last executing test programs: 36.030724858s ago: executing program 3 (id=714): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a00f000", @ANYRES32=r0, @ANYBLOB="140001140040000000000000000000000000000014000200fe"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 29.01256891s ago: executing program 3 (id=714): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a00f000", @ANYRES32=r0, @ANYBLOB="140001140040000000000000000000000000000014000200fe"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 21.366382064s ago: executing program 3 (id=714): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a00f000", @ANYRES32=r0, @ANYBLOB="140001140040000000000000000000000000000014000200fe"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 14.191493342s ago: executing program 3 (id=714): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a00f000", @ANYRES32=r0, @ANYBLOB="140001140040000000000000000000000000000014000200fe"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 7.376166432s ago: executing program 3 (id=714): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a00f000", @ANYRES32=r0, @ANYBLOB="140001140040000000000000000000000000000014000200fe"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 3.436704982s ago: executing program 2 (id=1599): r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x400008bf) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000005"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f0000000040), 0x4) r3 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x2) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403, 0xe7}}) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=""/111, 0x6f) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x18) openat(r1, &(0x7f0000000140)='./file1\x00', 0x400200, 0x80) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x4c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000003c0)=[{0x4, 0x5, 0xb, 0xb}, {0x2, 0x4, 0x7, 0x4}, {0x2, 0x1, 0x8, 0x3}, {0x1, 0x4, 0x4, 0xc}, {0x5, 0x5, 0xa, 0x7}, {0x5, 0x4, 0x0, 0x3}, {0x5, 0x2, 0x5, 0xa}, {0x4, 0x1, 0xe, 0x1}], 0x10, 0x9, @void, @value}, 0x94) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TIOCGPKT(r8, 0x80045438, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) accept$alg(r1, 0x0, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c00018006000600080600000800028004007280080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) splice(r4, 0x0, r6, 0x0, 0x200000000001, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) write$P9_RSYMLINK(r5, &(0x7f0000000540)={0x14, 0x11, 0x2, {0x81, 0x0, 0x1}}, 0x14) 3.357732175s ago: executing program 2 (id=1604): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 2.453015428s ago: executing program 2 (id=1629): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfffe, 0x0, @loopback}, 0x1c) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x0, 0x1, 0x12d}, 0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x22d2, 0x20, 0x0, 0x0, 0x0) 2.392797054s ago: executing program 2 (id=1630): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xa800}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0xe4}}}}]}]}, 0x6c}}, 0x0) 1.470579573s ago: executing program 2 (id=1632): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x300, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 1.323006814s ago: executing program 0 (id=1637): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f38437", 0x7}], 0x1}, 0x48005) 952.493631ms ago: executing program 1 (id=1640): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000000)=@id, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x4a0100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockname$packet(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x14) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000140)=0x85, 0x4) r2 = socket(0x2b, 0x80801, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x10, 0x5, 0xffff56ce, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x7800, 0x40, 0x8, 0x8}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r4, 0x5457, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e23, 0x2009, @mcast1, 0x2}, 0x2) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x50, r6, 0x1, 0x0, 0x25dfdbfb, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffeee, 0x51}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000079120000000000009500000000000000d36068a1f09c116241d199c94cf87e78c0ea5c738ed809418a702ac1675927155ea068dffa722f02a8408f5e236c1977cf44ae63690e07a7894ae5f6779fd610d66d804e554d7c41b6e9043c3bc31465a5c5e4ff5e20bfb6e04a02b8e0c1d9e40ebb0002bed131d2430c41c29a9be8e81f934586148cd26589e589d4237650498ede368d9b2ae504082af89bbd94b07b6635b4dc5e55df0e988d5f351c0511719607f0c22e413e30aee333f830270094dc15"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r7, 0x2004, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000240)=0x3) 892.762915ms ago: executing program 1 (id=1641): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r2}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x2b, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) 892.574996ms ago: executing program 1 (id=1642): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r2}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x533, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) 832.588942ms ago: executing program 1 (id=1643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001840)=@filter={'filter\x00', 0x42, 0x4, 0x12d8, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x1240, 0x1240, 0x1240, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1110, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1338) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xe0000000}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 832.310568ms ago: executing program 1 (id=1644): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x36c18523, 0x401, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65be667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a0, 0x2a8, 0x390, 0x2a8, 0x1d8, 0x390, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [0xfc030000, 0x0, 0x0, 0xff000000], 'macvlan1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@common=@mh={{0x28}, {"4ef5"}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x0, 0x3}, {0x0, 0x10}, 0x203, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0xc, 0x0, 0x1, [0xc, 0xd9, 0x5, 0xd0, 0x7, 0x9, 0x4, 0xfff8, 0x4, 0x10, 0x9, 0x5a43, 0x5, 0x7, 0x0, 0x4], 0x10}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) 741.624429ms ago: executing program 1 (id=1645): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x726dd0e1ba90057a}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000046e3b1baf9319a6050fc75db3b722de6ae7a2a664b451767915e8473028a57189828cbcacaf92c814a10efbe1ff4516bebe20a2b1df7551379020000000000000040a8375c41fa4011a1048fc06a84a4f3cb9b6ed650e0025f4509ad2157e27e5acf8345cc8cad5ceb1e4b111d6cf73b780207a62f29f8e5e29274a14562f5200e6e569bf133d08e00e1a57cb8d5a19c477fddf3415d8083a6e32291d40558e2bb389c40c24edbd77857c6ed73fadd279d2b469aa61788310c43facc989f3d58d7306db30400000024b5381c3e7b4084e20f9c33f13bca361b80306e9c20df3c7583cfa9e7a68b17d06a52", @ANYRES16=r3, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) getsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 582.682963ms ago: executing program 2 (id=1646): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xa, &(0x7f0000000040)=@raw=[@generic={0x8, 0x3, 0x5, 0x8, 0x8}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xeb, &(0x7f0000000100)=""/235, 0x41100, 0x43, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000240)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000280)=[{0x4, 0x2, 0x7, 0x7}, {0x5, 0x4, 0xc, 0x4}, {0x5, 0x2, 0x5}, {0x4, 0x3, 0x9, 0xb}], 0x10, 0x8, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000000), &(0x7f0000000380)=r0}, 0x20) socketpair(0x1a, 0x2, 0x6, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000440), 0x4) close(r2) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), r1) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, r4, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xc7f}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4c0317f8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x45) getpeername$packet(r1, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000006c0)=0x14) bind$inet6(r1, &(0x7f0000000700)={0xa, 0x4e22, 0x54, @dev={0xfe, 0x80, '\x00', 0x22}, 0x1}, 0x1c) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000740)={0x0, 0x9}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000007c0)=@assoc_id=r6, &(0x7f0000000800)=0x4) connect$can_j1939(r3, &(0x7f0000000840)={0x1d, r5, 0x0, {0x2, 0x1}}, 0x18) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000880), 0x220800, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r8, 0x400c6615, &(0x7f00000008c0)={0x0, @aes128, 0x0, @desc4}) write$6lowpan_control(r3, &(0x7f0000000900)='connect aa:aa:aa:aa:aa:11 1', 0x1b) socket$inet_tcp(0x2, 0x1, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r7) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x94, r10, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x4c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfbb}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffff0001}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x1c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x840}, 0x8000) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000b00)={0x0, 0x0, 0x7, 0x8, @vifc_lcl_addr=@loopback, @broadcast}, 0x10) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r11, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000b40)="631080a61a6a829f20f788a2a8f70e54e2cf86567536671e57b71dbd13167935cf1d17851afa33290e457037f6cde4ae39be91e18e592b06c3f5f289cb86887c060415f044bd9ccfbac5ebe346af9bdf554d78a2abb4821797e84adb7967d76a798992f7fd6ee178f97a584d96f4931640bbbc3cb384f9d31e544a0106b96da30fce96c343c9930bd79a86f11ddecee966604203502ac97c1551c98899", 0x9d}, {&(0x7f0000000c00)="79a1cff70443aa11d53d6583a7058364560de68d248837ad596cb39bdd5e9985d87317742bad1cd461f1bdda092a4d9ebca18cec15d6295059bb28d272a5efbebdcc0202a8b07d3078105e05de8c8287b500692b362b624876cfb423b7b7155939495f0253659772247a417e58051343800dfcf6356b2014d348bbbdb7ac1b28e1372d26fe75c7ad0f0e2dd84ca08ffcff3230d84dcbd421a17e4f900527fbe7cf83ba3b306a741cb9ab93941f65fd339cff3f618e8846c32bd94cf917ffda006c1a98d8a5ed89115ae6f508b0246cceed61fa40342104ed65e8c89c4481c260b40c2e0256e7a912639f66b54fc2fea253f307f40ba2", 0xf6}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="f8cd582cf3a5e2241dfef01bc9fe1b43f6efab4f72866a6148fbce5e1e13138cd7f1bc8878fe5b3a89cfc7b7f340b7355d1607013b8c1d6486edbe9295ba497981d39e18fe5247d4d0fd65ebf3e1c32a9a699897120368adab0984bef6e696c7dc65ee134f2cb40795882df067502784b03b11313d850f8cd758cd9d6d72422e88b2e0245a7f2990db10b38b1df9033ed46e0a55a8cf857c04c6e33039b19ca4658cc012c9436fc2054cd34d74112bef11539fe420cebbc980c5bd43961c56cdbe8f0883031a9fd6ca3519fe66b088a062cc8b9566b9a7f534c481a6f23b133d1fc36c91103a2665e61efb140e9a1d3321a7b87d95b9457e19457fd78431", 0xfe}, {&(0x7f0000001e00)="a15dbe522a9187f9a4ab397df52e8d5a1b40d75f904e23b0dfb467d171f3a03c9820113f59006ddda2f415c7eee849fb0ebeb8494e9b9b3217e7c4cf486113b088797bb334319fdf42241a5355018e595e1d473090346b05ce2be1945dba30903467ad0f18872d0aa3e0e1419b", 0x6d}], 0x5}}], 0x1, 0x24004850) bind$tipc(r1, &(0x7f0000001f40)=@name={0x1e, 0x2, 0x0, {{0x1, 0x2}, 0x4}}, 0x10) ioctl$I2C_TIMEOUT(r3, 0x702, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001f80)='./cgroup.net/syz1\x00', 0x1ff) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001fc0), 0x4d00, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f00000020c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x24400000}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x20, r10, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x14) 522.824302ms ago: executing program 0 (id=1647): socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="180000002d00010000000040bb0e00e304000080040019"], 0x18}], 0x1}, 0x10) 462.769145ms ago: executing program 0 (id=1648): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0xc0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local, 0x6}, 0x400, "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"}, 0x418, 0x7fffffff}) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100000000fff50000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076"], 0xfc}}, 0x0) 462.564068ms ago: executing program 0 (id=1649): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x95, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 372.236687ms ago: executing program 0 (id=1650): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000001100)) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', &(0x7f0000000440), 0x1000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0xc0402, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="c16a2221", 0x4}, {&(0x7f0000000a80)="7ba863ad08", 0x5}], 0x2, 0x0, 0x0, 0x4c004}], 0x1, 0x51) recvmmsg(r0, &(0x7f00000081c0)=[{{&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)=""/212, 0xd4}], 0x1, &(0x7f00000006c0)=""/188, 0xbc}, 0xfffff000}, {{&(0x7f0000000200)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/7, 0x7}], 0x1, &(0x7f0000000640)=""/63, 0x3f}, 0x7}, {{&(0x7f0000000840)=@ax25={{0x3, @default}, [@remote, @bcast, @remote, @rose, @rose, @bcast, @netrom, @rose]}, 0x80, &(0x7f0000000f00)=[{&(0x7f00000008c0)=""/70, 0x46}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000780)}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000000ac0)=""/181, 0xb5}, {&(0x7f0000000b80)=""/172, 0xbe}, {&(0x7f0000000c40)=""/224, 0xe0}, {&(0x7f0000000d40)=""/128, 0x80}, {&(0x7f0000000dc0)=""/169, 0xa9}, {&(0x7f0000000e80)=""/110, 0x6e}], 0xa, &(0x7f0000001140)=""/242, 0xf2}, 0x10000}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000000a40)=""/32, 0x20}, {&(0x7f0000000fc0)=""/56, 0x38}, {&(0x7f0000001000)=""/28, 0x1c}, {&(0x7f0000001080)=""/12, 0xc}, {&(0x7f00000022c0)=""/238, 0xee}, {&(0x7f00000023c0)=""/80, 0x50}, {&(0x7f0000002440)=""/147, 0x93}, {&(0x7f0000002500)=""/97, 0x61}, {&(0x7f0000002580)=""/196, 0xc4}, {&(0x7f00000010c0)=""/43, 0x2b}], 0xa, &(0x7f0000002740)=""/83, 0x53}, 0x9}, {{&(0x7f00000027c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001240)=[{&(0x7f0000002840)=""/255, 0xff}], 0x1, &(0x7f0000002940)=""/52, 0x34}, 0x5}, {{&(0x7f0000002980)=@nfc, 0x80, &(0x7f0000003f40)=[{&(0x7f0000002a00)=""/236, 0xec}, {&(0x7f0000002b00)=""/173, 0xad}, {&(0x7f0000002bc0)=""/249, 0xf9}, {&(0x7f0000002cc0)=""/81, 0x51}, {&(0x7f0000002d40)=""/25, 0x19}, {&(0x7f0000002d80)=""/14, 0xe}, {&(0x7f0000002dc0)=""/149, 0x95}, {&(0x7f0000002e80)=""/164, 0xa4}, {&(0x7f0000002f40)=""/4096, 0x1000}], 0x9, &(0x7f0000004000)=""/95, 0x5f}, 0x4}, {{&(0x7f0000004080)=@phonet, 0x80, &(0x7f0000005440)=[{&(0x7f0000004100)=""/246, 0xf6}, {&(0x7f0000004200)=""/10, 0xa}, {&(0x7f0000004240)=""/255, 0xff}, {&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)=""/249, 0xf9}], 0x5, &(0x7f00000054c0)=""/62, 0x3e}, 0x80}, {{&(0x7f0000005500)=@caif=@dgm, 0x80, &(0x7f0000005b00)=[{&(0x7f0000005580)=""/195, 0xc3}, {&(0x7f0000005680)=""/232, 0xe8}, {&(0x7f0000008440)=""/161, 0xa1}, {&(0x7f0000005840)=""/242, 0xf2}, {&(0x7f0000005940)=""/159, 0x9f}, {&(0x7f0000005a00)=""/52, 0x34}, {&(0x7f0000005a40)=""/69, 0x45}, {&(0x7f0000005ac0)=""/23, 0x17}], 0x8}, 0x7}, {{0x0, 0x0, &(0x7f0000005cc0)=[{&(0x7f0000008500)=""/245, 0xf5}, {&(0x7f0000005c80)=""/50, 0x32}], 0x2}, 0x3}, {{&(0x7f0000005d00)=@isdn, 0x80, &(0x7f00000080c0)=[{&(0x7f0000005d80)=""/4096, 0x1000}, {&(0x7f0000006d80)=""/115, 0x73}, {&(0x7f0000006e00)=""/4096, 0x1000}, {&(0x7f0000007e00)=""/134, 0x86}, {&(0x7f0000007ec0)=""/193, 0xc1}, {&(0x7f0000007fc0)=""/26, 0x1a}, {&(0x7f0000008000)=""/75, 0x4b}, {&(0x7f0000008080)}], 0x8, &(0x7f0000008140)=""/80, 0x50}, 0x2cf}], 0xa, 0x2101, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000076000d0b0040000006dcdf2503000000000000000800010002"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$FIONCLEX(r3, 0x5450) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000780), &(0x7f0000005780)=0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'batadv0\x00'}) 203.077228ms ago: executing program 0 (id=1651): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r4, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) sendmsg$802154_raw(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)="eb", 0x1}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) sendmmsg$alg(r4, &(0x7f0000002a40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}], 0x1, 0x2010) close(r1) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r8, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r8, 0x100000000000f7) read$watch_queue(r7, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r5) ioctl$KVM_CHECK_EXTENSION(r2, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) 0s ago: executing program 3 (id=714): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a00f000", @ANYRES32=r0, @ANYBLOB="140001140040000000000000000000000000000014000200fe"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) kernel console output (not intermixed with test programs): 38713][ T1144] bridge_slave_1: left promiscuous mode [ 114.840565][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.845254][ T1144] bridge_slave_0: left allmulticast mode [ 114.847109][ T1144] bridge_slave_0: left promiscuous mode [ 114.848993][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.097761][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.102468][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.106861][ T1144] bond0 (unregistering): Released all slaves [ 115.164638][ T9405] netlink: 'syz.2.1125': attribute type 21 has an invalid length. [ 115.167392][ T9405] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1125'. [ 115.258369][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1127'. [ 115.266069][ T9412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.487610][ T1144] hsr_slave_0: left promiscuous mode [ 115.490516][ T1144] hsr_slave_1: left promiscuous mode [ 115.496574][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.499753][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.503876][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.507228][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.541384][ T1144] veth1_macvtap: left promiscuous mode [ 115.544212][ T1144] veth0_macvtap: left promiscuous mode [ 115.546774][ T1144] veth1_vlan: left promiscuous mode [ 115.549085][ T1144] veth0_vlan: left promiscuous mode [ 115.784470][ T5939] Bluetooth: hci3: command tx timeout [ 115.890562][ T9430] netlink: 'syz.2.1130': attribute type 1 has an invalid length. [ 115.896005][ T9430] netlink: 'syz.2.1130': attribute type 4 has an invalid length. [ 115.898648][ T9430] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1130'. [ 116.162888][ T9448] Cannot find map_set index 0 as target [ 116.348825][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 116.451708][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 117.098444][ T9292] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 117.104814][ T9292] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 117.115605][ T9292] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 117.122615][ T9292] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 117.171015][ T9292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.181013][ T9292] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.187304][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.189853][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.195503][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.197786][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.322887][ T9292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.350863][ T9292] veth0_vlan: entered promiscuous mode [ 117.358234][ T9292] veth1_vlan: entered promiscuous mode [ 117.379421][ T9292] veth0_macvtap: entered promiscuous mode [ 117.384633][ T9292] veth1_macvtap: entered promiscuous mode [ 117.396337][ T9292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.397915][ T9502] 9pnet_fd: p9_fd_create_tcp (9502): problem connecting socket to 127.0.0.1 [ 117.404354][ T9292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.414539][ T9292] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.417315][ T9292] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.420083][ T9292] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.422901][ T9292] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.452001][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1151'. [ 117.560664][ T9509] 9pnet_virtio: no channels available for device syz [ 117.676121][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 117.676132][ T40] audit: type=1326 audit(1750240074.358:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9510 comm="syz.0.1153" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd81778e929 code=0x0 [ 117.850895][ T9523] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1155'. [ 117.863156][ T52] vhci_hcd: vhci_device speed not set [ 117.863301][ T5939] Bluetooth: hci3: command tx timeout [ 118.070270][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.072860][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.093451][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.096533][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.189200][ T9530] (syz.2.1157,9530,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 118.192341][ T9530] (syz.2.1157,9530,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 118.200379][ T9530] netdevsim netdevsim2 : renamed from netdevsim0 [ 118.270797][ T40] audit: type=1400 audit(1750240074.948:497): avc: denied { map } for pid=9531 comm="syz.2.1158" path="/dev/ptmx" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 118.437288][ T40] audit: type=1400 audit(1750240075.118:498): avc: denied { execute } for pid=9534 comm="syz.2.1159" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=31226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 118.514957][ T40] audit: type=1400 audit(1750240075.198:499): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 118.759605][ T40] audit: type=1326 audit(1750240075.438:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9549 comm="syz.0.1165" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81778e929 code=0x7ffc0000 [ 118.768204][ T40] audit: type=1326 audit(1750240075.438:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9549 comm="syz.0.1165" exe="/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fd81778e929 code=0x7ffc0000 [ 118.776282][ T40] audit: type=1326 audit(1750240075.438:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9549 comm="syz.0.1165" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81778e929 code=0x7ffc0000 [ 118.783855][ T40] audit: type=1326 audit(1750240075.438:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9549 comm="syz.0.1165" exe="/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd81778e929 code=0x7ffc0000 [ 118.792644][ T40] audit: type=1326 audit(1750240075.438:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9549 comm="syz.0.1165" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81778e929 code=0x7ffc0000 [ 118.800797][ T40] audit: type=1326 audit(1750240075.438:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9549 comm="syz.0.1165" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd81778e929 code=0x7ffc0000 [ 118.920616][ T9554] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 119.135961][ T5939] Bluetooth: hci0: ISO packet for unknown connection handle 1 [ 119.407976][ T9568] SET target dimension over the limit! [ 119.471966][ T1176] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.370929][ T5933] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 120.375580][ T5933] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 120.379052][ T5933] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.384911][ T5933] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 120.387635][ T5933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.418087][ T9588] netlink: 'syz.0.1176': attribute type 10 has an invalid length. [ 120.533317][ T9584] chnl_net:caif_netlink_parms(): no params data found [ 120.635187][ T9584] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.638347][ T9584] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.641379][ T9584] bridge_slave_0: entered allmulticast mode [ 120.646721][ T9584] bridge_slave_0: entered promiscuous mode [ 120.651493][ T9584] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.654802][ T9584] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.657879][ T9584] bridge_slave_1: entered allmulticast mode [ 120.661112][ T9584] bridge_slave_1: entered promiscuous mode [ 120.695259][ T9584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.699853][ T9584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.735704][ T9584] team0: Port device team_slave_0 added [ 120.739388][ T9584] team0: Port device team_slave_1 added [ 120.771983][ T9584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.775398][ T9584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.783418][ T9584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.787743][ T9584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.789942][ T9584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.798448][ T9584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.838592][ T9584] hsr_slave_0: entered promiscuous mode [ 120.840883][ T9584] hsr_slave_1: entered promiscuous mode [ 120.843174][ T9584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.845728][ T9584] Cannot create hsr debugfs directory [ 121.296496][ T1176] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.386901][ T9613] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1185'. [ 121.390796][ T9616] xt_cgroup: path and classid specified [ 121.395751][ T1176] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.470825][ T9620] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1187'. [ 121.472018][ T1176] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.592624][ T1176] bridge_slave_1: left allmulticast mode [ 121.594662][ T1176] bridge_slave_1: left promiscuous mode [ 121.596462][ T1176] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.601522][ T1176] bridge_slave_0: left allmulticast mode [ 121.604657][ T1176] bridge_slave_0: left promiscuous mode [ 121.606437][ T1176] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.828086][ T1176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.839748][ T1176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.844909][ T1176] bond0 (unregistering): Released all slaves [ 121.968711][ T9636] Bluetooth: hci4: Frame reassembly failed (-84) [ 121.974676][ T220] Bluetooth: hci4: Frame reassembly failed (-84) [ 122.183095][ T1176] hsr_slave_0: left promiscuous mode [ 122.186948][ T1176] hsr_slave_1: left promiscuous mode [ 122.189841][ T1176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.192939][ T1176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.196976][ T1176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.199600][ T1176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.232225][ T1176] veth1_macvtap: left promiscuous mode [ 122.234635][ T1176] veth0_macvtap: left promiscuous mode [ 122.236626][ T1176] veth1_vlan: left promiscuous mode [ 122.238428][ T1176] veth0_vlan: left promiscuous mode [ 122.433259][ T5933] Bluetooth: hci3: command tx timeout [ 122.875115][ T1176] team0 (unregistering): Port device team_slave_1 removed [ 122.950648][ T1176] team0 (unregistering): Port device team_slave_0 removed [ 123.476418][ T9667] netlink: 'syz.0.1200': attribute type 1 has an invalid length. [ 123.479046][ T9667] netlink: 'syz.0.1200': attribute type 4 has an invalid length. [ 123.481606][ T9667] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1200'. [ 123.483613][ T9584] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 123.488469][ T9667] netlink: 'syz.0.1200': attribute type 1 has an invalid length. [ 123.491382][ T9667] netlink: 'syz.0.1200': attribute type 4 has an invalid length. [ 123.493563][ T9584] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 123.494853][ T9667] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1200'. [ 123.502637][ T9584] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 123.513657][ T9584] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 123.539672][ T9677] netlink: 'syz.0.1201': attribute type 4 has an invalid length. [ 123.583573][ T9683] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1202'. [ 123.595434][ T9584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.628581][ T9584] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.641637][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.644009][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.651110][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.653512][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.812267][ T9584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.839026][ T9584] veth0_vlan: entered promiscuous mode [ 123.843945][ T9584] veth1_vlan: entered promiscuous mode [ 123.859527][ T9702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1205'. [ 123.860571][ T9584] veth0_macvtap: entered promiscuous mode [ 123.868478][ T9584] veth1_macvtap: entered promiscuous mode [ 123.881398][ T9584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.887818][ T9584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.892559][ T9584] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.903147][ T9584] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.905897][ T9584] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.908633][ T9584] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.920062][ T5933] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 123.920675][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 123.920687][ T40] audit: type=1400 audit(1750240080.598:515): avc: denied { setopt } for pid=9703 comm="syz.0.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.963960][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.966478][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.979752][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.980612][ T9713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=107 sclass=netlink_route_socket pid=9713 comm=syz.1.1208 [ 123.983347][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.027706][ T5939] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 124.094106][ T9722] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 124.470143][ T9757] /dev/nullb0: Can't open blockdev [ 124.569494][ T9766] mac80211_hwsim hwsim2 wlan0: vlans aren't supported yet for dev_uc|mc_add() [ 124.574959][ T5939] Bluetooth: hci1: unexpected event for opcode 0x201c [ 124.615357][ T40] audit: type=1400 audit(1750240081.298:516): avc: denied { ioctl } for pid=9771 comm="syz.0.1222" path="socket:[34026]" dev="sockfs" ino=34026 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 124.720734][ T9782] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1222'. [ 124.804693][ T40] audit: type=1400 audit(1750240081.488:517): avc: denied { write } for pid=9790 comm="syz.2.1224" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 124.849207][ T40] audit: type=1400 audit(1750240081.528:518): avc: denied { setopt } for pid=9795 comm="syz.2.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.910241][ T40] audit: type=1400 audit(1750240081.588:519): avc: denied { mount } for pid=9804 comm="syz.2.1227" name="/" dev="autofs" ino=33313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 124.919236][ T40] audit: type=1400 audit(1750240081.588:520): avc: denied { mount } for pid=9804 comm="syz.2.1227" name="/" dev="autofs" ino=30609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 124.926796][ T40] audit: type=1400 audit(1750240081.608:521): avc: denied { unmount } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 124.976025][ T9815] kAFS: Can only specify source 'none' with -o dyn [ 125.032849][ T9821] afs: Unknown parameter 'dynan0' [ 125.259781][ T9841] 9pnet_virtio: no channels available for device syz [ 125.265051][ T40] audit: type=1400 audit(1750240081.938:522): avc: denied { setopt } for pid=9840 comm="syz.1.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.083768][ T99] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.971201][ T9873] 9pnet_virtio: no channels available for device syz [ 127.105268][ T5933] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 127.109426][ T5933] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 127.114406][ T5933] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 127.118475][ T5933] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 127.122128][ T5933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 127.177102][ T40] audit: type=1400 audit(1750240083.858:523): avc: denied { setattr } for pid=9892 comm="syz.0.1247" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.241664][ T9888] chnl_net:caif_netlink_parms(): no params data found [ 127.321426][ T9888] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.323800][ T9888] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.326150][ T9888] bridge_slave_0: entered allmulticast mode [ 127.329065][ T9888] bridge_slave_0: entered promiscuous mode [ 127.333568][ T9888] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.336641][ T9888] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.339626][ T9888] bridge_slave_1: entered allmulticast mode [ 127.342477][ T9888] bridge_slave_1: entered promiscuous mode [ 127.394320][ T9888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.401850][ T9888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.446310][ T9888] team0: Port device team_slave_0 added [ 127.450852][ T9888] team0: Port device team_slave_1 added [ 127.488178][ T9888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.490513][ T9888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.498674][ T9888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.503008][ T9888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.505365][ T9888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.514107][ T9888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.552518][ T9888] hsr_slave_0: entered promiscuous mode [ 127.555549][ T9888] hsr_slave_1: entered promiscuous mode [ 127.557733][ T9888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.560112][ T9888] Cannot create hsr debugfs directory [ 127.898659][ T99] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.986695][ T99] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.058682][ T99] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.117333][ T5939] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 128.192206][ T99] bridge_slave_1: left allmulticast mode [ 128.196047][ T99] bridge_slave_1: left promiscuous mode [ 128.197927][ T99] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.201558][ T99] bridge_slave_0: left allmulticast mode [ 128.203577][ T99] bridge_slave_0: left promiscuous mode [ 128.205488][ T99] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.433988][ T99] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.438469][ T99] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.442099][ T99] bond0 (unregistering): Released all slaves [ 128.649922][ T40] audit: type=1400 audit(1750240085.328:524): avc: denied { listen } for pid=9931 comm="syz.1.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 128.877766][ T99] hsr_slave_0: left promiscuous mode [ 128.880878][ T99] hsr_slave_1: left promiscuous mode [ 128.882839][ T99] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.886074][ T99] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.888870][ T99] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.891224][ T99] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.914174][ T99] veth1_macvtap: left promiscuous mode [ 128.915923][ T99] veth0_macvtap: left promiscuous mode [ 128.943152][ T99] veth1_vlan: left promiscuous mode [ 128.955619][ T99] veth0_vlan: left promiscuous mode [ 129.154113][ T5933] Bluetooth: hci3: command tx timeout [ 129.629992][ T99] team0 (unregistering): Port device team_slave_1 removed [ 129.719974][ T99] team0 (unregistering): Port device team_slave_0 removed [ 129.841535][ T9965] FAULT_INJECTION: forcing a failure. [ 129.841535][ T9965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.847208][ T9965] CPU: 1 UID: 0 PID: 9965 Comm: syz.1.1266 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 129.847226][ T9965] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.847233][ T9965] Call Trace: [ 129.847237][ T9965] [ 129.847248][ T9965] dump_stack_lvl+0x16c/0x1f0 [ 129.847285][ T9965] should_fail_ex+0x512/0x640 [ 129.847308][ T9965] _copy_from_user+0x2e/0xd0 [ 129.847324][ T9965] kstrtouint_from_user+0xd6/0x1d0 [ 129.847337][ T9965] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 129.847348][ T9965] ? __lock_acquire+0xb8a/0x1c90 [ 129.847371][ T9965] proc_fail_nth_write+0x83/0x250 [ 129.847386][ T9965] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 129.847404][ T9965] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 129.847416][ T9965] vfs_write+0x2a0/0x1150 [ 129.847432][ T9965] ? __pfx___mutex_lock+0x10/0x10 [ 129.847450][ T9965] ? __pfx_vfs_write+0x10/0x10 [ 129.847468][ T9965] ? __fget_files+0x20e/0x3c0 [ 129.847487][ T9965] ksys_write+0x12a/0x250 [ 129.847500][ T9965] ? __pfx_ksys_write+0x10/0x10 [ 129.847518][ T9965] do_syscall_64+0xcd/0x4c0 [ 129.847536][ T9965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.847548][ T9965] RIP: 0033:0x7f5c4b98d3df [ 129.847556][ T9965] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 129.847567][ T9965] RSP: 002b:00007f5c4c83a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 129.847577][ T9965] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5c4b98d3df [ 129.847584][ T9965] RDX: 0000000000000001 RSI: 00007f5c4c83a0a0 RDI: 0000000000000004 [ 129.847590][ T9965] RBP: 00007f5c4c83a090 R08: 0000000000000000 R09: 0000000000000000 [ 129.847596][ T9965] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 129.847602][ T9965] R13: 0000000000000000 R14: 00007f5c4bbb5fa0 R15: 00007ffdcb4c2a48 [ 129.847616][ T9965] [ 130.290169][ T9888] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 130.297313][ T9888] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 130.303254][ T9888] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 130.307445][ T9888] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 130.347756][ T9888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.358500][ T9888] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.363622][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.365864][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.372294][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.374511][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.510539][ T9888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.532965][ T9888] veth0_vlan: entered promiscuous mode [ 130.535058][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 130.541961][ T9888] veth1_vlan: entered promiscuous mode [ 130.559645][ T9888] veth0_macvtap: entered promiscuous mode [ 130.563669][ T9888] veth1_macvtap: entered promiscuous mode [ 130.575234][ T9888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.582800][ T9888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.588206][ T9888] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.591108][ T9888] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.596921][ T9888] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.600007][ T9888] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.658117][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.660620][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.678896][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.682053][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.694493][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 130.697510][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 130.700286][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.709044][ T9975] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.717947][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.918769][ T10] usb 5-1: USB disconnect, device number 13 [ 131.527299][T10007] block nbd0: not configured, cannot reconfigure [ 132.550026][T10038] CUSE: info not properly terminated [ 132.586693][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.739030][T10055] 9pnet_fd: p9_fd_create_unix (10055): problem connecting socket: qY3aK: -91 [ 133.018846][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.999217][T10077] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1297'. [ 134.015190][T10078] 9pnet_virtio: no channels available for device syz [ 134.156916][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 134.160235][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 134.164252][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 134.168167][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 134.172694][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 134.282687][T10081] chnl_net:caif_netlink_parms(): no params data found [ 134.333156][ T54] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 134.358696][T10081] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.361811][T10081] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.365049][T10081] bridge_slave_0: entered allmulticast mode [ 134.368780][T10081] bridge_slave_0: entered promiscuous mode [ 134.373586][T10081] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.376522][T10081] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.379429][T10081] bridge_slave_1: entered allmulticast mode [ 134.383594][T10081] bridge_slave_1: entered promiscuous mode [ 134.438717][T10081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.445399][T10081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.487448][ T54] usb 6-1: Using ep0 maxpacket: 32 [ 134.496516][ T54] usb 6-1: config 7 has an invalid interface number: 81 but max is 1 [ 134.497604][T10081] team0: Port device team_slave_0 added [ 134.499921][ T54] usb 6-1: config 7 has an invalid interface number: 169 but max is 1 [ 134.503759][T10081] team0: Port device team_slave_1 added [ 134.506935][ T54] usb 6-1: config 7 has no interface number 0 [ 134.509442][ T54] usb 6-1: config 7 has no interface number 1 [ 134.512051][ T54] usb 6-1: config 7 interface 81 altsetting 255 endpoint 0xA has invalid wMaxPacketSize 0 [ 134.516111][ T54] usb 6-1: config 7 interface 81 altsetting 255 endpoint 0xC has invalid maxpacket 2559, setting to 64 [ 134.520649][ T54] usb 6-1: config 7 interface 81 altsetting 255 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 134.527519][ T54] usb 6-1: config 7 interface 81 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 134.531239][ T54] usb 6-1: config 7 interface 81 altsetting 255 has an endpoint descriptor with address 0x72, changing to 0x2 [ 134.536332][ T54] usb 6-1: config 7 interface 81 altsetting 255 endpoint 0x2 has invalid maxpacket 41859, setting to 1024 [ 134.540859][ T54] usb 6-1: config 7 interface 81 altsetting 255 bulk endpoint 0x2 has invalid maxpacket 1024 [ 134.545742][ T54] usb 6-1: config 7 interface 81 altsetting 255 endpoint 0x3 has invalid maxpacket 1048, setting to 64 [ 134.550358][ T54] usb 6-1: config 7 interface 81 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 134.555337][ T54] usb 6-1: config 7 interface 81 altsetting 255 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 134.557033][T10081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.559818][ T54] usb 6-1: config 7 interface 81 altsetting 255 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 134.562447][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.568260][ T54] usb 6-1: config 7 interface 169 altsetting 51 has a duplicate endpoint with address 0x2, skipping [ 134.568286][ T54] usb 6-1: config 7 interface 169 altsetting 51 has a duplicate endpoint with address 0xA, skipping [ 134.568304][ T54] usb 6-1: config 7 interface 169 altsetting 51 has a duplicate endpoint with address 0x6, skipping [ 134.568321][ T54] usb 6-1: config 7 interface 169 altsetting 51 has a duplicate endpoint with address 0x6, skipping [ 134.568339][ T54] usb 6-1: config 7 interface 169 altsetting 51 bulk endpoint 0xB has invalid maxpacket 1023 [ 134.568357][ T54] usb 6-1: config 7 interface 169 altsetting 51 has a duplicate endpoint with address 0x2, skipping [ 134.568377][ T54] usb 6-1: config 7 interface 169 altsetting 51 has a duplicate endpoint with address 0x1, skipping [ 134.568392][ T54] usb 6-1: config 7 interface 169 altsetting 51 has an invalid descriptor for endpoint zero, skipping [ 134.568406][ T54] usb 6-1: config 7 interface 169 altsetting 51 has a duplicate endpoint with address 0x2, skipping [ 134.568417][ T54] usb 6-1: config 7 interface 81 has no altsetting 0 [ 134.568427][ T54] usb 6-1: config 7 interface 169 has no altsetting 0 [ 134.570008][ T54] usb 6-1: New USB device found, idVendor=13d3, idProduct=0ccd, bcdDevice=e9.51 [ 134.579320][T10081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.580969][T10081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.583511][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.586488][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.589800][ T54] usb 6-1: Product: syz [ 134.593391][T10081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.597068][ T54] usb 6-1: Manufacturer: Ѝ [ 134.642937][ T54] usb 6-1: SerialNumber: syz [ 134.649806][T10080] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 134.663962][T10081] hsr_slave_0: entered promiscuous mode [ 134.666652][T10081] hsr_slave_1: entered promiscuous mode [ 134.668923][T10081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.671568][T10081] Cannot create hsr debugfs directory [ 134.698174][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.755354][ C3] vcan0: j1939_tp_rxtimer: 0xffff888054bb3000: rx timeout, send abort [ 134.770899][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.845833][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.981614][ T60] bridge_slave_1: left allmulticast mode [ 134.985354][ T60] bridge_slave_1: left promiscuous mode [ 134.987337][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.991739][ T60] bridge_slave_0: left allmulticast mode [ 134.994061][ T60] bridge_slave_0: left promiscuous mode [ 134.995993][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.241182][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.247239][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.252219][ T60] bond0 (unregistering): Released all slaves [ 135.255407][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802d107800: rx timeout, send abort [ 135.258737][ C3] vcan0: j1939_tp_rxtimer: 0xffff888054bb3000: abort rx timeout. Force session deactivation [ 135.382453][ T54] usb 6-1: USB disconnect, device number 6 [ 135.585490][ T60] hsr_slave_0: left promiscuous mode [ 135.587565][ T60] hsr_slave_1: left promiscuous mode [ 135.589572][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.591880][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.594839][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.597167][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.617589][ T60] veth1_macvtap: left promiscuous mode [ 135.619361][ T60] veth0_macvtap: left promiscuous mode [ 135.621136][ T60] veth1_vlan: left promiscuous mode [ 135.622837][ T60] veth0_vlan: left promiscuous mode [ 135.758717][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802d107800: abort rx timeout. Force session deactivation [ 135.799738][T10124] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 136.014635][T10127] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 136.262672][ T60] team0 (unregistering): Port device team_slave_1 removed [ 136.263224][ T5933] Bluetooth: hci3: command tx timeout [ 136.333852][T10142] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1313'. [ 136.334473][ T5933] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 136.347675][ T60] team0 (unregistering): Port device team_slave_0 removed [ 137.088710][T10081] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 137.098287][T10165] bridge2: entered promiscuous mode [ 137.102047][T10081] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 137.108995][T10081] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 137.115451][T10081] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 137.198425][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1322'. [ 137.216388][T10153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.220295][T10081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.242348][T10081] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.251025][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.254107][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.265623][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.268126][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.350188][T10202] FAULT_INJECTION: forcing a failure. [ 137.350188][T10202] name failslab, interval 1, probability 0, space 0, times 0 [ 137.355660][T10202] CPU: 2 UID: 0 PID: 10202 Comm: syz.2.1324 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 137.355676][T10202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 137.355683][T10202] Call Trace: [ 137.355687][T10202] [ 137.355691][T10202] dump_stack_lvl+0x16c/0x1f0 [ 137.355712][T10202] should_fail_ex+0x512/0x640 [ 137.355726][T10202] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 137.355771][T10202] should_failslab+0xc2/0x120 [ 137.355791][T10202] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 137.355805][T10202] ? __alloc_skb+0x2b2/0x380 [ 137.355823][T10202] __alloc_skb+0x2b2/0x380 [ 137.355837][T10202] ? __pfx___alloc_skb+0x10/0x10 [ 137.355854][T10202] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 137.355869][T10202] netlink_alloc_large_skb+0x69/0x130 [ 137.355881][T10202] netlink_sendmsg+0x6a1/0xdd0 [ 137.355895][T10202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.355911][T10202] ____sys_sendmsg+0xa95/0xc70 [ 137.355924][T10202] ? copy_msghdr_from_user+0x10a/0x160 [ 137.355940][T10202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.355958][T10202] ___sys_sendmsg+0x134/0x1d0 [ 137.355979][T10202] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.355993][T10202] ? __lock_acquire+0x622/0x1c90 [ 137.356027][T10202] __sys_sendmsg+0x16d/0x220 [ 137.356043][T10202] ? __pfx___sys_sendmsg+0x10/0x10 [ 137.356068][T10202] do_syscall_64+0xcd/0x4c0 [ 137.356086][T10202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.356096][T10202] RIP: 0033:0x7f706e18e929 [ 137.356106][T10202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.356116][T10202] RSP: 002b:00007f706f0a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.356127][T10202] RAX: ffffffffffffffda RBX: 00007f706e3b6080 RCX: 00007f706e18e929 [ 137.356134][T10202] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 137.356140][T10202] RBP: 00007f706f0a9090 R08: 0000000000000000 R09: 0000000000000000 [ 137.356146][T10202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.356152][T10202] R13: 0000000000000000 R14: 00007f706e3b6080 R15: 00007ffd7d6d4078 [ 137.356166][T10202] [ 137.362922][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 137.362937][ T40] audit: type=1400 audit(1750240094.038:526): avc: denied { ioctl } for pid=10197 comm="syz.1.1325" path="socket:[37073]" dev="sockfs" ino=37073 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 137.417438][T10081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.449736][T10213] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1326'. [ 137.468856][T10081] veth0_vlan: entered promiscuous mode [ 137.489820][T10081] veth1_vlan: entered promiscuous mode [ 137.511265][T10081] veth0_macvtap: entered promiscuous mode [ 137.520782][T10081] veth1_macvtap: entered promiscuous mode [ 137.537961][T10081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.550678][T10081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.557763][T10081] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.560833][T10081] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.563536][T10081] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.567303][T10081] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.629754][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.637524][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.661727][ T99] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.665664][ T99] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.053464][ T5933] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 138.163448][T10243] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 139.487106][T10272] FAULT_INJECTION: forcing a failure. [ 139.487106][T10272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.491549][T10272] CPU: 2 UID: 0 PID: 10272 Comm: syz.0.1340 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 139.491570][T10272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.491578][T10272] Call Trace: [ 139.491583][T10272] [ 139.491588][T10272] dump_stack_lvl+0x16c/0x1f0 [ 139.491608][T10272] should_fail_ex+0x512/0x640 [ 139.491633][T10272] _copy_from_user+0x2e/0xd0 [ 139.491657][T10272] kstrtouint_from_user+0xd6/0x1d0 [ 139.491674][T10272] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 139.491690][T10272] ? __lock_acquire+0xb8a/0x1c90 [ 139.491743][T10272] proc_fail_nth_write+0x83/0x250 [ 139.491766][T10272] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 139.491793][T10272] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 139.491812][T10272] vfs_write+0x2a0/0x1150 [ 139.491836][T10272] ? __pfx___mutex_lock+0x10/0x10 [ 139.491861][T10272] ? __pfx_vfs_write+0x10/0x10 [ 139.491888][T10272] ? __fget_files+0x20e/0x3c0 [ 139.491917][T10272] ksys_write+0x12a/0x250 [ 139.491936][T10272] ? __pfx_ksys_write+0x10/0x10 [ 139.491964][T10272] do_syscall_64+0xcd/0x4c0 [ 139.491988][T10272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.492005][T10272] RIP: 0033:0x7fd81778d3df [ 139.492018][T10272] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 139.492033][T10272] RSP: 002b:00007fd8186b3030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 139.492049][T10272] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd81778d3df [ 139.492060][T10272] RDX: 0000000000000001 RSI: 00007fd8186b30a0 RDI: 0000000000000004 [ 139.492070][T10272] RBP: 00007fd8186b3090 R08: 0000000000000000 R09: 0000000000000000 [ 139.492079][T10272] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 139.492088][T10272] R13: 0000000000000000 R14: 00007fd8179b5fa0 R15: 00007fff6519a168 [ 139.492111][T10272] [ 139.560788][ C2] vkms_vblank_simulate: vblank timer overrun [ 139.667434][T10282] netlink: 'syz.0.1344': attribute type 5 has an invalid length. [ 139.734473][T10284] binder: 10281:10284 ioctl c0306201 2000000003c0 returned -22 [ 139.737173][T10284] binder: 10281:10284 unknown command 0 [ 139.739038][T10284] binder: 10281:10284 ioctl c0306201 200000000280 returned -22 [ 139.842841][T10286] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1345'. [ 139.852601][ T40] audit: type=1400 audit(1750240096.538:527): avc: denied { map } for pid=10285 comm="syz.0.1345" path="socket:[38312]" dev="sockfs" ino=38312 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.861074][ T40] audit: type=1400 audit(1750240096.538:528): avc: denied { accept } for pid=10285 comm="syz.0.1345" path="socket:[38312]" dev="sockfs" ino=38312 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.907432][ T5933] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 139.955520][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.069781][T10307] binder: 10306:10307 ioctl c0306201 200000000640 returned -22 [ 141.157483][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 141.161668][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 141.165672][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 141.169211][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 141.171877][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 141.329757][T10315] chnl_net:caif_netlink_parms(): no params data found [ 141.446518][T10315] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.448805][T10315] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.451996][T10315] bridge_slave_0: entered allmulticast mode [ 141.454762][T10315] bridge_slave_0: entered promiscuous mode [ 141.457970][T10315] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.460230][T10315] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.462453][T10315] bridge_slave_1: entered allmulticast mode [ 141.465302][T10315] bridge_slave_1: entered promiscuous mode [ 141.485509][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802d09d400: rx timeout, send abort [ 141.519642][T10315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.535766][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.551587][T10315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.596622][T10315] team0: Port device team_slave_0 added [ 141.600666][T10315] team0: Port device team_slave_1 added [ 141.642121][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.691321][T10315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.694486][T10315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.705186][T10315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.723231][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.731299][T10315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.734411][T10315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.745481][T10315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.780226][T10355] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 141.829050][T10315] hsr_slave_0: entered promiscuous mode [ 141.830901][T10362] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1360'. [ 141.831311][T10315] hsr_slave_1: entered promiscuous mode [ 141.836896][T10315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.839283][T10315] Cannot create hsr debugfs directory [ 141.974500][ T60] bridge_slave_1: left allmulticast mode [ 141.976625][ T60] bridge_slave_1: left promiscuous mode [ 141.979270][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.985563][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802d09cc00: rx timeout, send abort [ 141.988898][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802d09d400: abort rx timeout. Force session deactivation [ 141.993595][ T60] bridge_slave_0: left allmulticast mode [ 141.995991][ T60] bridge_slave_0: left promiscuous mode [ 141.998553][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.115320][ T5933] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 142.249253][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.254474][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.258830][ T60] bond0 (unregistering): Released all slaves [ 142.488876][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802d09cc00: abort rx timeout. Force session deactivation [ 142.678728][ T60] hsr_slave_0: left promiscuous mode [ 142.682649][ T60] hsr_slave_1: left promiscuous mode [ 142.685781][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.689014][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.693000][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.698945][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.748527][ T60] veth1_macvtap: left promiscuous mode [ 142.750737][ T60] veth0_macvtap: left promiscuous mode [ 142.753301][ T60] veth1_vlan: left promiscuous mode [ 142.755447][ T60] veth0_vlan: left promiscuous mode [ 142.891794][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.903357][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.905961][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.908544][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.911108][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.916632][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.919305][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.921897][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.924825][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.927422][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.930009][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.932507][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.935267][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.938428][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.943002][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.946462][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.949970][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.953622][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.956936][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.959745][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.963010][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.966260][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.969272][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.972366][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.975654][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.978911][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.981733][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.984293][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.986835][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.989379][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.991959][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.994810][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.997433][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 142.999965][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 143.002491][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 143.005270][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 143.007839][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 143.010331][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 143.012826][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 143.015507][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 143.018261][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 143.020994][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 143.023855][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 143.037634][ T6632] hid-generic 0000:007F:FFFFFFFE.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 143.227383][ T5933] Bluetooth: hci3: command tx timeout [ 143.604018][ T60] team0 (unregistering): Port device team_slave_1 removed [ 143.669784][ T60] team0 (unregistering): Port device team_slave_0 removed [ 144.252458][T10409] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1371'. [ 144.365563][T10315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 144.369843][T10315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 144.374717][T10315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 144.380747][T10315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 144.446140][T10315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.456207][T10315] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.473369][ T99] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.475737][ T99] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.479890][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.482906][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.524745][T10315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.648337][T10315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.677631][T10315] veth0_vlan: entered promiscuous mode [ 144.685831][T10315] veth1_vlan: entered promiscuous mode [ 144.708248][T10315] veth0_macvtap: entered promiscuous mode [ 144.714733][T10315] veth1_macvtap: entered promiscuous mode [ 144.723548][T10315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.730507][T10315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.737061][T10315] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.739773][T10315] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.742391][T10315] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.745290][T10315] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.799892][T10453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1380'. [ 144.803251][T10453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1380'. [ 144.807243][T10453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1380'. [ 144.810216][T10447] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.812359][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.818535][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.834642][ T40] audit: type=1400 audit(1750240101.518:529): avc: denied { mounton } for pid=10452 comm="syz.1.1380" path="/403/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 144.841362][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.843376][ T40] audit: type=1400 audit(1750240101.518:530): avc: denied { remount } for pid=10452 comm="syz.1.1380" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 144.845755][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.886312][ T40] audit: type=1400 audit(1750240101.568:531): avc: denied { mount } for pid=10315 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 144.923932][T10459] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 145.027981][ T40] audit: type=1400 audit(1750240101.708:532): avc: denied { mounton } for pid=10470 comm="syz.1.1387" path="/407/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 145.272773][ T40] audit: type=1400 audit(1750240101.948:533): avc: denied { read } for pid=10483 comm="syz.0.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.273142][ T6017] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 145.347980][T10478] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 145.366109][T10487] netlink: 'syz.0.1391': attribute type 1 has an invalid length. [ 145.368756][T10487] netlink: 'syz.0.1391': attribute type 4 has an invalid length. [ 145.371092][T10487] netlink: 6034 bytes leftover after parsing attributes in process `syz.0.1391'. [ 145.388645][T10487] netlink: 'syz.0.1391': attribute type 1 has an invalid length. [ 145.391456][T10487] netlink: 'syz.0.1391': attribute type 4 has an invalid length. [ 145.393787][T10487] netlink: 6034 bytes leftover after parsing attributes in process `syz.0.1391'. [ 145.470675][ T6017] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 145.474212][ T6017] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 145.478822][ T6017] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 145.485092][ T6017] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 145.488594][ T6017] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 145.494367][ T6017] usb 7-1: config 0 interface 0 has no altsetting 0 [ 145.498147][ T6017] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 145.501139][ T6017] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 145.505110][ T6017] usb 7-1: Product: syz [ 145.506767][ T6017] usb 7-1: Manufacturer: syz [ 145.508629][ T6017] usb 7-1: SerialNumber: syz [ 145.512823][ T6017] usb 7-1: config 0 descriptor?? [ 145.515612][T10469] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 145.520306][ T6017] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 145.526612][ T6017] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 145.543322][T10497] FAULT_INJECTION: forcing a failure. [ 145.543322][T10497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.547594][T10497] CPU: 1 UID: 0 PID: 10497 Comm: syz.1.1394 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 145.547610][T10497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.547617][T10497] Call Trace: [ 145.547621][T10497] [ 145.547626][T10497] dump_stack_lvl+0x16c/0x1f0 [ 145.547646][T10497] should_fail_ex+0x512/0x640 [ 145.547693][T10497] _copy_from_iter+0x29f/0x16f0 [ 145.547714][T10497] ? __alloc_skb+0x200/0x380 [ 145.547730][T10497] ? __pfx__copy_from_iter+0x10/0x10 [ 145.547746][T10497] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 145.547763][T10497] netlink_sendmsg+0x829/0xdd0 [ 145.547777][T10497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.547793][T10497] ____sys_sendmsg+0xa95/0xc70 [ 145.547806][T10497] ? copy_msghdr_from_user+0x10a/0x160 [ 145.547821][T10497] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.547840][T10497] ___sys_sendmsg+0x134/0x1d0 [ 145.547863][T10497] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.547884][T10497] ? __lock_acquire+0x622/0x1c90 [ 145.547941][T10497] __sys_sendmsg+0x16d/0x220 [ 145.547958][T10497] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.547980][T10497] ? fdget+0x187/0x210 [ 145.547997][T10497] do_syscall_64+0xcd/0x4c0 [ 145.548015][T10497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.548027][T10497] RIP: 0033:0x7f5c4b98e929 [ 145.548036][T10497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.548047][T10497] RSP: 002b:00007f5c4c819038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.548057][T10497] RAX: ffffffffffffffda RBX: 00007f5c4bbb6080 RCX: 00007f5c4b98e929 [ 145.548064][T10497] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 145.548070][T10497] RBP: 00007f5c4c819090 R08: 0000000000000000 R09: 0000000000000000 [ 145.548076][T10497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.548082][T10497] R13: 0000000000000000 R14: 00007f5c4bbb6080 R15: 00007ffdcb4c2a48 [ 145.548096][T10497] [ 145.727461][ T6001] usb 7-1: USB disconnect, device number 6 [ 145.732351][ T6001] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 146.518432][T10506] evm: overlay not supported [ 146.610524][T10518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1399'. [ 146.691562][T10520] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 146.856931][T10536] fuse: Bad value for 'group_id' [ 146.859184][T10536] fuse: Bad value for 'group_id' [ 146.870439][ T40] audit: type=1400 audit(1750240103.548:534): avc: denied { setopt } for pid=10534 comm="syz.1.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 146.972936][ T1144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.174084][T10587] trusted_key: syz.0.1408 sent an empty control message without MSG_MORE. [ 148.176818][ T5933] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 148.185515][T10591] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 148.229296][ T40] audit: type=1400 audit(1750240104.908:535): avc: denied { bind } for pid=10596 comm="syz.2.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 148.256430][ T40] audit: type=1326 audit(1750240104.938:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10594 comm="syz.1.1411" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c4b98e929 code=0x0 [ 148.279820][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 148.286427][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 148.289418][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 148.294541][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 148.297415][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 148.334287][ T40] audit: type=1400 audit(1750240105.018:537): avc: denied { create } for pid=10594 comm="syz.1.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 148.341544][ T40] audit: type=1400 audit(1750240105.018:538): avc: denied { write } for pid=10594 comm="syz.1.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 148.441111][T10602] chnl_net:caif_netlink_parms(): no params data found [ 148.558583][T10619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1416'. [ 148.569775][T10602] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.572064][T10602] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.574732][T10602] bridge_slave_0: entered allmulticast mode [ 148.577375][T10602] bridge_slave_0: entered promiscuous mode [ 148.580602][T10602] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.582800][T10602] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.587130][T10602] bridge_slave_1: entered allmulticast mode [ 148.589755][T10602] bridge_slave_1: entered promiscuous mode [ 148.647896][T10602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.655672][T10602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.702860][T10602] team0: Port device team_slave_0 added [ 148.709619][T10602] team0: Port device team_slave_1 added [ 148.756824][T10602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.759623][T10602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.769877][T10602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.775891][T10602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.779056][T10602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.789523][T10602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.828803][T10602] hsr_slave_0: entered promiscuous mode [ 148.832005][T10602] hsr_slave_1: entered promiscuous mode [ 148.834225][T10602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.836651][T10602] Cannot create hsr debugfs directory [ 148.920524][ T1144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.995863][ T1144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.068548][ T1144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.125952][ T5939] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 149.158826][ T1144] bridge_slave_1: left allmulticast mode [ 149.160760][ T1144] bridge_slave_1: left promiscuous mode [ 149.162653][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.170633][ T1144] bridge_slave_0: left allmulticast mode [ 149.172483][ T1144] bridge_slave_0: left promiscuous mode [ 149.175311][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.413195][ T6001] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 149.437286][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.441505][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.446270][ T1144] bond0 (unregistering): Released all slaves [ 149.501063][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1422'. [ 149.507049][T10540] bond0: (slave bond_slave_0): interface is now down [ 149.513209][T10540] bond0: (slave bond_slave_1): interface is now down [ 149.535665][T10540] bond0: now running without any active interface! [ 149.570973][ T6001] usb 6-1: Using ep0 maxpacket: 16 [ 149.579401][ T6001] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 149.581933][ T6001] usb 6-1: config 0 has no interface number 0 [ 149.584262][ T6001] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 149.587686][ T6001] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 149.595892][ T6001] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 149.598748][ T6001] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 149.601149][ T6001] usb 6-1: Product: syz [ 149.602422][ T6001] usb 6-1: SerialNumber: syz [ 149.605865][ T6001] usb 6-1: config 0 descriptor?? [ 149.610514][ T6001] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 149.619524][ T6001] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input12 [ 149.665591][T10648] netlink: 'syz.0.1426': attribute type 1 has an invalid length. [ 149.668348][T10648] netlink: 'syz.0.1426': attribute type 4 has an invalid length. [ 149.670825][T10648] netlink: 58323 bytes leftover after parsing attributes in process `syz.0.1426'. [ 149.703813][T10649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1425'. [ 149.739367][ T5939] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 149.768502][T10658] netlink: 'syz.0.1430': attribute type 1 has an invalid length. [ 149.781379][T10658] bond4: entered promiscuous mode [ 149.782982][T10658] bond4: entered allmulticast mode [ 149.788861][T10662] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1431'. [ 149.800879][T10658] geneve2: entered allmulticast mode [ 149.813303][T10658] bond4: (slave geneve2): making interface the new active one [ 149.816527][T10658] geneve2: entered promiscuous mode [ 149.817097][T10658] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 149.818610][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 149.823511][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 149.825783][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 149.827611][ T1470] usb 6-1: USB disconnect, device number 7 [ 149.827893][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 149.837944][ T1470] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 149.852790][ T1144] hsr_slave_0: left promiscuous mode [ 149.856716][ T1144] hsr_slave_1: left promiscuous mode [ 149.858840][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.861303][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.866291][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.868918][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.889755][ T1144] veth1_macvtap: left promiscuous mode [ 149.891777][ T1144] veth0_macvtap: left promiscuous mode [ 149.893670][ T1144] veth1_vlan: left promiscuous mode [ 149.895296][ T1144] veth0_vlan: left promiscuous mode [ 150.125138][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880547d2400: rx timeout, send abort [ 150.345178][ T5939] Bluetooth: hci3: command tx timeout [ 150.545407][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 150.611247][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 150.625217][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802c3ff400: rx timeout, send abort [ 150.628264][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880547d2400: abort rx timeout. Force session deactivation [ 151.048866][ T40] audit: type=1400 audit(1750240107.738:539): avc: denied { read } for pid=10692 comm="syz.2.1442" path="socket:[40535]" dev="sockfs" ino=40535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 151.054204][T10690] FAULT_INJECTION: forcing a failure. [ 151.054204][T10690] name failslab, interval 1, probability 0, space 0, times 0 [ 151.060754][T10690] CPU: 1 UID: 0 PID: 10690 Comm: syz.0.1441 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 151.060771][T10690] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 151.060779][T10690] Call Trace: [ 151.060783][T10690] [ 151.060788][T10690] dump_stack_lvl+0x16c/0x1f0 [ 151.060809][T10690] should_fail_ex+0x512/0x640 [ 151.060824][T10690] ? fs_reclaim_acquire+0xae/0x150 [ 151.060836][T10690] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 151.060853][T10690] should_failslab+0xc2/0x120 [ 151.060869][T10690] __kmalloc_noprof+0xd2/0x510 [ 151.060886][T10690] tomoyo_realpath_from_path+0xc2/0x6e0 [ 151.060903][T10690] ? tomoyo_profile+0x47/0x60 [ 151.060921][T10690] tomoyo_path_number_perm+0x245/0x580 [ 151.060933][T10690] ? tomoyo_path_number_perm+0x237/0x580 [ 151.060948][T10690] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 151.060962][T10690] ? find_held_lock+0x2b/0x80 [ 151.060988][T10690] ? find_held_lock+0x2b/0x80 [ 151.061000][T10690] ? hook_file_ioctl_common+0x145/0x410 [ 151.061014][T10690] ? __fget_files+0x20e/0x3c0 [ 151.061032][T10690] security_file_ioctl+0x9b/0x240 [ 151.061048][T10690] __x64_sys_ioctl+0xb7/0x210 [ 151.061061][T10690] do_syscall_64+0xcd/0x4c0 [ 151.061084][T10690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.061096][T10690] RIP: 0033:0x7fd81778e929 [ 151.061105][T10690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.061115][T10690] RSP: 002b:00007fd8186b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.061126][T10690] RAX: ffffffffffffffda RBX: 00007fd8179b5fa0 RCX: 00007fd81778e929 [ 151.061133][T10690] RDX: 0000200000000040 RSI: 000000004020aed2 RDI: 0000000000000004 [ 151.061139][T10690] RBP: 00007fd8186b3090 R08: 0000000000000000 R09: 0000000000000000 [ 151.061146][T10690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.061152][T10690] R13: 0000000000000000 R14: 00007fd8179b5fa0 R15: 00007fff6519a168 [ 151.061166][T10690] [ 151.061171][T10690] ERROR: Out of memory at tomoyo_realpath_from_path. [ 151.128227][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802c3ff400: abort rx timeout. Force session deactivation [ 151.338745][T10678] ip_vti0: left allmulticast mode [ 152.013190][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 152.060990][T10602] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 152.072209][T10602] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 152.079488][T10602] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 152.084212][T10602] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 152.146252][T10602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.155161][ C3] vcan0: j1939_tp_rxtimer: 0xffff888037abf000: rx timeout, send abort [ 152.157831][T10602] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.162935][T10554] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.165354][T10554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.171148][T10554] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.173506][T10554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.175290][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 152.179190][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 152.182221][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 152.185206][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.189742][T10704] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 152.193997][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 152.291971][ T5939] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 152.351130][T10602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.371008][T10602] veth0_vlan: entered promiscuous mode [ 152.376949][T10602] veth1_vlan: entered promiscuous mode [ 152.398691][T10602] veth0_macvtap: entered promiscuous mode [ 152.402234][T10602] veth1_macvtap: entered promiscuous mode [ 152.410407][T10602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.416943][T10602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.423731][ T5939] Bluetooth: hci3: command tx timeout [ 152.426094][T10602] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.428832][T10602] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.431411][T10602] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.434339][T10602] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.471396][T10547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.478097][T10547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.490828][T10554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.493754][T10554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.508067][ T10] usb 6-1: USB disconnect, device number 8 [ 152.655257][ C3] vcan0: j1939_tp_rxtimer: 0xffff888037abe000: rx timeout, send abort [ 152.658999][ C3] vcan0: j1939_tp_rxtimer: 0xffff888037abf000: abort rx timeout. Force session deactivation [ 153.059927][T10772] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 153.158786][ C3] vcan0: j1939_tp_rxtimer: 0xffff888037abe000: abort rx timeout. Force session deactivation [ 153.239013][T10784] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1460'. [ 153.297944][ T40] audit: type=1400 audit(1750240109.978:540): avc: denied { create } for pid=10787 comm="syz.0.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 153.304806][ T40] audit: type=1400 audit(1750240109.988:541): avc: denied { bind } for pid=10787 comm="syz.0.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 153.317565][ T40] audit: type=1400 audit(1750240109.998:542): avc: denied { ioctl } for pid=10787 comm="syz.0.1462" path="socket:[42084]" dev="sockfs" ino=42084 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 153.404102][T10797] netlink: 'syz.0.1462': attribute type 30 has an invalid length. [ 153.407443][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1462'. [ 153.418701][T10797] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.423000][T10800] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 153.425918][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1462'. [ 153.429533][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1462'. [ 153.557655][T10809] netlink: 'syz.0.1469': attribute type 1 has an invalid length. [ 153.560128][T10809] netlink: 'syz.0.1469': attribute type 4 has an invalid length. [ 153.562544][T10809] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1469'. [ 153.599123][ T5939] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 153.636348][T10820] input: syz0 as /devices/virtual/input/input13 [ 153.662980][ T40] audit: type=1400 audit(1750240110.338:543): avc: denied { map } for pid=10816 comm="syz.0.1473" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 153.674045][ T40] audit: type=1400 audit(1750240110.338:544): avc: denied { execute } for pid=10816 comm="syz.0.1473" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 153.728117][T10830] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 153.812892][T10834] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1478'. [ 153.858278][ T40] audit: type=1400 audit(1750240110.538:545): avc: denied { ioctl } for pid=10835 comm="syz.0.1479" path="socket:[39653]" dev="sockfs" ino=39653 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 153.866704][ T40] audit: type=1400 audit(1750240110.548:546): avc: denied { map } for pid=10835 comm="syz.0.1479" path="socket:[39653]" dev="sockfs" ino=39653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 153.882068][ T40] audit: type=1400 audit(1750240110.548:547): avc: denied { read accept } for pid=10835 comm="syz.0.1479" path="socket:[39653]" dev="sockfs" ino=39653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 153.889968][ T40] audit: type=1400 audit(1750240110.548:548): avc: denied { ioctl } for pid=10835 comm="syz.0.1479" path="socket:[42113]" dev="sockfs" ino=42113 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 154.508568][T10853] FAULT_INJECTION: forcing a failure. [ 154.508568][T10853] name failslab, interval 1, probability 0, space 0, times 0 [ 154.512643][T10853] CPU: 2 UID: 0 PID: 10853 Comm: syz.2.1481 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 154.512661][T10853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 154.512668][T10853] Call Trace: [ 154.512672][T10853] [ 154.512676][T10853] dump_stack_lvl+0x16c/0x1f0 [ 154.512696][T10853] should_fail_ex+0x512/0x640 [ 154.512711][T10853] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 154.512726][T10853] should_failslab+0xc2/0x120 [ 154.512742][T10853] __kmalloc_cache_noprof+0x6a/0x3e0 [ 154.512754][T10853] ? drm_atomic_state_alloc+0xb8/0x120 [ 154.512768][T10853] drm_atomic_state_alloc+0xb8/0x120 [ 154.512779][T10853] drm_mode_atomic_ioctl+0x393/0x25f0 [ 154.512793][T10853] ? avc_has_extended_perms+0x33a/0x1090 [ 154.512807][T10853] ? avc_has_extended_perms+0x47c/0x1090 [ 154.512819][T10853] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 154.512831][T10853] ? __lock_acquire+0xb8a/0x1c90 [ 154.512856][T10853] ? drm_is_current_master+0x2c/0x40 [ 154.512869][T10853] ? do_raw_spin_unlock+0x172/0x230 [ 154.512882][T10853] drm_ioctl_kernel+0x1f4/0x3e0 [ 154.512897][T10853] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 154.512910][T10853] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 154.512929][T10853] drm_ioctl+0x5c9/0xc30 [ 154.512946][T10853] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 154.512958][T10853] ? __pfx_drm_ioctl+0x10/0x10 [ 154.512979][T10853] ? selinux_file_ioctl+0x180/0x270 [ 154.512994][T10853] ? selinux_file_ioctl+0xb4/0x270 [ 154.513009][T10853] ? __pfx_drm_ioctl+0x10/0x10 [ 154.513038][T10853] __x64_sys_ioctl+0x18b/0x210 [ 154.513051][T10853] do_syscall_64+0xcd/0x4c0 [ 154.513069][T10853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.513084][T10853] RIP: 0033:0x7f706e18e929 [ 154.513092][T10853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.513103][T10853] RSP: 002b:00007f706f0ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.513114][T10853] RAX: ffffffffffffffda RBX: 00007f706e3b5fa0 RCX: 00007f706e18e929 [ 154.513121][T10853] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000011 [ 154.513127][T10853] RBP: 00007f706f0ca090 R08: 0000000000000000 R09: 0000000000000000 [ 154.513133][T10853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.513139][T10853] R13: 0000000000000000 R14: 00007f706e3b5fa0 R15: 00007ffd7d6d4078 [ 154.513153][T10853] [ 154.600232][T10554] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.862708][T10864] binder: 10861:10864 ioctl c0306201 200000000240 returned -14 [ 155.969807][ T5933] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.974416][ T5933] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.977522][ T5933] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.980993][ T5933] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.990561][ T5933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.035500][T10873] loop6: detected capacity change from 0 to 63 [ 156.041105][ T5937] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.050112][ T5937] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.053518][ T5937] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.056342][ T5937] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.059946][ T5937] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.062698][ T5937] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.068280][ T5937] Buffer I/O error on dev loop6, logical block 3, async page read [ 156.089770][T10879] chnl_net:caif_netlink_parms(): no params data found [ 156.094264][T10873] xt_hashlimit: size too large, truncated to 1048576 [ 156.180839][T10879] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.185220][T10879] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.187584][T10879] bridge_slave_0: entered allmulticast mode [ 156.190296][T10879] bridge_slave_0: entered promiscuous mode [ 156.193235][ T54] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 156.193564][T10879] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.198134][T10879] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.200445][T10879] bridge_slave_1: entered allmulticast mode [ 156.204376][T10879] bridge_slave_1: entered promiscuous mode [ 156.233684][T10873] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 156.236461][T10873] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 156.239041][T10873] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 156.245714][T10879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.250212][T10879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.295540][T10879] team0: Port device team_slave_0 added [ 156.306219][T10879] team0: Port device team_slave_1 added [ 156.353171][ T54] usb 6-1: Using ep0 maxpacket: 8 [ 156.356140][T10897] netlink: 'syz.0.1492': attribute type 5 has an invalid length. [ 156.357497][ T54] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 156.360020][T10879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.361863][ T54] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.364150][T10879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.364182][T10879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.365171][T10879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.367563][ T54] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.376473][T10879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.376541][T10879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.396682][ T54] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.399760][ T54] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.403959][ T54] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 156.406761][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.425257][T10879] hsr_slave_0: entered promiscuous mode [ 156.427486][T10879] hsr_slave_1: entered promiscuous mode [ 156.429726][T10879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.432099][T10879] Cannot create hsr debugfs directory [ 156.507936][T10554] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.586231][T10554] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.616189][ T54] usb 6-1: usb_control_msg returned -32 [ 156.618057][ T54] usbtmc 6-1:16.0: can't read capabilities [ 156.667840][T10554] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.814963][T10554] bridge_slave_1: left allmulticast mode [ 156.817509][T10554] bridge_slave_1: left promiscuous mode [ 156.820180][T10554] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.826251][T10554] bridge_slave_0: left allmulticast mode [ 156.828642][T10554] bridge_slave_0: left promiscuous mode [ 156.831205][T10554] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.974096][T10911] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 157.033639][ T8796] usb 6-1: USB disconnect, device number 9 [ 157.127596][T10554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.137419][T10554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.144150][T10554] bond0 (unregistering): Released all slaves [ 157.221304][T10921] 9pnet: Unknown protocol version 9p20\++} [ 157.259281][T10927] netlink: 'syz.0.1499': attribute type 1 has an invalid length. [ 157.261730][T10927] netlink: 'syz.0.1499': attribute type 4 has an invalid length. [ 157.264817][T10927] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1499'. [ 157.310562][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 157.310573][ T40] audit: type=1400 audit(1750240113.988:551): avc: denied { getopt } for pid=10932 comm="syz.0.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 157.422018][T10933] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 157.438355][T10554] hsr_slave_0: left promiscuous mode [ 157.440554][T10554] hsr_slave_1: left promiscuous mode [ 157.442470][T10554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.445174][T10554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.448048][T10554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.450492][T10554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.472599][T10554] veth1_macvtap: left promiscuous mode [ 157.475611][T10554] veth0_macvtap: left promiscuous mode [ 157.478076][T10554] veth1_vlan: left promiscuous mode [ 157.480186][T10554] veth0_vlan: left promiscuous mode [ 157.533232][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 157.706054][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 157.714315][ T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 157.717294][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.720389][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.723653][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.727286][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.732793][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 157.736738][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.946811][ T10] usb 7-1: usb_control_msg returned -32 [ 157.948680][ T10] usbtmc 7-1:16.0: can't read capabilities [ 158.024807][ T5939] Bluetooth: hci3: command tx timeout [ 158.116713][T10554] team0 (unregistering): Port device team_slave_1 removed [ 158.198304][T10554] team0 (unregistering): Port device team_slave_0 removed [ 158.656560][T10943] usbtmc 7-1:16.0: CHECK_CLEAR_STATUS returned 0 [ 158.925311][T10879] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 158.932248][T10879] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 158.941881][T10879] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 158.950496][T10879] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 159.034200][T10879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.049878][T10879] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.056049][T10547] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.059096][T10547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.072963][T10547] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.075903][T10547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.080827][T10971] FAULT_INJECTION: forcing a failure. [ 159.080827][T10971] name failslab, interval 1, probability 0, space 0, times 0 [ 159.084863][T10971] CPU: 1 UID: 0 PID: 10971 Comm: syz.0.1505 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 159.084880][T10971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.084886][T10971] Call Trace: [ 159.084891][T10971] [ 159.084895][T10971] dump_stack_lvl+0x16c/0x1f0 [ 159.084916][T10971] should_fail_ex+0x512/0x640 [ 159.084934][T10971] should_failslab+0xc2/0x120 [ 159.084950][T10971] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 159.084965][T10971] ? skb_clone+0x190/0x3f0 [ 159.084983][T10971] skb_clone+0x190/0x3f0 [ 159.084999][T10971] netlink_deliver_tap+0xabd/0xd30 [ 159.085014][T10971] netlink_unicast+0x5df/0x7f0 [ 159.085027][T10971] ? __pfx_netlink_unicast+0x10/0x10 [ 159.085043][T10971] netlink_sendmsg+0x8d1/0xdd0 [ 159.085056][T10971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.085073][T10971] ____sys_sendmsg+0xa95/0xc70 [ 159.085085][T10971] ? copy_msghdr_from_user+0x10a/0x160 [ 159.085102][T10971] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.085120][T10971] ___sys_sendmsg+0x134/0x1d0 [ 159.085137][T10971] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.085151][T10971] ? __lock_acquire+0x622/0x1c90 [ 159.085185][T10971] __sys_sendmsg+0x16d/0x220 [ 159.085201][T10971] ? __pfx___sys_sendmsg+0x10/0x10 [ 159.085227][T10971] do_syscall_64+0xcd/0x4c0 [ 159.085244][T10971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.085255][T10971] RIP: 0033:0x7fd81778e929 [ 159.085264][T10971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.085275][T10971] RSP: 002b:00007fd8186b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.085285][T10971] RAX: ffffffffffffffda RBX: 00007fd8179b5fa0 RCX: 00007fd81778e929 [ 159.085292][T10971] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 159.085298][T10971] RBP: 00007fd8186b3090 R08: 0000000000000000 R09: 0000000000000000 [ 159.085304][T10971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.085310][T10971] R13: 0000000000000000 R14: 00007fd8179b5fa0 R15: 00007fff6519a168 [ 159.085324][T10971] [ 159.120730][T10975] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1506'. [ 159.121140][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.163646][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.299950][T10998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 159.309179][T10879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.315066][T10998] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1510'. [ 159.332187][T10879] veth0_vlan: entered promiscuous mode [ 159.336874][T10879] veth1_vlan: entered promiscuous mode [ 159.355193][T10879] veth0_macvtap: entered promiscuous mode [ 159.359346][T10879] veth1_macvtap: entered promiscuous mode [ 159.360970][T11005] SET target dimension over the limit! [ 159.377747][T10879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.384519][T10879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.394163][T10879] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.397061][T10879] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.399947][T10879] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.402720][T10879] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.455997][T10554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.458604][T10554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.472548][ T40] audit: type=1400 audit(1750240116.148:552): avc: denied { bind } for pid=11015 comm="syz.0.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 159.473592][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.481836][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.661488][T11030] FAULT_INJECTION: forcing a failure. [ 159.661488][T11030] name failslab, interval 1, probability 0, space 0, times 0 [ 159.666910][T11030] CPU: 2 UID: 0 PID: 11030 Comm: syz.0.1519 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 159.666937][T11030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.666947][T11030] Call Trace: [ 159.666953][T11030] [ 159.666959][T11030] dump_stack_lvl+0x16c/0x1f0 [ 159.666987][T11030] should_fail_ex+0x512/0x640 [ 159.667010][T11030] ? __kmalloc_noprof+0xbf/0x510 [ 159.667034][T11030] ? drm_atomic_state_init+0xe4/0x320 [ 159.667054][T11030] should_failslab+0xc2/0x120 [ 159.667078][T11030] __kmalloc_noprof+0xd2/0x510 [ 159.667108][T11030] drm_atomic_state_init+0xe4/0x320 [ 159.667123][T11030] ? __kasan_kmalloc+0xaa/0xb0 [ 159.667144][T11030] drm_atomic_state_alloc+0xd3/0x120 [ 159.667159][T11030] drm_mode_atomic_ioctl+0x393/0x25f0 [ 159.667179][T11030] ? avc_has_extended_perms+0x33a/0x1090 [ 159.667199][T11030] ? avc_has_extended_perms+0x47c/0x1090 [ 159.667219][T11030] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 159.667239][T11030] ? __lock_acquire+0xb8a/0x1c90 [ 159.667280][T11030] ? drm_is_current_master+0x2c/0x40 [ 159.667300][T11030] ? do_raw_spin_unlock+0x172/0x230 [ 159.667322][T11030] drm_ioctl_kernel+0x1f4/0x3e0 [ 159.667344][T11030] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 159.667365][T11030] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 159.667396][T11030] drm_ioctl+0x5c9/0xc30 [ 159.667420][T11030] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 159.667439][T11030] ? __pfx_drm_ioctl+0x10/0x10 [ 159.667473][T11030] ? selinux_file_ioctl+0x180/0x270 [ 159.667498][T11030] ? selinux_file_ioctl+0xb4/0x270 [ 159.667520][T11030] ? __pfx_drm_ioctl+0x10/0x10 [ 159.667567][T11030] __x64_sys_ioctl+0x18b/0x210 [ 159.667587][T11030] do_syscall_64+0xcd/0x4c0 [ 159.667615][T11030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.667631][T11030] RIP: 0033:0x7fd81778e929 [ 159.667644][T11030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.667661][T11030] RSP: 002b:00007fd8186b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.667679][T11030] RAX: ffffffffffffffda RBX: 00007fd8179b5fa0 RCX: 00007fd81778e929 [ 159.667689][T11030] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000011 [ 159.667699][T11030] RBP: 00007fd8186b3090 R08: 0000000000000000 R09: 0000000000000000 [ 159.667708][T11030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.667717][T11030] R13: 0000000000000000 R14: 00007fd8179b5fa0 R15: 00007fff6519a168 [ 159.667745][T11030] [ 159.807185][T11034] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1520'. [ 159.810242][T11034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1520'. [ 159.814387][ T40] audit: type=1400 audit(1750240116.498:553): avc: denied { accept } for pid=11033 comm="syz.0.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 159.840356][T11037] openvswitch: netlink: Flow actions attr not present in new flow. [ 159.843677][T11037] netlink: 'syz.0.1521': attribute type 3 has an invalid length. [ 159.846282][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1521'. [ 160.210567][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033143800: rx timeout, send abort [ 160.311751][ T54] usb 7-1: USB disconnect, device number 7 [ 160.375788][ T5939] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 160.438581][T11073] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1532'. [ 160.468357][T11075] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1533'. [ 160.710590][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ae63800: rx timeout, send abort [ 160.714229][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033143800: abort rx timeout. Force session deactivation [ 161.214147][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ae63800: abort rx timeout. Force session deactivation [ 161.230053][T11099] fuse: Unknown parameter '00000000000000000003' [ 161.298274][T11100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1539'. [ 161.301331][T11100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1539'. [ 161.438345][ T5939] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 161.680507][ T40] audit: type=1326 audit(1750240118.358:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11092 comm="syz.0.1537" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81778e929 code=0x7fc00000 [ 161.714250][T11108] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 161.788233][ T1144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.003179][ T54] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 162.183478][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 162.188960][ T54] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.40 [ 162.192707][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.195273][ T54] usb 5-1: Product: ࠾ [ 162.196641][ T54] usb 5-1: Manufacturer: Ї [ 162.198088][ T54] usb 5-1: SerialNumber: ァ [ 162.458269][T11111] afs: Unknown parameter '' [ 162.534137][T11111] netlink: 'syz.0.1543': attribute type 21 has an invalid length. [ 163.217619][T11117] netlink: 'syz.2.1545': attribute type 2 has an invalid length. [ 163.278282][ T5933] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 163.281992][ T5933] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 163.286808][ T5933] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 163.290737][ T5933] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 163.294512][ T5933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.410421][ T1144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.421252][T11121] chnl_net:caif_netlink_parms(): no params data found [ 163.471956][ T1144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.475485][ T6016] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 163.516993][T11121] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.519209][T11121] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.521554][T11121] bridge_slave_0: entered allmulticast mode [ 163.525183][T11121] bridge_slave_0: entered promiscuous mode [ 163.537311][ T1144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.542750][T11121] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.546037][T11121] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.548436][T11121] bridge_slave_1: entered allmulticast mode [ 163.551308][T11121] bridge_slave_1: entered promiscuous mode [ 163.588258][T11121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.593269][T11121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.630732][ T6016] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 163.634198][ T6016] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 163.635042][T11121] team0: Port device team_slave_0 added [ 163.637643][ T6016] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 163.637685][ T6016] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 163.642029][T11121] team0: Port device team_slave_1 added [ 163.642804][ T6016] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 163.661879][ T6016] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 163.665273][ T6016] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 163.667778][ T6016] usb 7-1: Product: syz [ 163.669120][ T6016] usb 7-1: Manufacturer: syz [ 163.679273][ T6016] cdc_wdm 7-1:1.0: skipping garbage [ 163.681423][ T6016] cdc_wdm 7-1:1.0: skipping garbage [ 163.692675][ T6016] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 163.695732][ T6016] cdc_wdm 7-1:1.0: Unknown control protocol [ 163.697693][T11121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.700580][T11121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.709409][T11121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.713824][T11121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.716127][T11121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.724912][T11121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.799928][T11121] hsr_slave_0: entered promiscuous mode [ 163.802285][T11121] hsr_slave_1: entered promiscuous mode [ 163.804569][T11121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.806945][T11121] Cannot create hsr debugfs directory [ 163.818169][ T1144] bridge_slave_1: left allmulticast mode [ 163.820114][ T1144] bridge_slave_1: left promiscuous mode [ 163.822052][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.826806][ T1144] bridge_slave_0: left allmulticast mode [ 163.828708][ T1144] bridge_slave_0: left promiscuous mode [ 163.831187][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.875050][ T840] usb 7-1: USB disconnect, device number 8 [ 164.114589][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.119660][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.124999][ T1144] bond0 (unregistering): Released all slaves [ 164.458481][ T1144] hsr_slave_0: left promiscuous mode [ 164.460892][ T1144] hsr_slave_1: left promiscuous mode [ 164.464395][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.466719][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.470047][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.472653][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.497397][ T1144] veth1_macvtap: left promiscuous mode [ 164.499452][ T1144] veth0_macvtap: left promiscuous mode [ 164.501667][ T1144] veth1_vlan: left promiscuous mode [ 164.503753][ T1144] veth0_vlan: left promiscuous mode [ 164.533122][ T6632] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 164.704934][ T6632] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 164.707774][ T6632] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 164.711031][ T6632] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 164.714298][ T6632] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 164.717762][ T6632] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 164.722971][ T6632] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 164.730441][ T6632] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 164.733190][ T6632] usb 7-1: Product: syz [ 164.734556][ T6632] usb 7-1: Manufacturer: syz [ 164.740976][ T6632] cdc_wdm 7-1:1.0: skipping garbage [ 164.742707][ T6632] cdc_wdm 7-1:1.0: skipping garbage [ 164.747369][ T6632] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 164.749296][ T6632] cdc_wdm 7-1:1.0: Unknown control protocol [ 164.809431][ T54] usbhid 5-1:1.0: can't add hid device: -71 [ 164.811523][ T54] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 164.817033][ T54] usb 5-1: USB disconnect, device number 14 [ 164.940178][T11117] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 164.968918][ T6016] usb 7-1: USB disconnect, device number 9 [ 165.085393][ T5939] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 165.119959][T11159] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 165.247859][T11163] __nla_validate_parse: 2 callbacks suppressed [ 165.247870][T11163] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1554'. [ 165.270509][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 165.336786][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 165.383645][ T5939] Bluetooth: hci3: command tx timeout [ 165.885299][T11162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.958597][T11185] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 166.016497][T11192] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 166.164732][T11121] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 166.170706][T11121] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 166.177281][T11121] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 166.183350][T11121] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 166.240089][T11121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.249989][T11121] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.257128][T10540] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.259455][T10540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.266613][T10545] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.269575][T10545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.409232][T11121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.426769][T11215] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 166.431171][T11121] veth0_vlan: entered promiscuous mode [ 166.436333][T11121] veth1_vlan: entered promiscuous mode [ 166.451851][T11121] veth0_macvtap: entered promiscuous mode [ 166.455933][T11121] veth1_macvtap: entered promiscuous mode [ 166.465580][T11121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.472663][T11121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.478313][T11121] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.481068][T11121] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.484071][T11121] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.486789][T11121] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.522194][T10547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.526379][T10547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.540000][T10554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.542859][T10554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.690696][T11225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1565'. [ 166.721533][T11227] netlink: 'syz.2.1566': attribute type 10 has an invalid length. [ 166.752378][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1567'. [ 166.772787][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1567'. [ 166.796451][T11229] xt_hashlimit: invalid interval [ 166.799512][ T40] audit: type=1400 audit(1750240123.478:555): avc: denied { bind } for pid=11228 comm="syz.2.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 166.802111][T11229] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1567'. [ 166.807184][ T40] audit: type=1400 audit(1750240123.478:556): avc: denied { listen } for pid=11228 comm="syz.2.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 166.937423][T11237] 9pnet_fd: Insufficient options for proto=fd [ 166.947377][ T5939] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 166.974731][T11242] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 167.017323][T11248] FAULT_INJECTION: forcing a failure. [ 167.017323][T11248] name failslab, interval 1, probability 0, space 0, times 0 [ 167.021411][T11248] CPU: 2 UID: 0 PID: 11248 Comm: syz.0.1575 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 167.021427][T11248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 167.021434][T11248] Call Trace: [ 167.021439][T11248] [ 167.021445][T11248] dump_stack_lvl+0x16c/0x1f0 [ 167.021466][T11248] should_fail_ex+0x512/0x640 [ 167.021482][T11248] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 167.021499][T11248] should_failslab+0xc2/0x120 [ 167.021515][T11248] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 167.021530][T11248] ? __alloc_skb+0x2b2/0x380 [ 167.021546][T11248] ? bpf_lsm_capable+0x9/0x10 [ 167.021560][T11248] __alloc_skb+0x2b2/0x380 [ 167.021574][T11248] ? __pfx___alloc_skb+0x10/0x10 [ 167.021590][T11248] ? genl_rcv_msg+0x4bb/0x800 [ 167.021607][T11248] netlink_ack+0x15d/0xb80 [ 167.021623][T11248] netlink_rcv_skb+0x332/0x420 [ 167.021635][T11248] ? __pfx_genl_rcv_msg+0x10/0x10 [ 167.021648][T11248] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 167.021666][T11248] ? netlink_deliver_tap+0x1ae/0xd30 [ 167.021679][T11248] genl_rcv+0x28/0x40 [ 167.021690][T11248] netlink_unicast+0x53d/0x7f0 [ 167.021703][T11248] ? __pfx_netlink_unicast+0x10/0x10 [ 167.021719][T11248] netlink_sendmsg+0x8d1/0xdd0 [ 167.021733][T11248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.021750][T11248] ____sys_sendmsg+0xa95/0xc70 [ 167.021762][T11248] ? copy_msghdr_from_user+0x10a/0x160 [ 167.021778][T11248] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.021797][T11248] ___sys_sendmsg+0x134/0x1d0 [ 167.021813][T11248] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.021828][T11248] ? __lock_acquire+0x622/0x1c90 [ 167.021863][T11248] __sys_sendmsg+0x16d/0x220 [ 167.021879][T11248] ? __pfx___sys_sendmsg+0x10/0x10 [ 167.021901][T11248] ? fput+0x70/0xf0 [ 167.021920][T11248] do_syscall_64+0xcd/0x4c0 [ 167.021938][T11248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.021949][T11248] RIP: 0033:0x7fd81778e929 [ 167.021958][T11248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.021969][T11248] RSP: 002b:00007fd8186b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.021980][T11248] RAX: ffffffffffffffda RBX: 00007fd8179b5fa0 RCX: 00007fd81778e929 [ 167.021987][T11248] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 167.021998][T11248] RBP: 00007fd8186b3090 R08: 0000000000000000 R09: 0000000000000000 [ 167.022004][T11248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.022010][T11248] R13: 0000000000000000 R14: 00007fd8179b5fa0 R15: 00007fff6519a168 [ 167.022024][T11248] [ 167.282678][T11267] bond0: (slave vlan2): Opening slave failed [ 168.012241][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1581'. [ 168.609181][T10540] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.165161][T10540] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.240565][T10540] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.302957][ T5933] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 170.306429][ T5933] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 170.309092][ T5933] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 170.314488][ T5933] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 170.317153][ T5933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 170.346494][T10540] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.422849][T11319] netlink: 'syz.1.1590': attribute type 1 has an invalid length. [ 170.427839][T11319] netlink: 'syz.1.1590': attribute type 4 has an invalid length. [ 170.430267][T11319] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1590'. [ 170.433637][T11319] netlink: 'syz.1.1590': attribute type 1 has an invalid length. [ 170.436146][T11319] netlink: 'syz.1.1590': attribute type 4 has an invalid length. [ 170.438551][T11319] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1590'. [ 170.456418][T11310] chnl_net:caif_netlink_parms(): no params data found [ 170.531572][T10540] bridge_slave_1: left allmulticast mode [ 170.533753][T10540] bridge_slave_1: left promiscuous mode [ 170.535913][T10540] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.540369][T10540] bridge_slave_0: left allmulticast mode [ 170.542315][T10540] bridge_slave_0: left promiscuous mode [ 170.546167][T10540] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.760644][T10540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.765157][T10540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.769092][T10540] bond0 (unregistering): Released all slaves [ 170.817698][T11310] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.820059][T11310] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.822435][T11310] bridge_slave_0: entered allmulticast mode [ 170.825298][T11310] bridge_slave_0: entered promiscuous mode [ 170.828430][T11310] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.830618][T11310] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.832863][T11310] bridge_slave_1: entered allmulticast mode [ 170.835671][T11310] bridge_slave_1: entered promiscuous mode [ 170.876462][T11310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.881435][T11310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.934633][T11310] team0: Port device team_slave_0 added [ 170.938171][T11310] team0: Port device team_slave_1 added [ 170.999783][T11310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.002046][T11310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.010614][T11310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.023582][T11310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.026068][T11310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.036310][T11310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.106921][T10540] hsr_slave_0: left promiscuous mode [ 171.109275][T10540] hsr_slave_1: left promiscuous mode [ 171.111189][T10540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.113813][T10540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.116610][T10540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.118985][T10540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.152075][T10540] veth1_macvtap: left promiscuous mode [ 171.154014][T10540] veth0_macvtap: left promiscuous mode [ 171.155924][T10540] veth1_vlan: left promiscuous mode [ 171.157657][T10540] veth0_vlan: left promiscuous mode [ 171.416015][T11340] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1595'. [ 171.701116][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803d626000: rx timeout, send abort [ 171.780017][T10540] team0 (unregistering): Port device team_slave_1 removed [ 171.863881][T10540] team0 (unregistering): Port device team_slave_0 removed [ 172.201171][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803d626800: rx timeout, send abort [ 172.204201][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803d626000: abort rx timeout. Force session deactivation [ 172.344095][ T5933] Bluetooth: hci3: command tx timeout [ 172.424151][T11310] hsr_slave_0: entered promiscuous mode [ 172.427544][T11310] hsr_slave_1: entered promiscuous mode [ 172.433217][T11310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.435726][T11310] Cannot create hsr debugfs directory [ 172.490638][T11354] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 172.578930][T11364] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 172.704093][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803d626800: abort rx timeout. Force session deactivation [ 172.730473][T11378] SET target dimension over the limit! [ 172.759738][ T5933] Bluetooth: hci2: unexpected event for opcode 0x1804 [ 172.903679][T11398] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 173.129804][T11310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.137512][T11310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.146341][T11310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.155503][T11310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.198343][T11310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.210146][T11310] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.221669][T10547] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.224011][T10547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.237516][T10543] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.240054][T10543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.279662][T11438] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 173.390625][T11450] syzkaller0: entered promiscuous mode [ 173.392422][T11450] syzkaller0: entered allmulticast mode [ 173.427499][T11310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.838119][T11472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1631'. [ 173.841105][T11472] netlink: 'syz.0.1631': attribute type 30 has an invalid length. [ 174.423426][ T5933] Bluetooth: hci3: command tx timeout [ 174.430149][T11472] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.434053][T11472] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.437537][T11472] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.441191][T11472] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.478622][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1632'. [ 174.485600][T11310] veth0_vlan: entered promiscuous mode [ 174.494827][T11310] veth1_vlan: entered promiscuous mode [ 174.521321][T11310] veth0_macvtap: entered promiscuous mode [ 174.539847][T11310] veth1_macvtap: entered promiscuous mode [ 174.555374][T11310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.561591][T11310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.566323][T11310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.569007][T11310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.571666][T11310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.575022][T11310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.619949][T10547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.622409][T10547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.641905][T10547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.644941][T10547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.867235][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f9e8400: rx timeout, send abort [ 174.912104][T11500] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 174.973589][ T40] audit: type=1400 audit(1750240131.658:557): avc: denied { connect } for pid=11514 comm="syz.1.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.983087][ T40] audit: type=1400 audit(1750240131.658:558): avc: denied { ioctl } for pid=11514 comm="syz.1.1640" path="socket:[47949]" dev="sockfs" ino=47949 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 175.090724][T11526] ipt_REJECT: TCP_RESET invalid for non-tcp [ 175.149678][T11529] SET target dimension over the limit! [ 175.367301][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f9eb800: rx timeout, send abort [ 175.370798][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f9e8400: abort rx timeout. Force session deactivation [ 175.870775][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f9eb800: abort rx timeout. Force session deactivation [ 175.987532][T10547] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.159443][T11536] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 176.161390][T11536] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 176.164974][T11536] ================================================================== [ 176.167542][T11536] BUG: KASAN: slab-out-of-bounds in __list_del_entry_valid_or_report+0x1d4/0x200 [ 176.170360][T11536] Read of size 8 at addr ffff888059d3b558 by task syz.2.1646/11536 [ 176.174096][T11536] [ 176.175242][T11536] CPU: 0 UID: 0 PID: 11536 Comm: syz.2.1646 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 176.175259][T11536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 176.175267][T11536] Call Trace: [ 176.175272][T11536] [ 176.175277][T11536] dump_stack_lvl+0x116/0x1f0 [ 176.175297][T11536] print_report+0xcd/0x680 [ 176.175314][T11536] ? __virt_addr_valid+0x81/0x610 [ 176.175327][T11536] ? __phys_addr+0xe8/0x180 [ 176.175340][T11536] ? __list_del_entry_valid_or_report+0x1d4/0x200 [ 176.175358][T11536] kasan_report+0xe0/0x110 [ 176.175373][T11536] ? __list_del_entry_valid_or_report+0x1d4/0x200 [ 176.175425][T11536] __list_del_entry_valid_or_report+0x1d4/0x200 [ 176.175456][T11536] bt_accept_unlink+0x34/0x2e0 [ 176.175478][T11536] l2cap_sock_teardown_cb+0x1a3/0x3c0 [ 176.175498][T11536] l2cap_chan_del+0xba/0x8f0 [ 176.175521][T11536] l2cap_conn_del+0x37a/0x730 [ 176.175542][T11536] ? hci_conn_failed+0x14f/0x330 [ 176.175558][T11536] l2cap_connect_cfm+0x9e1/0xf80 [ 176.175576][T11536] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 176.175591][T11536] ? hci_connect_le_scan_cleanup+0xb6/0x6b0 [ 176.175609][T11536] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 176.175624][T11536] hci_conn_failed+0x1ba/0x330 [ 176.175641][T11536] hci_abort_conn_sync+0x762/0xb10 [ 176.175655][T11536] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 176.175668][T11536] ? find_held_lock+0x2b/0x80 [ 176.175682][T11536] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 176.175696][T11536] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 176.175710][T11536] hci_disconnect_all_sync.constprop.0+0x104/0x3c0 [ 176.175726][T11536] hci_suspend_sync+0x770/0xab0 [ 176.175740][T11536] ? __pfx_hci_suspend_sync+0x10/0x10 [ 176.175756][T11536] hci_suspend_dev+0x308/0x500 [ 176.175773][T11536] ? __pfx_hci_suspend_dev+0x10/0x10 [ 176.175789][T11536] ? rcu_barrier+0x341/0x6e0 [ 176.175806][T11536] ? kobject_get+0xbb/0x150 [ 176.175823][T11536] hci_suspend_notifier+0x28d/0x2f0 [ 176.175841][T11536] notifier_call_chain+0xb9/0x410 [ 176.175856][T11536] ? __pfx_hci_suspend_notifier+0x10/0x10 [ 176.175875][T11536] blocking_notifier_call_chain_robust+0xc8/0x160 [ 176.175893][T11536] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 176.175912][T11536] pm_notifier_call_chain_robust+0x27/0x60 [ 176.175930][T11536] snapshot_open+0x189/0x2b0 [ 176.175945][T11536] ? __pfx_snapshot_open+0x10/0x10 [ 176.175960][T11536] misc_open+0x35d/0x420 [ 176.175973][T11536] ? __pfx_misc_open+0x10/0x10 [ 176.175984][T11536] chrdev_open+0x234/0x6a0 [ 176.176000][T11536] ? __pfx_chrdev_open+0x10/0x10 [ 176.176016][T11536] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 176.176032][T11536] do_dentry_open+0x744/0x1c10 [ 176.176046][T11536] ? __pfx_chrdev_open+0x10/0x10 [ 176.176064][T11536] vfs_open+0x82/0x3f0 [ 176.176082][T11536] path_openat+0x1de4/0x2cb0 [ 176.176099][T11536] ? __pfx_path_openat+0x10/0x10 [ 176.176114][T11536] ? __lock_acquire+0xb8a/0x1c90 [ 176.176131][T11536] do_filp_open+0x20b/0x470 [ 176.176145][T11536] ? __pfx_do_filp_open+0x10/0x10 [ 176.176164][T11536] ? alloc_fd+0x471/0x7d0 [ 176.176180][T11536] do_sys_openat2+0x11b/0x1d0 [ 176.176191][T11536] ? __pfx_do_sys_openat2+0x10/0x10 [ 176.176200][T11536] ? putname+0x154/0x1a0 [ 176.176219][T11536] __x64_sys_openat+0x174/0x210 [ 176.176229][T11536] ? __pfx___x64_sys_openat+0x10/0x10 [ 176.176242][T11536] do_syscall_64+0xcd/0x4c0 [ 176.176260][T11536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.176272][T11536] RIP: 0033:0x7f706e18e929 [ 176.176282][T11536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.176294][T11536] RSP: 002b:00007f706f0ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 176.176305][T11536] RAX: ffffffffffffffda RBX: 00007f706e3b5fa0 RCX: 00007f706e18e929 [ 176.176312][T11536] RDX: 0000000000004d00 RSI: 0000200000001fc0 RDI: ffffffffffffff9c [ 176.176319][T11536] RBP: 00007f706e210b39 R08: 0000000000000000 R09: 0000000000000000 [ 176.176326][T11536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.176333][T11536] R13: 0000000000000000 R14: 00007f706e3b5fa0 R15: 00007ffd7d6d4078 [ 176.176344][T11536] [ 176.176348][T11536] [ 176.329202][T11536] Allocated by task 5937: [ 176.330996][T11536] kasan_save_stack+0x33/0x60 [ 176.332879][T11536] kasan_save_track+0x14/0x30 [ 176.334647][T11536] __kasan_kmalloc+0xaa/0xb0 [ 176.336368][T11536] uevent_show+0x165/0x3a0 [ 176.337961][T11536] dev_attr_show+0x53/0xe0 [ 176.339563][T11536] sysfs_kf_seq_show+0x213/0x3e0 [ 176.341138][T11536] seq_read_iter+0x506/0x12c0 [ 176.342714][T11536] kernfs_fop_read_iter+0x40f/0x5a0 [ 176.344446][T11536] vfs_read+0x8bc/0xc60 [ 176.346148][T11536] ksys_read+0x12a/0x250 [ 176.348044][T11536] do_syscall_64+0xcd/0x4c0 [ 176.349588][T11536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.351518][T11536] [ 176.352440][T11536] Freed by task 5937: [ 176.353891][T11536] kasan_save_stack+0x33/0x60 [ 176.355544][T11536] kasan_save_track+0x14/0x30 [ 176.357251][T11536] kasan_save_free_info+0x3b/0x60 [ 176.359045][T11536] __kasan_slab_free+0x51/0x70 [ 176.360597][T11536] kfree+0x2b4/0x4d0 [ 176.361955][T11536] uevent_show+0x2cf/0x3a0 [ 176.363494][T11536] dev_attr_show+0x53/0xe0 [ 176.365083][T11536] sysfs_kf_seq_show+0x213/0x3e0 [ 176.366862][T11536] seq_read_iter+0x506/0x12c0 [ 176.368585][T11536] kernfs_fop_read_iter+0x40f/0x5a0 [ 176.370476][T11536] vfs_read+0x8bc/0xc60 [ 176.371947][T11536] ksys_read+0x12a/0x250 [ 176.373436][T11536] do_syscall_64+0xcd/0x4c0 [ 176.374928][T11536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.376919][T11536] [ 176.377869][T11536] The buggy address belongs to the object at ffff888059d3a000 [ 176.377869][T11536] which belongs to the cache kmalloc-4k of size 4096 [ 176.382533][T11536] The buggy address is located 1368 bytes to the right of [ 176.382533][T11536] allocated 4096-byte region [ffff888059d3a000, ffff888059d3b000) [ 176.387083][T11536] [ 176.387876][T11536] The buggy address belongs to the physical page: [ 176.389823][T11536] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59d38 [ 176.392525][T11536] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 176.395237][T11536] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 176.397988][T11536] page_type: f5(slab) [ 176.399266][T11536] raw: 00fff00000000040 ffff88801b843040 dead000000000122 0000000000000000 [ 176.402192][T11536] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 176.405428][T11536] head: 00fff00000000040 ffff88801b843040 dead000000000122 0000000000000000 [ 176.408204][T11536] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 176.410850][T11536] head: 00fff00000000003 ffffea0001674e01 00000000ffffffff 00000000ffffffff [ 176.413650][T11536] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 176.416680][T11536] page dumped because: kasan: bad access detected [ 176.418704][T11536] page_owner tracks the page as allocated [ 176.420502][T11536] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5937, tgid 5937 (udevd), ts 174627518473, free_ts 173844834558 [ 176.426617][T11536] post_alloc_hook+0x1c0/0x230 [ 176.428153][T11536] get_page_from_freelist+0x1321/0x3890 [ 176.429879][T11536] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 176.431709][T11536] alloc_pages_mpol+0x1fb/0x550 [ 176.433250][T11536] new_slab+0x23b/0x330 [ 176.434579][T11536] ___slab_alloc+0xd9c/0x1940 [ 176.436073][T11536] __slab_alloc.constprop.0+0x56/0xb0 [ 176.437718][T11536] __kmalloc_noprof+0x2f2/0x510 [ 176.439310][T11536] tomoyo_realpath_from_path+0xc2/0x6e0 [ 176.441144][T11536] tomoyo_path_perm+0x274/0x460 [ 176.442899][T11536] security_inode_getattr+0x116/0x290 [ 176.444630][T11536] vfs_fstat+0x4b/0xe0 [ 176.445946][T11536] __do_sys_newfstat+0x87/0x100 [ 176.447687][T11536] do_syscall_64+0xcd/0x4c0 [ 176.449277][T11536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.451284][T11536] page last free pid 5966 tgid 5966 stack trace: [ 176.453576][T11536] __free_frozen_pages+0x7fe/0x1180 [ 176.455565][T11536] qlist_free_all+0x4d/0x120 [ 176.457287][T11536] kasan_quarantine_reduce+0x195/0x1e0 [ 176.459255][T11536] __kasan_slab_alloc+0x69/0x90 [ 176.461200][T11536] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 176.463444][T11536] __alloc_skb+0x2b2/0x380 [ 176.465042][T11536] mld_newpack.isra.0+0x18e/0xa20 [ 176.466866][T11536] add_grhead+0x299/0x340 [ 176.468477][T11536] add_grec+0x112a/0x1680 [ 176.469925][T11536] mld_ifc_work+0x41f/0xca0 [ 176.471462][T11536] process_one_work+0x9cc/0x1b70 [ 176.473260][T11536] worker_thread+0x6c8/0xf10 [ 176.474880][T11536] kthread+0x3c2/0x780 [ 176.476337][T11536] ret_from_fork+0x5d4/0x6f0 [ 176.477977][T11536] ret_from_fork_asm+0x1a/0x30 [ 176.479709][T11536] [ 176.480568][T11536] Memory state around the buggy address: [ 176.482360][T11536] ffff888059d3b400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 176.485070][T11536] ffff888059d3b480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 176.487757][T11536] >ffff888059d3b500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 176.490320][T11536] ^ [ 176.492736][T11536] ffff888059d3b580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 176.495549][T11536] ffff888059d3b600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 176.498385][T11536] ================================================================== [ 176.502609][T11536] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 176.505052][T11536] CPU: 0 UID: 0 PID: 11536 Comm: syz.2.1646 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 176.509064][T11536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 176.512805][T11536] Call Trace: [ 176.513820][T11536] [ 176.514709][T11536] dump_stack_lvl+0x3d/0x1f0 [ 176.516329][T11536] panic+0x71c/0x800 [ 176.517802][T11536] ? __pfx_panic+0x10/0x10 [ 176.519437][T11536] ? mark_held_locks+0x49/0x80 [ 176.520981][T11536] ? preempt_schedule_thunk+0x16/0x30 [ 176.522828][T11536] ? __list_del_entry_valid_or_report+0x1d4/0x200 [ 176.524923][T11536] ? preempt_schedule_common+0x44/0xc0 [ 176.526646][T11536] ? __list_del_entry_valid_or_report+0x1d4/0x200 [ 176.528842][T11536] check_panic_on_warn+0xab/0xb0 [ 176.530530][T11536] end_report+0x107/0x170 [ 176.532148][T11536] kasan_report+0xee/0x110 [ 176.533674][T11536] ? __list_del_entry_valid_or_report+0x1d4/0x200 [ 176.535749][T11536] __list_del_entry_valid_or_report+0x1d4/0x200 [ 176.537982][T11536] bt_accept_unlink+0x34/0x2e0 [ 176.539711][T11536] l2cap_sock_teardown_cb+0x1a3/0x3c0 [ 176.541536][T11536] l2cap_chan_del+0xba/0x8f0 [ 176.543169][T11536] l2cap_conn_del+0x37a/0x730 [ 176.544714][T11536] ? hci_conn_failed+0x14f/0x330 [ 176.546437][T11536] l2cap_connect_cfm+0x9e1/0xf80 [ 176.548202][T11536] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 176.549946][T11536] ? hci_connect_le_scan_cleanup+0xb6/0x6b0 [ 176.552090][T11536] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 176.554148][T11536] hci_conn_failed+0x1ba/0x330 [ 176.555760][T11536] hci_abort_conn_sync+0x762/0xb10 [ 176.557493][T11536] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 176.559523][T11536] ? find_held_lock+0x2b/0x80 [ 176.561037][T11536] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 176.563303][T11536] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 176.565725][T11536] hci_disconnect_all_sync.constprop.0+0x104/0x3c0 [ 176.568095][T11536] hci_suspend_sync+0x770/0xab0 [ 176.569922][T11536] ? __pfx_hci_suspend_sync+0x10/0x10 [ 176.571902][T11536] hci_suspend_dev+0x308/0x500 [ 176.573646][T11536] ? __pfx_hci_suspend_dev+0x10/0x10 [ 176.575308][T11536] ? rcu_barrier+0x341/0x6e0 [ 176.576820][T11536] ? kobject_get+0xbb/0x150 [ 176.578235][T11536] hci_suspend_notifier+0x28d/0x2f0 [ 176.580001][T11536] notifier_call_chain+0xb9/0x410 [ 176.581589][T11536] ? __pfx_hci_suspend_notifier+0x10/0x10 [ 176.583462][T11536] blocking_notifier_call_chain_robust+0xc8/0x160 [ 176.585601][T11536] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 176.587887][T11536] pm_notifier_call_chain_robust+0x27/0x60 [ 176.589739][T11536] snapshot_open+0x189/0x2b0 [ 176.591264][T11536] ? __pfx_snapshot_open+0x10/0x10 [ 176.592943][T11536] misc_open+0x35d/0x420 [ 176.594375][T11536] ? __pfx_misc_open+0x10/0x10 [ 176.595955][T11536] chrdev_open+0x234/0x6a0 [ 176.597424][T11536] ? __pfx_chrdev_open+0x10/0x10 [ 176.599065][T11536] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 176.601186][T11536] do_dentry_open+0x744/0x1c10 [ 176.602709][T11536] ? __pfx_chrdev_open+0x10/0x10 [ 176.604306][T11536] vfs_open+0x82/0x3f0 [ 176.605750][T11536] path_openat+0x1de4/0x2cb0 [ 176.607420][T11536] ? __pfx_path_openat+0x10/0x10 [ 176.609502][T11536] ? __lock_acquire+0xb8a/0x1c90 [ 176.611180][T11536] do_filp_open+0x20b/0x470 [ 176.612682][T11536] ? __pfx_do_filp_open+0x10/0x10 [ 176.614270][T11536] ? alloc_fd+0x471/0x7d0 [ 176.615961][T11536] do_sys_openat2+0x11b/0x1d0 [ 176.617906][T11536] ? __pfx_do_sys_openat2+0x10/0x10 [ 176.620100][T11536] ? putname+0x154/0x1a0 [ 176.621886][T11536] __x64_sys_openat+0x174/0x210 [ 176.623989][T11536] ? __pfx___x64_sys_openat+0x10/0x10 [ 176.626264][T11536] do_syscall_64+0xcd/0x4c0 [ 176.628177][T11536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.630631][T11536] RIP: 0033:0x7f706e18e929 [ 176.632495][T11536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.640294][T11536] RSP: 002b:00007f706f0ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 176.643646][T11536] RAX: ffffffffffffffda RBX: 00007f706e3b5fa0 RCX: 00007f706e18e929 [ 176.646764][T11536] RDX: 0000000000004d00 RSI: 0000200000001fc0 RDI: ffffffffffffff9c [ 176.649934][T11536] RBP: 00007f706e210b39 R08: 0000000000000000 R09: 0000000000000000 [ 176.653063][T11536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.655463][T11536] R13: 0000000000000000 R14: 00007f706e3b5fa0 R15: 00007ffd7d6d4078 [ 176.657846][T11536] [ 176.659569][T11536] Kernel Offset: disabled [ 176.661068][T11536] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:48:53 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b9f55 RDI=ffffffff9b089360 RBP=ffffffff9b089320 RSP=ffffc9000348ed30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3530383838666666 R12=0000000000000000 R13=0000000000000074 R14=ffffffff9b089320 R15=ffffffff855b9ef0 RIP=ffffffff855b9f7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f706f0ca6c0 ffffffff 00c00000 GS =0000 ffff8880d6753000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000020000009c000 CR3=000000002aaad000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d880584262b5446b d321d238ebbc4e73 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b2e7eb64f0f137bb 655fe7ab75a85ccf ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8c340b2c31bb3c53 557bb56076c5b4a7 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a7fd083543a2b6e7 1b0db5a95516b1f9 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7d3c65914a49aeb1 93bc55ae93c801b3 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5536761d6b551979 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 90edcc321141438e 23617a08d95ce86c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8f81d04e00000000 68625b2aa99fef18 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8b00f357be462734 a7af64258a77e574 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 629b25f70a670af0 3be4f631afd1f4ac ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd817984488 00007fd817984480 00007fd817984478 00007fd817984450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd8184ed100 00007fd817984440 00007fd817980004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd817984498 00007fd817984490 00007fd817984488 00007fd817984480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f77a384d5f9e09f 7f2ace921b399dda a70ffa8d7b2fa694 978b8c0af543b6fd ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8e785a1923d44136 ad01a5e12a739375 e4318e17c6748f8e de13bf88a86eff94 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9597045a59813eb0 e3f94fd0a70f3daf 7ce802e016724b79 c2ae8340255e0fca ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c64ff6bf529e4034 c53202f204f6503f fd165e8cf21402c3 9eececa2bd755470 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000001b77f9 RBX=0000000000000001 RCX=ffffffff8b801c19 RDX=0000000000000000 RSI=ffffffff8de19da0 RDI=ffffffff8c1579e0 RBP=ffffed1003bdf488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6645 R10=ffff88806a53322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801defa440 R14=ffffffff90a81550 R15=0000000000000000 RIP=ffffffff8b80077f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6853000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc2624e8710 CR3=000000004f595000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7d6d4400 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f706e211b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f706e211b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f706e211b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f706e211b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f706e211bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f706e211c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000001e620f RBX=0000000000000002 RCX=ffffffff8b801c19 RDX=0000000000000000 RSI=ffffffff8de19da0 RDI=ffffffff8c1579e0 RBP=ffffed1003bdf910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000001 R12=0000000000000002 R13=ffff88801defc880 R14=ffffffff90a81550 R15=0000000000000000 RIP=ffffffff8b80077f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6953000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000bff000 CR3=0000000058aa1000 CR4=00352ef0 DR0=0000000000000007 DR1=000000000000009b DR2=00040000ffffffff DR3=0000000000000009 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0073656369766564 2f7475706e692f73 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd817811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd817811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd817811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd817811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd817811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd817811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd817984488 00007fd817984480 00007fd817984478 00007fd817984450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd8184ed100 00007fd817984440 00007fd817980004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd817984498 00007fd817984490 00007fd817984488 00007fd817984480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f77a384d5f9e09f 7f2ace921b399dda a70ffa8d7b2fa694 978b8c0af543b6fd ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8e785a1923d44136 ad01a5e12a739375 e4318e17c6748f8e de13bf88a86eff94 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9597045a59813eb0 e3f94fd0a70f3daf 7ce802e016724b79 c2ae8340255e0fca ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c64ff6bf529e4034 c53202f204f6503f fd165e8cf21402c3 9eececa2bd755470 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000018004f RBX=0000000000000003 RCX=ffffffff8b801c19 RDX=0000000000000000 RSI=ffffffff8de19da0 RDI=ffffffff8c1579e0 RBP=ffffed1003c52000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801e290000 R14=ffffffff90a81550 R15=0000000000000000 RIP=ffffffff8b80077f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3ad5ad CR3=000000002aaad000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f706e211b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f706e211b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f706e211b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f706e211b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f706e211bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f706e211c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f706e384488 00007f706e384480 00007f706e384478 00007f706e384450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f706eeed100 00007f706e384440 00007f706e380004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f706e384498 00007f706e384490 00007f706e384488 00007f706e384480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3184d77f45197e45 b9957db8a721331d 9a0e14fb1ee66526 3a10916cc31f3d13 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3bf2a681c434f5a7 b966958bcc62a088 b066fe1935cad69f 1a0383088fbecd56 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c9643bdc580c9bb ce20e49f5311ef2b 11744dd34c05c26f 43c912c08c65a49c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b13930e3c6047c85 cfa8550a6ed43e03 f91d8bb310db9029 7f5a24e0b2882e42 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000