, &(0x7f0000000440)={0x0, 0x989680}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000004c0)={0x3, &(0x7f0000000480)=[{0x8000, 0x4, 0xa6, 0x2}, {0x7, 0xd7, 0x2, 0x4}, {0x9, 0x2, 0x6, 0x6}]}) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x208000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@cache_mmap}, {@cache_loose}, {@access_any}, {@nodevmap}, {@loose}, {@access_any}, {@access_client}], [{@pcr={'pcr', 0x3d, 0xe}}, {@permit_directio}, {@flag='nolazytime'}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r7, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4895}, 0x24000004) sendmmsg$unix(r2, &(0x7f0000001880)=[{{&(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000000840)="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", 0x1000}], 0x1, 0x0, 0x0, 0x24000041}}], 0x1, 0x4000000) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x1c, 0x1, 0x9, 0x801, 0x0, 0x0, {0x2}, [@NFCTH_STATUS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000019c0)={0x0, 0x5}, &(0x7f0000001a00)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000001a40)={r8, 0xc}, 0x8) openat$cgroup_procs(r1, &(0x7f0000001a80)='tasks\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f0000001ac0)) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe, 0x4010, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x11c, &(0x7f0000002ac0)=0x8, 0x0, 0x4) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000002b00)={0x3, r4}) tkill(0x0, 0x13) syz_io_uring_setup(0xa36, &(0x7f0000002b40)={0x0, 0x9643, 0x1000, 0x0, 0x34d}, &(0x7f0000002bc0), &(0x7f0000002c00)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003140)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000002c80)="edc814c099510bcb57de62d1cb28a6f2cb57a6e9e7dca26980bb3a906da31bb6b4e9d1bd40611a6aaa19f1bf67332309d3043af32f2213523ad2ab0e72d04603104d57ad7fb270a7230136c76ad7b37a9e470de5d2742ea4edb30c3aa30454f6f259535921660efda444b17197699e37f4ca60c1844815d453e21bf4479210a51439780091054798b112c13ef14d18b4033c976fe03cc43fd6fd81427989db3408e273d8f1f4773900290044f890cdad57891a2913d8c5f084d7d1b1047084e1bf09fc6d9889cbf7ffadc25c247a3bc54fd12790cf9412b17a397ce905a96cb7d3a6df19f8c4504239ab518eab9bf8d9a0", 0xf1}, {&(0x7f0000002d80)="ce0016c8bf99aca08473ac7816c547a030f1c324e2468cf482ba21eade1f514d", 0x20}, {&(0x7f0000002dc0)="42d8370075dc557e0811fe626da9bd924e1f6e71dbc0917362aae82e56953476fb8f73c0577db086a8617c872e0b7ea45c51d5d5313bfc4b3f22f69b356f8deab02219b7", 0x44}, {&(0x7f0000002e40)="78082914c8daca941aa5e48edcda5c42bc5cb0c5212254098c7776fb67719b151c330a52721772451085fad24a26f54fcc259e69a64bb17a1ddcacc45dc54da5f4e500e520924271a980518a0cd56ce16526dce7ed40b92b7e94aec4a48ce21f611c9fa0934204232979abdbc11ddb2715df7590d21bfb70e4eaf5595444f340f89262ddf809c78b6630920173deb8b1", 0x90}, {&(0x7f0000002f00)="b13dcc9ebe5a82585ad7990a67251d4603640d355801bb25b6f154dd41840e245ae9a8e11c584f6e33ddf70488441b56c6a2f0cdac478874d87dbbd650ca6695d36d75954f3590ec46d1081fd5d3ddc7ea9ecf89e637c5a10fc2f76feb4c975343ca9488257a54ee4be64f5a89ed390836b635877a59418f85ea83b8b382445fd0feb0b76cfe9b601e1f4a7e77f9", 0x8e}, {&(0x7f0000002fc0)="8362836f74379068bacea5be1ef0374445a23a86974a58a6e1bdf63b53dc73f61726fd212140dee38bc89c011f932d0dcbf307711697345ec4afd9c1d7587f30410ea6c82922d95f353bf5805655e6ff62178a19f77c5bc6cf09afeccc2918ed916421430995fcb69846910bf4fbcef94dd8468bcb3c2e1444ed6794e525e00189", 0x81}, {&(0x7f0000003080)="f75bab599fd029d7157da6612d77e5fa488592f767f5", 0x16}], 0x7}, 0x10) 2.348940685s ago: executing program 0 (id=1532): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 2.348635277s ago: executing program 0 (id=1533): unshare(0x62040200) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @empty}, 0x79, 0x0, 0x0, 0x0, 0xb, 0x0, 0x4004, 0x3}) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x9, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfffffff8]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) (async) unshare(0xc040180) (async) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @loopback, 0x6}, 0x1c) 732.278072ms ago: executing program 3 (id=1534): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x1c}}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @multicast, 'ip_vti0\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000180)={0x18, 0x0, {0x2, @remote, 'ip6gre0\x00'}}, 0x1e) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port0\x00', 0xbb, 0x90010, 0x4, 0x8, 0x0, 0x0, 0x200000}) 722.825484ms ago: executing program 3 (id=1535): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x34, r1, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1}}]}}, 0x0, 0x32}, 0x20) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x168, r1, 0x400, 0x84, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_RULES={0x124, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffb}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x12000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xd47}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3873}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xc}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xb}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6d45}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb28b}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffe}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x74}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x168}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x48, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x300, 0x2, 0x0, 0x0, {0xfffffffffffffffd, 0x1f51, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x1, 0xe, 0x1f}}]}, 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x34, r1, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1}}]}}, 0x0, 0x32}, 0x20) (async) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x168, r1, 0x400, 0x84, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_RULES={0x124, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffb}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x12000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xd47}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3873}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xc}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xb}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6d45}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb28b}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffe}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x74}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x168}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) (async) syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00') (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x48, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x300, 0x2, 0x0, 0x0, {0xfffffffffffffffd, 0x1f51, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x1, 0xe, 0x1f}}]}, 0x48}}, 0x0) (async) 609.454622ms ago: executing program 3 (id=1536): ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000000)) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0xffffffffffffffff, 0x290301) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080)) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000000c0)=""/6) (async) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000140)=0x5) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x44480, 0x0) execveat(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={[&(0x7f0000000200)='/dev/snd/midiC#D#\x00']}, &(0x7f0000000300)={[&(0x7f0000000280)='/dev/snd/midiC#D#\x00', &(0x7f00000002c0)='-\x00']}, 0x100) r3 = syz_io_uring_setup(0x1a7a, &(0x7f0000000340)={0x0, 0x1f0a, 0x1, 0x2, 0x3a1, 0x0, r2}, &(0x7f00000003c0), &(0x7f0000000400)) (async) r4 = openat(r2, &(0x7f0000000440)='./file0\x00', 0x0, 0x182) mount$nfs(&(0x7f0000000480)='/dev/video0\x00', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x20098a8, &(0x7f0000000540)={[{}, {'.@&@$'}, {'-\x00'}, {'/dev/vcs\x00'}, {'/dev/snd/midiC#D#\x00'}], [{@subj_role={'subj_role', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@smackfsroot}, {@appraise_type}, {@measure}]}) (async) ioctl$UI_DEV_DESTROY(r4, 0x5502) (async) timerfd_create(0x5, 0x800) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/consoles\x00', 0x0, 0x0) (async) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) tee(0xffffffffffffffff, r6, 0x5, 0x3) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00', {0x40, 0x2, 0xc598, 0xd9}, 0x1f, [0x4, 0x1, 0x2, 0x27, 0x63b, 0x9, 0x31, 0x0, 0x9, 0x200, 0x514, 0x4d26, 0x4, 0x10001, 0x2, 0x9, 0x1, 0x6, 0x10001, 0x6, 0x4, 0x1, 0x8, 0x8, 0x1, 0x31ca, 0x1000, 0x8654, 0x5, 0x5, 0x45, 0xbe8, 0x100, 0x9, 0x8, 0x1, 0x3, 0x3, 0x81, 0x101, 0xb, 0xb1, 0xfff, 0x7, 0x9, 0x3ff, 0x1, 0x80000001, 0x101, 0x6, 0x10001, 0xf, 0x80000000, 0x9, 0x8, 0x650, 0xeaca, 0x5, 0x3, 0x5, 0x8000, 0x7f, 0x6, 0x9], [0xc, 0x2, 0x9, 0x2, 0xf6, 0x80000000, 0x10000, 0x5, 0x4400000, 0xb4, 0x8000, 0x6, 0x101, 0x100, 0x5, 0x3, 0x4, 0x7, 0x7, 0x8d200000, 0x7, 0x10000, 0x9, 0x4, 0x0, 0x0, 0x7, 0x8, 0x2, 0x80000001, 0x9, 0x7, 0x8, 0x3, 0xd22901a, 0x7fff, 0x3ff, 0x0, 0x1, 0x100, 0x5, 0xb, 0x7ff, 0x1, 0x8000, 0x6, 0x7, 0x2, 0xcb9e996, 0x0, 0x331b, 0xa4bd, 0x0, 0xf1d, 0x8, 0x8, 0x3, 0x8, 0x8, 0x7, 0x1b, 0x8, 0x6, 0x1], [0xadf3, 0x2, 0xfff, 0x9, 0xfbd, 0x7, 0x101, 0x800, 0x6, 0x8, 0x6, 0xa000, 0x4c000000, 0xa64, 0xfffffff2, 0xf, 0x1ff, 0x6, 0x4, 0x1487835b, 0x10000, 0x3, 0x8, 0x7fffffff, 0x6, 0x4, 0x7ff, 0x5, 0x2, 0x6, 0x4, 0x4, 0x8, 0x9, 0xe94f, 0x3, 0x4, 0x4, 0x6, 0x5, 0x4, 0x1, 0x7, 0x3, 0x1000, 0xe, 0xd7d, 0xa, 0xa, 0x46c52738, 0x3ff, 0x10001, 0xfffffffe, 0x3, 0x2, 0x9, 0x0, 0x1, 0x7, 0x6, 0x1, 0x3, 0xb, 0x9], [0x7ff, 0x4, 0x3, 0xcf9, 0x401, 0xffffffff, 0x9, 0x9, 0x3, 0x80, 0xfffffff7, 0xe, 0x84f, 0x1, 0x6, 0x6fb, 0x9, 0x8, 0x5, 0x2d64, 0x1, 0x8000, 0x8, 0x1, 0x7fffffff, 0x5, 0xd, 0xfffffff9, 0x80000000, 0xb1d, 0x0, 0xfffffffb, 0x3, 0x4, 0x97, 0x9, 0x7, 0xc1, 0x1, 0xfffffffa, 0x3, 0x1000, 0x8, 0x9, 0x2, 0x6, 0x4, 0x7, 0x6, 0x5, 0x1, 0x1, 0x9, 0x4, 0x5, 0x5, 0x4, 0x9, 0xffffff31, 0xfff, 0x1, 0x7391, 0x8]}, 0x45c) (async) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f0000000ac0), &(0x7f0000000b00)=0x8) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) read$FUSE(r7, &(0x7f0000000b80)={0x2020}, 0x2020) (async) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvfrom$netrom(r8, &(0x7f0000002bc0)=""/227, 0xe3, 0x2020, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0xc) (async) lseek(r8, 0x7, 0x0) (async) timerfd_create(0x0, 0x80800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000002ec0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002d00)={0x164, 0x3, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x260b}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffff5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x10000}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8917}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xac}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4f9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x603}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x463ed7b0}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x6}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x40804}, 0x80) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000003240)={&(0x7f0000002f00)="cda8718a9a88c34362ace328643dcffe15632541c4d3deb5d1299bc8aa2570d69766db5a43ebe7b3f28212b1a6935d1d3872f4a53e4096c1b7f6beac81f726be219f53452cb0894ff32845fd7ce69db0ae89eb703a0e8afd99aa9cd96e4e2e71cfbc24efc8542e5c90d4693db81568f1afeef15496cabf672e07c956130516e128629324a1304b80cac9a0d4c3920deaa8bcfe4833ad2c35b3dc69380a1f096765c4463481644fc3711bd24e9991abf4ac7b5836a43236a29e644c8a5b3b877ee69f07d6e77f8bf77a1ed80760da12b90f7d011fb8d50b33cd2247ca8ef109da74e863438531c07144121a9e918be68c53b5505a9cd1c2ef68", &(0x7f0000003000)=""/205, &(0x7f0000003100)="cdc460781dcc094a5fcd6efff6b42bdb70a0276dbecd1d1de4b69f195e7c44890f6eedb5e536b3e50f1e4efc6ae175fa", &(0x7f0000003140)="a89690c5f08f6180cf126b30554dbd25cbb2178d906a45f9f62febe2ae010d9b6978e4e4ecff16bf4327d08271f9f69da70f8d28e82413bf1ec8448239a0d189b3d20cd36590daf069555818d2e7d93b653d7de27480ff75c7478030b0d1bed062bc30ae60397fc756cf7963ad550ffd4eb2efcc857f5b1a5d65c2fc630c7ca3da75353f6f8ac2036f9f7c86cc77cf9d77d15186b649b76c7a7832dbe228a6b0c56bc5e5c08b79616cf868062c2910f1163c3bc7ef6b3ed76c97a23322da6a5fbf3ad5d4a2dd9433bb7c9899f204c8959cc7e8678e3cde0be26f08f96bf6e2f6b96499b259f5491056701c85b3ce", 0x2, r2}, 0x38) (async) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000003280)={0x79, 0x2, 0x1ff, 0x6, 0x9, 0x9}) (async) r9 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r9, 0x8912, &(0x7f0000003380)=@buf={0x87, &(0x7f00000032c0)="c8edb559d007ace4f6bef4865812eca20fe9b6360a5acde0a47d13a32c77bd22493fa6efd17011168e6db9fe5361c5c5d3b616135bdefa6d89c079ca1e29f8f4cbb4f16d33c9a093a3c9639bff5e2c4128b5e5787b65c0f10d9b11eee45080c28e7e49bc0a8a39d4679c10658a551a36308b75f1d5e50f394aea68fda247a80f77b7ab9a889fb0"}) 605.709406ms ago: executing program 3 (id=1537): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x389a03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r4, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r4, 0x4141, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r5 = eventfd2(0x5, 0x1) syz_usb_connect$cdc_ncm(0x5, 0x7c, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r5}) dup2(r0, r1) write$eventfd(r5, 0x0, 0x0) 409.703382ms ago: executing program 0 (id=1538): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4c044) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000034000900000000000040000002000000337d5645aca7d415fc5d36c6f3d5ddbb85308fad9c4c0ec6067adf10c29981b2154b1ecf"], 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x4000010) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00c53e5754f7fe0d215b4e000000010000000000000080000000000000eca4f9e872b61b9fbadf22835e4ab2707839d0b1eb58a67f8fa6181149ada636d26db5ce3e21b16ed67caaed419c6daab3daf9d50abfa56f78d4aedeecdfb3b94a923a39ded29187786eb18ac188fcf4b2e733506c4a4afd0063f5ed38fec292e8c427e7e02c815fd5349f7fc5de37e3d6fca70ffc7a1678bef48a3c7a4cffd44ead66763024062e28d38e73e649cc8a8c9dc5eec8103b9ba88e351d89690ee069543ed10055b1ce2bcf79187a44ed0ce7f0dbacced47e06c8d7cd1f0e653c9f46ac6e1205b154b5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000340009000000000000400000020000001000018009006400a553"], 0x24}, 0x1, 0x0, 0x0, 0x4841}, 0x4000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="470f23fc6541fc48b8e7320000000000000f23d80f21f80f23e1f8f30f1edd0f2221c744240200800000ff2c24f30f516797c483fd005b02ea6426470f01cf65666466430f3833af00580000", 0x4c}], 0x1, 0x24, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0xc, &(0x7f0000000080)=ANY=[@ANYRESOCT=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETPERSIST(r13, 0x400454cb, 0x1) connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 207.34459ms ago: executing program 0 (id=1539): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffc, {0x0, 0x0, 0x0, r4, {}, {0xffe2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c861}, 0x400c000) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00050002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendfile(r6, r0, 0x0, 0x80009) 207.167964ms ago: executing program 33 (id=1425): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = accept$inet(r1, 0x0, &(0x7f0000000500)) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x470, 0x300, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x3d8, 0x230, 0x230, 0x3d8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0xff, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x800}, {}, {}, {}, {}, {0xffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x200}]}}, @common=@unspec=@time={{0x38}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8000, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4d0) 0s ago: executing program 3 (id=1541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getnetconf={0x1c, 0x52, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4040800) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181010100000000010000000000000e000a000f00000002800600121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x600, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) kernel console output (not intermixed with test programs): u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 148.468889][ T40] audit: type=1400 audit(1752015747.219:56229): avc: denied { call } for pid=9559 comm="syz.3.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 148.474796][ T40] audit: type=1400 audit(1752015747.219:56230): avc: denied { transfer } for pid=9559 comm="syz.3.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 148.704080][ T9582] netlink: 'syz.0.948': attribute type 5 has an invalid length. [ 148.706480][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.948'. [ 148.777544][ T29] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 148.896926][ T40] audit: type=1400 audit(1752015747.649:56231): avc: denied { bind } for pid=9592 comm="syz.0.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 148.937253][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 148.942572][ T29] usb 8-1: config 191 has an invalid interface number: 223 but max is 0 [ 148.946066][ T29] usb 8-1: config 191 has no interface number 0 [ 148.949519][ T29] usb 8-1: config 191 interface 223 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 148.954132][ T29] usb 8-1: config 191 interface 223 has no altsetting 0 [ 148.959941][ T29] usb 8-1: New USB device found, idVendor=04ca, idProduct=3007, bcdDevice=11.c7 [ 148.963723][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.967068][ T29] usb 8-1: Product: Ч [ 148.974021][ T29] usb 8-1: Manufacturer: à „ [ 148.976016][ T29] usb 8-1: SerialNumber: И [ 149.014829][ T9644] overlayfs: failed to clone upperpath [ 149.392618][ T9568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.396431][ T9568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.401762][ T9568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.406081][ T9568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.413853][ T9568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.416791][ T9568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.477664][ T9668] netlink: 24 bytes leftover after parsing attributes in process `syz.0.960'. [ 149.572274][ T9675] netlink: 'syz.0.962': attribute type 4 has an invalid length. [ 149.578032][ T9676] netlink: 'syz.0.962': attribute type 4 has an invalid length. [ 149.611504][ T9680] 9pnet_fd: Insufficient options for proto=fd [ 149.614180][ T40] audit: type=1400 audit(1752015748.369:56232): avc: denied { mounton } for pid=9679 comm="syz.0.963" path="/file0" dev="rootfs" ino=31035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 149.626378][ T10] usb 8-1: USB disconnect, device number 21 [ 149.677450][ T5954] Bluetooth: hci1: command tx timeout [ 149.877976][ T9637] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.924163][ T40] audit: type=1400 audit(1752015749.679:56233): avc: denied { setcurrent } for pid=9696 comm="syz.3.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 150.964067][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.969380][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.972528][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.975350][ T5949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.979823][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.987317][ T9705] netlink: 129704 bytes leftover after parsing attributes in process `syz.0.971'. [ 151.111564][ T9702] chnl_net:caif_netlink_parms(): no params data found [ 151.194257][ T9702] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.196593][ T9702] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.199582][ T9702] bridge_slave_0: entered allmulticast mode [ 151.202272][ T9702] bridge_slave_0: entered promiscuous mode [ 151.205361][ T9702] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.208650][ T9702] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.210899][ T9702] bridge_slave_1: entered allmulticast mode [ 151.213465][ T9702] bridge_slave_1: entered promiscuous mode [ 151.245999][ T9702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.251320][ T9702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.262680][ T40] audit: type=1400 audit(1752015750.019:56234): avc: denied { ioctl } for pid=9716 comm="syz.3.974" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 151.293972][ T9702] team0: Port device team_slave_0 added [ 151.298916][ T9702] team0: Port device team_slave_1 added [ 151.321377][ T40] audit: type=1400 audit(1752015750.079:56235): avc: denied { write } for pid=9716 comm="syz.3.974" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 151.339943][ T9702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.342431][ T9702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.353369][ T9702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.357924][ T9702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.360149][ T9702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.368646][ T9702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.387321][ T72] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 151.413984][ T9702] hsr_slave_0: entered promiscuous mode [ 151.416508][ T9702] hsr_slave_1: entered promiscuous mode [ 151.419117][ T9702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.422081][ T9702] Cannot create hsr debugfs directory [ 151.472749][ T9637] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.538968][ T72] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.554562][ T72] usb 9-1: config 0 has no interfaces? [ 151.556390][ T72] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.560335][ T72] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.565490][ T72] usb 9-1: config 0 descriptor?? [ 151.591765][ T9637] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.690200][ T9733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.978'. [ 151.695597][ T9637] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.700423][ T9733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1054 sclass=netlink_route_socket pid=9733 comm=syz.0.978 [ 151.773021][ T839] usb 9-1: USB disconnect, device number 3 [ 151.811152][ T9637] bridge_slave_1: left allmulticast mode [ 151.812997][ T9637] bridge_slave_1: left promiscuous mode [ 151.815727][ T9637] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.819510][ T9637] bridge_slave_0: left allmulticast mode [ 151.821287][ T9637] bridge_slave_0: left promiscuous mode [ 151.824754][ T9637] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.110728][ T9637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.118065][ T9637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.122295][ T9637] bond0 (unregistering): Released all slaves [ 152.433026][ T9769] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 152.515865][ T9771] ALSA: mixer_oss: invalid index 100000 [ 152.587740][ T9637] hsr_slave_0: left promiscuous mode [ 153.027297][ T5954] Bluetooth: hci2: command tx timeout [ 153.030681][ T9637] hsr_slave_1: left promiscuous mode [ 153.033500][ T9637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.036056][ T9637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.039780][ T9637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.042175][ T9637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.303153][ T9637] veth1_macvtap: left promiscuous mode [ 153.305004][ T9637] veth0_macvtap: left promiscuous mode [ 153.306757][ T9637] veth1_vlan: left promiscuous mode [ 153.308631][ T9637] veth0_vlan: left promiscuous mode [ 153.979929][ T9637] team0 (unregistering): Port device team_slave_1 removed [ 154.046380][ T9637] team0 (unregistering): Port device team_slave_0 removed [ 154.614512][ T9780] netlink: 64 bytes leftover after parsing attributes in process `syz.3.991'. [ 154.652379][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 154.652394][ T40] audit: type=1400 audit(1752015753.409:56242): avc: denied { ioctl } for pid=9785 comm="syz.0.992" path="socket:[30707]" dev="sockfs" ino=30707 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 154.710352][ T9794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.995'. [ 154.710837][ T9792] ufs: You didn't specify the type of your ufs filesystem [ 154.710837][ T9792] [ 154.710837][ T9792] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 154.710837][ T9792] [ 154.710837][ T9792] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 154.725760][ T9792] ufs: failed to set blocksize [ 154.767441][ T40] audit: type=1400 audit(1752015753.519:56243): avc: denied { create } for pid=9797 comm="syz.0.996" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 154.773800][ T40] audit: type=1400 audit(1752015753.519:56244): avc: denied { write } for pid=9797 comm="syz.0.996" name="file0" dev="tmpfs" ino=2338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 154.814768][ T9702] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 154.834308][ T9800] syz.3.997 (9800): /proc/9799/oom_adj is deprecated, please use /proc/9799/oom_score_adj instead. [ 154.843229][ T9702] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 154.851825][ T9702] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 154.859231][ T9702] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 154.864268][ T40] audit: type=1400 audit(1752015753.619:56245): avc: denied { unlink } for pid=5948 comm="syz-executor" name="file0" dev="tmpfs" ino=2338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 154.958659][ T9702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.983485][ T9702] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.995549][ T9632] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.998572][ T9632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.007432][ T9631] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.010342][ T9631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.107260][ T5954] Bluetooth: hci2: command tx timeout [ 155.244008][ T9831] loop2: detected capacity change from 0 to 7 [ 155.251344][ T6502] loop2: p1 [ 155.252873][ T6502] loop2: partition table partially beyond EOD, truncated [ 155.255777][ T6502] loop2: p1 size 3506438144 extends beyond EOD, truncated [ 155.266476][ T9831] loop2: p1 [ 155.267829][ T9831] loop2: partition table partially beyond EOD, truncated [ 155.270845][ T9831] loop2: p1 size 3506438144 extends beyond EOD, truncated [ 155.303043][ T9702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.316036][ T9836] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1003'. [ 155.344229][ T9702] veth0_vlan: entered promiscuous mode [ 155.351335][ T9702] veth1_vlan: entered promiscuous mode [ 155.363603][ T9838] overlay: Unknown parameter 'mask' [ 155.366900][ T9702] veth0_macvtap: entered promiscuous mode [ 155.371513][ T9702] veth1_macvtap: entered promiscuous mode [ 155.372471][ T40] audit: type=1400 audit(1752015754.129:56246): avc: denied { mount } for pid=9837 comm="syz.4.1004" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 155.384873][ T9702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.392520][ T9702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.396885][ T9702] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.400429][ T9702] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.402995][ T9702] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.405765][ T9702] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.422392][ T40] audit: type=1400 audit(1752015754.179:56247): avc: denied { unmount } for pid=9334 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 155.471066][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 155.481344][ T9637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.484582][ T9637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.484951][ T40] audit: type=1400 audit(1752015754.239:56248): avc: denied { listen } for pid=9844 comm="syz.0.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.511420][ T9634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.514741][ T9634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.950653][ T40] audit: type=1400 audit(1752015754.709:56249): avc: denied { append } for pid=9850 comm="syz.3.1008" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 155.958484][ T9851] veth0: entered promiscuous mode [ 155.978558][ T9853] veth0: left promiscuous mode [ 156.247307][ T839] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 156.408930][ T839] usb 8-1: Using ep0 maxpacket: 32 [ 156.413045][ T839] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 156.415299][ T9862] xt_hashlimit: size too large, truncated to 1048576 [ 156.418937][ T839] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 156.422468][ T839] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 156.425239][ T839] usb 8-1: Product: syz [ 156.426949][ T839] usb 8-1: Manufacturer: syz [ 156.432312][ T839] usb 8-1: SerialNumber: syz [ 156.436426][ T839] usb 8-1: config 0 descriptor?? [ 156.438767][ T9856] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 156.442470][ T839] hub 8-1:0.0: bad descriptor, ignoring hub [ 156.445061][ T839] hub 8-1:0.0: probe with driver hub failed with error -5 [ 156.533389][ T40] audit: type=1400 audit(1752015755.289:56250): avc: denied { map } for pid=9873 comm="syz.0.1015" path="socket:[32302]" dev="sockfs" ino=32302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 156.543109][ T40] audit: type=1400 audit(1752015755.289:56251): avc: denied { setopt } for pid=9873 comm="syz.0.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 156.585136][ T9876] overlayfs: failed to clone upperpath [ 156.758052][ T9881] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 237 [ 156.758069][ T9879] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 237 [ 156.894220][ T9893] gfs2: gfs2 mount does not exist [ 156.898144][ T9893] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1022'. [ 156.930610][ T9895] binder: 9894:9895 ioctl c0306201 200000000900 returned -14 [ 157.038865][ T9856] usb 8-1: reset high-speed USB device number 22 using dummy_hcd [ 157.083711][ T9633] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.197282][ T9856] usb 8-1: device descriptor read/64, error -71 [ 157.457297][ T9856] usb 8-1: reset high-speed USB device number 22 using dummy_hcd [ 157.600010][ T9856] usb 8-1: device descriptor read/64, error -71 [ 157.847455][ T9856] usb 8-1: reset high-speed USB device number 22 using dummy_hcd [ 157.868113][ T9856] usb 8-1: device descriptor read/8, error -71 [ 158.107413][ T9856] usb 8-1: reset high-speed USB device number 22 using dummy_hcd [ 158.128137][ T9856] usb 8-1: device descriptor read/8, error -71 [ 158.200275][ T9908] netlink: 'syz.4.1026': attribute type 1 has an invalid length. [ 158.225473][ T9908] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.240054][ T6510] usb 8-1: USB disconnect, device number 22 [ 158.272141][ T9908] bond1: (slave veth3): Enslaving as an active interface with a down link [ 158.285273][ T9908] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 158.288765][ T9908] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 158.363241][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.367977][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.371857][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.374958][ T5949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.377880][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 158.397351][ T6510] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 158.527926][ T6510] usb 8-1: device descriptor read/64, error -71 [ 158.582273][ T9920] chnl_net:caif_netlink_parms(): no params data found [ 158.675111][ T9920] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.677883][ T9920] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.680175][ T9920] bridge_slave_0: entered allmulticast mode [ 158.682762][ T9920] bridge_slave_0: entered promiscuous mode [ 158.685882][ T9920] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.688324][ T9920] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.690681][ T9920] bridge_slave_1: entered allmulticast mode [ 158.693309][ T9920] bridge_slave_1: entered promiscuous mode [ 158.765015][ T9955] batman_adv: batadv0: Adding interface: dummy0 [ 158.767711][ T9955] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.777908][ T9955] batman_adv: batadv0: Interface activated: dummy0 [ 158.781789][ T9920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.786225][ T9920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.797457][ T6510] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 158.863405][ T9633] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.876641][ T9920] team0: Port device team_slave_0 added [ 158.880722][ T9920] team0: Port device team_slave_1 added [ 158.925008][ T9920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.927372][ T9920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.934927][ T9920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.947346][ T6510] usb 8-1: device descriptor read/64, error -71 [ 158.950803][ T9633] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.961193][ T9920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.963423][ T9920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.971506][ T9920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.035084][ T9920] hsr_slave_0: entered promiscuous mode [ 159.038125][ T9920] hsr_slave_1: entered promiscuous mode [ 159.040355][ T9920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.042749][ T9920] Cannot create hsr debugfs directory [ 159.059014][ T9633] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.067776][ T6510] usb usb8-port1: attempt power cycle [ 159.120427][ T9969] 9pnet_fd: Insufficient options for proto=fd [ 159.244422][ T9983] netlink: 'syz.4.1044': attribute type 10 has an invalid length. [ 159.265369][ T9983] team0: Device hsr_slave_0 failed to register rx_handler [ 159.326430][ T9633] bridge_slave_1: left allmulticast mode [ 159.328696][ T9633] bridge_slave_1: left promiscuous mode [ 159.330450][ T9633] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.354427][ T9633] bridge_slave_0: left allmulticast mode [ 159.356317][ T9633] bridge_slave_0: left promiscuous mode [ 159.358844][ T9633] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.568213][T10010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1053'. [ 159.571125][T10010] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1053'. [ 159.620083][T10022] netlink: 'syz.0.1053': attribute type 10 has an invalid length. [ 159.661569][ T9633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.666940][ T9633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.672312][ T9633] bond0 (unregistering): Released all slaves [ 159.683538][T10022] bridge0: port 1(team0) entered blocking state [ 159.685535][T10022] bridge0: port 1(team0) entered disabled state [ 159.687955][T10022] team0: entered allmulticast mode [ 159.689950][T10022] : entered allmulticast mode [ 159.701594][T10022] team0: left allmulticast mode [ 159.703133][T10022] : left allmulticast mode [ 159.709479][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1053'. [ 159.712258][T10028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1053'. [ 159.874326][T10050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10050 comm=syz.4.1062 [ 159.880436][T10050] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1062'. [ 159.896680][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1065'. [ 159.921142][T10052] overlayfs: failed to clone upperpath [ 159.926851][T10053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1065'. [ 159.989682][ T9633] hsr_slave_0: left promiscuous mode [ 159.992286][ T9633] hsr_slave_1: left promiscuous mode [ 159.995493][ T9633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.998897][ T9633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.002772][ T9633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.005501][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 160.005516][ T40] audit: type=1400 audit(1752015758.759:56254): avc: denied { setopt } for pid=10058 comm="syz.0.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 160.005766][ T9633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.057793][ T9633] veth1_macvtap: left promiscuous mode [ 160.059592][ T9633] veth0_macvtap: left promiscuous mode [ 160.062429][ T9633] veth1_vlan: left promiscuous mode [ 160.064103][ T9633] veth0_vlan: left promiscuous mode [ 160.117422][ T6510] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 160.149128][ T6510] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.153383][ T6510] usb 8-1: config 0 has no interfaces? [ 160.155158][ T6510] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.159208][ T6510] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.164324][ T6510] usb 8-1: config 0 descriptor?? [ 160.371515][ T72] usb 8-1: USB disconnect, device number 25 [ 160.399238][ T5954] Bluetooth: hci2: command tx timeout [ 160.668217][ T40] audit: type=1400 audit(1752015759.419:56255): avc: denied { unmount } for pid=9334 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 160.733105][ T9633] team0 (unregistering): Port device team_slave_1 removed [ 160.811092][ T9633] team0 (unregistering): Port device team_slave_0 removed [ 160.937374][ T72] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 161.097252][ T72] usb 9-1: Using ep0 maxpacket: 8 [ 161.100186][ T72] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 161.103480][ T72] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.106511][ T72] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.109720][ T72] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 161.112569][ T72] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.116386][ T72] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 161.119365][ T72] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.336436][ T72] usb 9-1: GET_CAPABILITIES returned 0 [ 161.339611][ T72] usbtmc 9-1:16.0: can't read capabilities [ 161.417538][T10096] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 161.541739][T10076] x_tables: duplicate underflow at hook 1 [ 161.543880][ T40] audit: type=1400 audit(1752015760.299:56256): avc: denied { write } for pid=10075 comm="syz.4.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 161.556329][T10122] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1084'. [ 161.576023][ T9] usb 9-1: USB disconnect, device number 4 [ 161.625886][ T9920] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 161.640952][ T9920] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 161.643812][T10135] netlink: 'syz.3.1088': attribute type 1 has an invalid length. [ 161.646258][T10135] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1088'. [ 161.651291][T10135] netlink: 'syz.3.1088': attribute type 1 has an invalid length. [ 161.654815][ T9920] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 161.666902][ T9920] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 161.726398][T10150] vivid-000: ================= START STATUS ================= [ 161.726600][ T9920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.731846][T10150] vivid-000: Test Pattern: 75% Colorbar [ 161.731905][T10150] vivid-000: Fill Percentage of Frame: 100 [ 161.731919][T10150] vivid-000: Horizontal Movement: No Movement [ 161.731953][T10150] vivid-000: Vertical Movement: No Movement [ 161.731964][T10150] vivid-000: OSD Text Mode: All [ 161.741652][T10150] vivid-000: Show Border: false [ 161.742811][ T9920] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.743133][T10150] vivid-000: Show Square: false [ 161.746741][T10150] vivid-000: Sensor Flipped Horizontally: false [ 161.748797][T10150] vivid-000: Sensor Flipped Vertically: false [ 161.750748][T10150] vivid-000: Insert SAV Code in Image: false [ 161.752203][ T9635] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.752605][T10150] vivid-000: Insert EAV Code in Image: false [ 161.754793][ T9635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.756656][T10150] vivid-000: Insert Video Guard Band: false [ 161.761007][ T9635] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.761912][T10150] vivid-000: Reduced Framerate: false [ 161.761927][T10150] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 161.761939][T10150] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 161.764135][ T9635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.765759][T10150] vivid-000: Enable Capture Cropping: [ 161.771057][T10145] tipc: Enabling of bearer rejected, failed to enable media [ 161.772947][T10150] true [ 161.778949][T10150] vivid-000: Enable Capture Composing: true [ 161.780818][T10150] vivid-000: Enable Capture Scaler: true [ 161.782570][T10150] vivid-000: Timestamp Source: End of Frame [ 161.784424][T10150] vivid-000: Colorspace: sRGB [ 161.785894][T10150] vivid-000: Transfer Function: Default [ 161.788027][T10150] vivid-000: Y'CbCr Encoding: Default [ 161.789775][T10150] vivid-000: HSV Encoding: Hue 0-179 [ 161.791506][T10150] vivid-000: Quantization: Default [ 161.793139][T10150] vivid-000: Apply Alpha To Red Only: false [ 161.794991][T10150] vivid-000: Standard Aspect Ratio: 14x9 [ 161.796760][T10150] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 161.799713][T10150] vivid-000: DV Timings: 720x480p59 inactive [ 161.801674][T10150] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 161.804007][T10150] vivid-000: Maximum EDID Blocks: 2 [ 161.805729][T10150] vivid-000: Limited RGB Range (16-235): false [ 161.808050][T10150] vivid-000: Rx RGB Quantization Range: Automatic [ 161.810109][T10150] vivid-000: Power Present: 0x00000001 [ 161.813397][T10150] tpg source WxH: 320x240 (R'G'B) [ 161.815019][T10150] tpg field: 1 [ 161.816110][T10150] tpg crop: (0,0)/320x240 [ 161.817733][T10150] tpg compose: (0,0)/320x240 [ 161.819239][T10150] tpg colorspace: 8 [ 161.821061][T10150] tpg transfer function: 0/2 [ 161.823023][T10150] tpg quantization: 0/1 [ 161.824342][T10150] tpg RGB range: 0/2 [ 161.825522][T10150] vivid-000: ================== END STATUS ================== [ 161.836242][T10155] netlink: 'syz.0.1092': attribute type 2 has an invalid length. [ 161.839612][T10155] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1092'. [ 161.844246][T10155] netlink: 'syz.0.1092': attribute type 2 has an invalid length. [ 161.848054][T10155] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1092'. [ 161.925704][ T9920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.964186][ T9920] veth0_vlan: entered promiscuous mode [ 161.972899][ T9920] veth1_vlan: entered promiscuous mode [ 161.997711][ T9920] veth0_macvtap: entered promiscuous mode [ 162.003066][ T9920] veth1_macvtap: entered promiscuous mode [ 162.018208][ T9920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.025938][ T9920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.030947][ T9920] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.033759][ T9920] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.036537][ T9920] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.040404][ T9920] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.099578][ T9637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.107595][ T9637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.134358][ T9637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.140540][ T9637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.188032][T10182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.192495][T10182] nftables ruleset with unbound chain [ 162.723658][T10201] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !å¯fIZEô¿¹ô,ô =©ÜÝ$)²% Ä‚L [ 162.727280][ T40] audit: type=1400 audit(1752015761.479:56257): avc: denied { setopt } for pid=10200 comm="syz.3.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 162.804771][ T40] audit: type=1400 audit(1752015761.559:56258): avc: denied { ioctl } for pid=10200 comm="syz.3.1105" path="socket:[35025]" dev="sockfs" ino=35025 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 162.900284][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1113'. [ 162.934926][T10226] netlink: 'syz.0.1114': attribute type 39 has an invalid length. [ 162.942141][ T40] audit: type=1400 audit(1752015761.699:56259): avc: denied { getopt } for pid=10218 comm="syz.4.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 163.044808][T10235] overlayfs: failed to resolve './bus/file0': -2 [ 163.051335][T10235] overlayfs: conflicting lowerdir path [ 163.086754][T10235] block device autoloading is deprecated and will be removed. [ 163.615381][ T40] audit: type=1400 audit(1752016018.368:56260): avc: denied { append } for pid=10259 comm="syz.4.1125" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 163.616250][T10260] xt_hashlimit: size too large, truncated to 1048576 [ 163.897077][ T40] audit: type=1400 audit(1752016018.648:56261): avc: denied { mount } for pid=10287 comm="syz.0.1132" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 164.066456][ T40] audit: type=1400 audit(1752016018.818:56262): avc: denied { watch watch_reads } for pid=10297 comm="syz.4.1136" path="/proc/162/smaps" dev="proc" ino=34516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 164.209308][ T40] audit: type=1400 audit(1752016018.968:56263): avc: denied { create } for pid=10299 comm="syz.4.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 164.252098][T10303] MPI: mpi too large (16392 bits) [ 164.443877][ T9634] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.630820][T10311] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 165.634361][T10312] __nla_validate_parse: 2 callbacks suppressed [ 165.634374][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1138'. [ 165.714247][T10327] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1144'. [ 165.733326][ T6510] IPVS: starting estimator thread 0... [ 165.768935][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.773276][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.776764][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.780421][ T5949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.785481][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.817351][T10332] IPVS: using max 44 ests per chain, 105600 per kthread [ 165.891530][T10335] chnl_net:caif_netlink_parms(): no params data found [ 165.979301][T10335] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.981767][T10335] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.984030][T10356] Cannot find del_set index 85 as target [ 165.984043][T10335] bridge_slave_0: entered allmulticast mode [ 165.984060][T10350] Cannot find del_set index 85 as target [ 165.990394][T10335] bridge_slave_0: entered promiscuous mode [ 165.994944][T10335] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.997328][T10335] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.999543][T10335] bridge_slave_1: entered allmulticast mode [ 166.002188][T10335] bridge_slave_1: entered promiscuous mode [ 166.050287][T10335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.054935][T10335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.059712][ T40] audit: type=1400 audit(1752016020.818:56264): avc: denied { read } for pid=10361 comm="syz.4.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 166.118574][ T9634] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.128150][T10335] team0: Port device team_slave_0 added [ 166.131807][T10335] team0: Port device team_slave_1 added [ 166.169181][T10335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.171216][ T40] audit: type=1400 audit(1752016020.928:56265): avc: denied { setopt } for pid=10367 comm="syz.4.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 166.171355][T10335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.185605][T10335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.206050][ T9634] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.213678][T10370] loop6: detected capacity change from 0 to 7 [ 166.216765][T10335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.218009][T10370] Dev loop6: unable to read RDB block 7 [ 166.219452][T10335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.220642][T10370] loop6: unable to read partition table [ 166.228607][T10335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.234157][T10370] loop6: partition table beyond EOD, truncated [ 166.236050][T10370] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 166.253053][ T5362] udevd[5362]: worker [6502] terminated by signal 33 (Unknown signal 33) [ 166.257270][ T5362] udevd[5362]: worker [6502] failed while handling '/devices/virtual/block/loop6' [ 166.270641][T10335] hsr_slave_0: entered promiscuous mode [ 166.272913][T10335] hsr_slave_1: entered promiscuous mode [ 166.274977][T10335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.277434][T10335] Cannot create hsr debugfs directory [ 166.321474][ T9634] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.455394][ T9634] bridge_slave_1: left allmulticast mode [ 166.457208][ T9634] bridge_slave_1: left promiscuous mode [ 166.458999][ T9634] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.462413][ T9634] bridge_slave_0: left allmulticast mode [ 166.464195][ T9634] bridge_slave_0: left promiscuous mode [ 166.465946][ T9634] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.693829][ T9634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.698210][ T9634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.703485][ T9634] bond0 (unregistering): Released all slaves [ 167.049843][ T9634] hsr_slave_0: left promiscuous mode [ 167.052201][ T9634] hsr_slave_1: left promiscuous mode [ 167.054158][ T9634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.056539][ T9634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.061488][ T9634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.064342][ T9634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.107601][ T9634] veth1_macvtap: left promiscuous mode [ 167.109873][ T9634] veth0_macvtap: left promiscuous mode [ 167.112290][ T9634] veth1_vlan: left promiscuous mode [ 167.114436][ T9634] veth0_vlan: left promiscuous mode [ 167.160024][ T40] audit: type=1400 audit(1752016021.918:56266): avc: denied { listen } for pid=10402 comm="syz.4.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.759384][ T9634] team0 (unregistering): Port device team_slave_1 removed [ 167.823798][ T9634] team0 (unregistering): Port device team_slave_0 removed [ 167.827517][ T5949] Bluetooth: hci2: command tx timeout [ 168.434904][T10419] overlayfs: failed to clone upperpath [ 168.448429][T10419] overlayfs: failed to clone upperpath [ 168.467970][ T5949] Bluetooth: hci1: command 0x0406 tx timeout [ 168.527585][T10335] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 168.540470][T10335] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 168.560886][T10335] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 168.564214][T10426] ufs: You didn't specify the type of your ufs filesystem [ 168.564214][T10426] [ 168.564214][T10426] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 168.564214][T10426] [ 168.564214][T10426] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 168.574957][T10426] ufs: failed to set blocksize [ 168.579772][T10335] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 168.670867][T10435] openvswitch: netlink: Message has 3 unknown bytes. [ 168.673042][T10435] openvswitch: netlink: Actions may not be safe on all matching packets [ 168.676736][T10435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30873 sclass=netlink_route_socket pid=10435 comm=syz.4.1174 [ 168.684436][T10335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.708793][T10335] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.719117][ T9632] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.721887][ T9632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.734305][ T9632] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.737494][ T9632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.737631][T10441] ata3.00: invalid multi_count 1 ignored [ 168.881991][T10335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.913604][T10335] veth0_vlan: entered promiscuous mode [ 168.919007][T10335] veth1_vlan: entered promiscuous mode [ 168.935260][T10335] veth0_macvtap: entered promiscuous mode [ 168.939744][T10335] veth1_macvtap: entered promiscuous mode [ 168.950758][T10335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.956843][T10335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.965188][T10468] JFS: discard option not supported on device [ 168.965732][T10335] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.968200][T10468] syz.4.1183: attempt to access beyond end of device [ 168.968200][T10468] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 168.970735][T10335] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.974965][T10468] syz.4.1183: attempt to access beyond end of device [ 168.974965][T10468] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 168.976756][T10335] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.981761][T10468] Mount JFS Failure: -5 [ 168.984646][T10335] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.034541][ T9634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.037109][ T9634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.052763][T10475] netlink: 'syz.0.1186': attribute type 10 has an invalid length. [ 169.053408][ T9635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.055592][T10475] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 169.058445][ T9635] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.063510][T10475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.170767][T10482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1189'. [ 169.254335][T10492] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1191'. [ 169.520424][T10513] Bluetooth: MGMT ver 1.23 [ 169.525593][ T40] audit: type=1400 audit(1752016024.278:56267): avc: denied { execute } for pid=10512 comm="syz.4.1197" path="/proc/235/task/236/net/ip6_mr_cache" dev="proc" ino=4026533370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 169.585745][ T40] audit: type=1400 audit(1752016024.338:56268): avc: denied { relabelfrom } for pid=10516 comm="syz.3.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 169.596908][ T40] audit: type=1400 audit(1752016024.338:56269): avc: denied { relabelto } for pid=10516 comm="syz.3.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 170.541771][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1206'. [ 170.812110][T10539] bond3: entered promiscuous mode [ 170.829631][T10542] PKCS8: Unsupported PKCS#8 version [ 170.836453][T10542] xfrm1: entered allmulticast mode [ 170.872762][T10544] @: renamed from vlan0 (while UP) [ 170.993991][T10560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1213'. [ 171.257631][ T886] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 171.298947][ T9632] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.407369][ T886] usb 9-1: Using ep0 maxpacket: 32 [ 171.410292][ T886] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 171.412850][ T886] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 171.416105][ T886] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 171.420367][ T886] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 171.424509][ T886] usb 9-1: config 0 interface 0 has no altsetting 0 [ 171.428419][ T886] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 171.431362][ T886] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 171.433950][ T886] usb 9-1: Product: syz [ 171.435271][ T886] usb 9-1: Manufacturer: syz [ 171.436738][ T886] usb 9-1: SerialNumber: syz [ 171.440497][ T886] usb 9-1: config 0 descriptor?? [ 171.444028][ T886] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 171.448290][ T886] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 171.649745][ T886] usb 9-1: USB disconnect, device number 5 [ 171.651956][ C3] ldusb 9-1:0.0: usb_submit_urb failed (-19) [ 171.655518][ T886] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 171.854954][T10562] loop2: detected capacity change from 0 to 7 [ 171.866570][T10562] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 171.868902][T10562] loop2: partition table partially beyond EOD, truncated [ 171.873033][T10562] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 172.600943][T10571] netlink: 'syz.4.1217': attribute type 1 has an invalid length. [ 172.619311][T10571] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 172.623814][T10571] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 172.679236][T10573] gretap1: entered promiscuous mode [ 172.683247][T10573] bond4: (slave gretap1): making interface the new active one [ 172.686653][T10573] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 172.742425][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.743437][T10587] netlink: 'syz.4.1220': attribute type 1 has an invalid length. [ 172.747932][T10587] netlink: 'syz.4.1220': attribute type 3 has an invalid length. [ 172.750543][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.750879][T10587] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1220'. [ 172.753901][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.756570][T10587] NCSI netlink: No device for ifindex 0 [ 172.768154][ T5949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.771594][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.821067][ T9632] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.831129][T10592] netlink: 'syz.4.1222': attribute type 1 has an invalid length. [ 172.871092][T10594] netlink: 'syz.0.1223': attribute type 2 has an invalid length. [ 172.873781][T10594] netlink: 'syz.0.1223': attribute type 1 has an invalid length. [ 172.876464][T10594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 172.909752][ T9632] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.948763][T10607] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 172.990920][T10615] netlink: 'syz.0.1229': attribute type 4 has an invalid length. [ 173.002814][ T9632] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.057924][T10585] chnl_net:caif_netlink_parms(): no params data found [ 173.061149][ T6510] IPVS: starting estimator thread 0... [ 173.141843][T10626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=10626 comm=syz.0.1231 [ 173.147702][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1231'. [ 173.157433][T10624] IPVS: using max 44 ests per chain, 105600 per kthread [ 173.233124][T10585] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.237643][T10585] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.239931][T10585] bridge_slave_0: entered allmulticast mode [ 173.243373][T10585] bridge_slave_0: entered promiscuous mode [ 173.252446][T10585] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.254691][T10585] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.256921][T10585] bridge_slave_1: entered allmulticast mode [ 173.262438][T10585] bridge_slave_1: entered promiscuous mode [ 173.262585][T10640] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1234'. [ 173.281938][ T9632] bridge_slave_1: left allmulticast mode [ 173.283794][ T9632] bridge_slave_1: left promiscuous mode [ 173.285582][ T9632] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.298654][ T9632] bridge_slave_0: left allmulticast mode [ 173.300452][ T9632] bridge_slave_0: left promiscuous mode [ 173.302524][ T9632] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.353519][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1236'. [ 173.554870][ T9632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.559457][ T9632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.563056][ T9632] bond0 (unregistering): Released all slaves [ 173.603078][T10651] overlayfs: failed to clone upperpath [ 173.604557][T10585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.620129][T10585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.652628][T10653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1238'. [ 173.655455][T10653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1238'. [ 173.723632][T10585] team0: Port device team_slave_0 added [ 173.729606][T10585] team0: Port device team_slave_1 added [ 173.771442][T10669] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 173.773501][T10669] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 173.778874][T10669] vhci_hcd vhci_hcd.0: Device attached [ 173.791450][T10585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.793611][T10585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.802057][T10585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.808905][T10585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.811720][T10585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.812396][T10671] vhci_hcd: connection closed [ 173.823297][T10585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.825916][ T9635] vhci_hcd: stop threads [ 173.831858][ T9635] vhci_hcd: release socket [ 173.833788][ T9635] vhci_hcd: disconnect device [ 173.845488][T10680] netlink: 'syz.4.1244': attribute type 11 has an invalid length. [ 173.848875][T10680] netlink: 'syz.4.1244': attribute type 11 has an invalid length. [ 173.851374][T10680] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1244'. [ 173.884819][ T40] audit: type=1400 audit(1752016028.638:56270): avc: denied { setopt } for pid=10682 comm="syz.0.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 173.934539][T10585] hsr_slave_0: entered promiscuous mode [ 173.937217][ T40] audit: type=1400 audit(1752016028.688:56271): avc: denied { execute } for pid=10686 comm="syz.4.1246" path="/proc/sys/fs/binfmt_misc/register" dev="binfmt_misc" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=file permissive=1 [ 173.947808][T10585] hsr_slave_1: entered promiscuous mode [ 173.954892][T10585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.957728][T10585] Cannot create hsr debugfs directory [ 173.962597][ T9632] hsr_slave_0: left promiscuous mode [ 173.964733][ T9632] hsr_slave_1: left promiscuous mode [ 173.968120][ T9632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.971269][ T9632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.975078][ T9632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.980923][ T9632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.015111][ T9632] veth1_macvtap: left promiscuous mode [ 174.016960][ T9632] veth0_macvtap: left promiscuous mode [ 174.019152][ T9632] veth1_vlan: left promiscuous mode [ 174.020857][ T9632] veth0_vlan: left promiscuous mode [ 174.632419][ T9632] team0 (unregistering): Port device team_slave_1 removed [ 174.699211][ T9632] team0 (unregistering): Port device team_slave_0 removed [ 174.788389][ T5949] Bluetooth: hci2: command tx timeout [ 175.254637][T10694] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1248'. [ 175.283341][T10704] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 175.520228][T10736] input: syz1 as /devices/virtual/input/input18 [ 175.585143][T10741] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10741 comm=syz.3.1261 [ 175.890617][T10748] cgroup: fork rejected by pids controller in /syz3 [ 176.133713][T10585] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 176.193620][T10585] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 176.472114][T10803] netlink: 'syz.0.1268': attribute type 2 has an invalid length. [ 176.474752][T10585] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 176.537282][T10585] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 176.611518][T10585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.626794][T10748] syz.3.1264 (10748) used greatest stack depth: 19040 bytes left [ 176.633357][T10585] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.651727][ T9635] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.653978][ T9635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.660927][ T9628] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.663212][ T9628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.684195][T10585] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.699027][T10585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.749263][T10845] __nla_validate_parse: 2 callbacks suppressed [ 176.749274][T10845] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1275'. [ 176.840911][T10585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.873382][ T5949] Bluetooth: hci2: command tx timeout [ 176.906881][T10585] veth0_vlan: entered promiscuous mode [ 176.914804][T10585] veth1_vlan: entered promiscuous mode [ 176.935853][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1278'. [ 176.938884][T10856] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1278'. [ 176.942158][T10585] veth0_macvtap: entered promiscuous mode [ 176.948265][T10585] veth1_macvtap: entered promiscuous mode [ 176.967617][T10585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.974305][T10585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.989243][T10585] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.991968][T10585] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.994638][T10585] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.997503][T10585] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.078401][ T9633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.081173][ T9633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.095258][ T9633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.098182][ T9633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.163283][T10863] overlayfs: failed to clone upperpath [ 177.167222][ T40] audit: type=1400 audit(1752016031.918:56272): avc: denied { ioctl } for pid=10860 comm="syz.4.1279" path="socket:[38750]" dev="sockfs" ino=38750 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 177.269173][T10869] tipc: Enabling of bearer rejected, failed to enable media [ 177.280066][T10868] tipc: Enabled bearer , priority 0 [ 177.349444][T10878] overlayfs: failed to clone upperpath [ 177.355737][ T40] audit: type=1400 audit(1752016032.108:56273): avc: denied { link } for pid=10877 comm="syz.0.1285" name="file1" dev="tmpfs" ino=3015 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 177.398740][T10883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=10883 comm=syz.0.1286 [ 177.442858][T10887] netlink: 'syz.0.1287': attribute type 64 has an invalid length. [ 177.445430][T10887] netlink: 'syz.0.1287': attribute type 4 has an invalid length. [ 177.450766][T10887] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1287'. [ 177.476093][T10887] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 177.487601][T10887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1287'. [ 177.802043][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1290'. [ 177.804776][T10894] netlink: 'syz.4.1290': attribute type 30 has an invalid length. [ 177.811529][T10894] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.814239][T10894] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.816884][T10894] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.819747][T10894] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.823902][ T40] audit: type=1400 audit(1752016032.578:56274): avc: denied { watch_sb watch_reads } for pid=10895 comm="syz.0.1291" path="/557/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=3035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 177.889465][T10900] overlayfs: failed to clone upperpath [ 177.982531][T10902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1292'. [ 178.037209][ T40] audit: type=1400 audit(1752016032.788:56275): avc: denied { shutdown } for pid=10897 comm="syz.4.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.212191][T10917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1298'. [ 178.216993][T10917] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 178.342798][T10923] netlink: 'syz.0.1300': attribute type 1 has an invalid length. [ 178.360426][T10923] 8021q: adding VLAN 0 to HW filter on device bond6 [ 178.368459][ T40] audit: type=1400 audit(1752016033.128:56276): avc: denied { relabelfrom } for pid=10922 comm="syz.0.1300" name="NETLINK" dev="sockfs" ino=38838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 178.381393][T10923] bond6: (slave gretap2): making interface the new active one [ 178.384395][T10923] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 178.388561][ T40] audit: type=1400 audit(1752016033.128:56277): avc: denied { relabelto } for pid=10922 comm="syz.0.1300" name="NETLINK" dev="sockfs" ino=38838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 178.586710][T10927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1301'. [ 178.595676][T10766] syz.3.1264 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 178.617256][T10766] CPU: 2 UID: 0 PID: 10766 Comm: syz.3.1264 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 178.617274][T10766] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 178.617281][T10766] Call Trace: [ 178.617285][T10766] [ 178.617290][T10766] dump_stack_lvl+0x16c/0x1f0 [ 178.617326][T10766] dump_header+0x101/0x930 [ 178.617344][T10766] oom_kill_process+0x270/0xa60 [ 178.617360][T10766] out_of_memory+0x350/0x1700 [ 178.617378][T10766] ? __pfx_out_of_memory+0x10/0x10 [ 178.617397][T10766] mem_cgroup_out_of_memory+0x118/0x130 [ 178.617415][T10766] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 178.617430][T10766] ? do_raw_spin_unlock+0x172/0x230 [ 178.617446][T10766] try_charge_memcg+0x72b/0xd50 [ 178.617464][T10766] ? __pfx_try_charge_memcg+0x10/0x10 [ 178.617480][T10766] ? find_held_lock+0x1/0x80 [ 178.617494][T10766] ? rcu_read_unlock+0x17/0x60 [ 178.617515][T10766] charge_memcg+0x8a/0x230 [ 178.617530][T10766] __mem_cgroup_charge+0x2b/0x1e0 [ 178.617548][T10766] shmem_alloc_and_add_folio+0x514/0xc20 [ 178.617566][T10766] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 178.617582][T10766] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 178.617598][T10766] shmem_get_folio_gfp+0x67f/0x1600 [ 178.617615][T10766] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 178.617630][T10766] ? __pte_offset_map_lock+0x174/0x310 [ 178.617649][T10766] shmem_write_begin+0x160/0x300 [ 178.617665][T10766] ? find_held_lock+0x2b/0x80 [ 178.617678][T10766] ? __pfx_shmem_write_begin+0x10/0x10 [ 178.617693][T10766] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 178.617704][T10766] ? __pfx_timestamp_truncate+0x10/0x10 [ 178.617724][T10766] ? ns_to_timespec64+0x59/0xc0 [ 178.617742][T10766] generic_perform_write+0x3d0/0x930 [ 178.617761][T10766] ? __pfx_generic_perform_write+0x10/0x10 [ 178.617775][T10766] ? inode_needs_update_time.part.0+0x191/0x270 [ 178.617796][T10766] shmem_file_write_iter+0x10e/0x140 [ 178.617813][T10766] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 178.617828][T10766] __kernel_write_iter+0x31a/0xa90 [ 178.617844][T10766] ? __pfx___kernel_write_iter+0x10/0x10 [ 178.617857][T10766] ? __up_read+0x1f8/0x750 [ 178.617870][T10766] ? dump_user_range+0x745/0xb60 [ 178.617887][T10766] dump_user_range+0x41f/0xb60 [ 178.617903][T10766] ? __pfx_dump_user_range+0x10/0x10 [ 178.617917][T10766] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 178.617938][T10766] ? __pfx_writenote+0x10/0x10 [ 178.617956][T10766] elf_core_dump+0x288a/0x3a90 [ 178.617978][T10766] ? __pfx_elf_core_dump+0x10/0x10 [ 178.617991][T10766] ? kasan_save_stack+0x42/0x60 [ 178.618004][T10766] ? kasan_save_stack+0x33/0x60 [ 178.618028][T10766] ? kasan_save_track+0x14/0x30 [ 178.618043][T10766] ? __kasan_kmalloc+0xaa/0xb0 [ 178.618055][T10766] ? do_coredump+0x1c9a/0x4f10 [ 178.618066][T10766] ? get_signal+0x22e3/0x26d0 [ 178.618080][T10766] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 178.618096][T10766] ? 0xffffffffff600000 [ 178.618132][T10766] ? do_coredump+0x399c/0x4f10 [ 178.618143][T10766] do_coredump+0x399c/0x4f10 [ 178.618169][T10766] ? __pfx_do_coredump+0x10/0x10 [ 178.618191][T10766] ? find_held_lock+0x2b/0x80 [ 178.618214][T10766] ? is_bpf_text_address+0x8a/0x1a0 [ 178.618232][T10766] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 178.618248][T10766] ? is_bpf_text_address+0x94/0x1a0 [ 178.618260][T10766] ? kernel_text_address+0x8d/0x100 [ 178.618273][T10766] ? __kernel_text_address+0xd/0x40 [ 178.618284][T10766] ? unwind_get_return_address+0x59/0xa0 [ 178.618305][T10766] ? stack_depot_save_flags+0x28/0xa40 [ 178.618321][T10766] ? __lock_acquire+0xb8a/0x1c90 [ 178.618333][T10766] ? kasan_save_stack+0x42/0x60 [ 178.618345][T10766] ? kasan_save_stack+0x33/0x60 [ 178.618357][T10766] ? kasan_save_track+0x14/0x30 [ 178.618370][T10766] ? kasan_save_free_info+0x3b/0x60 [ 178.618380][T10766] ? __kasan_slab_free+0x51/0x70 [ 178.618393][T10766] ? kmem_cache_free+0x2d1/0x4d0 [ 178.618406][T10766] ? __sigqueue_free+0xba/0x2a0 [ 178.618425][T10766] ? get_signal+0xcba/0x26d0 [ 178.618437][T10766] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 178.618471][T10766] ? proc_coredump_connector+0x2d1/0x4f0 [ 178.618484][T10766] ? __pfx_proc_coredump_connector+0x10/0x10 [ 178.618499][T10766] ? rcu_is_watching+0x12/0xc0 [ 178.618515][T10766] get_signal+0x22e3/0x26d0 [ 178.618532][T10766] ? force_sig_fault+0xc4/0x100 [ 178.618546][T10766] ? __pfx_get_signal+0x10/0x10 [ 178.618565][T10766] arch_do_signal_or_restart+0x8f/0x7d0 [ 178.618577][T10766] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 178.618590][T10766] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 178.618612][T10766] irqentry_exit_to_user_mode+0x12a/0x270 [ 178.618629][T10766] asm_exc_page_fault+0x26/0x30 [ 178.618640][T10766] RIP: 0033:0x7f59ea18e929 [ 178.618652][T10766] Code: Unable to access opcode bytes at 0x7f59ea18e8ff. [ 178.618658][T10766] RSP: 002b:00007f59eb053fe8 EFLAGS: 00010206 [ 178.618668][T10766] RAX: 0000000000000000 RBX: 00007f59ea3b6080 RCX: 00007f59ea18e929 [ 178.618674][T10766] RDX: 0000200000000300 RSI: 0000000000000000 RDI: 0000000000001000 [ 178.618680][T10766] RBP: 00007f59ea210b39 R08: 0000200000000980 R09: 0000200000000980 [ 178.618687][T10766] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 178.618693][T10766] R13: 0000000000000000 R14: 00007f59ea3b6080 R15: 00007ffc837d6608 [ 178.618707][T10766] [ 178.618999][T10766] memory: usage 307200kB, limit 307200kB, failcnt 14854 [ 178.740650][T10945] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1306'. [ 178.744899][T10766] memory+swap: usage 426060kB, limit 9007199254740988kB, failcnt 0 [ 178.796651][T10766] kmem: usage 6624kB, limit 9007199254740988kB, failcnt 0 [ 178.799124][T10766] Memory cgroup stats for /syz3: [ 178.799865][T10766] cache 307396608 [ 178.802703][T10766] rss 385024 [ 178.803783][T10766] rss_huge 0 [ 178.804853][T10766] shmem 307396608 [ 178.806028][T10766] mapped_file 0 [ 178.807887][T10766] dirty 0 [ 178.808931][T10766] writeback 0 [ 178.810024][T10766] workingset_refault_anon 19 [ 178.811570][T10766] workingset_refault_file 0 [ 178.813026][T10766] swap 121712640 [ 178.814213][T10766] swapcached 0 [ 178.815352][T10766] pgpgin 240926 [ 178.816487][T10766] pgpgout 166293 [ 178.818055][T10766] pgfault 68285 [ 178.819230][T10766] pgmajfault 20 [ 178.820413][T10766] inactive_anon 106045440 [ 178.822223][T10766] active_anon 201744384 [ 178.822678][ T40] audit: type=1326 audit(1752016033.578:56278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10951 comm="syz.0.1309" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd2f98e929 code=0x0 [ 178.823595][T10766] inactive_file 0 [ 178.832959][T10766] active_file 0 [ 178.834101][T10766] unevictable 0 [ 178.835462][T10766] hierarchical_memory_limit 314572800 [ 178.847317][T10766] hierarchical_memsw_limit 9223372036854771712 [ 178.849304][T10766] total_cache 307396608 [ 178.849660][T10950] vlan0: entered allmulticast mode [ 178.850695][T10766] total_rss 385024 [ 178.850702][T10766] total_rss_huge 0 [ 178.850706][T10766] total_shmem 307396608 [ 178.850711][T10766] total_mapped_file 0 [ 178.850715][T10766] total_dirty 0 [ 178.850719][T10766] total_writeback 0 [ 178.850723][T10766] total_workingset_refault_anon 19 [ 178.850729][T10766] total_workingset_refault_file 0 [ 178.850734][T10766] total_swap 121712640 [ 178.852454][T10950] veth1: entered allmulticast mode [ 178.853587][T10766] total_swapcached 0 [ 178.853594][T10766] total_pgpgin 240927 [ 178.853598][T10766] total_pgpgout 166294 [ 178.853603][T10766] total_pgfault 68287 [ 178.853607][T10766] total_pgmajfault 20 [ 178.853611][T10766] total_inactive_anon 106045440 [ 178.853616][T10766] total_active_anon 201744384 [ 178.876038][T10766] total_inactive_file 0 [ 178.879362][T10766] total_active_file 0 [ 178.880721][T10766] total_unevictable 0 [ 178.882065][T10766] anon_cost 0 [ 178.883204][T10766] file_cost 0 [ 178.884343][T10766] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1264,pid=10759,uid=0 [ 178.889594][T10766] Memory cgroup out of memory: Killed process 10759 (syz.3.1264) total-vm:45172kB, anon-rss:128kB, file-rss:29952kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 178.968556][T10764] syz.3.1264 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 178.971985][T10764] CPU: 1 UID: 0 PID: 10764 Comm: syz.3.1264 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 178.972001][T10764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 178.972008][T10764] Call Trace: [ 178.972013][T10764] [ 178.972018][T10764] dump_stack_lvl+0x16c/0x1f0 [ 178.972038][T10764] dump_header+0x101/0x930 [ 178.972056][T10764] oom_kill_process+0x270/0xa60 [ 178.972073][T10764] out_of_memory+0x350/0x1700 [ 178.972091][T10764] ? __pfx_out_of_memory+0x10/0x10 [ 178.972110][T10764] mem_cgroup_out_of_memory+0x118/0x130 [ 178.972122][T10764] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 178.972137][T10764] ? do_raw_spin_unlock+0x172/0x230 [ 178.972153][T10764] try_charge_memcg+0x72b/0xd50 [ 178.972171][T10764] ? __pfx_try_charge_memcg+0x10/0x10 [ 178.972187][T10764] ? find_held_lock+0x1/0x80 [ 178.972201][T10764] ? rcu_read_unlock+0x17/0x60 [ 178.972221][T10764] charge_memcg+0x8a/0x230 [ 178.972236][T10764] __mem_cgroup_charge+0x2b/0x1e0 [ 178.972254][T10764] shmem_alloc_and_add_folio+0x514/0xc20 [ 178.972272][T10764] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 178.972287][T10764] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 178.972304][T10764] shmem_get_folio_gfp+0x67f/0x1600 [ 178.972320][T10764] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 178.972335][T10764] ? __pte_offset_map_lock+0x174/0x310 [ 178.972354][T10764] shmem_write_begin+0x160/0x300 [ 178.972368][T10764] ? find_held_lock+0x2b/0x80 [ 178.972381][T10764] ? __pfx_shmem_write_begin+0x10/0x10 [ 178.972395][T10764] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 178.972406][T10764] ? __pfx_timestamp_truncate+0x10/0x10 [ 178.972425][T10764] generic_perform_write+0x3d0/0x930 [ 178.972443][T10764] ? __pfx_generic_perform_write+0x10/0x10 [ 178.972457][T10764] ? inode_needs_update_time.part.0+0x191/0x270 [ 178.972478][T10764] shmem_file_write_iter+0x10e/0x140 [ 178.972495][T10764] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 178.972510][T10764] __kernel_write_iter+0x31a/0xa90 [ 178.972525][T10764] ? __pfx___kernel_write_iter+0x10/0x10 [ 178.972539][T10764] ? __up_read+0x1f8/0x750 [ 178.972552][T10764] ? dump_user_range+0x745/0xb60 [ 178.972568][T10764] dump_user_range+0x41f/0xb60 [ 178.972589][T10764] ? __pfx_dump_user_range+0x10/0x10 [ 178.972603][T10764] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 178.972623][T10764] ? __pfx_writenote+0x10/0x10 [ 178.972641][T10764] elf_core_dump+0x288a/0x3a90 [ 178.972663][T10764] ? __pfx_elf_core_dump+0x10/0x10 [ 178.972677][T10764] ? kasan_save_stack+0x42/0x60 [ 178.972690][T10764] ? kasan_save_stack+0x33/0x60 [ 178.972702][T10764] ? kasan_save_track+0x14/0x30 [ 178.972715][T10764] ? __kasan_kmalloc+0xaa/0xb0 [ 178.972727][T10764] ? do_coredump+0x1c9a/0x4f10 [ 178.972738][T10764] ? get_signal+0x22e3/0x26d0 [ 178.972751][T10764] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 178.972768][T10764] ? 0xffffffffff600000 [ 178.972802][T10764] ? do_coredump+0x399c/0x4f10 [ 178.972814][T10764] do_coredump+0x399c/0x4f10 [ 178.972831][T10764] ? __pfx_do_coredump+0x10/0x10 [ 178.972844][T10764] ? find_held_lock+0x2b/0x80 [ 178.972858][T10764] ? is_bpf_text_address+0x8a/0x1a0 [ 178.972873][T10764] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 178.972889][T10764] ? is_bpf_text_address+0x94/0x1a0 [ 178.972901][T10764] ? kernel_text_address+0x8d/0x100 [ 178.972914][T10764] ? __kernel_text_address+0xd/0x40 [ 178.972925][T10764] ? unwind_get_return_address+0x59/0xa0 [ 178.972945][T10764] ? stack_depot_save_flags+0x28/0xa40 [ 178.972962][T10764] ? __lock_acquire+0xb8a/0x1c90 [ 178.972973][T10764] ? kasan_save_stack+0x42/0x60 [ 178.972986][T10764] ? kasan_save_stack+0x33/0x60 [ 178.972998][T10764] ? kasan_save_track+0x14/0x30 [ 178.973010][T10764] ? kasan_save_free_info+0x3b/0x60 [ 178.973021][T10764] ? __kasan_slab_free+0x51/0x70 [ 178.973034][T10764] ? kmem_cache_free+0x2d1/0x4d0 [ 178.973046][T10764] ? __sigqueue_free+0xba/0x2a0 [ 178.973061][T10764] ? get_signal+0xcba/0x26d0 [ 178.973073][T10764] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 178.973106][T10764] ? proc_coredump_connector+0x2d1/0x4f0 [ 178.973118][T10764] ? __pfx_proc_coredump_connector+0x10/0x10 [ 178.973134][T10764] ? rcu_is_watching+0x12/0xc0 [ 178.973150][T10764] get_signal+0x22e3/0x26d0 [ 178.973167][T10764] ? force_sig_fault+0xc4/0x100 [ 178.973181][T10764] ? __pfx_get_signal+0x10/0x10 [ 178.973199][T10764] arch_do_signal_or_restart+0x8f/0x7d0 [ 178.973211][T10764] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 178.973224][T10764] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 178.973246][T10764] irqentry_exit_to_user_mode+0x12a/0x270 [ 178.973263][T10764] asm_exc_page_fault+0x26/0x30 [ 178.973273][T10764] RIP: 0033:0x7f59ea18e929 [ 178.973287][T10764] Code: Unable to access opcode bytes at 0x7f59ea18e8ff. [ 178.973291][T10764] RSP: 002b:00007f59eb053fe8 EFLAGS: 00010206 [ 178.973301][T10764] RAX: 0000000000000000 RBX: 00007f59ea3b6080 RCX: 00007f59ea18e929 [ 178.973307][T10764] RDX: 0000200000000300 RSI: 0000000000000000 RDI: 0000000000001000 [ 178.973313][T10764] RBP: 00007f59ea210b39 R08: 0000200000000980 R09: 0000200000000980 [ 178.973320][T10764] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 178.973326][T10764] R13: 0000000000000000 R14: 00007f59ea3b6080 R15: 00007ffc837d6608 [ 178.973340][T10764] [ 178.973345][T10764] memory: usage 307200kB, limit 307200kB, failcnt 15761 [ 179.151438][T10764] memory+swap: usage 402504kB, limit 9007199254740988kB, failcnt 0 [ 179.153891][T10764] kmem: usage 6632kB, limit 9007199254740988kB, failcnt 0 [ 179.156085][T10764] Memory cgroup stats for /syz3: [ 179.156170][T10764] cache 289488896 [ 179.159475][T10764] rss 364544 [ 179.160551][T10764] rss_huge 0 [ 179.161592][T10764] shmem 289095680 [ 179.162757][T10764] mapped_file 0 [ 179.163885][T10764] dirty 0 [ 179.164845][T10764] writeback 0 [ 179.165927][T10764] workingset_refault_anon 19 [ 179.167559][T10764] workingset_refault_file 32 [ 179.169022][T10764] swap 112668672 [ 179.170151][T10764] swapcached 12288 [ 179.171339][T10764] pgpgin 243800 [ 179.172445][T10764] pgpgout 173541 [ 179.173570][T10764] pgfault 68460 [ 179.174676][T10764] pgmajfault 22 [ 179.175790][T10764] inactive_anon 206852096 [ 179.177187][T10764] active_anon 82526208 [ 179.178502][T10764] inactive_file 0 [ 179.179670][T10764] active_file 393216 [ 179.180926][T10764] unevictable 0 [ 179.182035][T10764] hierarchical_memory_limit 314572800 [ 179.183716][T10764] hierarchical_memsw_limit 9223372036854771712 [ 179.185629][T10764] total_cache 289488896 [ 179.186939][T10764] total_rss 364544 [ 179.188527][T10764] total_rss_huge 0 [ 179.189743][T10764] total_shmem 289095680 [ 179.191050][T10764] total_mapped_file 0 [ 179.192325][T10764] total_dirty 0 [ 179.193434][T10764] total_writeback 0 [ 179.194642][T10764] total_workingset_refault_anon 19 [ 179.196210][T10764] total_workingset_refault_file 32 [ 179.203348][T10764] total_swap 112668672 [ 179.204755][T10764] total_swapcached 12288 [ 179.206151][T10764] total_pgpgin 243801 [ 179.207739][T10764] total_pgpgout 173542 [ 179.209098][T10764] total_pgfault 68462 [ 179.210460][T10764] total_pgmajfault 22 [ 179.211824][T10764] total_inactive_anon 206852096 [ 179.213449][T10764] total_active_anon 82526208 [ 179.214975][T10764] total_inactive_file 0 [ 179.216342][T10764] total_active_file 393216 [ 179.218324][T10764] total_unevictable 0 [ 179.219695][T10764] anon_cost 0 [ 179.220848][T10764] file_cost 0 [ 179.222010][T10764] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1264,pid=10758,uid=0 [ 179.252023][T10764] Memory cgroup out of memory: Killed process 10758 (syz.3.1264) total-vm:45172kB, anon-rss:128kB, file-rss:28928kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 179.276952][ T9632] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.287215][ T40] audit: type=1400 audit(1752016034.038:56279): avc: denied { read } for pid=10958 comm="syz.4.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 180.147847][T10770] syz.3.1264 (10770) used greatest stack depth: 18680 bytes left [ 180.168534][T10766] syz.3.1264 (10766) used greatest stack depth: 17528 bytes left [ 180.383260][ T9632] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.451364][ T9632] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.529653][ T9632] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.664990][ T9632] bridge_slave_1: left allmulticast mode [ 180.666825][ T9632] bridge_slave_1: left promiscuous mode [ 180.669038][ T9632] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.673203][ T9632] bridge_slave_0: left allmulticast mode [ 180.675559][ T9632] bridge_slave_0: left promiscuous mode [ 180.679738][ T9632] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.703927][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 180.709866][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 180.714713][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 180.726652][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 180.730134][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 180.989158][ T9632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.993390][ T9632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.997070][ T9632] bond0 (unregistering): Released all slaves [ 181.265619][T10971] chnl_net:caif_netlink_parms(): no params data found [ 181.368049][T10971] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.370315][T10971] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.372594][T10971] bridge_slave_0: entered allmulticast mode [ 181.375198][T10971] bridge_slave_0: entered promiscuous mode [ 181.387334][ T9632] hsr_slave_0: left promiscuous mode [ 181.401578][ T9632] hsr_slave_1: left promiscuous mode [ 181.403739][ T9632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.406083][ T9632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.413272][ T9632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.415636][ T9632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.453593][ T9632] veth1_macvtap: left promiscuous mode [ 181.455441][ T9632] veth0_macvtap: left promiscuous mode [ 181.457719][ T9632] veth1_vlan: left promiscuous mode [ 181.459411][ T9632] veth0_vlan: left promiscuous mode [ 181.467327][ T61] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 181.607282][ T61] usb 9-1: device descriptor read/64, error -71 [ 181.847305][ T61] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 181.977464][ T61] usb 9-1: device descriptor read/64, error -71 [ 182.087559][ T61] usb usb9-port1: attempt power cycle [ 182.164076][ T9632] team0 (unregistering): Port device team_slave_1 removed [ 182.241979][ T9632] team0 (unregistering): Port device team_slave_0 removed [ 182.437280][ T61] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 182.467663][ T61] usb 9-1: device descriptor read/8, error -71 [ 182.717556][ T61] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 182.735748][T10971] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.738228][T10971] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.740665][T10971] bridge_slave_1: entered allmulticast mode [ 182.743601][T10971] bridge_slave_1: entered promiscuous mode [ 182.748124][ T61] usb 9-1: device descriptor read/8, error -71 [ 182.787458][ T5949] Bluetooth: hci2: command tx timeout [ 182.800054][T10971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.805858][T10971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.857786][ T61] usb usb9-port1: unable to enumerate USB device [ 182.893172][T10971] team0: Port device team_slave_0 added [ 182.898838][T10971] team0: Port device team_slave_1 added [ 182.913438][T11040] openvswitch: netlink: Flow actions attr not present in new flow. [ 182.951689][T10971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.953896][T10971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.962253][T10971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.966615][T10971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.969035][T10971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.976936][T10971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.026482][T10971] hsr_slave_0: entered promiscuous mode [ 183.030107][T10971] hsr_slave_1: entered promiscuous mode [ 183.032216][T10971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.034493][T10971] Cannot create hsr debugfs directory [ 183.096214][T11043] __nla_validate_parse: 7 callbacks suppressed [ 183.096225][T11043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1333'. [ 183.128287][T11043] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11043 comm=syz.3.1333 [ 183.150017][T11043] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.1333'. [ 183.156929][T11043] netlink: 'syz.3.1333': attribute type 10 has an invalid length. [ 183.160239][T11043] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1333'. [ 183.164444][T11043] dummy0: entered promiscuous mode [ 183.167264][T11043] bridge0: port 3(dummy0) entered blocking state [ 183.169477][T11043] bridge0: port 3(dummy0) entered disabled state [ 183.171540][T11043] dummy0: entered allmulticast mode [ 183.174384][T11043] bridge0: port 3(dummy0) entered blocking state [ 183.176431][T11043] bridge0: port 3(dummy0) entered forwarding state [ 183.223031][ T40] audit: type=1400 audit(1752016037.978:56280): avc: denied { bind } for pid=11044 comm="syz.3.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 183.334057][T11047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1334'. [ 183.348777][ T6038] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 183.497289][ T6038] usb 9-1: device descriptor read/64, error -71 [ 183.592496][T10971] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 183.596709][T10971] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 183.600887][T10971] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 183.604838][T10971] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 183.671360][T10971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.696673][T10971] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.709125][ T9632] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.712132][ T9632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.721146][ T9630] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.723332][ T9630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.737296][ T6038] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 183.873547][T10971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.887407][ T6038] usb 9-1: device descriptor read/64, error -71 [ 183.905534][T10971] veth0_vlan: entered promiscuous mode [ 183.919717][T10971] veth1_vlan: entered promiscuous mode [ 183.939498][T10971] veth0_macvtap: entered promiscuous mode [ 183.943381][T10971] veth1_macvtap: entered promiscuous mode [ 183.951689][T10971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.957876][T10971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.962901][T10971] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.965608][T10971] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.968547][T10971] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.971191][T10971] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.008107][ T6038] usb usb9-port1: attempt power cycle [ 184.010227][ T9632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.017270][ T9632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.030135][ T9630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.033390][ T9630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.239250][T11064] netdevsim netdevsim4: Direct firmware load for . [ 184.239250][T11064] failed with error -2 [ 184.244427][T11064] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 184.244427][T11064] [ 184.244489][ T40] audit: type=1400 audit(1752016038.998:56281): avc: denied { firmware_load } for pid=11063 comm="syz.4.1336" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 184.675519][T11079] No control pipe specified [ 184.832446][T11081] overlayfs: failed to clone upperpath [ 185.001638][T11098] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.004828][T11098] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.008068][T11098] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.011357][T11098] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.014173][T11098] geneve2: entered promiscuous mode [ 185.015898][T11098] geneve2: entered allmulticast mode [ 185.183681][T11110] tmpfs: Unknown parameter 'qu' [ 185.186450][T11112] tmpfs: Unknown parameter 'qu' [ 185.232260][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1354'. [ 185.235138][T11115] netlink: 'syz.0.1354': attribute type 30 has an invalid length. [ 185.241495][T11115] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.244337][T11115] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.247514][T11115] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.251260][T11115] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.259202][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1354'. [ 185.262115][T11115] netlink: 'syz.0.1354': attribute type 30 has an invalid length. [ 185.389124][T11123] overlayfs: failed to clone upperpath [ 185.404526][T11125] overlayfs: failed to clone upperpath [ 185.460558][T11132] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1360'. [ 185.493029][ T40] audit: type=1400 audit(1752016040.248:56282): avc: denied { getopt } for pid=11135 comm="syz.0.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 185.501496][ T40] audit: type=1400 audit(1752016040.248:56283): avc: denied { ioctl } for pid=11135 comm="syz.0.1361" path="socket:[39838]" dev="sockfs" ino=39838 ioctlcmd=0x89f7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 185.762977][T11147] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 ! [ 185.818782][T11148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11148 comm=syz.0.1364 [ 185.822641][T11148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1364'. [ 185.833898][T11148] vxlan4: entered promiscuous mode [ 186.248145][ T9632] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.847519][T11158] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1366'. [ 187.849858][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 187.856201][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.861115][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.865016][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.870517][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.977066][T11170] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.1370'. [ 187.983028][T11156] chnl_net:caif_netlink_parms(): no params data found [ 188.303370][ T40] audit: type=1400 audit(1752016043.058:56284): avc: denied { connect } for pid=11175 comm="syz.3.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 188.887672][T11156] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.889941][T11156] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.892642][T11156] bridge_slave_0: entered allmulticast mode [ 188.895454][T11156] bridge_slave_0: entered promiscuous mode [ 188.899531][T11156] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.901969][T11156] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.904504][T11156] bridge_slave_1: entered allmulticast mode [ 188.907689][T11156] bridge_slave_1: entered promiscuous mode [ 188.979380][T11156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.984288][T11156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.012500][ T40] audit: type=1400 audit(1752016043.768:56285): avc: denied { read write } for pid=11201 comm="syz.3.1378" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 189.021869][ T40] audit: type=1400 audit(1752016043.768:56286): avc: denied { open } for pid=11201 comm="syz.3.1378" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 189.051597][T11156] team0: Port device team_slave_0 added [ 189.055169][T11156] team0: Port device team_slave_1 added [ 189.086833][T11156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.089920][T11156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.098035][T11156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.107906][T11211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11211 comm=syz.4.1379 [ 189.108246][T11156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.117699][T11156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.125724][T11156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.191985][ T9632] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.258600][T11156] hsr_slave_0: entered promiscuous mode [ 189.261047][T11156] hsr_slave_1: entered promiscuous mode [ 189.263139][T11156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.265634][T11156] Cannot create hsr debugfs directory [ 189.296044][ T9632] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.383960][ T9632] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.448815][ T40] audit: type=1400 audit(1752016044.208:56287): avc: denied { ioctl } for pid=11263 comm="syz.3.1381" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 189.562159][ T9632] bridge_slave_1: left allmulticast mode [ 189.564116][ T9632] bridge_slave_1: left promiscuous mode [ 189.566010][ T9632] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.571449][ T9632] bridge_slave_0: left allmulticast mode [ 189.573448][ T9632] bridge_slave_0: left promiscuous mode [ 189.575483][ T9632] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.650510][T11283] netlink: 'syz.0.1382': attribute type 2 has an invalid length. [ 189.654090][T11283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1382'. [ 189.730171][T11289] cgroup: Name too long [ 189.907395][ T5949] Bluetooth: hci2: command tx timeout [ 189.933439][ T9632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.939170][ T9632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.943162][ T9632] bond0 (unregistering): Released all slaves [ 189.955628][T11304] tmpfs: Bad value for 'mpol' [ 190.012507][T11306] netlink: 'syz.3.1389': attribute type 10 has an invalid length. [ 190.027298][T11306] hsr_slave_0: left promiscuous mode [ 190.029740][T11306] hsr_slave_1: left promiscuous mode [ 190.339547][ T9632] hsr_slave_0: left promiscuous mode [ 190.341605][ T9632] hsr_slave_1: left promiscuous mode [ 190.343610][ T9632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.346023][ T9632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.351673][ T9632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.354120][ T9632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.385601][ T9632] veth1_macvtap: left promiscuous mode [ 190.388273][ T9632] veth0_macvtap: left promiscuous mode [ 190.390068][ T9632] veth1_vlan: left promiscuous mode [ 190.391833][ T9632] veth0_vlan: left promiscuous mode [ 190.495792][ T40] audit: type=1326 audit(1752016045.248:56288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11335 comm="syz.3.1399" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f59ea18e929 code=0x0 [ 191.100074][ T9632] team0 (unregistering): Port device team_slave_1 removed [ 191.183048][ T9632] team0 (unregistering): Port device team_slave_0 removed [ 191.872660][T11361] pim6reg: entered allmulticast mode [ 191.875743][T11361] pim6reg: left allmulticast mode [ 191.876199][T11363] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 191.896072][T11156] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 191.902823][T11156] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 191.909052][T11156] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 191.909153][T11363] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1408'. [ 191.930313][T11364] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1407'. [ 191.949430][T11156] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 191.987569][ T5949] Bluetooth: hci2: command tx timeout [ 192.042840][T11156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.058492][T11156] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.063523][ T9635] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.065819][ T9635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.073305][ T9631] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.076280][ T9631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.196772][T11392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1415'. [ 192.278399][T11156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.322635][ T40] audit: type=1400 audit(1752016047.078:56289): avc: denied { bind } for pid=11400 comm="syz.3.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.338963][T11156] veth0_vlan: entered promiscuous mode [ 192.355326][T11156] veth1_vlan: entered promiscuous mode [ 192.454284][T11156] veth0_macvtap: entered promiscuous mode [ 192.459748][T11156] veth1_macvtap: entered promiscuous mode [ 192.470576][T11156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.479764][T11156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.485901][T11156] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.491256][T11156] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.493952][T11156] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.496846][T11156] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.550123][ T9628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.552847][ T9628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.566158][ T9628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.569425][ T9628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.609663][T11419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1424'. [ 192.690493][ T40] audit: type=1400 audit(1752016047.448:56290): avc: denied { setattr } for pid=9334 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.965432][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1427'. [ 193.106413][T11440] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 193.272974][ T40] audit: type=1400 audit(1752016048.028:56291): avc: denied { ioctl } for pid=11444 comm="syz.3.1432" path="socket:[41720]" dev="sockfs" ino=41720 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 193.623517][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1438'. [ 193.626421][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1438'. [ 193.630203][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1438'. [ 193.930959][T11473] fuse: Unknown parameter 'Q1.UÉàg€oup_id' [ 193.931411][ T40] audit: type=1400 audit(1752016048.688:56292): avc: denied { watch } for pid=11474 comm="syz.3.1443" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=3088 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 193.934230][T11473] overlayfs: failed to clone upperpath [ 194.040173][T11478] binder: 11476:11478 ioctl c0306201 200000000240 returned -14 [ 194.045568][T11478] autofs4:pid:11478:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 194.049646][T11485] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1447'. [ 194.072211][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.231844][ T5949] block nbd0: Receive control failed (result -11) [ 194.279847][T11499] netlink: 'syz.0.1451': attribute type 3 has an invalid length. [ 194.416656][ T9631] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.446424][T11494] cgroup: Unknown subsys name 'cpuset' [ 194.603067][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 194.607022][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 194.611579][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 194.614316][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 194.617641][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 194.774258][T11510] chnl_net:caif_netlink_parms(): no params data found [ 194.863991][T11510] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.866327][T11510] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.877361][T11510] bridge_slave_0: entered allmulticast mode [ 194.881343][T11510] bridge_slave_0: entered promiscuous mode [ 194.886879][T11510] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.893127][T11510] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.895771][T11510] bridge_slave_1: entered allmulticast mode [ 194.901440][T11510] bridge_slave_1: entered promiscuous mode [ 194.951209][T11510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.956566][T11510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.009551][T11510] team0: Port device team_slave_0 added [ 195.014783][T11510] team0: Port device team_slave_1 added [ 195.059416][T11510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.061764][T11510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.070109][T11510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.074471][T11510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.076644][T11510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.084714][T11510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.123487][T11510] hsr_slave_0: entered promiscuous mode [ 195.125747][T11510] hsr_slave_1: entered promiscuous mode [ 195.127892][T11510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.130183][T11510] Cannot create hsr debugfs directory [ 195.225011][T11510] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.228606][T11510] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.313518][T11510] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.317030][T11510] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.427378][T11510] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.430722][T11510] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.509231][T11510] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.513020][T11510] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.713403][T11510] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 195.719792][T11510] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 195.725575][T11510] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 195.731394][T11510] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 195.799982][T11510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.814205][T11510] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.823127][ T9632] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.826279][ T9632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.855251][ T9631] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.869576][ T9633] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.871952][ T9633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.979437][ T9631] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.061651][ T9631] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.072945][T11510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.101621][T11510] veth0_vlan: entered promiscuous mode [ 196.106721][T11510] veth1_vlan: entered promiscuous mode [ 196.121273][T11510] veth0_macvtap: entered promiscuous mode [ 196.124982][T11510] veth1_macvtap: entered promiscuous mode [ 196.134526][T11510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.142522][T11510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.149192][T11510] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.152301][T11510] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.154939][T11510] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.157788][T11510] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.195671][ T5949] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 196.201669][ T5949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 196.204575][ T5949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 196.209400][ T5949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 196.213687][ T5949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 196.231466][ T9631] bridge_slave_1: left allmulticast mode [ 196.233303][ T9631] bridge_slave_1: left promiscuous mode [ 196.235176][ T9631] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.240874][ T9631] bridge_slave_0: left allmulticast mode [ 196.242698][ T9631] bridge_slave_0: left promiscuous mode [ 196.244598][ T9631] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.520864][ T9631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.525241][ T9631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.529182][ T9631] bond0 (unregistering): Released all slaves [ 196.559929][ T9633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.569674][ T9633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.622347][ T9633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.625192][ T9633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.707435][ T5954] Bluetooth: hci2: command tx timeout [ 196.792532][T11533] chnl_net:caif_netlink_parms(): no params data found [ 196.805310][T11544] sctp: [Deprecated]: syz.0.1456 (pid 11544) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.805310][T11544] Use struct sctp_sack_info instead [ 196.810443][T11545] sctp: [Deprecated]: syz.0.1456 (pid 11545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.810443][T11545] Use struct sctp_sack_info instead [ 196.932246][ T9631] hsr_slave_0: left promiscuous mode [ 196.934635][ T9631] hsr_slave_1: left promiscuous mode [ 196.936763][ T9631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.941715][ T9631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.948152][ T9631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.951496][ T9631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.999326][ T9631] veth1_macvtap: left promiscuous mode [ 197.001784][ T9631] veth0_macvtap: left promiscuous mode [ 197.004242][ T9631] veth1_vlan: left promiscuous mode [ 197.006560][ T9631] veth0_vlan: left promiscuous mode [ 197.061271][T11559] __nla_validate_parse: 1 callbacks suppressed [ 197.061288][T11559] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1459'. [ 197.756046][ T9631] team0 (unregistering): Port device team_slave_1 removed [ 197.848418][ T9631] team0 (unregistering): Port device team_slave_0 removed [ 197.909017][T11563] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1461'. [ 197.912803][T11563] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1461'. [ 198.310533][ T5954] Bluetooth: hci0: command tx timeout [ 198.472394][T11552] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1458'. [ 198.476074][T11533] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.478915][T11533] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.481336][T11533] bridge_slave_0: entered allmulticast mode [ 198.484276][T11533] bridge_slave_0: entered promiscuous mode [ 198.487858][T11533] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.490213][T11533] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.492695][T11533] bridge_slave_1: entered allmulticast mode [ 198.495685][T11533] bridge_slave_1: entered promiscuous mode [ 198.594774][T11533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.609076][T11533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.643980][ T40] audit: type=1400 audit(1752016053.398:56293): avc: denied { connect } for pid=11572 comm="syz.0.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 198.690328][T11533] team0: Port device team_slave_0 added [ 198.694750][T11533] team0: Port device team_slave_1 added [ 198.802094][ T5954] Bluetooth: hci2: command tx timeout [ 198.850516][T11533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.850741][ T40] audit: type=1326 audit(1752016053.608:56294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11580 comm="syz.0.1467" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb662d8e929 code=0x0 [ 198.853474][T11533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.881809][T11533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.888342][T11533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.891198][T11533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.903491][T11533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.962210][T11533] hsr_slave_0: entered promiscuous mode [ 198.964482][T11533] hsr_slave_1: entered promiscuous mode [ 198.966499][T11533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.970802][T11533] Cannot create hsr debugfs directory [ 199.075195][ T40] audit: type=1400 audit(1752016053.828:56295): avc: denied { listen } for pid=11593 comm="syz.3.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 199.097423][ T40] audit: type=1400 audit(1752016053.838:56296): avc: denied { accept } for pid=11593 comm="syz.3.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 199.459761][T11533] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 199.465241][T11533] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 199.470757][T11533] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 199.475282][T11533] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 199.529076][T11533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.539894][T11533] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.545982][ T9630] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.548999][ T9630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.556973][ T9635] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.559969][ T9635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.689866][T11533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.713923][T11533] veth0_vlan: entered promiscuous mode [ 199.721032][T11533] veth1_vlan: entered promiscuous mode [ 199.726977][T11609] fuseblk: Unknown parameter ''r' [ 199.747966][T11533] veth0_macvtap: entered promiscuous mode [ 199.751759][T11533] veth1_macvtap: entered promiscuous mode [ 199.759979][T11533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.770782][T11533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.775441][T11533] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.778886][T11533] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.781584][T11533] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.784345][T11533] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.833720][ T9635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.837004][ T9635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.851768][ T9633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.854355][ T9633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.941469][T11613] netlink: 'syz.3.1472': attribute type 14 has an invalid length. [ 200.320319][T11636] tipc: Started in network mode [ 200.322451][T11636] tipc: Node identity 1000000000000000ffffffffffffffff, cluster identity 4711 [ 200.332464][ T5954] Bluetooth: min 107 > max 0 [ 200.867394][ T5954] Bluetooth: hci2: command tx timeout [ 201.133761][T11655] netlink: 'syz.0.1481': attribute type 1 has an invalid length. [ 201.142480][T11655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1481'. [ 201.342179][ T40] audit: type=1400 audit(1752016056.098:56297): avc: denied { create } for pid=11665 comm="syz.3.1488" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 201.359453][ T40] audit: type=1400 audit(1752016056.098:56298): avc: denied { remove_name } for pid=11665 comm="syz.3.1488" name="control" dev="9p" ino=35913972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.371763][ T40] audit: type=1400 audit(1752016056.098:56299): avc: denied { rmdir } for pid=11665 comm="syz.3.1488" name="control" dev="9p" ino=35913972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.796667][ T5954] Bluetooth: hci2: unexpected cc 0x0402 length: 4 > 1 [ 201.876670][T11719] netlink: 'syz.0.1502': attribute type 1 has an invalid length. [ 201.903673][T11719] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 201.911590][ T9634] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 201.912280][T11719] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.935644][T11719] veth3: entered promiscuous mode [ 201.940606][T11719] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 202.018984][ T9632] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 202.094379][ T9632] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.129369][T11727] sctp: [Deprecated]: syz.0.1504 (pid 11727) Use of int in maxseg socket option. [ 202.129369][T11727] Use struct sctp_assoc_value instead [ 203.797964][ T40] audit: type=1400 audit(1752016058.548:56300): avc: denied { relabelfrom } for pid=11730 comm="syz.0.1506" name="" dev="pipefs" ino=42893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 203.837485][ T5954] Bluetooth: hci2: command tx timeout [ 203.934689][ T9632] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.944936][ T40] audit: type=1400 audit(1752016058.698:56301): avc: denied { shutdown } for pid=11743 comm="syz.3.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 203.950711][T11744] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 203.969664][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1511'. [ 203.972491][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1511'. [ 203.975282][T11744] netlink: 'syz.3.1511': attribute type 13 has an invalid length. [ 204.002437][ T5949] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.003223][T11742] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 204.012813][ T5949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.025093][ T5949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.030781][ T5949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 204.033750][ T9632] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.033847][ T5949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.171862][T11751] xfrm0 speed is unknown, defaulting to 1000 [ 204.173886][T11751] xfrm0 speed is unknown, defaulting to 1000 [ 204.180368][T11751] xfrm0 speed is unknown, defaulting to 1000 [ 204.180602][T11745] chnl_net:caif_netlink_parms(): no params data found [ 204.185580][T11751] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 204.195805][T11751] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 204.225618][ T9632] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.282157][T11751] xfrm0 speed is unknown, defaulting to 1000 [ 204.326417][T11751] xfrm0 speed is unknown, defaulting to 1000 [ 204.331968][T11751] xfrm0 speed is unknown, defaulting to 1000 [ 204.336338][T11751] xfrm0 speed is unknown, defaulting to 1000 [ 204.392274][T11751] xfrm0 speed is unknown, defaulting to 1000 [ 204.395030][T11751] xfrm0 speed is unknown, defaulting to 1000 [ 204.397062][T11745] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.400070][T11745] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.402388][T11745] bridge_slave_0: entered allmulticast mode [ 204.405059][T11745] bridge_slave_0: entered promiscuous mode [ 204.420047][T11745] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.422768][T11745] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.425036][T11745] bridge_slave_1: entered allmulticast mode [ 204.434710][T11745] bridge_slave_1: entered promiscuous mode [ 204.437244][T11751] xfrm0 speed is unknown, defaulting to 1000 [ 204.501797][T11771] binder: 11769:11771 unknown command 0 [ 204.502098][T11745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.504036][T11771] binder: 11769:11771 ioctl c0306201 2000000001c0 returned -22 [ 204.504121][T11771] binder: 11769:11771 unknown command 0 [ 204.515874][T11771] binder: 11769:11771 ioctl c0306201 2000000001c0 returned -22 [ 204.525314][T11745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.636795][T11745] team0: Port device team_slave_0 added [ 204.647739][T11745] team0: Port device team_slave_1 added [ 204.649811][ T9632] bridge_slave_1: left allmulticast mode [ 204.651754][ T9632] bridge_slave_1: left promiscuous mode [ 204.654275][ T9632] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.663682][ T9632] bridge_slave_0: left allmulticast mode [ 204.665605][ T9632] bridge_slave_0: left promiscuous mode [ 204.668719][ T9632] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.670845][T11779] syz.0.1520 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 205.030441][ T9632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.037009][ T9632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.042927][ T9632] bond0 (unregistering): Released all slaves [ 205.109368][T11745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.116549][T11745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.149725][T11745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.155794][T11745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.159275][T11745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.175786][T11745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.215921][T11793] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1524'. [ 205.235248][T11793] fuse: Bad value for 'user_id' [ 205.236852][T11793] fuse: Bad value for 'user_id' [ 205.271342][T11793] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 205.323731][T11745] hsr_slave_0: entered promiscuous mode [ 205.325999][T11745] hsr_slave_1: entered promiscuous mode [ 205.330718][T11745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.333168][T11745] Cannot create hsr debugfs directory [ 205.401033][ T40] audit: type=1400 audit(1752016060.158:56302): avc: denied { name_bind } for pid=11801 comm="syz.0.1528" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 205.482432][ T9632] hsr_slave_0: left promiscuous mode [ 205.484959][ T9632] hsr_slave_1: left promiscuous mode [ 205.486977][ T9632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.490210][ T9632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.492942][ T9632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.495475][ T9632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.524575][ T9632] veth1_macvtap: left promiscuous mode [ 205.526746][ T9632] veth0_macvtap: left promiscuous mode [ 205.529647][ T9632] veth1_vlan: left promiscuous mode [ 205.531702][ T9632] veth0_vlan: left promiscuous mode [ 206.069601][ T5949] Bluetooth: hci0: command tx timeout [ 206.353068][ T9632] team0 (unregistering): Port device team_slave_1 removed [ 206.434610][ T9632] team0 (unregistering): Port device team_slave_0 removed [ 207.086963][T11813] xfrm0 speed is unknown, defaulting to 1000 [ 207.726548][T11745] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.931697][ T5954] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.940405][ T5954] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.946716][ T5954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.957587][ T9632] bond6 (unregistering): (slave gretap2): Releasing active interface [ 207.960828][ T5954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.970509][ T5954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.995934][T11844] netlink: 'syz.0.1539': attribute type 5 has an invalid length. [ 208.012386][ T9632] dvmrp1 (unregistering): left allmulticast mode [ 208.110253][T11850] netlink: 'syz.3.1541': attribute type 10 has an invalid length. [ 208.147831][ T5954] Bluetooth: hci0: command tx timeout [ 208.406188][ T9632]  (unregistering): left promiscuous mode [ 208.414173][ T9632] team0: Port device  removed [ 208.416561][ T9632]  (unregistering): Released all slaves [ 208.503643][ T9632] bond1 (unregistering): Released all slaves [ 208.573965][ T9632] bond2 (unregistering): Released all slaves [ 208.648445][ T9632] bond3 (unregistering): Released all slaves [ 208.721842][ T9632] bond4 (unregistering): Released all slaves [ 208.731077][ T9632] bond0 (unregistering): Released all slaves [ 208.737476][ T9632] bond5 (unregistering): Released all slaves [ 208.813979][ T9632] bond6 (unregistering): Released all slaves [ 208.820384][T11745] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 208.824709][T11745] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 208.828946][T11745] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 208.848466][T11841] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI SYZFAIL: failed to recv rpc [ 208.853083][T11841] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 208.857868][T11841] CPU: 3 UID: 0 PID: 11841 Comm: syz.0.1539 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 208.863592][T11841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 208.867624][T11841] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x200 [ 208.870016][T11841] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 54 55 53 48 89 fb 48 83 c7 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8b 01 00 00 48 89 da 48 8b 6b 08 48 b8 00 00 00 [ 208.877897][T11841] RSP: 0018:ffffc90003e5f2e8 EFLAGS: 00010202 [ 208.880448][T11841] RAX: dffffc0000000000 RBX: 0000000000000050 RCX: ffffc90007b43000 [ 208.883638][T11841] RDX: 000000000000000b RSI: ffffffff89932f6c RDI: 0000000000000058 [ 208.886923][T11841] RBP: 0000000000000050 R08: 0000000000000005 R09: 0000000000000000 [ 208.890095][T11841] R10: 00000000000bffe2 R11: 0000000000000001 R12: ffffffff8ce8e1e0 [ 208.893366][T11841] R13: 0000000000000058 R14: ffffffff8ce8e1c0 R15: ffff8880347e0000 [ 208.896603][T11841] FS: 00007fb663b8f6c0(0000) GS:ffff8880d6a16000(0000) knlGS:0000000000000000 [ 208.900293][T11841] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 208.902938][T11841] CR2: 0000001b2fb1fffc CR3: 000000003b958000 CR4: 0000000000352ef0 [ 208.906159][T11841] Call Trace: [ 208.907640][T11841] [ 208.908895][T11841] drr_qlen_notify+0x24/0x150 [ 208.910455][T11841] qdisc_tree_reduce_backlog+0x224/0x500 [ 208.912590][T11841] pie_change+0x86e/0xe70 [ 208.914396][T11841] ? __debug_object_init+0x2de/0x3d0 [ 208.916584][T11841] ? __pfx___debug_object_init+0x10/0x10 [ 208.918897][T11841] ? __pfx_pie_change+0x10/0x10 [ 208.920939][T11841] ? __pfx_pie_timer+0x10/0x10 [ 208.922956][T11841] ? lockdep_init_map_type+0x5c/0x280 [ 208.925104][T11841] pie_init+0x364/0x470 [ 208.926809][T11841] ? __pfx_pie_init+0x10/0x10 [ 208.928782][T11841] qdisc_create+0x457/0xfc0 [ 208.930700][T11841] tc_modify_qdisc+0x12bb/0x2130 [ 208.932743][T11841] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 208.934942][T11841] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 208.937086][T11841] rtnetlink_rcv_msg+0x3c9/0xe90 [ 208.939048][T11841] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 208.941263][T11841] ? ref_tracker_free+0x37c/0x830 [ 208.943400][T11841] netlink_rcv_skb+0x158/0x420 [ 208.945381][T11841] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 208.947621][T11841] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 208.949808][T11841] ? netlink_deliver_tap+0x1ae/0xd30 [ 208.952042][T11841] netlink_unicast+0x53a/0x7f0 [ 208.953944][T11841] ? __pfx_netlink_unicast+0x10/0x10 [ 208.956167][T11841] netlink_sendmsg+0x8d1/0xdd0 [ 208.958178][T11841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.960374][T11841] ____sys_sendmsg+0xa95/0xc70 [ 208.962040][T11841] ? copy_msghdr_from_user+0x10a/0x160 [ 208.963998][T11841] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.965993][T11841] ? page_table_check_set+0x631/0x750 [ 208.967685][T11841] ___sys_sendmsg+0x134/0x1d0 [ 208.969164][T11841] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.970791][T11841] ? __lock_acquire+0x622/0x1c90 [ 208.972363][T11841] __sys_sendmsg+0x16d/0x220 [ 208.973855][T11841] ? __pfx___sys_sendmsg+0x10/0x10 [ 208.975474][T11841] ? find_held_lock+0x2b/0x80 [ 208.976956][T11841] ? do_user_addr_fault+0x843/0x1370 [ 208.978594][T11841] do_syscall_64+0xcd/0x4c0 [ 208.980288][T11841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.982768][T11841] RIP: 0033:0x7fb662d8e929 [ 208.984556][T11841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.990669][T11841] RSP: 002b:00007fb663b8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.993200][T11841] RAX: ffffffffffffffda RBX: 00007fb662fb6160 RCX: 00007fb662d8e929 [ 208.995593][T11841] RDX: 000000000400c000 RSI: 0000200000000200 RDI: 0000000000000006 [ 208.997999][T11841] RBP: 00007fb662e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 209.000474][T11841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.002924][T11841] R13: 0000000000000001 R14: 00007fb662fb6160 R15: 00007ffd4539cf48 [ 209.005700][T11841] [ 209.006651][T11841] Modules linked in: [ 209.008019][T11841] ---[ end trace 0000000000000000 ]--- [ 209.009840][T11841] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x200 [ 209.012180][T11841] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 54 55 53 48 89 fb 48 83 c7 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8b 01 00 00 48 89 da 48 8b 6b 08 48 b8 00 00 00 [ 209.018421][T11841] RSP: 0018:ffffc90003e5f2e8 EFLAGS: 00010202 [ 209.020364][T11841] RAX: dffffc0000000000 RBX: 0000000000000050 RCX: ffffc90007b43000 [ 209.022963][T11841] RDX: 000000000000000b RSI: ffffffff89932f6c RDI: 0000000000000058 [ 209.025842][T11841] RBP: 0000000000000050 R08: 0000000000000005 R09: 0000000000000000 [ 209.028469][T11841] R10: 00000000000bffe2 R11: 0000000000000001 R12: ffffffff8ce8e1e0 [ 209.031006][T11841] R13: 0000000000000058 R14: ffffffff8ce8e1c0 R15: ffff8880347e0000 [ 209.033875][T11841] FS: 00007fb663b8f6c0(0000) GS:ffff8880d6a16000(0000) knlGS:0000000000000000 [ 209.037630][T11841] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.038936][T10921] block nbd3: shutting down sockets [ 209.040405][T11841] CR2: 0000001b2fb1fffc CR3: 000000003b958000 CR4: 0000000000352ef0 [ 209.045446][T11841] Kernel panic - not syncing: Fatal exception in interrupt [ 209.049112][T11841] Kernel Offset: disabled [ 209.050928][T11841] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:03:27 Registers: info registers vcpu 0 CPU#0 RAX=0000000000201003 RBX=0000000000000000 RCX=ffffffff8b882c79 RDX=0000000000000000 RSI=ffffffff8de32516 RDI=ffffffff8c158f60 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a97f50 R15=0000000000000000 RIP=ffffffff8b8817df RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6716000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f12abe62e9c CR3=000000005a4f0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4539d2d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb662e11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb662e11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb662e11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb662e11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb662e11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb662e11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080000002 RBX=0000000000000001 RCX=1ffffffff35c0200 RDX=0000000000000001 RSI=0000000000000012 RDI=0000000000000001 RBP=000000000000000f RSP=ffffc90003c77720 R8 =0000000000000000 R9 =0000000000000000 R10=00000000ffffffff R11=0000000000000000 R12=ffff8881000d8000 R13=0000000000000012 R14=ffff8881000d8000 R15=000000000000000f RIP=ffffffff81897279 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6816000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8a18ce7d60 CR3=000000002ceef000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8a181856a3 00007f8a181856a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3aade6d0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000030000000a 0000000200000021 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000007 000000040000000d ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555c86ed06 000055555c86ece0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 09c00302100009b0 0340100007900301 000006080604a803 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100009800401 0000080806060168 9000080009e00300 100009d003001000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 09c00302100009b0 0340100007900301 000006080604a803 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000010011 0000002028080480 0304800407800307 800409a003188008 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000990030fffffff ffffff0409800300 1000188004010000 0a08060601688200 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000015164c RBX=0000000000000002 RCX=ffffffff8b882c79 RDX=ffffed100d4c6646 RSI=ffffffff8c158ee0 RDI=ffffffff819211e1 RBP=ffffed1003bd8910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000000 R12=0000000000000002 R13=ffff88801dec4880 R14=ffffffff90a97f50 R15=0000000000000000 RIP=ffffffff8b8817df RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6916000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f59eb011f98 CR3=0000000051d54000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc837d6990 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59ea211b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59ea211b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59ea211b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59ea211b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59ea211bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59ea211c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bc315 RDI=ffffffff9b0c42a0 RBP=ffffffff9b0c4260 RSP=ffffc90003e5ec50 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000036 R14=ffffffff9b0c4260 R15=ffffffff855bc2b0 RIP=ffffffff855bc33f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fb663b8f6c0 ffffffff 00c00000 GS =0000 ffff8880d6a16000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2fb1fffc CR3=000000003b958000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557398ac9600 0000557398ac9600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff73234910 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 697376656474656e 206d697376656474 656e205d35343731 31545b5d36343938 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65702074656b636f 735f70697761723d 7373616c63742074 5f74726f703a725f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7463656a626f3a75 5f6d65747379733d 747865746e6f6374 20745f6d64617379 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 733a725f6d646173 79733a746f6f723d 747865746e6f6373 2032303030323d63 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7273202238323531 2e302e7a7973223d 6d6d6f6320313038 31313d6469702020 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000