last executing test programs: 41.831527977s ago: executing program 2 (id=623): openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) chdir(&(0x7f00000000c0)='./cgroup\x00') openat(0xffffffffffffff9c, 0x0, 0xec242, 0x80) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x1000) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000000)={0x1, 0x2e, 0x1}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 41.731437315s ago: executing program 2 (id=624): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) sendmmsg$unix(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}], 0x20}}], 0x1, 0x4000000) r3 = dup(r0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, &(0x7f0000000300)) 41.731067708s ago: executing program 2 (id=625): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x201, 0x3, 0x2}, 0x18, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)="20e6ce4d", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002380), r0) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x45) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000380)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r6, 0x1}}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x2, &(0x7f0000000400)=[{&(0x7f0000000680)=""/154, 0x9a}, {&(0x7f00000004c0)=""/30, 0xe}], 0x2}, 0x0) (async) r7 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)=0x6e, 0x800) sendmmsg$unix(r7, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='xfs\x00', 0x200013, 0x0) (async) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048855}, 0x4049090) 41.726543256s ago: executing program 2 (id=626): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000040)) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/218, 0xda}, {&(0x7f00000001c0)=""/248, 0xf8}, {&(0x7f00000002c0)=""/173, 0xad}, {&(0x7f0000000380)=""/28, 0x1c}, {&(0x7f00000003c0)=""/16, 0x10}, {&(0x7f0000000400)=""/154, 0x9a}], 0x7, 0x3, 0x401) write$cgroup_int(r0, &(0x7f0000000540)=0x7, 0x12) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x29, 0x9b, 0x1, 0xfffffffc, 0x14, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x1, 0x8, 0x3, 0x8000}}) r3 = open(&(0x7f0000000680)='./file0\x00', 0x2a0081, 0x43) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x850) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r4, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0xd, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0x30, 0x3}}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x80}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x6b69ad6a6b4412a) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f0000000940)="ef0ad869e4df023731dc3f4edee881e676fd2ac8a995773544924842ec0e0236c520568d0ce8cb24173399519cfa8468a57e5808049a968058fc51083f82a6134aeca54c70bde0dec48d244fa45da5913b81bafdd8aa78a13fa3d5579701a0aadf7f06", 0x63) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000a00)='syz1\x00', 0x1ff) move_mount(r3, &(0x7f0000000a40)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x40) ioctl$IMGETVERSION(r3, 0x80044942, &(0x7f0000000ac0)) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000b40), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000b80)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r8, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x0) r10 = syz_create_resource$binfmt(&(0x7f0000000c80)='./file0\x00') execveat$binfmt(r3, r10, &(0x7f0000000d00)={[&(0x7f0000000cc0)='wg1\x00']}, &(0x7f0000000f80)={[&(0x7f0000000d40)='-!\x00', &(0x7f0000000d80)='\xff\xff', &(0x7f0000000dc0)='\x00', &(0x7f0000000e00)='!*\x00', &(0x7f0000000e40)='@)\x00', &(0x7f0000000e80)='syztnl1\x00', &(0x7f0000000ec0)='+\\-6*-/%\xb2.&-(\x00', &(0x7f0000000f00)='wireguard\x00', &(0x7f0000000f40)='$.{-%\x8a&\x00']}, 0x1000) r11 = openat$cgroup_int(r0, &(0x7f0000001000)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f0000001040)=0xffff, 0x12) r12 = open$dir(&(0x7f0000001080)='./file1\x00', 0x80100, 0x22) execveat$binfmt(r12, r10, &(0x7f0000001300)={[&(0x7f00000010c0)='!*\x00', &(0x7f0000001100)='!*\x00', &(0x7f0000001140)='+\\-6*-/%\xb2.&-(\x00', &(0x7f0000001180)='wlan0\x00', &(0x7f00000011c0)='hugetlb.1GB.rsvd.failcnt\x00', &(0x7f0000001200)='\xff\xff', &(0x7f0000001240)='\x00', &(0x7f0000001280)='-!\x00', &(0x7f00000012c0)='syztnl1\x00']}, &(0x7f00000014c0)={[&(0x7f0000001380)='%\\,-\x00', &(0x7f00000013c0)='-\x00', &(0x7f0000001400)='[\x00', &(0x7f0000001440)='-}-!.\x00', &(0x7f0000001480)='-!\x00']}, 0x1000) r13 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001500), 0x802, 0x0) write$UHID_INPUT(r13, &(0x7f0000001540)={0x8, {"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", 0x1000}}, 0x1006) lsetxattr$trusted_overlay_upper(&(0x7f0000002580)='./file1/file0\x00', &(0x7f00000025c0), &(0x7f0000002600)={0x0, 0xfb, 0xfe, 0x3, 0xf7, "1a9ebfa294d0eef717e532a32648db13", "8360f7e64dc8661b5ad321aff806e8fc020672d61e0791ac44e542ad5a08ad4febb9ea825fd856be0006295fb55c755b77d5aa55ceade27a3b81563c48de01fd5bd8ee10f5120c8ce5d3e8b1e3d9f4ecac3f7e6b3f7298e997fe5f6bd30e835f4a75d16bac42f3e1b3374f3e933110eb5e9fc130d0175deb7404d95cb063d0194a0b4a886211542baf82c7f84af7ca82d6403c28b5f5678acbfab0a704634b4d003df61fa259132003d9d7f680e9054b7eb81f1d7ce639cac2c2b6abefe7f28622167b6347ae3c9b894ce6c965d10b060d805f79774564e27bf6a9a8a3a80a1ebc447db0211cc05362"}, 0xfe, 0x2) write$cgroup_freezer_state(r3, &(0x7f0000002700)='THAWED\x00', 0x7) 41.66156297s ago: executing program 2 (id=627): r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, r0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000000}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xc}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004800}, 0x8800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x7f) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r4, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0xfffffffb, 0x6b}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'ipvlan0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xe}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4024}, 0x4084) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x20) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r6, 0xedaa7000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r7}, 0x10) 41.551045102s ago: executing program 2 (id=628): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {0x54}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) close(r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r4, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x171}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x480c0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x0, 0xc}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}]}]}]}}]}, 0x4c}}, 0x0) ioctl$KVM_GET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)) 26.518124447s ago: executing program 32 (id=628): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {0x54}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) close(r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r4, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x171}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x480c0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x0, 0xc}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}]}]}]}}]}, 0x4c}}, 0x0) ioctl$KVM_GET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)) 20.778889117s ago: executing program 4 (id=854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, 0x4, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x22000000}, 0x810) (async) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r1, 0x402, 0x80000003) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 13.010936651s ago: executing program 4 (id=854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, 0x4, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x22000000}, 0x810) (async) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r1, 0x402, 0x80000003) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 6.425122145s ago: executing program 4 (id=854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, 0x4, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x22000000}, 0x810) (async) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r1, 0x402, 0x80000003) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3.309033188s ago: executing program 1 (id=1254): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x0, 0xc}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}}, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)) 3.159426744s ago: executing program 1 (id=1255): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x25dfdbff, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x2, 0xffffffffffffffff, 0x6, 0x80000000}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x60}}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000001740)='./cgroup.cpu/cgroup.procs\x00', 0x4000, 0x7ff, &(0x7f00000046c0)) r1 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000240)) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000100)=@x86={0x0, 0xe9, 0x6, 0x0, 0x7, 0xff, 0xfe, 0x81, 0x0, 0xb, 0x9, 0xd6, 0x0, 0x9, 0xc80, 0x5, 0x0, 0xff, 0x2, '\x00', 0x2, 0x6}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0xdddd1000, 0x59a35420, 0x20003, 0x10020f5b, 0x0, [{0x0, 0x9, 0x0, '\x00', 0x3a}, {}, {}, {0x0, 0x35}, {0x1d, 0x3}, {0x0, 0x0, 0x6}, {}, {0x2, 0x6}, {}, {0x73, 0x6, 0x2}, {0x0, 0x0, 0xfe}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0x0, 0xfa}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x40}, {0x6, 0x0, 0x0, '\x00', 0x20}, {0x0, 0x0, 0x4, '\x00', 0xfc}, {0x0, 0x5}, {0x0, 0x0, 0x10}]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="7c369efdfffffd5b564d0993b18e263df2895e2b0a88f14282d4d90310293d7c1f3d4d3146b12e53e53a84ba638e7f13", 0x30) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000080)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="ca3361f6", @ANYRES16=r8, @ANYBLOB="01002bbd7000fbdbdf25010000000c000600000000000000000008000300", @ANYRES32=r9, @ANYBLOB="08000100030000000c0006000100000001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x8004) 2.670028426s ago: executing program 1 (id=1261): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r2, 0x211, 0x0, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x100000000000000, 0x0, 0x4000059}, 0x40890) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="200001", @ANYRES32=0x0, @ANYBLOB="08ed"], 0x38}}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x45) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000380)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r6, 0x1}}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x100, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {0x7, 0x1}, {0x1, 0x4}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x67c}]}, 0x3c}}, 0x0) 1.668341261s ago: executing program 1 (id=1283): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="040100001a00014000000000000000df5d64b669cc623aad8800000000000000ff0100000000000000000000000000010000000000000000000000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000037000000003c0000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000400600000000000000014000e00fc0200"/188], 0x104}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff26650042e2dacd970000f50000000162e2adacd2737d00ad6f9fa9f3d7145e15dd9d6d2e19c211220940ad5def53b911ba5b9da13641f9826d7012a749f54b901ee80ea6132ca6e88c776553e1833052ca376304313c4b37780136a4b838570400"}, 0x80, 0x0}, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) (async) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000040)={0x2c, 0xfe000000}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) (async) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000200), 0x4) close(r8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r8, 0x24, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) fcntl$getown(r7, 0x9) r10 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r10, r5) (async) ppoll(&(0x7f00000002c0)=[{r5, 0x10002}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)) 1.110752733s ago: executing program 3 (id=1287): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000013000100000000000000000006"], 0x14}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000013000100000000000000000006"], 0x14}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000040)=r1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d", @ANYBLOB="57e5e80490569fd60871a3e94c373fd815558b69bb37a89be13203df18d42c5b99509d5e66273d02aa564bbb778c60aa3a838823aa7f448e9f40d69ef5e044f7af857272c1219496400421b7780eed0b539d6cb0cd288ee38ca44a4319b9c284522b898d35dee38b04d37eeb67c76da9a29cf1161cfed9d04eaca05358a8613f5a1f305b1aa19e66994fa18d914c86a8f97958a2c2077cd5a786204d459ba2d2c861ad7f99bf5670c370f8345e18f1d2b4bd53ebe90fd3bbbd76"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = dup2(r3, r1) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r4, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r5) (async) r6 = dup(r5) fanotify_init(0x200, 0x0) (async) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800107b, r6, 0x0) (async) fanotify_mark(r7, 0x1, 0x4800107b, r6, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @local}}, [0x223bfd95, 0x3, 0x6806, 0x401, 0x3, 0x1000, 0x5, 0x8000, 0x2, 0x10, 0x80000001, 0xd3dd, 0x2, 0x6, 0x800]}, &(0x7f0000000180)=0x100) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @local}}, [0x223bfd95, 0x3, 0x6806, 0x401, 0x3, 0x1000, 0x5, 0x8000, 0x2, 0x10, 0x80000001, 0xd3dd, 0x2, 0x6, 0x800]}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f00000001c0)={r8, 0xda, "30e8beb0f273cbb6c3402cfb1cae9451728aba470e6130d663e30d0aa077da58430de269828a30e8810ee87df38e21dee79e334a796a577ad849997333d46c3f41952899f59afbed9e35575f7c8ea8cb5ff732141723a9ab8960fec9e30fb587bfa7f1b0c15d58033f2fd839d8082ddb3c3518c9de7d676768341a4e9e402961c71198530fa46a503de3a8ef312e23755a4cda9b64f4c722b19f9141a8d6e4f55ade769e9c916cc76d9090f91201ea2b4e439ef7953c06aa02b2d2dee89280744e95cd887ac796f9a2c791c71e3cf61a82be66c53daeab431071"}, &(0x7f00000002c0)=0xe2) readlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=""/230, 0xe6) 1.109703731s ago: executing program 3 (id=1288): r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0xff}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000)={0x0, 0x9}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000004c0)={0x0, 0x4}, 0x2) 1.048894605s ago: executing program 3 (id=1289): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000fa3000/0x2000)=nil, 0x2000, 0x7, 0x13, r0, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7475616e731d666415e166646e6f3d6eade0b2af7cd517ed4b03655901f543341897e8c2032f3206b71ff4c46a57f3cd213f948edf539bf0b558eb305606ff9f687fa8c37551ec5b29853ed41c7f145910fe2f544445795cc164d8b8536e54d41fd352115ef35fa74bbdbf2d35b080ada3067d24a5b6dae7f0b5f5e461b2ff3d81d10f74a770e96c7b13a54e0db57de594ca95a4fb4e1e7c26ca4709fc3b466a441bcd1f948aeaa02b8295c4db35f9b738442375e3c2152eb5c57228e42fb50c4eee3a4be17226c8c297d28f540d12d3464a847d026897e12c3530405db787748eb8554902ad57ff973c94a5069f7f509628e83bec390d3f62b3cc511325c2e6b6f5c040efff7b6da1ad63fe88e56411034c4f962fa8d80e87b38f982da30a42ecfe", @ANYBLOB="7e1d06d65fd818f05952f9d5d54236e96db6745cbc647915086b86f5a64309e0bab39f9dd1f38065421049fc11200d04a349e0d5bda62714bdea8ea5b517b14d5547ea592384422b06e72702ce6ccd19dfbff496a435484d8e4a75e36c8ec18da20515dd74d5b11114c47744490f9b78fa832bc62664d13b6eaa697f48e399bec1dfe150545646e85cfe8182650b6156ef3b820810bd7b63e4fec92717c9f247b8f457015902acfb0a6ed7eb71d10b69f5c8942a32575e20a4d1421eacf4134b1cedc012dd37bbfe614063c783", @ANYRESHEX=r1, @ANYRESHEX=r2, @ANYRESOCT=r1, @ANYRES16=r2, @ANYRES32=r1]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.048481728s ago: executing program 3 (id=1290): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x7f, 0xef0, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)="b9", &(0x7f0000000ec0)="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", 0x402, r1}, 0x38) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=""/233, &(0x7f00000001c0), &(0x7f0000000240), 0x6, r1}, 0x38) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x2, 0xffff}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) (async, rerun: 32) io_setup(0xa01f, &(0x7f00000002c0)=0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x400caed0, &(0x7f0000000100)={0x82, r5, 0xffffffff}) (async) io_cancel(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x2, r1, &(0x7f0000000640)="d336ba86afd312c02880a6dd2fa678e455f9068260bb26bf9a735ff1bf32c0edc46bd47330f853fb6e54f4b1b288aa379df7cce88714413beb34f1dc988159c49230b4c0fedac2d03bdf52c463da28cd89650f323740d5729e916a1952ecc7fbab807e4a7ec51b20911c54675fcd43eb7ecf676003d1caace7b088544b419844260e0ab69e8dcd63573f890cb5ea05ff8eeb2b20e8918ac4252cc58f6e1385ca1e402c5e9df57ccb3a58fdab56a2654add3db015c129a23bee8db676b8415e98cee125957e0821a49e4d2ac131cabc53cc2b1188660542a5123d33989fc1760226301c614607afff43028b", 0xeb, 0x1, 0x0, 0x2, r5}, &(0x7f0000000480)) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket(0x10, 0x3, 0x0) (async) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x42802) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r9, 0xc08c5336, &(0x7f0000000580)={0x3fd, 0x8, 0x0, 'queue1\x00', 0x20000007}) (async) r10 = socket$packet(0x11, 0x3, 0x300) bind$inet6(r7, &(0x7f0000000740)={0xa, 0x4e22, 0x7, @remote, 0x5}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'caif0\x00'}) (async) sendmsg$nl_route(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd26, 0x25dfdbfb, {0x80, 0x10, 0x0, 0x8, 0xfe, 0x2, 0xc8, 0x8, 0x800}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040090}, 0x880) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x7800, 0x1, 0x6, 0x100, {{0x7, 0x4, 0x1, 0x8, 0x1c, 0x67, 0x0, 0x5, 0x2f, 0x0, @remote, @empty, {[@end, @ssrr={0x89, 0x7, 0x3e, [@rand_addr=0x64010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', r11, 0x29, 0x5, 0xd, 0x4, 0x14, @loopback, @dev={0xfe, 0x80, '\x00', 0x17}, 0x80, 0x8, 0x4, 0x17}}) (async) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd61fde9ad00102101fc02000000000000000000000000000000000000000000000000ffffffffffff4e224e2104"], 0x0) 820.838338ms ago: executing program 3 (id=1291): syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = add_key(&(0x7f00000001c0)='big_key\x00', 0x0, &(0x7f0000000100)="305c0605e182d1447ad1ad83700398d1c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e6417acfc8648ad1b93d502b0cd490e35d53ddf6fd0461690982b2369490100b06df5aa58a09a000000808ce41d86b9b949004fd8fe7b80000000", 0xfffffffffffffdd3, 0xfffffffffffffffe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x64) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYRES8=r2], 0x0) fcntl$notify(r2, 0x402, 0x8000003d) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES16=0x0, @ANYRESHEX=r3, @ANYRES64=r0, @ANYRES32=r1, @ANYRES32=r3, @ANYRESHEX=r0, @ANYRES64=r2], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$inet6(0xa, 0x40000080806, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0x980915, 0x8}) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0x920c}, 0x1c) listen(r4, 0x20000005) r6 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffc, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x2004cc, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8020000000, 0x6011, 0x4, 0x200000], 0x6000, 0x13402}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0x8090ae81, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x36, 0x1, 0x2, "09e4ffb97e3b4c00152258011a9285a5df0300080000f8000000000000000500", 0x41414770}) accept4(r4, 0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1d, 0xc, &(0x7f0000000080)=ANY=[@ANYRES8=r5, @ANYRES32=r4, @ANYRESHEX=r9], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x649, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x19) 816.340916ms ago: executing program 1 (id=1292): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) lsm_set_self_attr(0x68, &(0x7f0000000000)={0x6d, 0x3, 0x20}, 0x20, 0x0) ioctl$TIOCGPTPEER(r0, 0x4004092b, 0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x11b480, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)=@multiplanar_mmap={0x7f, 0x7, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x5, 0x2, 0x8, 0x6, 0xf0, 0x7, "ce7e453f"}, 0x3, 0x1, {&(0x7f0000000040)=[{0x0, 0x100, {0x8}, 0x8}, {0x5, 0x101, {0x4}, 0x1}]}, 0x0, 0x0, r1}) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x2, 0x2200) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000300)=""/235) r4 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x5) mount_setattr(r5, &(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000200)={0x5, 0x0, 0x0, {r5}}, 0x20) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00 \x00', @ANYRES16=r6, @ANYBLOB="020027bd7000fbdbdf251000000008000400000000000800060080000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e00283afffe800000000000110000000000000000fe8000000000000000000000000000aa"], 0x0) 814.596664ms ago: executing program 1 (id=1293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000040)={0x10}) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000001600)={0x54, r1, 0x1, 0xfffffffd, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x51}, {0xc, 0x8f, 0xfffffffffffffffe}, {0xc}}]}, 0x54}}, 0x0) 620.890487ms ago: executing program 3 (id=1294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x48}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@getroute={0x14, 0x1a, 0x100, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200c08c1}, 0x48410) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x5b03, 0x0) syz_usb_disconnect(r1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2040084) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x4}, @NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 230.400229ms ago: executing program 0 (id=1300): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8df00000000bfa1000002000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) write$cgroup_subtree(r2, &(0x7f0000000480)=ANY=[], 0x8) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r4 = socket(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r6, r5, 0x2, 0x6, 0x4000, @void, @value}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f00000002c0)=0x4) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=@bridge_setlink={0x108, 0x13, 0x2, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, r7, 0xce86d175d332372f, 0x50002}, [@IFLA_LINK={0x8, 0x5, r8}, @IFLA_VF_PORTS={0xe0, 0x18, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, '.(\'\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "5b5e8c5cc08b143f9c04fddb6edb6fb2"}, @IFLA_PORT_PROFILE={0x14, 0x2, '!$\'!:/&\xe9($%)#[(\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7ada162c23f0465a0e9f5252056149d8"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d0698ae5c2cbeb55938188c90b02b0bc"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "be05252d46487ce51e8c5c64ba44b32a"}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "920f6d1c426bbb67b0e312388f5ce3c3"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "8346a59f8167996d8d0d973a87857276"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "fd67c048b5e4250686f11d8674765208"}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffffc}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "2b7c26f000d85d398e5ba200"}, @IFLA_PORT_PROFILE={0x7, 0x2, ' \x01\x00'}]}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x804}, 0x8044) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x52, 0xa01, 0x0, 0x0, {0xa}, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9", 0x2a}], 0x2) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x503, 0x70bd2c, 0xffffffff, {0x0, 0xcf, 0x0, 0x0, 0x3, 0x20060}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00'}]}}}]}, 0x48}}, 0x0) 230.169027ms ago: executing program 0 (id=1301): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_macvtap\x00', &(0x7f0000000180)=@ethtool_cmd={0x2c, 0x7, 0x0, 0x9, 0x7d, 0x5, 0x81, 0x87, 0xda, 0xf3, 0xa, 0x31, 0x6, 0x4, 0x0, 0x8001f76, [0x7fff, 0x7b0]}}) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x1) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 181.05761ms ago: executing program 0 (id=1302): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f00003ec000/0x1000)=nil, 0x1000, 0x4000, 0x6, &(0x7f0000070000/0x4000)=nil) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) vmsplice(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)="758d14e24b733d60783a930ebb3d60a011fd977f81dc16f59b398d12abaf7d2e8a0bdc0e6ce2c8be67d279f4895706f3c101feadc44abb3a06d3d5", 0x3b}, {&(0x7f0000000240)="c117e4257be5e552c972d4", 0xb}, {&(0x7f0000000300)="0486761ffef5a78d74b0d821146ddd49ee80e368ae492b2f9289645d58049c1279cdfaf39cb58f132fb68ef83a78f88272f87b065818485aa5b3a526936c1b717144b7c4f1c978625183f3ee5ccb273ef5efbd4c3e7eef2919c97f8a9fe5970e5bed82c650e20f80e2357ffe11ebd528cb699e5faa533dbd8a6dd64a2ca12c372c92b0305329da1e85a93757b52ddba6f0045847c207059442131d28b56f01be722e525f746f034a7a6cbc3c5c538a066ef8ec65357e8597bcf697bf688b6c1c0bf850b42dd04f6b8463755291a5bd2cac04dc1fbab93a", 0xd7}], 0x3, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) io_uring_setup(0x2001694, &(0x7f0000000080)={0x0, 0x74ca, 0x6, 0x1}) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtclass={0x34, 0x28, 0x4, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff1, 0xd}, {0xf, 0xfff9}, {0x10, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x7}}, @tclass_kind_options=@c_red={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc008002c0007000200060019c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x0, 0x0, 0x3) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f00000002c0)={0xc, r8}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r8, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x4, 0xe8288, 0x277043}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x6, r8, 0x0, r9}) 118.407685ms ago: executing program 0 (id=1303): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x10, 0x2, 0x6, 0x100, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000005c0)="1d", 0x1, 0xfffffffffffffffe) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x200000, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000640)={'ip6gre0\x00', 0x80000000}) keyctl$revoke(0x3, r2) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=@dellinkprop={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x0, 0x10008}, [@IFLA_PROP_LIST={0x4}]}, 0x24}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/if_inet6\x00') close_range(r12, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x24, r7, 0x211, 0x0, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x24}, 0x1, 0x100000000000000, 0x0, 0x4000059}, 0x40890) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r7, 0x100, 0x70bd2d, 0x10001, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@updpolicy={0xc0, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x8000, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x400, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x1}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) connect$pppl2tp(r3, &(0x7f00000006c0)=@pppol2tpv3={0x18, 0x1, {0x0, r13, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x0, 0x0, 0x2}}, 0x2e) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000020601020000000000000000020020002d00078005001500fd00000005000100060000000500050002000000050004000000000010000300686173683a69702c6d6163010900020073797a3200000000"], 0x54}, 0x1, 0x0, 0x0, 0x400d4}, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000200000085000000b6000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 796.889µs ago: executing program 0 (id=1304): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) r1 = socket(0x40000000015, 0x5, 0x1ff) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 0s ago: executing program 0 (id=1305): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={r1, 0x401, 0x9f1}) socket$packet(0x11, 0x2, 0x300) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) kernel console output (not intermixed with test programs): can't find a HFS filesystem on dev sr0 [ 55.693371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.706777][ T6789] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 55.777469][ T6810] program syz.1.191 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.907984][ T6824] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 56.854984][ T6855] 9pnet: Found fid 0 not clunked [ 57.018262][ T6874] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.067167][ T6880] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 57.069300][ T6880] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.072357][ T6880] vhci_hcd vhci_hcd.0: Device attached [ 57.082109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 57.086746][ T6880] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 57.089738][ T6880] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.094513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.095636][ T6880] vhci_hcd vhci_hcd.0: Device attached [ 57.101663][ T6880] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(74) [ 57.104016][ T6880] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.107346][ T6880] vhci_hcd vhci_hcd.0: Device attached [ 57.111958][ T6880] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(78) [ 57.114578][ T6880] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.120591][ T6880] vhci_hcd vhci_hcd.0: Device attached [ 57.125033][ T6880] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(80) [ 57.127124][ T6880] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.129599][ T6880] vhci_hcd vhci_hcd.0: Device attached [ 57.134146][ T6880] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(82) [ 57.136882][ T6880] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.140663][ T6880] vhci_hcd vhci_hcd.0: Device attached [ 57.153991][ T6880] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(84) [ 57.156654][ T6880] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.160328][ T6880] vhci_hcd vhci_hcd.0: Device attached [ 57.171742][ T6880] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(86) [ 57.173912][ T6880] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.182271][ T6880] vhci_hcd vhci_hcd.0: Device attached [ 57.194037][ T6880] vhci_hcd vhci_hcd.0: port 0 already used [ 57.205739][ T6882] vhci_hcd: connection closed [ 57.207462][ T12] vhci_hcd: stop threads [ 57.210654][ T12] vhci_hcd: release socket [ 57.212759][ T12] vhci_hcd: disconnect device [ 57.283298][ T10] vhci_hcd: vhci_device speed not set [ 57.412804][ T6933] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 57.516804][ T6941] netlink: 'syz.1.223': attribute type 2 has an invalid length. [ 57.519743][ T6941] netlink: 'syz.1.223': attribute type 1 has an invalid length. [ 57.548814][ T6944] overlayfs: conflicting options: metacopy=off,verity=on [ 57.741558][ T6902] vhci_hcd: connection closed [ 57.741763][ T6900] vhci_hcd: connection closed [ 57.742427][ T6897] vhci_hcd: connection closed [ 57.742811][ T1196] vhci_hcd: stop threads [ 57.742827][ T1196] vhci_hcd: release socket [ 57.742873][ T1196] vhci_hcd: disconnect device [ 57.753376][ T6893] vhci_hcd: connection closed [ 57.753434][ T6895] vhci_hcd: connection closed [ 57.754713][ T6887] vhci_hcd: connection closed [ 57.755586][ T6891] vhci_hcd: connection closed [ 57.756919][ T1141] vhci_hcd: stop threads [ 57.756929][ T1141] vhci_hcd: release socket [ 57.762979][ T1141] vhci_hcd: disconnect device [ 57.764892][ T6970] __nla_validate_parse: 2 callbacks suppressed [ 57.764903][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.230'. [ 57.765712][ T1141] vhci_hcd: stop threads [ 57.771328][ T1141] vhci_hcd: release socket [ 57.772762][ T1141] vhci_hcd: disconnect device [ 57.776534][ T1141] vhci_hcd: stop threads [ 57.777926][ T1141] vhci_hcd: release socket [ 57.779643][ T1141] vhci_hcd: disconnect device [ 57.781510][ T1141] vhci_hcd: stop threads [ 57.782893][ T1141] vhci_hcd: release socket [ 57.784536][ T1141] vhci_hcd: disconnect device [ 57.787403][ T1141] vhci_hcd: stop threads [ 57.789151][ T1141] vhci_hcd: release socket [ 57.790877][ T1141] vhci_hcd: disconnect device [ 57.793571][ T1141] vhci_hcd: stop threads [ 57.795064][ T1141] vhci_hcd: release socket [ 57.796460][ T1141] vhci_hcd: disconnect device [ 57.796536][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.232'. [ 57.869518][ T6981] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 57.873035][ T6981] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 58.097581][ T6989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=6989 comm=syz.3.234 [ 58.106449][ T6989] bridge_slave_1: mtu less than device minimum [ 58.245235][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 58.263065][ T7014] overlayfs: failed to resolve './file1': -2 [ 58.319219][ T7023] warning: `syz.2.247' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 58.705194][ T7056] netlink: 'syz.0.255': attribute type 13 has an invalid length. [ 58.710423][ T7056] overlay: filesystem on ./bus is read-only [ 58.740510][ T7058] netlink: 44 bytes leftover after parsing attributes in process `syz.0.256'. [ 59.003009][ T7077] /dev/sg0: Can't lookup blockdev [ 59.090024][ T7093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.267'. [ 59.130121][ T7101] tmpfs: Bad value for 'mpol' [ 59.166317][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'. [ 59.169084][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.273'. [ 59.175031][ T7107] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.177915][ T7107] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.180611][ T7107] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.183364][ T7107] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.187848][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'. [ 59.190653][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.273'. [ 59.421094][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 59.443190][ T58] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 59.486156][ T34] IPVS: starting estimator thread 0... [ 59.573677][ T7142] IPVS: using max 45 ests per chain, 108000 per kthread [ 59.603229][ T58] usb 7-1: Using ep0 maxpacket: 16 [ 59.610126][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.615585][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.618635][ T58] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 59.621532][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.623221][ T40] kauditd_printk_skb: 54 callbacks suppressed [ 59.623230][ T40] audit: type=1400 audit(1745045345.695:393): avc: denied { read } for pid=7155 comm="syz.0.290" path="socket:[11201]" dev="sockfs" ino=11201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 59.628235][ T58] usb 7-1: config 0 descriptor?? [ 59.735583][ T40] audit: type=1400 audit(1745045345.815:394): avc: denied { read } for pid=7165 comm="syz.0.293" path="socket:[13077]" dev="sockfs" ino=13077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.766141][ T7167] Cannot find add_set index 0 as target [ 59.858364][ T58] usbhid 7-1:0.0: can't add hid device: -71 [ 59.860414][ T58] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 59.872309][ T58] usb 7-1: USB disconnect, device number 6 [ 59.899326][ T40] audit: type=1400 audit(1745045345.975:395): avc: denied { create } for pid=7186 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 59.906890][ T40] audit: type=1400 audit(1745045345.985:396): avc: denied { connect } for pid=7186 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 59.915261][ T40] audit: type=1400 audit(1745045345.985:397): avc: denied { write } for pid=7186 comm="syz.2.295" path="socket:[13573]" dev="sockfs" ino=13573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 59.923782][ T40] audit: type=1400 audit(1745045346.005:398): avc: denied { write } for pid=5340 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.931506][ T40] audit: type=1400 audit(1745045346.005:399): avc: denied { remove_name } for pid=5340 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.931529][ T40] audit: type=1400 audit(1745045346.005:400): avc: denied { rename } for pid=5340 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.931551][ T40] audit: type=1400 audit(1745045346.005:401): avc: denied { add_name } for pid=5340 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.931570][ T40] audit: type=1400 audit(1745045346.005:402): avc: denied { unlink } for pid=5340 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.939430][ T7194] ieee802154 phy0 wpan0: encryption failed: -22 [ 60.027198][ T7204] netlink: 'syz.0.301': attribute type 7 has an invalid length. [ 60.029825][ T7204] netlink: 'syz.0.301': attribute type 8 has an invalid length. [ 60.150361][ T7221] hfsplus: unable to find HFS+ superblock [ 60.154578][ T7221] usb usb8: usbfs: process 7221 (syz.2.306) did not claim interface 0 before use [ 60.164602][ T7206] infiniband syz1: set active [ 60.172825][ T7206] infiniband syz1: added syz_tun [ 60.218597][ T7206] RDS/IB: syz1: added [ 60.220638][ T7206] smc: adding ib device syz1 with port count 1 [ 60.228239][ T7206] smc: ib device syz1 port 1 has pnetid [ 60.257167][ T7211] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 60.818841][ T7242] hpfs: Bad magic ... probably not HPFS [ 60.841858][ T5952] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 60.990463][ T7271] tmpfs: Unknown parameter '!t5`Q-K' [ 61.066530][ T7271] xt_l2tp: unknown flags: 17 [ 61.141382][ T7291] Cannot find del_set index 4 as target [ 61.148166][ T7291] wg2: entered promiscuous mode [ 61.149922][ T7291] wg2: entered allmulticast mode [ 61.461099][ T7332] netlink: 'syz.2.328': attribute type 20 has an invalid length. [ 61.721659][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 61.741109][ T7353] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 61.743377][ T7353] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 61.747109][ T7353] vhci_hcd vhci_hcd.0: Device attached [ 61.749368][ T7354] vhci_hcd: connection closed [ 61.749555][ T7257] vhci_hcd: stop threads [ 61.752979][ T7257] vhci_hcd: release socket [ 61.757939][ T7257] vhci_hcd: disconnect device [ 61.883213][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 61.886086][ T10] usb 6-1: config index 0 descriptor too short (expected 8978, got 18) [ 61.889280][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 61.895794][ T10] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 61.903257][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.905748][ T10] usb 6-1: Product: syz [ 61.907058][ T10] usb 6-1: Manufacturer: syz [ 61.908613][ T10] usb 6-1: SerialNumber: syz [ 61.913484][ T10] usb 6-1: config 0 descriptor?? [ 62.018863][ T7362] dlm: Unknown command passed to DLM device : 255 [ 62.018863][ T7362] [ 62.118819][ T7330] kvm: vcpu 0: requested 104 ns lapic timer period limited to 200000 ns [ 62.701126][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804e24fc00: rx timeout, send abort [ 62.840443][ T7413] netlink: 'syz.0.352': attribute type 10 has an invalid length. [ 62.845124][ T7413] fuse: Bad value for 'fd' [ 63.137858][ T7427] cgroup: fork rejected by pids controller in /syz0 [ 63.201511][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880503c6c00: rx timeout, send abort [ 63.205119][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804e24fc00: abort rx timeout. Force session deactivation [ 63.663461][ T835] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 63.705031][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880503c6c00: abort rx timeout. Force session deactivation [ 63.823477][ T835] usb 5-1: Using ep0 maxpacket: 8 [ 63.827302][ T835] usb 5-1: config 1 interface 0 altsetting 70 bulk endpoint 0x82 has invalid maxpacket 64 [ 63.831338][ T835] usb 5-1: config 1 interface 0 altsetting 70 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 63.836967][ T835] usb 5-1: config 1 interface 0 has no altsetting 0 [ 63.841574][ T835] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.845328][ T835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.848605][ T835] usb 5-1: Product: 蹎뱒㓧頊Ⲵꎨ䤟ꭴ碢 [ 63.851187][ T835] usb 5-1: Manufacturer: ì·äžè³˜áµŸîš±ë¤¶â‘Ｖ빅㨸庘㎬觳쑩쎦喼䱺槆扖î·é¬©â¿â´¢í‹å““í†á‚¥ë®¬å¹—⒑Ɖ놂横䨒İ쾽欂蟾オ림箄꽃㋵復幱삽 [ 63.857908][ T835] usb 5-1: SerialNumber: ã Š [ 63.862662][ T7589] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 63.865771][ T7589] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 64.073560][ T835] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 64.078878][ T835] usb 5-1: USB disconnect, device number 4 [ 64.431339][ T6326] usb 6-1: USB disconnect, device number 2 [ 64.470909][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880503c4800: rx timeout, send abort [ 64.754757][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 64.754772][ T40] audit: type=1400 audit(1745045364.825:426): avc: denied { write } for pid=7618 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.765879][ T40] audit: type=1400 audit(1745045364.825:427): avc: denied { name_connect } for pid=7618 comm="syz.1.364" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 64.807228][ T7622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.818326][ T7622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.973947][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880503c4800: abort rx timeout. Force session deactivation [ 65.039288][ T6326] IPVS: starting estimator thread 0... [ 65.133268][ T7625] IPVS: using max 23 ests per chain, 55200 per kthread [ 65.210290][ T40] audit: type=1400 audit(1745045365.275:428): avc: denied { accept } for pid=7626 comm="syz.0.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.248544][ T40] audit: type=1400 audit(1745045365.315:429): avc: denied { create } for pid=7630 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 65.254769][ T40] audit: type=1400 audit(1745045365.325:430): avc: denied { ioctl } for pid=7630 comm="syz.0.367" path="socket:[16732]" dev="sockfs" ino=16732 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 65.300882][ T7638] lo speed is unknown, defaulting to 1000 [ 65.302842][ T7638] lo speed is unknown, defaulting to 1000 [ 65.306204][ T7638] lo speed is unknown, defaulting to 1000 [ 65.310338][ T7638] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 65.316406][ T7638] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 65.332830][ T7638] lo speed is unknown, defaulting to 1000 [ 65.336587][ T7638] lo speed is unknown, defaulting to 1000 [ 65.339153][ T7638] lo speed is unknown, defaulting to 1000 [ 65.341728][ T7638] lo speed is unknown, defaulting to 1000 [ 65.375453][ T7647] __nla_validate_parse: 7 callbacks suppressed [ 65.375462][ T7647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.372'. [ 65.376537][ T7648] netlink: '/dev/': attribute type 2 has an invalid length. [ 65.417610][ T7655] netlink: 28 bytes leftover after parsing attributes in process `syz.0.373'. [ 65.420400][ T7655] netlink: 28 bytes leftover after parsing attributes in process `syz.0.373'. [ 65.501221][ T40] audit: type=1400 audit(1745045365.565:431): avc: denied { read write } for pid=7656 comm="syz.2.374" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 65.510047][ T40] audit: type=1400 audit(1745045365.565:432): avc: denied { open } for pid=7656 comm="syz.2.374" path="/71/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 65.581372][ T40] audit: type=1400 audit(1745045365.645:433): avc: denied { listen } for pid=7664 comm="syz.0.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1 [ 65.777921][ T40] audit: type=1400 audit(1745045365.845:434): avc: denied { bind } for pid=7672 comm="syz.2.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.783932][ T40] audit: type=1400 audit(1745045365.845:435): avc: denied { name_bind } for pid=7672 comm="syz.2.379" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 65.795496][ T7673] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 65.798953][ T7257] Bluetooth: hci4: Frame reassembly failed (-84) [ 66.139718][ T7684] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 66.154027][ T7685] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 66.417778][ T7706] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 66.419708][ T7706] PKCS7: Only support pkcs7_signedData type [ 66.446928][ T7704] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.508253][ T7722] tmpfs: Group quota inode hardlimit too large. [ 66.535570][ T7725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7725 comm=syz.0.395 [ 66.560593][ T7729] block nbd0: NBD_DISCONNECT [ 66.822874][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'. [ 66.826000][ T7744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.403'. [ 66.828923][ T7744] netlink: 'syz.1.403': attribute type 18 has an invalid length. [ 66.962277][ T7750] netlink: 32 bytes leftover after parsing attributes in process `syz.1.406'. [ 67.103215][ T5956] Bluetooth: hci0: command tx timeout [ 67.124738][ T7762] could not open pipe file descriptor [ 67.126860][ T7762] fuse: Unknown parameter '' [ 67.285634][ T7772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.414'. [ 67.462352][ T7784] Failed to initialize the IGMP autojoin socket (err -2) [ 67.580595][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d131000: rx timeout, send abort [ 67.698668][ T7791] dlm: plock device version mismatch: kernel (1.2.0), user (1717991472.1717986918.1717986918) [ 67.795006][ T7799] UHID_CREATE from different security context by process 597 (syz.0.422), this is not allowed. [ 67.823218][ T5956] Bluetooth: hci4: command 0x1003 tx timeout [ 67.823320][ T5952] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 67.910188][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.425'. [ 67.913047][ T7808] openvswitch: netlink: nsh attr 0 has unexpected len 4 expected 0 [ 67.915772][ T7808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 68.080683][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880250a2c00: rx timeout, send abort [ 68.084309][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d131000: abort rx timeout. Force session deactivation [ 68.584129][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880250a2c00: abort rx timeout. Force session deactivation [ 68.830336][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.437'. [ 68.833080][ T7845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.437'. [ 68.931400][ T7855] bond1: entered promiscuous mode [ 68.933935][ T7855] bond1: entered allmulticast mode [ 68.936172][ T7855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.940892][ T7855] fuse: Unknown parameter 'r0000000000000000040000' [ 68.959284][ T7860] syz.2.443: attempt to access beyond end of device [ 68.959284][ T7860] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 68.965895][ T7860] (syz.2.443,7860,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 68.968589][ T7860] (syz.2.443,7860,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 68.971204][ T7860] (syz.2.443,7860,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 68.974669][ T7860] (syz.2.443,7860,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 69.020229][ T7864] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 69.024069][ T7867] tipc: Started in network mode [ 69.025638][ T7867] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 69.029804][ T7867] tipc: Enabling of bearer rejected, failed to enable media [ 69.211408][ T7877] ceph: Path missing in source [ 69.524389][ T7926] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 69.526507][ T7926] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 69.528948][ T7926] vhci_hcd vhci_hcd.0: Device attached [ 69.532319][ T7927] vhci_hcd: cannot find the pending unlink 1023 [ 69.534520][ T7927] vhci_hcd: connection closed [ 69.534715][ T1141] vhci_hcd: stop threads [ 69.537522][ T1141] vhci_hcd: release socket [ 69.538974][ T1141] vhci_hcd: disconnect device [ 69.615088][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.617576][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.619989][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.622364][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.626354][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.628736][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.631111][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.633621][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.635992][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.638382][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.640742][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.643383][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.645919][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.648287][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.650658][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.653023][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.655472][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.657842][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.660205][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.662575][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.664992][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.667381][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.669774][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.672150][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.674575][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.676936][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.679314][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.681681][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.684101][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.686509][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.688877][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.691261][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.693795][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.696201][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.698602][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.700988][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.703445][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.705841][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.708236][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.710611][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.712980][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.715420][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.717804][ T24] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 69.722751][ T24] hid-generic 0000:007F:FFFFFFFE.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 69.784229][ T7943] Bluetooth: MGMT ver 1.23 [ 70.018637][ T7952] nfs4: Bad value for 'source' [ 70.120398][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 70.120412][ T40] audit: type=1400 audit(1745045370.185:462): avc: denied { read } for pid=7960 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.131974][ T40] audit: type=1400 audit(1745045370.185:463): avc: denied { open } for pid=7960 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.141874][ T40] audit: type=1400 audit(1745045370.185:464): avc: denied { getattr } for pid=7960 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.152356][ T40] audit: type=1400 audit(1745045370.185:465): avc: denied { shutdown } for pid=7956 comm="syz.2.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.161684][ T40] audit: type=1400 audit(1745045370.195:466): avc: denied { write } for pid=7959 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1769 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.170594][ T40] audit: type=1400 audit(1745045370.195:467): avc: denied { add_name } for pid=7959 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.177376][ T7957] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 70.179209][ T40] audit: type=1400 audit(1745045370.195:468): avc: denied { create } for pid=7959 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.181237][ T7957] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 70.189854][ T40] audit: type=1400 audit(1745045370.195:469): avc: denied { write } for pid=7959 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=3045 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.192836][ T7957] vhci_hcd vhci_hcd.0: Device attached [ 70.201600][ T40] audit: type=1400 audit(1745045370.195:470): avc: denied { append } for pid=7959 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=3045 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.201639][ T40] audit: type=1400 audit(1745045370.225:471): avc: denied { remove_name } for pid=7963 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=3045 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.223465][ T7957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=124 sclass=netlink_route_socket pid=7957 comm=syz.2.475 [ 70.303345][ T5824] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 70.463195][ T24] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 70.464669][ T5824] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 70.468261][ T5824] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 70.471353][ T5824] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 70.474659][ T5824] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 70.478012][ T5824] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 70.482505][ T5824] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 70.485354][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 70.487800][ T5824] usb 6-1: Product: syz [ 70.489128][ T5824] usb 6-1: Manufacturer: syz [ 70.494579][ T5824] cdc_wdm 6-1:1.0: skipping garbage [ 70.496275][ T5824] cdc_wdm 6-1:1.0: skipping garbage [ 70.500781][ T5824] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 70.502679][ T5824] cdc_wdm 6-1:1.0: Unknown control protocol [ 70.795948][ T7965] vhci_hcd: connection reset by peer [ 70.798422][ T7275] vhci_hcd: stop threads [ 70.800068][ T7275] vhci_hcd: release socket [ 70.801645][ T7275] vhci_hcd: disconnect device [ 70.831356][ T7973] can: request_module (can-proto-0) failed. [ 70.844426][ T7973] netlink: 'syz.2.476': attribute type 21 has an invalid length. [ 70.847086][ T7973] __nla_validate_parse: 7 callbacks suppressed [ 70.847094][ T7973] netlink: 156 bytes leftover after parsing attributes in process `syz.2.476'. [ 70.851987][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'. [ 71.101314][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -EPIPE [ 71.116009][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.118177][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.694826][ T7979] overlayfs: failed to resolve './file0': -2 [ 71.814604][ T7981] netlink: 24 bytes leftover after parsing attributes in process `syz.2.478'. [ 72.302923][ T8026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8026 comm=syz.0.492 [ 72.308656][ T8026] netlink: 'syz.0.492': attribute type 17 has an invalid length. [ 72.411480][ T8033] pim6reg1: entered promiscuous mode [ 72.413543][ T8033] pim6reg1: entered allmulticast mode [ 72.786401][ T8050] Failed to initialize the IGMP autojoin socket (err -2) [ 72.835075][ T8049] program syz.0.499 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.918783][ T8057] MINIX-fs: blocksize too small for device [ 73.082864][ T1196] Bluetooth: hci4: Frame reassembly failed (-84) [ 73.088098][ T8067] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 73.116586][ T7373] usb 6-1: USB disconnect, device number 3 [ 73.153565][ T8075] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 73.159476][ T8075] mmap: syz.1.506 (8075) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.258226][ T8089] overlayfs: failed to resolve './file1/file0': -2 [ 73.538967][ T8108] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 73.633265][ T7373] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 73.661957][ T8115] netlink: 36 bytes leftover after parsing attributes in process `syz.3.518'. [ 73.783224][ T6006] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 73.813222][ T7373] usb 6-1: Using ep0 maxpacket: 8 [ 73.816316][ T7373] usb 6-1: config index 0 descriptor too short (expected 5138, got 18) [ 73.818956][ T7373] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.822066][ T7373] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 73.827306][ T7373] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 73.830140][ T7373] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.833254][ T7373] usb 6-1: Product: syz [ 73.834636][ T7373] usb 6-1: Manufacturer: syz [ 73.836152][ T7373] usb 6-1: SerialNumber: syz [ 73.843700][ T7373] usb 6-1: config 0 descriptor?? [ 73.935195][ T6006] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 73.939313][ T6006] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 73.944172][ T6006] usb 7-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 73.947442][ T6006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.951501][ T6006] usb 7-1: config 0 descriptor?? [ 73.953954][ T8108] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 74.052538][ T8093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.055357][ T8093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.059884][ T10] usb 6-1: USB disconnect, device number 4 [ 74.063763][ T5956] Bluetooth: hci0: command tx timeout [ 74.162142][ T6006] usbhid 7-1:0.0: can't add hid device: -71 [ 74.164265][ T6006] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 74.168085][ T6006] usb 7-1: USB disconnect, device number 7 [ 74.648039][ T8125] zonefs (nbd1) ERROR: Not a zoned block device [ 74.741360][ T8135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.525'. [ 74.748834][ T8135] netlink: 'syz.2.525': attribute type 39 has an invalid length. [ 74.945089][ T8159] netlink: 132 bytes leftover after parsing attributes in process `syz.3.534'. [ 75.103201][ T5952] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 75.103334][ T5956] Bluetooth: hci4: command 0x1003 tx timeout [ 75.188977][ T8176] affs: No valid root block on device nullb0 [ 75.248575][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 75.248585][ T40] audit: type=1400 audit(1745045375.315:497): avc: denied { mount } for pid=8181 comm="syz.0.542" name="/" dev="autofs" ino=19643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 75.258725][ T40] audit: type=1400 audit(1745045375.315:498): avc: denied { mounton } for pid=8181 comm="syz.0.542" path="/179/file1" dev="autofs" ino=19643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 75.267513][ T40] audit: type=1400 audit(1745045375.315:499): avc: denied { write } for pid=8180 comm="syz.3.541" path="socket:[18679]" dev="sockfs" ino=18679 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.273242][ T5952] Bluetooth: hci3: command tx timeout [ 75.377073][ T40] audit: type=1400 audit(1745045375.445:500): avc: denied { unmount } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 75.540047][ T40] audit: type=1400 audit(1745045375.605:501): avc: denied { getopt } for pid=8193 comm="syz.0.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 75.552800][ T40] audit: type=1400 audit(1745045375.615:502): avc: denied { watch } for pid=8195 comm="syz.3.547" path="/108/file0" dev="tmpfs" ino=585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.562049][ T40] audit: type=1400 audit(1745045375.615:503): avc: denied { watch_sb } for pid=8195 comm="syz.3.547" path="/108/file0" dev="tmpfs" ino=585 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.573304][ T24] vhci_hcd: vhci_device speed not set [ 75.656841][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'. [ 75.659762][ T8203] netlink: 24 bytes leftover after parsing attributes in process `syz.3.549'. [ 75.695761][ T40] audit: type=1400 audit(1745045375.765:504): avc: denied { write } for pid=8205 comm="syz.0.550" name="ipv6_route" dev="proc" ino=4026533046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 75.705319][ T40] audit: type=1400 audit(1745045375.765:505): avc: denied { unmount } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 75.836475][ T40] audit: type=1400 audit(1745045375.915:506): avc: denied { module_request } for pid=8221 comm="syz.3.556" kmod=6E65746465762DB703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 75.879668][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.559'. [ 76.027096][ T8263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'. [ 76.201186][ T8275] libceph: resolve ' [ 76.201186][ T8275] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 76.201186][ T8275] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 76.330989][ T8280] loop4: detected capacity change from 0 to 524255232 [ 76.393345][ T6326] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 76.675633][ T8290] netlink: 'syz.2.575': attribute type 1 has an invalid length. [ 76.780951][ T8299] tipc: Started in network mode [ 76.782584][ T8299] tipc: Node identity fe80000000000000000000000000001e, cluster identity 4711 [ 76.785801][ T8299] tipc: Enabling of bearer rejected, failed to enable media [ 76.788815][ T8299] netlink: 'syz.3.578': attribute type 7 has an invalid length. [ 76.924884][ T8306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.580'. [ 77.055901][ C3] vcan0: j1939_tp_rxtimer: 0xffff888036b4dc00: rx timeout, send abort [ 77.555968][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802a510000: rx timeout, send abort [ 77.559094][ C3] vcan0: j1939_tp_rxtimer: 0xffff888036b4dc00: abort rx timeout. Force session deactivation [ 77.893982][ T8337] netlink: 32 bytes leftover after parsing attributes in process `syz.2.587'. [ 77.976623][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.589'. [ 77.985833][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.589'. [ 78.058625][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802a510000: abort rx timeout. Force session deactivation [ 78.243249][ T5985] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 78.403172][ T5985] usb 6-1: Using ep0 maxpacket: 8 [ 78.406126][ T5985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 78.409624][ T5985] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 78.412401][ T5985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.417205][ T5985] usb 6-1: config 0 descriptor?? [ 78.623391][ T5985] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 78.999509][ T8358] program syz.2.596 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.002438][ T8358] ata1.00: invalid transfer count 0 [ 79.029832][ T34] usb 6-1: USB disconnect, device number 5 [ 79.049875][ T8363] netlink: 40 bytes leftover after parsing attributes in process `syz.2.597'. [ 79.052814][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.597'. [ 79.113840][ T8366] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 79.116484][ T8366] IPv6: NLM_F_CREATE should be set when creating new route [ 79.817285][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.606'. [ 80.812049][ T8407] netlink: 16 bytes leftover after parsing attributes in process `syz.1.607'. [ 80.909665][ T8411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.609'. [ 80.920786][ T8411] xfrm1: entered promiscuous mode [ 80.922465][ T8411] xfrm1: entered allmulticast mode [ 81.003035][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 81.003044][ T40] audit: type=1400 audit(1745045381.065:512): avc: denied { read } for pid=8426 comm="syz.2.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 81.011473][ T40] audit: type=1400 audit(1745045381.075:513): avc: denied { ioctl } for pid=8426 comm="syz.2.613" path="socket:[18985]" dev="sockfs" ino=18985 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 81.020512][ T40] audit: type=1400 audit(1745045381.075:514): avc: denied { write } for pid=8426 comm="syz.2.613" name="usbmon2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 81.027850][ T40] audit: type=1400 audit(1745045381.075:515): avc: denied { ioctl } for pid=8426 comm="syz.2.613" path="/dev/usbmon2" dev="devtmpfs" ino=743 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 81.035456][ T40] audit: type=1400 audit(1745045381.075:516): avc: denied { ioctl } for pid=8426 comm="syz.2.613" path="socket:[20734]" dev="sockfs" ino=20734 ioctlcmd=0x940f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 81.057047][ T40] audit: type=1400 audit(1745045381.125:517): avc: denied { write } for pid=8430 comm="syz.2.615" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 81.066297][ T8431] netlink: 36 bytes leftover after parsing attributes in process `syz.2.615'. [ 81.069154][ T8431] netlink: 36 bytes leftover after parsing attributes in process `syz.2.615'. [ 81.099581][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'. [ 81.285329][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f1bfc00: rx timeout, send abort [ 81.345633][ T65] cfg80211: failed to load regulatory.db [ 81.530511][ T8465] Illegal XDP return value 4294967294 on prog (id 70) dev N/A, expect packet loss! [ 81.655501][ T40] audit: type=1400 audit(1745045381.725:518): avc: denied { map } for pid=8471 comm="syz.2.627" path="/147" dev="tmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 81.785347][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b0bf400: rx timeout, send abort [ 81.788841][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f1bfc00: abort rx timeout. Force session deactivation [ 82.082106][ T8490] Failed to initialize the IGMP autojoin socket (err -2) [ 82.108512][ T40] audit: type=1400 audit(1745045382.175:519): avc: denied { create } for pid=8491 comm="syz.3.635" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.121297][ T40] audit: type=1400 audit(1745045382.185:520): avc: denied { mounton } for pid=8491 comm="syz.3.635" path="/131/file0" dev="tmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.232694][ T40] audit: type=1400 audit(1745045382.295:521): avc: denied { bind } for pid=8499 comm="syz.1.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 82.265357][ T8503] program syz.1.641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.270575][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'. [ 82.287924][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b0bf400: abort rx timeout. Force session deactivation [ 82.476938][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880124f6000: rx timeout, send abort [ 82.755595][ T8537] netlink: 'syz.1.652': attribute type 1 has an invalid length. [ 82.758642][ T8537] netlink: 56 bytes leftover after parsing attributes in process `syz.1.652'. [ 82.854709][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.656'. [ 82.976026][ T34] hid (null): unknown global tag 0xc [ 82.976980][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880124f6c00: rx timeout, send abort [ 82.978866][ T34] hid-generic 0007:0000:0000.0004: reserved main item tag 0xe [ 82.980439][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880124f6000: abort rx timeout. Force session deactivation [ 82.982723][ T34] hid-generic 0007:0000:0000.0004: unknown global tag 0xc [ 83.003145][ T34] hid-generic 0007:0000:0000.0004: item 0 1 1 12 parsing failed [ 83.005793][ T34] hid-generic 0007:0000:0000.0004: probe with driver hid-generic failed with error -22 [ 83.223211][ T65] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 83.385347][ T8590] netlink: zone id is out of range [ 83.385651][ T8591] netlink: zone id is out of range [ 83.390531][ T65] usb 5-1: config index 0 descriptor too short (expected 353, got 36) [ 83.392304][ T8590] tmpfs: Unknown parameter 'grpquota_inode_hard÷lÂ.t' [ 83.392306][ T8591] tmpfs: Unknown parameter 'grpquota_inode_hard÷lÂ.t' [ 83.393096][ T65] usb 5-1: config 155 has an invalid descriptor of length 187, skipping remainder of the config [ 83.401394][ T65] usb 5-1: config 155 has 0 interfaces, different from the descriptor's value: 21 [ 83.405431][ T65] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 83.408225][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.471010][ T8600] netlink: 'syz.3.677': attribute type 15 has an invalid length. [ 83.475725][ T8600] netlink: 24 bytes leftover after parsing attributes in process `syz.3.677'. [ 83.480425][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880124f6c00: abort rx timeout. Force session deactivation [ 83.526205][ C2] vcan0: j1939_tp_rxtimer: 0xffff88802f1cfc00: rx timeout, send abort [ 83.526957][ T8604] netlink: 156 bytes leftover after parsing attributes in process `syz.3.679'. [ 83.534875][ T8604] netlink: 20 bytes leftover after parsing attributes in process `syz.3.679'. [ 83.627734][ T8562] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 83.780690][ T65] usb 5-1: string descriptor 0 read error: -71 [ 83.794541][ T65] usb 5-1: USB disconnect, device number 6 [ 83.885045][ T5952] Bluetooth: hci3: unknown advertising packet type: 0x68 [ 83.885079][ T5952] Bluetooth: hci3: Dropping invalid advertising data [ 83.889586][ T5952] Bluetooth: hci3: unknown advertising packet type: 0x2a [ 83.889596][ T5952] Bluetooth: hci3: Malformed LE Event: 0x02 [ 83.909820][ T8622] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 84.026285][ C2] vcan0: j1939_tp_rxtimer: 0xffff888025af5800: rx timeout, send abort [ 84.029400][ T8625] overlayfs: failed to resolve './file0': -2 [ 84.029694][ C2] vcan0: j1939_tp_rxtimer: 0xffff88802f1cfc00: abort rx timeout. Force session deactivation [ 84.258159][ T8651] random: crng reseeded on system resumption [ 84.383581][ T8657] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 84.386608][ T8658] overlayfs: failed to verify upper (198/file1, ino=1086, err=-116) [ 84.390790][ T8658] overlayfs: failed to verify index dir 'upper' xattr [ 84.392878][ T8658] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 84.497542][ C2] vcan0: j1939_tp_rxtimer: 0xffff888059a58800: rx timeout, send abort [ 84.529656][ C2] vcan0: j1939_tp_rxtimer: 0xffff888025af5800: abort rx timeout. Force session deactivation [ 84.647152][ T8666] 9pnet_fd: Insufficient options for proto=fd [ 84.653247][ T8666] team_slave_0: entered promiscuous mode [ 84.655301][ T8666] team_slave_1: entered promiscuous mode [ 84.660322][ T8666] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 84.662862][ T8666] team0: Device macvtap1 is already an upper device of the team interface [ 84.666585][ T8666] team_slave_0: left promiscuous mode [ 84.668316][ T8666] team_slave_1: left promiscuous mode [ 84.881952][ T8680] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 84.997636][ C2] vcan0: j1939_tp_rxtimer: 0xffff888059a58c00: rx timeout, send abort [ 85.000298][ C2] vcan0: j1939_tp_rxtimer: 0xffff888059a58800: abort rx timeout. Force session deactivation [ 85.135260][ T8700] 9pnet_fd: Insufficient options for proto=fd [ 85.243440][ T8704] can0: slcan on pty23. [ 85.323596][ T8703] can0 (unregistered): slcan off pty23. [ 85.401251][ T8710] netlink: 'syz.1.716': attribute type 27 has an invalid length. [ 85.500286][ C2] vcan0: j1939_tp_rxtimer: 0xffff888059a58c00: abort rx timeout. Force session deactivation [ 85.626552][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880581a5000: rx timeout, send abort [ 86.126600][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880581a5400: rx timeout, send abort [ 86.129381][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880581a5000: abort rx timeout. Force session deactivation [ 86.272713][ T8718] Failed to initialize the IGMP autojoin socket (err -2) [ 86.465812][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 86.613185][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 86.625167][ T10] usb 6-1: config index 0 descriptor too short (expected 6948, got 36) [ 86.628751][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 86.629228][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880581a5400: abort rx timeout. Force session deactivation [ 86.632722][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 86.640041][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.645213][ T10] usb 6-1: config 0 descriptor?? [ 86.650353][ T10] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input6 [ 86.658785][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 86.658798][ T40] audit: type=1400 audit(1745045386.725:536): avc: denied { read } for pid=5343 comm="acpid" name="mouse2" dev="devtmpfs" ino=2857 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.670956][ T40] audit: type=1400 audit(1745045386.725:537): avc: denied { open } for pid=5343 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2857 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.849361][ T5343] bcm5974 6-1:0.0: could not read from device [ 86.855359][ T5343] bcm5974 6-1:0.0: could not read from device [ 86.857670][ T10] usb 6-1: USB disconnect, device number 6 [ 86.858675][ T5343] bcm5974 6-1:0.0: could not read from device [ 87.124727][ T5952] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 87.126907][ T5952] Bluetooth: Wrong link type (-22) [ 87.128554][ T5952] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 87.131151][ T5952] Bluetooth: Wrong link type (-22) [ 87.382422][ T8723] ALSA: mixer_oss: invalid OSS volume '¢' [ 87.596149][ T8730] __nla_validate_parse: 6 callbacks suppressed [ 87.596158][ T8730] netlink: 292 bytes leftover after parsing attributes in process `syz.1.724'. [ 87.643707][ T8722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.660281][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.727'. [ 87.728158][ T40] audit: type=1400 audit(1745045387.795:538): avc: denied { setopt } for pid=8737 comm="syz.3.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.868661][ T40] audit: type=1400 audit(1745045387.935:539): avc: denied { write } for pid=8745 comm="syz.3.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 87.887717][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.732'. [ 87.905438][ C2] vcan0: j1939_tp_rxtimer: 0xffff888051803400: rx timeout, send abort [ 87.941437][ T8750] syz.3.732: attempt to access beyond end of device [ 87.941437][ T8750] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 87.945582][ T8750] befs: (nbd3): unable to read superblock [ 88.405493][ C2] vcan0: j1939_tp_rxtimer: 0xffff888051802400: rx timeout, send abort [ 88.408962][ C2] vcan0: j1939_tp_rxtimer: 0xffff888051803400: abort rx timeout. Force session deactivation [ 88.442779][ T8752] netlink: 830 bytes leftover after parsing attributes in process `syz.1.733'. [ 88.446112][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 88.450004][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 88.450947][ T8752] netlink: 830 bytes leftover after parsing attributes in process `syz.1.733'. [ 88.476227][ T40] audit: type=1400 audit(1745045388.545:540): avc: denied { create } for pid=8755 comm="syz.1.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 88.479409][ T8756] tipc: Started in network mode [ 88.485679][ T8756] tipc: Node identity 6000, cluster identity 4711 [ 88.487685][ T8756] tipc: Node number set to 24576 [ 88.527984][ T8762] Failed to initialize the IGMP autojoin socket (err -2) [ 88.582302][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.735'. [ 88.652641][ T8767] kvm: pic: non byte read [ 88.655799][ T8767] kvm: pic: single mode not supported [ 88.655861][ T8767] kvm: pic: level sensitive irq not supported [ 88.658059][ T8767] kvm: pic: non byte read [ 88.663626][ T8767] kvm: pic: non byte read [ 88.666530][ T8767] kvm: pic: non byte read [ 88.669130][ T8767] kvm: pic: single mode not supported [ 88.669138][ T8767] kvm: pic: level sensitive irq not supported [ 88.671227][ T8767] kvm: pic: non byte read [ 88.676824][ T8767] kvm: pic: level sensitive irq not supported [ 88.677062][ T8767] kvm: pic: non byte read [ 88.681428][ T8767] kvm: pic: level sensitive irq not supported [ 88.681725][ T8767] kvm: pic: non byte read [ 88.686985][ T8767] kvm: pic: level sensitive irq not supported [ 88.687279][ T8767] kvm: pic: non byte read [ 88.691874][ T8767] kvm: pic: level sensitive irq not supported [ 88.692163][ T8767] kvm: pic: non byte read [ 88.698538][ T8767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=8767 comm=syz.1.736 [ 88.908929][ C2] vcan0: j1939_tp_rxtimer: 0xffff888051802400: abort rx timeout. Force session deactivation [ 89.064006][ T8778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.740'. [ 89.079384][ T40] audit: type=1400 audit(1745045389.145:541): avc: denied { read } for pid=8777 comm="syz.3.740" path="socket:[23635]" dev="sockfs" ino=23635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 89.079492][ T8778] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 89.111120][ T8784] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 89.117486][ T8784] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 89.218425][ T8797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.745'. [ 89.225450][ T5985] IPVS: starting estimator thread 0... [ 89.313868][ T8800] IPVS: using max 45 ests per chain, 108000 per kthread [ 89.354497][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033756800: rx timeout, send abort [ 89.438514][ T40] audit: type=1400 audit(1745045645.510:542): avc: denied { allowed } for pid=8804 comm="syz.0.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 89.854548][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f00e800: rx timeout, send abort [ 89.857163][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033756800: abort rx timeout. Force session deactivation [ 89.862086][ T8802] syz.3.746 (8802): drop_caches: 2 [ 89.895962][ T8802] syz.3.746 (8802): drop_caches: 2 [ 89.983576][ T40] audit: type=1400 audit(1745045646.050:543): avc: denied { write } for pid=8817 comm="syz.3.751" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 90.109841][ T8833] syz.1.755 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 90.244298][ T8841] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.349396][ T8838] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 90.351992][ T8838] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 90.357157][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f00e800: abort rx timeout. Force session deactivation [ 90.365770][ T8838] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 90.369035][ T8838] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 90.370983][ T8838] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 90.377311][ T8838] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 90.382726][ T8838] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 90.386242][ T8838] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 90.390579][ T8838] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 90.426283][ T40] audit: type=1400 audit(1745045646.490:544): avc: denied { setattr } for pid=8846 comm="syz.1.759" name="" dev="pipefs" ino=22421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 90.433716][ T40] audit: type=1400 audit(1745045646.500:545): avc: denied { ioctl } for pid=8846 comm="syz.1.759" path="socket:[22422]" dev="sockfs" ino=22422 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.467736][ T8849] syzkaller0: entered promiscuous mode [ 90.469994][ T8849] syzkaller0: entered allmulticast mode [ 90.597956][ C3] vcan0: j1939_tp_rxtimer: 0xffff88805d130800: rx timeout, send abort [ 90.896538][ T8855] netlink: 'syz.3.762': attribute type 10 has an invalid length. [ 91.098001][ C3] vcan0: j1939_tp_rxtimer: 0xffff88805d133c00: rx timeout, send abort [ 91.100695][ C3] vcan0: j1939_tp_rxtimer: 0xffff88805d130800: abort rx timeout. Force session deactivation [ 91.168133][ T8859] 9pnet: Could not find request transport: xen [ 91.419659][ T8855] syz_tun: entered promiscuous mode [ 91.427348][ T8855] syz_tun: entered allmulticast mode [ 91.430177][ T8855] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 91.504224][ T8874] netlink: 'syz.1.767': attribute type 1 has an invalid length. [ 91.506686][ T8874] netlink: 'syz.1.767': attribute type 2 has an invalid length. [ 91.530370][ T8877] netlink: 'syz.1.768': attribute type 2 has an invalid length. [ 91.530489][ T8876] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 91.536650][ T8876] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 91.600684][ C3] vcan0: j1939_tp_rxtimer: 0xffff88805d133c00: abort rx timeout. Force session deactivation [ 91.688668][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 91.688678][ T40] audit: type=1400 audit(1745045647.760:556): avc: denied { ioctl } for pid=8890 comm="syz.3.774" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x5319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 91.727614][ T8896] syz.3.775: attempt to access beyond end of device [ 91.727614][ T8896] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 91.734122][ T8896] SQUASHFS error: Failed to read block 0x0: -5 [ 91.736616][ T8896] unable to read squashfs_super_block [ 91.824825][ T40] audit: type=1400 audit(1745045647.900:557): avc: denied { attach_queue } for pid=8897 comm="syz.1.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 91.922953][ T8902] overlayfs: missing 'lowerdir' [ 91.961277][ T8904] netlink: 'syz.1.778': attribute type 1 has an invalid length. [ 91.972292][ T8904] bond2: entered promiscuous mode [ 91.974613][ T8904] bond2: entered allmulticast mode [ 91.980872][ T8904] ip6gretap1: entered allmulticast mode [ 92.059003][ T8908] netlink: 'syz.3.779': attribute type 2 has an invalid length. [ 92.061585][ T8908] netlink: 'syz.3.779': attribute type 1 has an invalid length. [ 92.064424][ T8908] netlink: 'syz.3.779': attribute type 1 has an invalid length. [ 92.071216][ T8908] syz.3.779: attempt to access beyond end of device [ 92.071216][ T8908] sr0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 92.075178][ T8908] syz.3.779: attempt to access beyond end of device [ 92.075178][ T8908] sr0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 92.079189][ T8908] Mount JFS Failure: -5 [ 92.080511][ T8908] jfs_mount failed w/return code = -5 [ 92.096619][ T40] audit: type=1400 audit(1745045648.170:558): avc: denied { read } for pid=8903 comm="syz.1.778" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 92.104565][ T8904] cgroup: none used incorrectly [ 92.106326][ T40] audit: type=1400 audit(1745045648.170:559): avc: denied { open } for pid=8903 comm="syz.1.778" path="/229/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 92.143601][ T8910] overlay: Unknown parameter 'uid<18446744073709551615' [ 92.159881][ T40] audit: type=1400 audit(1745045648.230:560): avc: denied { read write } for pid=8911 comm="syz.3.780" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.177045][ T40] audit: type=1400 audit(1745045648.230:561): avc: denied { open } for pid=8911 comm="syz.3.780" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.184846][ T40] audit: type=1400 audit(1745045648.240:562): avc: denied { map } for pid=8911 comm="syz.3.780" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.194146][ T40] audit: type=1400 audit(1745045648.240:563): avc: denied { execute } for pid=8911 comm="syz.3.780" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.217432][ T40] audit: type=1400 audit(1745045648.290:564): avc: denied { ioctl } for pid=8911 comm="syz.3.780" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.304464][ T5952] Bluetooth: hci1: command 0x0c1a tx timeout [ 92.383269][ T5952] Bluetooth: hci3: command 0x0c1a tx timeout [ 92.383285][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 92.390117][ T8937] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 92.429145][ T8941] syzkaller1: entered promiscuous mode [ 92.430925][ T8941] syzkaller1: entered allmulticast mode [ 92.441983][ T40] audit: type=1400 audit(1745045648.510:565): avc: denied { accept } for pid=8940 comm="syz.1.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.687495][ T8959] __nla_validate_parse: 7 callbacks suppressed [ 92.687505][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'. [ 92.692286][ T8959] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 92.695011][ T8959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.777172][ T8961] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 92.779236][ T8961] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 92.781783][ T8961] vhci_hcd vhci_hcd.0: Device attached [ 92.788747][ T8961] fuse: Bad value for 'fd' [ 92.834236][ T8962] vhci_hcd: connection closed [ 92.834344][ T7258] vhci_hcd: stop threads [ 92.837369][ T7258] vhci_hcd: release socket [ 92.838879][ T7258] vhci_hcd: disconnect device [ 93.251871][ T8970] netlink: 16 bytes leftover after parsing attributes in process `syz.0.800'. [ 93.671615][ T8985] syz.1.806: attempt to access beyond end of device [ 93.671615][ T8985] loop1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 93.678128][ T8985] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 93.819789][ T9003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.812'. [ 93.885900][ T9003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.890860][ T9003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.894665][ T9003] bond0 (unregistering): Released all slaves [ 94.015156][ T5956] Bluetooth: hci1: Malformed Event: 0x02 [ 94.179891][ T9016] atomic_op ffff88804ddcf198 conn xmit_atomic 0000000000000000 [ 94.206939][ T9020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.817'. [ 94.383239][ T5956] Bluetooth: hci1: command 0x0c1a tx timeout [ 94.463257][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 94.463394][ T5952] Bluetooth: hci3: command 0x0c1a tx timeout [ 94.491034][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804fdafc00: rx timeout, send abort [ 94.603191][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 94.698867][ T9034] netlink: 'syz.1.821': attribute type 1 has an invalid length. [ 94.991095][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058c7f800: rx timeout, send abort [ 94.993823][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804fdafc00: abort rx timeout. Force session deactivation [ 95.038008][ T9038] netlink: 36 bytes leftover after parsing attributes in process `syz.0.823'. [ 95.202985][ T9047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.825'. [ 95.290979][ T9055] NILFS (nbd1): device size too small [ 95.493799][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058c7f800: abort rx timeout. Force session deactivation [ 95.600014][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880327da400: rx timeout, send abort [ 96.100062][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880327d8000: rx timeout, send abort [ 96.102709][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880327da400: abort rx timeout. Force session deactivation [ 96.152869][ T9092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.841'. [ 96.156294][ T9092] netlink: 'syz.0.841': attribute type 7 has an invalid length. [ 96.159211][ T9092] netlink: 'syz.0.841': attribute type 8 has an invalid length. [ 96.161886][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.841'. [ 96.169650][ T9092] gretap0: entered promiscuous mode [ 96.175281][ T9092] batadv_slave_1: entered promiscuous mode [ 96.177455][ T9092] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 96.179824][ T9092] Cannot create hsr debugfs directory [ 96.327256][ T9109] trusted_key: syz.0.847 sent an empty control message without MSG_MORE. [ 96.395498][ T9122] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 96.397595][ T9122] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 96.400570][ T9122] vhci_hcd vhci_hcd.0: Device attached [ 96.420220][ T9122] @: renamed from vlan0 (while UP) [ 96.429564][ T9123] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 96.432272][ T7275] vhci_hcd: stop threads [ 96.434309][ T7275] vhci_hcd: release socket [ 96.436043][ T7275] vhci_hcd: disconnect device [ 96.463405][ T5956] Bluetooth: hci1: command 0x0c1a tx timeout [ 96.543682][ T5956] Bluetooth: hci3: command 0x0c1a tx timeout [ 96.544230][ T5945] Bluetooth: hci2: command 0x0c1a tx timeout [ 96.602733][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880327d8000: abort rx timeout. Force session deactivation [ 96.621586][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030894800: rx timeout, send abort [ 96.757475][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 96.757492][ T40] audit: type=1400 audit(1745045652.830:573): avc: denied { execute } for pid=9133 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 96.768278][ T40] audit: type=1400 audit(1745045652.830:574): avc: denied { execute_no_trans } for pid=9133 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 96.788786][ T40] audit: type=1400 audit(1745045652.860:575): avc: denied { mounton } for pid=9134 comm="syz.3.855" path="/proc/583/task" dev="proc" ino=24410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 96.894804][ T5945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.898223][ T5945] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.901668][ T5945] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.904713][ T5945] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.907234][ T5945] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.914529][ T40] audit: type=1400 audit(1745045652.990:576): avc: denied { mounton } for pid=9136 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 96.925407][ T9136] Failed to initialize the IGMP autojoin socket (err -2) [ 97.021569][ T9143] openvswitch: netlink: IP tunnel TTL not specified. [ 97.073466][ T7274] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.097779][ T40] audit: type=1400 audit(1745045653.170:577): avc: denied { read } for pid=9144 comm="syz.1.857" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 97.107485][ T40] audit: type=1400 audit(1745045653.170:578): avc: denied { open } for pid=9144 comm="syz.1.857" path="/256/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 97.109630][ T9136] chnl_net:caif_netlink_parms(): no params data found [ 97.121611][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030894c00: rx timeout, send abort [ 97.124920][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030894800: abort rx timeout. Force session deactivation [ 97.129031][ T9159] block device autoloading is deprecated and will be removed. [ 97.132664][ T40] audit: type=1400 audit(1745045653.200:579): avc: denied { ioctl } for pid=9144 comm="syz.1.857" path="/256/file0/file0" dev="fuse" ino=64 ioctlcmd=0x92b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 97.155935][ T7274] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.183945][ T40] audit: type=1400 audit(1745045653.260:580): avc: denied { mounton } for pid=9144 comm="syz.1.857" path="/256/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 97.194128][ T9145] md2: using deprecated bitmap file support [ 97.194149][ T9145] md2: error: failed to get bitmap file [ 97.231390][ T9164] mac80211_hwsim hwsim4 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 97.239908][ T7274] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.269558][ T40] audit: type=1400 audit(1745045653.340:581): avc: denied { create } for pid=9182 comm="syz.3.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 97.276931][ T9176] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 97.278400][ T40] audit: type=1400 audit(1745045653.350:582): avc: denied { write } for pid=9182 comm="syz.3.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 97.320603][ T9164] netlink: 160 bytes leftover after parsing attributes in process `syz.0.861'. [ 97.331204][ T7274] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.363381][ T9159] md2: using deprecated bitmap file support [ 97.366371][ T9159] md2: error: bitmap file must be a regular file [ 97.376008][ T9190] netlink: 'syz.0.867': attribute type 25 has an invalid length. [ 97.415288][ T9136] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.418142][ T9136] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.421038][ T9136] bridge_slave_0: entered allmulticast mode [ 97.425202][ T9136] bridge_slave_0: entered promiscuous mode [ 97.429008][ T9136] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.431729][ T9136] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.434976][ T9136] bridge_slave_1: entered allmulticast mode [ 97.438003][ T9136] bridge_slave_1: entered promiscuous mode [ 97.444322][ T9194] netlink: 'syz.0.868': attribute type 1 has an invalid length. [ 97.453157][ T9194] netlink: 228 bytes leftover after parsing attributes in process `syz.0.868'. [ 97.540887][ T9136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.558637][ T9136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.624868][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030894c00: abort rx timeout. Force session deactivation [ 97.680371][ T9136] team0: Port device team_slave_0 added [ 97.703884][ T9136] team0: Port device team_slave_1 added [ 97.723823][ T9206] __nla_validate_parse: 1 callbacks suppressed [ 97.723832][ T9206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.873'. [ 97.783463][ T9136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.786534][ T9136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.798383][ T9136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.802853][ T9136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.805045][ T9136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.812579][ T9136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.999675][ T9136] hsr_slave_0: entered promiscuous mode [ 98.004391][ T9136] hsr_slave_1: entered promiscuous mode [ 98.008952][ T9136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.012096][ T9136] Cannot create hsr debugfs directory [ 98.019058][ T7274] bridge_slave_1: left allmulticast mode [ 98.021365][ T7274] bridge_slave_1: left promiscuous mode [ 98.026310][ T7274] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.038008][ T7274] bridge_slave_0: left allmulticast mode [ 98.040360][ T7274] bridge_slave_0: left promiscuous mode [ 98.042865][ T7274] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.369107][ T7274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.373311][ T7274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.378420][ T7274] bond0 (unregistering): Released all slaves [ 98.388191][ T9214] lo: entered promiscuous mode [ 98.441852][ T9213] lo: left promiscuous mode [ 98.487189][ T9232] netlink: 'syz.0.881': attribute type 21 has an invalid length. [ 98.489394][ T7274] tipc: Left network mode [ 98.538264][ T5945] Bluetooth: hci1: unexpected event for opcode 0x040d [ 98.539500][ T9232] netlink: 152 bytes leftover after parsing attributes in process `syz.0.881'. [ 98.572483][ T9234] netlink: 20 bytes leftover after parsing attributes in process `syz.0.882'. [ 98.577148][ T9234] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 98.633367][ T5945] Bluetooth: hci3: command 0x0c1a tx timeout [ 98.643966][ T9236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16656 sclass=netlink_route_socket pid=9236 comm=syz.0.883 [ 98.699344][ T9236] netlink: 'syz.0.883': attribute type 3 has an invalid length. [ 98.706581][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 98.762969][ T9136] netdevsim netdevsim4 netdevsim0: renamed from eth6 [ 98.783774][ T9136] netdevsim netdevsim4 netdevsim1: renamed from eth7 [ 98.830423][ T9136] netdevsim netdevsim4 netdevsim2: renamed from eth8 [ 98.856038][ T9136] netdevsim netdevsim4 netdevsim3: renamed from eth9 [ 98.953361][ T5945] Bluetooth: hci4: command tx timeout [ 99.092511][ T7274] hsr_slave_0: left promiscuous mode [ 99.095568][ T7274] hsr_slave_1: left promiscuous mode [ 99.097679][ T7274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.100032][ T7274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.102799][ T7274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.105523][ T7274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.132800][ T7274] veth1_macvtap: left promiscuous mode [ 99.136519][ T7274] veth0_macvtap: left promiscuous mode [ 99.138938][ T7274] veth1_vlan: left promiscuous mode [ 99.141307][ T7274] veth0_vlan: left promiscuous mode [ 99.227035][ T7274] pimreg3 (unregistering): left allmulticast mode [ 99.230628][ T9281] 9pnet_fd: Insufficient options for proto=fd [ 99.506860][ T7275] wlan0: Trigger new scan to find an IBSS to join [ 99.703200][ T7274] team0 (unregistering): Port device team_slave_1 removed [ 99.761199][ T7274] team0 (unregistering): Port device team_slave_0 removed [ 100.184814][ T29] lo speed is unknown, defaulting to 1000 [ 100.187401][ T29] infiniband syz2: ib_query_port failed (-19) [ 100.203363][ T9136] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.225718][ T7264] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.228719][ T7264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.251382][ T7275] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.254703][ T7275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.423825][ T9136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.437343][ T7274] IPVS: stop unused estimator thread 0... [ 100.458142][ C3] vcan0: j1939_tp_rxtimer: 0xffff888058d27800: rx timeout, send abort [ 100.591642][ T9136] veth0_vlan: entered promiscuous mode [ 100.600065][ T9136] veth1_vlan: entered promiscuous mode [ 100.644889][ T9136] veth0_macvtap: entered promiscuous mode [ 100.656569][ T9136] veth1_macvtap: entered promiscuous mode [ 100.687245][ T9136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.691202][ T9136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.695104][ T9136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.698443][ T9136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.701560][ T9136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.704943][ T9136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.717367][ T9136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.726784][ T9136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.730659][ T9136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.734248][ T9136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.738189][ T9136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.741201][ T9136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.746289][ T9136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.757610][ T9136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.765228][ T9136] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 100.773831][ T9136] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 100.781936][ T9136] wireguard: wg0: Could not create IPv4 socket [ 100.787552][ T9136] wireguard: wg1: Could not create IPv4 socket [ 100.791218][ T9136] wireguard: wg2: Could not create IPv4 socket [ 100.958185][ C3] vcan0: j1939_tp_rxtimer: 0xffff888058d27c00: rx timeout, send abort [ 100.960894][ C3] vcan0: j1939_tp_rxtimer: 0xffff888058d27800: abort rx timeout. Force session deactivation [ 101.076394][ T9333] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 101.079152][ T9333] overlayfs: missing 'lowerdir' [ 101.083041][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 101.087348][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 101.090168][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 101.093043][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 101.095915][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 101.098775][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 101.323837][ T9364] 9pnet: Could not find request transport: xen [ 101.330341][ T9364] 9pnet: Could not find request transport: xen [ 101.362829][ T9375] overlayfs: failed to resolve './file1/file0': -2 [ 101.394892][ T9378] netlink: 'syz.3.921': attribute type 10 has an invalid length. [ 101.401269][ T9378] batman_adv: batadv0: Adding interface: team0 [ 101.403654][ T9378] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.411448][ T9378] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 101.460806][ C3] vcan0: j1939_tp_rxtimer: 0xffff888058d27c00: abort rx timeout. Force session deactivation [ 102.090676][ T9422] tmpfs: Bad value for 'mpol' [ 102.251006][ T9435] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 102.255413][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 102.255422][ T40] audit: type=1400 audit(1745045658.330:595): avc: denied { bind } for pid=9434 comm="syz.0.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.295407][ T9435] geneve2: entered promiscuous mode [ 102.325504][ T40] audit: type=1400 audit(1745045658.390:596): avc: denied { read } for pid=9442 comm="syz.0.928" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 102.332597][ T40] audit: type=1400 audit(1745045658.390:597): avc: denied { open } for pid=9442 comm="syz.0.928" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 102.543695][ T7258] wlan0: Trigger new scan to find an IBSS to join [ 102.579795][ T40] audit: type=1400 audit(1745045658.650:598): avc: denied { mount } for pid=9471 comm="syz.3.932" name="/" dev="hugetlbfs" ino=26493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 102.646530][ T40] audit: type=1400 audit(1745045658.720:599): avc: denied { map } for pid=9486 comm="syz.3.936" path="socket:[27887]" dev="sockfs" ino=27887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 102.655606][ T40] audit: type=1400 audit(1745045658.720:600): avc: denied { accept } for pid=9486 comm="syz.3.936" path="socket:[27887]" dev="sockfs" ino=27887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 102.683369][ T5952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.687540][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.690805][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.694628][ T5952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.697599][ T5952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.716898][ T9492] Failed to initialize the IGMP autojoin socket (err -2) [ 102.730862][ T9499] fuse: Bad value for 'fd' [ 102.731522][ T40] audit: type=1400 audit(1745045658.800:601): avc: denied { mounton } for pid=9496 comm="syz.0.939" path="/275/file0" dev="hugetlbfs" ino=27961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 102.732598][ T9497] overlayfs: maximum fs stacking depth exceeded [ 102.852813][ T40] audit: type=1400 audit(1745045658.920:602): avc: denied { unmount } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 103.022136][ T9532] netlink: 'syz.0.945': attribute type 1 has an invalid length. [ 103.035167][ T9532] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.048651][ T9532] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.050915][ T9532] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 103.055501][ T9532] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 103.102407][ T9537] ip6erspan0: entered promiscuous mode [ 103.106478][ T9537] bond2: (slave ip6erspan0): making interface the new active one [ 103.109424][ T9537] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 103.926964][ T40] audit: type=1400 audit(1745045660.000:603): avc: denied { kexec_image_load } for pid=9580 comm="syz.0.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 104.321667][ T9610] dns_resolver: Unsupported server list version (0) [ 104.394023][ T40] audit: type=1400 audit(1745045660.470:604): avc: denied { shutdown } for pid=9614 comm="syz.1.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.478029][ T9624] lo: entered promiscuous mode [ 104.491182][ T9624] lo: left promiscuous mode [ 104.563041][ T9492] netdevsim netdevsim4 netdevsim0: renamed from eth6 [ 104.614930][ T9492] netdevsim netdevsim4 netdevsim1: renamed from eth7 [ 104.630795][ T9492] netdevsim netdevsim4 netdevsim2: renamed from eth8 [ 104.662783][ T9643] __nla_validate_parse: 52 callbacks suppressed [ 104.662793][ T9643] netlink: 64 bytes leftover after parsing attributes in process `syz.1.957'. [ 104.672785][ T9492] netdevsim netdevsim4 netdevsim3: renamed from eth9 [ 104.673043][ T9643] Invalid logical block size (3519) [ 104.713544][ T5945] Bluetooth: hci0: command tx timeout [ 104.759428][ T9660] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 104.765754][ T9660] qnx6: wrong signature (magic) in superblock #1. [ 104.767848][ T9660] qnx6: unable to read the first superblock [ 104.925803][ T9695] netlink: 'syz.1.966': attribute type 23 has an invalid length. [ 104.934393][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.935187][ T9696] netlink: 'syz.1.966': attribute type 23 has an invalid length. [ 104.937734][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.943893][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.947224][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.950412][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.954664][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.959525][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.962844][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.968888][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.972324][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.975639][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.978876][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.993722][ T9492] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 105.002335][ T9492] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 105.010599][ T9492] wireguard: wg0: Could not create IPv4 socket [ 105.025873][ T9492] wireguard: wg1: Could not create IPv4 socket [ 105.032261][ T9492] wireguard: wg2: Could not create IPv4 socket [ 105.035553][ T9714] netlink: 'syz.1.972': attribute type 10 has an invalid length. [ 105.101449][ T9728] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 105.117961][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.976'. [ 105.120867][ T9735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.976'. [ 105.281247][ T9756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.981'. [ 105.333613][ T9753] overlayfs: failed to clone lowerpath [ 105.394789][ T9766] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 105.396866][ T9766] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 105.400004][ T9766] vhci_hcd vhci_hcd.0: Device attached [ 105.436725][ T9767] vhci_hcd: connection closed [ 105.437656][ T7274] vhci_hcd: stop threads [ 105.440553][ T7274] vhci_hcd: release socket [ 105.441978][ T7274] vhci_hcd: disconnect device [ 105.584494][ T1196] wlan0: Trigger new scan to find an IBSS to join [ 105.754143][ T9805] trusted_key: encrypted_key: master key parameter is missing [ 105.939489][ T9833] batman_adv: batadv0: Adding interface: dummy0 [ 105.941953][ T9833] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.950473][ T9833] batman_adv: batadv0: Interface activated: dummy0 [ 106.225732][ T6006] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 106.241781][ T9877] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1008'. [ 106.245869][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1008'. [ 106.260515][ T9881] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1010'. [ 106.358704][ T9903] tc_dump_action: action bad kind [ 106.362351][ T9906] tc_dump_action: action bad kind [ 106.374665][ T6006] usb 5-1: config 0 has no interfaces? [ 106.387663][ T6006] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 106.391227][ T6006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.394905][ T6006] usb 5-1: Product: syz [ 106.396641][ T6006] usb 5-1: Manufacturer: syz [ 106.398578][ T6006] usb 5-1: SerialNumber: syz [ 106.414066][ T6006] usb 5-1: config 0 descriptor?? [ 106.514897][ T7275] wlan0: Creating new IBSS network, BSSID 8a:bc:2b:f6:36:09 [ 106.541552][ T9925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1021'. [ 106.626022][ T24] usb 5-1: USB disconnect, device number 7 [ 106.704452][ T9944] netlink: 'syz.0.1026': attribute type 30 has an invalid length. [ 106.704752][ T9945] netlink: 'syz.3.1025': attribute type 10 has an invalid length. [ 106.707022][ T9944] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 106.707036][ T9944] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 106.716495][ T9945] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1025'. [ 106.728206][ T9945] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 106.777397][ T9955] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 106.852887][ T9967] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 106.856967][ T9967] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 106.860209][ T9967] overlayfs: missing 'lowerdir' [ 106.961167][ T9983] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1033'. [ 107.293409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.349316][T10018] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 107.352884][T10018] overlayfs: missing 'lowerdir' [ 107.451179][T10030] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 107.456009][T10030] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 107.456023][ T40] kauditd_printk_skb: 200 callbacks suppressed [ 107.456033][ T40] audit: type=1400 audit(1745045663.530:805): avc: denied { firmware_load } for pid=10029 comm="syz.3.1045" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 108.231562][ T40] audit: type=1400 audit(1745045664.300:806): avc: denied { bind } for pid=10066 comm="syz.0.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 108.459389][T10105] syz.1.1057: attempt to access beyond end of device [ 108.459389][T10105] nbd1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 108.557382][T10113] lo speed is unknown, defaulting to 1000 [ 108.560689][T10113] lo speed is unknown, defaulting to 1000 [ 108.563376][T10113] lo speed is unknown, defaulting to 1000 [ 108.613217][ T29] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 108.642023][T10113] infiniband sz1: set active [ 108.645088][ T6006] lo speed is unknown, defaulting to 1000 [ 108.647113][T10113] infiniband sz1: added lo [ 108.649724][T10113] sz1: rxe_create_qp: returned err = -2 [ 108.651499][T10113] infiniband sz1: Couldn't create ib_mad QP1 [ 108.654102][T10113] infiniband sz1: Couldn't open port 1 [ 108.671977][T10113] RDS/IB: sz1: added [ 108.674661][T10113] smc: adding ib device sz1 with port count 1 [ 108.676565][T10113] smc: ib device sz1 port 1 has pnetid [ 108.678438][ T6006] lo speed is unknown, defaulting to 1000 [ 108.680778][T10113] lo speed is unknown, defaulting to 1000 [ 108.760052][T10113] lo speed is unknown, defaulting to 1000 [ 108.769042][ T29] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 108.772708][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.783771][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 108.787284][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.791066][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.804707][ T29] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 108.808308][ T29] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 108.811465][ T29] usb 5-1: Product: syz [ 108.812825][ T29] usb 5-1: Manufacturer: syz [ 108.820577][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 108.822863][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 108.827333][ T29] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 108.829862][ T29] cdc_wdm 5-1:1.0: Unknown control protocol [ 108.852296][T10113] lo speed is unknown, defaulting to 1000 [ 108.881596][T10141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10141 comm=syz.3.1062 [ 108.941604][T10149] wireguard: wg0: Could not create IPv4 socket [ 109.029403][T10091] Bluetooth: hci0: Frame reassembly failed (-84) [ 109.031977][T10091] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 109.032120][ T1196] Bluetooth: hci0: Frame reassembly failed (-84) [ 109.063395][ T40] audit: type=1400 audit(1745045665.140:807): avc: denied { listen } for pid=10160 comm="syz.3.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 109.377694][T10181] Failed to initialize the IGMP autojoin socket (err -2) [ 109.435728][T10187] loop0: detected capacity change from 0 to 7 [ 109.439562][ T9152] Dev loop0: unable to read RDB block 7 [ 109.441344][ T9152] loop0: unable to read partition table [ 109.443523][ T9152] loop0: partition table beyond EOD, truncated [ 109.447570][T10187] Dev loop0: unable to read RDB block 7 [ 109.449392][T10187] loop0: unable to read partition table [ 109.451218][T10187] loop0: partition table beyond EOD, truncated [ 109.456352][T10187] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 109.456352][T10187] ) failed (rc=-5) [ 109.510467][ T40] audit: type=1400 audit(1745045665.580:808): avc: denied { ioctl } for pid=10192 comm="syz.1.1069" path="socket:[30176]" dev="sockfs" ino=30176 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 109.916561][ T5952] Bluetooth: hci3: unexpected event for opcode 0x0428 [ 109.921577][T10229] netlink: 'syz.3.1075': attribute type 10 has an invalid length. [ 109.930349][T10229] batman_adv: batadv0: Removing interface: team0 [ 109.935017][T10229] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.938004][T10229] team0: entered allmulticast mode [ 109.939656][T10229] team_slave_0: entered allmulticast mode [ 109.941661][T10229] team_slave_1: entered allmulticast mode [ 109.946733][T10229] bond0: (slave team0): Enslaving as an active interface with an up link [ 110.101653][T10253] __nla_validate_parse: 1 callbacks suppressed [ 110.101664][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1078'. [ 110.106697][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1078'. [ 110.359145][ T40] audit: type=1400 audit(1745045666.420:809): avc: denied { ioctl } for pid=10285 comm="syz.1.1086" path="socket:[29247]" dev="sockfs" ino=29247 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 110.440709][ T5956] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 110.446258][ T5956] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 110.449226][ T5956] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.452157][ T5956] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 110.454780][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1086'. [ 110.457073][ T5956] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.457582][T10286] nbd: socks must be embedded in a SOCK_ITEM attr [ 110.471893][T10298] Failed to initialize the IGMP autojoin socket (err -2) [ 110.526359][ T40] audit: type=1400 audit(1745045666.600:810): avc: denied { audit_write } for pid=10281 comm="syz.3.1085" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 110.572344][ T40] audit: type=1400 audit(1745045666.640:811): avc: denied { write } for pid=10315 comm="syz.1.1089" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 110.615321][ T40] audit: type=1400 audit(1745045666.690:812): avc: denied { read } for pid=10321 comm="syz.3.1091" path="socket:[31605]" dev="sockfs" ino=31605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.649213][T10320] input: syz0 as /devices/virtual/input/input9 [ 110.657503][ T40] audit: type=1400 audit(1745045666.730:813): avc: denied { ioctl } for pid=5343 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2887 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 110.729091][T10332] netlink: 'syz.3.1092': attribute type 4 has an invalid length. [ 110.731607][T10332] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1092'. [ 110.736624][T10332] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 110.750678][ T40] audit: type=1400 audit(1745045666.820:814): avc: denied { setrlimit } for pid=10337 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 111.103998][ T5945] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 111.105213][ T5952] Bluetooth: hci0: command 0xfc11 tx timeout [ 111.120560][T10298] netdevsim netdevsim4 netdevsim0: renamed from eth6 [ 111.135680][ T9] usb 5-1: USB disconnect, device number 8 [ 111.180210][T10298] netdevsim netdevsim4 netdevsim1: renamed from eth7 [ 111.198654][T10394] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 111.202861][T10298] netdevsim netdevsim4 netdevsim2: renamed from eth8 [ 111.220117][T10298] netdevsim netdevsim4 netdevsim3: renamed from eth9 [ 111.229079][T10396] tmpfs: Unknown parameter 'usrqta_`lock_harllimit' [ 111.231275][T10396] tmpfs: Unknown parameter 'usrqta_`lock_harllimit' [ 111.234788][T10396] tmpfs: Unknown parameter 'usrqta_`lock_harllimit' [ 111.237086][T10396] tmpfs: Unknown parameter 'usrqta_`lock_harllimit' [ 111.239247][T10396] tmpfs: Unknown parameter 'usrqta_`lock_harllimit' [ 111.241532][T10396] tmpfs: Unknown parameter 'usrqta_`lock_harllimit' [ 111.246112][T10396] tmpfs: Unknown parameter 'usrqta_`lock_harllimit' [ 111.248403][T10396] tmpfs: Unknown parameter 'usrqta_`lock_harllimit' [ 111.250893][T10396] tmpfs: Unknown parameter 'usrqta_`lock_harllimit' [ 111.253184][T10396] tmpfs: Unknown parameter 'usrqta_`lock_harllimit' [ 111.255623][T10396] tmpfs: Unknown parameter 'usrqta_`lock_harllimit' [ 111.258273][T10396] tmpfs: Unknown parameter 'usrqta_`lock_harllimit' [ 111.260456][T10396] tmpfs: Unknown parameter 'usrqta_`lock_harllimit' [ 111.262626][T10396] tmpfs: Unknown parameter 'usrqta_`lock_harllimit' [ 111.263708][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 111.265993][T10396] tmpfs: Unknown parameter 'usrqta_`lock_harllimit' [ 111.270099][T10396] tmpfs: Unknown parameter 'usrqta_`lock_harllimit' [ 111.272281][T10396] tmpfs: Unknown parameter 'usrqta_`lock_harllimit' [ 111.274548][T10396] tmpfs: Unknown parameter 'usrqta_`lock_harllimit' [ 111.276722][T10396] tmpfs: Unknown parameter 'usrqta_`lock_harllimit' [ 111.278940][T10396] tmpfs: Unknown parameter 'usrqta_`lock_harllimit' [ 111.446275][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.449699][ T10] usb 6-1: config 0 has no interfaces? [ 111.451531][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 111.455167][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.460402][ T10] usb 6-1: config 0 descriptor?? [ 111.485158][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.488334][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.491331][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.496557][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.500922][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.505087][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.508318][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.511681][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.516277][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.520390][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.526682][T10298] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 111.544346][T10298] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 111.551796][T10298] wireguard: wg0: Could not create IPv4 socket [ 111.564174][T10298] wireguard: wg1: Could not create IPv4 socket [ 111.569026][T10298] wireguard: wg2: Could not create IPv4 socket [ 111.649309][T10437] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 111.758020][T10451] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1122'. [ 111.800249][ T65] usb 6-1: USB disconnect, device number 8 [ 111.812999][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1123'. [ 111.819869][T10457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1123'. [ 111.829120][T10457] geneve3: entered promiscuous mode [ 111.830839][T10457] geneve3: entered allmulticast mode [ 111.967491][T10477] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 111.969850][T10476] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 112.348897][T10505] tipc: Enabling of bearer rejected, failed to enable media [ 112.427443][T10514] netlink: 'syz.3.1133': attribute type 6 has an invalid length. [ 112.431360][T10514] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1133'. [ 112.592593][T10539] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1138'. [ 112.653524][ T10] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 112.806043][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 112.813351][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 112.816757][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 112.832039][ T10] usb 6-1: string descriptor 0 read error: -22 [ 112.834895][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.837636][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.850037][T10517] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 112.897154][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 112.897164][ T40] audit: type=1400 audit(1745045668.970:822): avc: denied { relabelfrom } for pid=10563 comm="syz.3.1146" name="CAN_J1939" dev="sockfs" ino=28652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.897321][T10566] SELinux: Context system_u:object_r:getty_log_t:s0 is not valid (left unmapped). [ 112.897410][T10567] syz.0.1147: attempt to access beyond end of device [ 112.897410][T10567] nbd0: rw=0, sector=6, nr_sectors = 2 limit=0 [ 112.897465][T10567] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 112.919394][ T40] audit: type=1400 audit(1745045668.990:823): avc: denied { relabelto } for pid=10563 comm="syz.3.1146" name="CAN_J1939" dev="sockfs" ino=28652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=can_socket permissive=1 trawcon="system_u:object_r:getty_log_t:s0" [ 112.931127][ T40] audit: type=1400 audit(1745045668.990:824): avc: denied { lock } for pid=10563 comm="syz.3.1146" path="socket:[28652]" dev="sockfs" ino=28652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.988616][ T40] audit: type=1400 audit(1745045669.060:825): avc: denied { connect } for pid=10576 comm="syz.0.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 112.996880][ T40] audit: type=1400 audit(1745045669.060:826): avc: denied { listen } for pid=10576 comm="syz.0.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 113.071058][ T10] cdc_ncm 6-1:1.0: bind() failure [ 113.084129][ T10] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 113.086791][ T10] cdc_ncm 6-1:1.1: bind() failure [ 113.101525][ T10] usb 6-1: USB disconnect, device number 9 [ 113.116796][T10599] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1153'. [ 113.376663][T10646] 9pnet_virtio: no channels available for device /dev/sr0 [ 113.532375][T10677] netlink: 'syz.0.1172': attribute type 5 has an invalid length. [ 113.597289][T10690] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 113.599393][T10690] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 113.602139][T10690] vhci_hcd vhci_hcd.0: Device attached [ 113.606789][T10691] vhci_hcd: connection closed [ 113.606933][ T7275] vhci_hcd: stop threads [ 113.610031][ T7275] vhci_hcd: release socket [ 113.611470][ T7275] vhci_hcd: disconnect device [ 113.621655][T10695] vlan2: entered allmulticast mode [ 113.956333][T10733] Failed to initialize the IGMP autojoin socket (err -2) [ 114.145865][T10744] netlink: 'syz.1.1186': attribute type 4 has an invalid length. [ 114.167221][ T40] audit: type=1400 audit(1745045670.240:827): avc: denied { setopt } for pid=10748 comm="syz.0.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 114.311063][T10770] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 114.367261][T10773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10773 comm=syz.0.1192 [ 114.381484][T10773] cgroup: Need name or subsystem set [ 114.444849][T10786] program syz.0.1192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.506043][ T40] audit: type=1326 audit(1745045670.580:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.1.1195" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af3f8e169 code=0x7ffc0000 [ 114.512874][ T40] audit: type=1326 audit(1745045670.580:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.1.1195" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af3f8e169 code=0x7ffc0000 [ 114.527144][ T40] audit: type=1326 audit(1745045670.580:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.1.1195" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9af3f8e169 code=0x7ffc0000 [ 114.535964][ T40] audit: type=1326 audit(1745045670.580:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.1.1195" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af3f8e169 code=0x7ffc0000 [ 114.609757][T10804] overlayfs: failed to resolve './file1': -2 [ 114.645093][ T5945] Bluetooth: hci3: unexpected event for opcode 0x0c58 [ 114.870317][T10832] kAFS: unparsable volume name [ 114.894196][T10850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.013154][T10872] overlayfs: conflicting options: userxattr,verity=on [ 116.756939][T10990] overlayfs: conflicting lowerdir path [ 116.820057][T11012] Failed to initialize the IGMP autojoin socket (err -2) [ 116.986955][T11032] __nla_validate_parse: 12 callbacks suppressed [ 116.986969][T11032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1227'. [ 116.994192][T11031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1227'. [ 117.072315][T11032] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 117.074741][T11032] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.077913][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1226'. [ 117.080005][T11032] vhci_hcd vhci_hcd.0: Device attached [ 117.092222][T11035] vhci_hcd: unknown pdu 1 [ 117.094899][ T1196] vhci_hcd: stop threads [ 117.096340][ T1196] vhci_hcd: release socket [ 117.097715][ T1196] vhci_hcd: disconnect device [ 117.179119][ T5952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.188282][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.192878][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.203057][ T5952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.207994][ T5952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.225464][T11038] Failed to initialize the IGMP autojoin socket (err -2) [ 117.563328][ T9720] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 117.723326][ T9720] usb 5-1: Using ep0 maxpacket: 8 [ 117.727889][ T9720] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.733835][ T9720] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 117.737839][ T9720] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 117.742384][ T9720] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 117.752033][ T9720] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 117.769227][ T9720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.776326][ T5952] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 117.783051][ T9720] hub 5-1:1.0: bad descriptor, ignoring hub [ 117.787410][ T9720] hub 5-1:1.0: probe with driver hub failed with error -5 [ 117.790526][ T9720] cdc_wdm 5-1:1.0: skipping garbage [ 117.792909][ T9720] cdc_wdm 5-1:1.0: skipping garbage [ 117.797839][ T9720] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 117.799876][ T9720] cdc_wdm 5-1:1.0: Unknown control protocol [ 117.816612][T11051] netlink: 'syz.3.1230': attribute type 5 has an invalid length. [ 118.053750][T11038] netdevsim netdevsim4 netdevsim0: renamed from eth6 [ 118.079797][T11038] netdevsim netdevsim4 netdevsim1: renamed from eth7 [ 118.098398][T11038] netdevsim netdevsim4 netdevsim2: renamed from eth8 [ 118.106539][ T6006] usb 5-1: USB disconnect, device number 9 [ 118.120521][T11038] netdevsim netdevsim4 netdevsim3: renamed from eth9 [ 118.341996][T11090] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1237'. [ 118.345674][T11090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1237'. [ 118.413204][T11038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.416526][T11038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.419538][T11038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.422754][T11038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.427480][T11038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.430724][T11038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.433485][ T6006] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 118.433892][T11038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.439311][T11038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.442311][T11038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.445629][T11038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.450474][T11038] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 118.456848][T11038] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 118.462682][T11038] wireguard: wg0: Could not create IPv4 socket [ 118.467339][T11038] wireguard: wg1: Could not create IPv4 socket [ 118.470325][T11038] wireguard: wg2: Could not create IPv4 socket [ 118.583202][ T6006] usb 5-1: Using ep0 maxpacket: 8 [ 118.588731][ T6006] usb 5-1: config 1 has an invalid descriptor of length 47, skipping remainder of the config [ 118.592443][ T6006] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 118.596542][ T6006] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.601821][ T6006] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 118.605747][ T6006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.613686][ T6006] hub 5-1:1.0: bad descriptor, ignoring hub [ 118.617201][ T6006] hub 5-1:1.0: probe with driver hub failed with error -5 [ 118.619715][ T6006] cdc_wdm 5-1:1.0: skipping garbage [ 118.621506][ T6006] cdc_wdm 5-1:1.0: skipping garbage [ 118.624807][ T6006] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 118.923394][ T6006] usb 5-1: USB disconnect, device number 10 [ 119.399185][T11119] "syz.3.1243" (11119) uses obsolete ecb(arc4) skcipher [ 119.455861][T11132] netlink: del zone limit has 8 unknown bytes [ 119.538679][T11139] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 119.681058][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 119.681074][ T40] audit: type=1400 audit(1745045675.750:870): avc: denied { create } for pid=11152 comm="syz.1.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 120.307978][T11181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1257'. [ 120.450782][T11194] netlink: 'syz.3.1260': attribute type 10 has an invalid length. [ 120.456193][T11194] bond0: (slave team0): Releasing backup interface [ 120.460157][T11194] team0: left allmulticast mode [ 120.461858][T11194] team_slave_0: left allmulticast mode [ 120.464921][T11194] team_slave_1: left allmulticast mode [ 120.467310][T11194] batman_adv: batadv0: Adding interface: team0 [ 120.469311][T11194] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.477737][T11194] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 120.481261][T11194] netlink: 'syz.3.1260': attribute type 10 has an invalid length. [ 120.484772][T11194] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1260'. [ 120.487958][T11194] team0: entered promiscuous mode [ 120.489644][T11194] team_slave_0: entered promiscuous mode [ 120.491552][T11194] team_slave_1: entered promiscuous mode [ 120.494032][T11194] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.496223][T11194] batman_adv: batadv0: Interface activated: team0 [ 120.498471][T11194] batman_adv: batadv0: Interface deactivated: team0 [ 120.500703][T11194] batman_adv: batadv0: Removing interface: team0 [ 120.503340][T11194] bridge0: port 3(team0) entered blocking state [ 120.505384][T11194] bridge0: port 3(team0) entered disabled state [ 120.507378][T11194] team0: entered allmulticast mode [ 120.509004][T11194] team_slave_0: entered allmulticast mode [ 120.510784][T11194] team_slave_1: entered allmulticast mode [ 120.514797][T11196] netlink: 'syz.3.1260': attribute type 10 has an invalid length. [ 120.519143][T11196] bridge0: port 3(team0) entered disabled state [ 120.521377][T11196] team0: left allmulticast mode [ 120.522994][T11196] team_slave_0: left allmulticast mode [ 120.525046][T11196] team_slave_1: left allmulticast mode [ 120.526843][T11196] team0: left promiscuous mode [ 120.528475][T11196] team_slave_0: left promiscuous mode [ 120.530333][T11196] team_slave_1: left promiscuous mode [ 120.532257][T11196] bridge0: port 3(team0) entered disabled state [ 120.544006][T11196] batman_adv: batadv0: Adding interface: team0 [ 120.545983][T11196] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.554154][T11196] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 120.796116][T11210] futex_wake_op: syz.3.1264 tries to shift op by -1; fix this program [ 121.014807][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'. [ 121.017747][T11229] bridge_slave_0: left allmulticast mode [ 121.019624][T11229] bridge_slave_0: left promiscuous mode [ 121.021645][T11229] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.028910][T11229] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 121.161653][ T5952] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 121.576225][T11269] syz.0.1282 (11269): drop_caches: 2 [ 121.616611][T11269] syz.0.1282 (11269): drop_caches: 2 [ 121.871374][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1285'. [ 121.918064][T11293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11293 comm=syz.0.1286 [ 122.126356][ T40] audit: type=1400 audit(1745045678.200:871): avc: denied { read } for pid=11303 comm="syz.3.1287" dev="sockfs" ino=34318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 122.133633][ T40] audit: type=1400 audit(1745045678.200:872): avc: denied { name_bind 0x1000000 } for pid=11303 comm="syz.3.1287" path="socket:[34318]" dev="sockfs" ino=34318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 122.141473][ T40] audit: type=1400 audit(1745045678.210:873): avc: denied { getopt } for pid=11303 comm="syz.3.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 122.723369][ T6006] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 122.804823][T11361] netlink: 'syz.0.1296': attribute type 1 has an invalid length. [ 122.818093][T11361] bond4: entered promiscuous mode [ 122.819981][T11361] 8021q: adding VLAN 0 to HW filter on device bond4 [ 122.831675][T11361] bond4: (slave bridge2): making interface the new active one [ 122.834746][T11361] bridge2: entered promiscuous mode [ 122.837094][T11361] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 122.873360][ T6006] usb 6-1: Using ep0 maxpacket: 8 [ 122.877790][ T6006] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.881028][ T6006] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 122.884375][ T6006] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 105, changing to 10 [ 122.888112][ T6006] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25188, setting to 1024 [ 122.891542][ T6006] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 122.894772][ T6006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.902276][ T6006] hub 6-1:1.0: bad descriptor, ignoring hub [ 122.905101][ T6006] hub 6-1:1.0: probe with driver hub failed with error -5 [ 122.907553][ T6006] cdc_wdm 6-1:1.0: skipping garbage [ 122.909140][ T6006] cdc_wdm 6-1:1.0: skipping garbage [ 122.912357][ T6006] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 122.915637][ T6006] cdc_wdm 6-1:1.0: Unknown control protocol [ 122.977844][ T40] audit: type=1400 audit(1745045679.050:874): avc: denied { accept } for pid=11374 comm="syz.0.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 122.987443][T11375] nilfs2: Unknown parameter 'barrierer0' [ 123.063891][ T40] audit: type=1400 audit(1745045679.140:875): avc: denied { write } for pid=11387 comm="syz.0.1302" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 123.083756][T11388] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11388 comm=syz.0.1302 [ 123.088162][T11388] netlink: 'syz.0.1302': attribute type 25 has an invalid length. [ 123.090624][T11388] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1302'. [ 123.121357][T11394] netlink: 'syz.0.1303': attribute type 2 has an invalid length. [ 123.129045][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1303'. [ 123.131781][T11394] netlink: 'syz.0.1303': attribute type 30 has an invalid length. [ 123.213768][ T6006] usb 6-1: USB disconnect, device number 10 [ 123.246603][ T40] audit: type=1400 audit(1745045679.320:876): avc: denied { getopt } for pid=11402 comm="syz.0.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.288195][ T7274] INFO: trying to register non-static key. [ 123.290697][ T7274] The code is fine but needs lockdep annotation, or maybe [ 123.295155][ T7274] you didn't initialize this object before use? SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 123.298099][ T7274] turning off the locking correctness validator. [ 123.300750][ T7274] CPU: 0 UID: 0 PID: 7274 Comm: kworker/u32:26 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 123.300764][ T7274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.300771][ T7274] Workqueue: rdma_cm cma_work_handler [ 123.300800][ T7274] Call Trace: [ 123.300804][ T7274] [ 123.300808][ T7274] dump_stack_lvl+0x116/0x1f0 [ 123.300822][ T7274] register_lock_class+0x4a3/0x4c0 [ 123.300832][ T7274] ? save_trace+0x4e/0x380 [ 123.300845][ T7274] __lock_acquire+0x99/0x1ba0 [ 123.300855][ T7274] lock_acquire+0x179/0x350 [ 123.300863][ T7274] ? __timer_delete_sync+0x145/0x1b0 [ 123.300878][ T7274] ? __timer_delete_sync+0x145/0x1b0 [ 123.300891][ T7274] __timer_delete_sync+0x152/0x1b0 [ 123.300903][ T7274] ? __timer_delete_sync+0x145/0x1b0 [ 123.300916][ T7274] rxe_qp_do_cleanup+0x5c3/0x7e0 [ 123.300949][ T7274] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 123.300967][ T7274] ? __pfx_rxe_qp_do_cleanup+0x10/0x10 [ 123.300977][ T7274] execute_in_process_context+0x3a/0x160 [ 123.300990][ T7274] ? __pfx_rxe_qp_cleanup+0x10/0x10 [ 123.301000][ T7274] __rxe_cleanup+0x267/0x3c0 [ 123.301014][ T7274] ? __pfx___rxe_cleanup+0x10/0x10 [ 123.301027][ T7274] ? _raw_spin_unlock+0x28/0x50 [ 123.301037][ T7274] ? __rxe_add_to_pool+0xa9/0x340 [ 123.301050][ T7274] rxe_create_qp+0x3f7/0x5f0 [ 123.301059][ T7274] create_qp+0x62d/0xa80 [ 123.301073][ T7274] ? __pfx_create_qp+0x10/0x10 [ 123.301088][ T7274] ib_create_qp_kernel+0x9f/0x310 [ 123.301102][ T7274] rdma_create_qp+0x10c/0x340 [ 123.301112][ T7274] rds_ib_setup_qp+0xc86/0x19a0 [ 123.301128][ T7274] ? __pfx_rds_ib_setup_qp+0x10/0x10 [ 123.301142][ T7274] ? __pfx_rds_ib_qp_event_handler+0x10/0x10 [ 123.301157][ T7274] ? rcu_is_watching+0x12/0xc0 [ 123.301168][ T7274] ? trace_contention_end+0xdd/0x130 [ 123.301179][ T7274] rds_ib_cm_initiate_connect+0x1e8/0x3d0 [ 123.301193][ T7274] ? __pfx_rds_ib_cm_initiate_connect+0x10/0x10 [ 123.301208][ T7274] ? lockdep_unlock+0x64/0xe0 [ 123.301222][ T7274] rds_rdma_cm_event_handler_cmn+0x61f/0x8c0 [ 123.301235][ T7274] ? __pfx_rds_rdma_cm_event_handler_cmn+0x10/0x10 [ 123.301247][ T7274] ? __pfx_mark_held_locks+0x10/0x10 [ 123.301257][ T7274] cma_cm_event_handler+0x94/0x300 [ 123.301271][ T7274] cma_work_handler+0x15b/0x230 [ 123.301284][ T7274] process_one_work+0x9cc/0x1b70 [ 123.301296][ T7274] ? __pfx_process_one_work+0x10/0x10 [ 123.301308][ T7274] ? assign_work+0x1a0/0x250 [ 123.301318][ T7274] worker_thread+0x6c8/0xf10 [ 123.301331][ T7274] ? __pfx_worker_thread+0x10/0x10 [ 123.301341][ T7274] kthread+0x3c2/0x780 [ 123.301351][ T7274] ? __pfx_kthread+0x10/0x10 [ 123.301359][ T7274] ? __pfx_kthread+0x10/0x10 [ 123.301368][ T7274] ? __pfx_kthread+0x10/0x10 [ 123.301376][ T7274] ? __pfx_kthread+0x10/0x10 [ 123.301385][ T7274] ? rcu_is_watching+0x12/0xc0 [ 123.301396][ T7274] ? __pfx_kthread+0x10/0x10 [ 123.301405][ T7274] ret_from_fork+0x45/0x80 [ 123.301415][ T7274] ? __pfx_kthread+0x10/0x10 [ 123.301424][ T7274] ret_from_fork_asm+0x1a/0x30 [ 123.301441][ T7274] [ 123.442533][ T7274] ------------[ cut here ]------------ [ 123.444687][ T7274] ODEBUG: assert_init not available (active state 0) object: ffff88804a1f0a58 object type: timer_list hint: 0x0 [ 123.449495][ T7274] WARNING: CPU: 0 PID: 7274 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 123.452450][ T7274] Modules linked in: [ 123.453748][ T7274] CPU: 0 UID: 0 PID: 7274 Comm: kworker/u32:26 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 123.457529][ T7274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.460863][ T7274] Workqueue: rdma_cm cma_work_handler [ 123.462560][ T7274] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 123.464525][ T7274] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 20 75 f4 8b 4c 89 e6 48 c7 c7 a0 69 f4 8b e8 5f ce a5 fc 90 <0f> 0b 90 90 58 83 05 b6 65 b1 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 123.470488][ T7274] RSP: 0018:ffffc900252cf3e8 EFLAGS: 00010282 [ 123.472397][ T7274] RAX: 0000000000000000 RBX: 0000000000000005 RCX: ffffffff817adff8 [ 123.475085][ T7274] RDX: ffff888027e90000 RSI: ffffffff817ae005 RDI: 0000000000000001 [ 123.477544][ T7274] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 123.479966][ T7274] R10: 0000000000000001 R11: 203a47554245444f R12: ffffffff8bf47080 [ 123.482327][ T7274] R13: ffffffff8b8fc6c0 R14: 0000000000000000 R15: ffffc900252cf4a8 [ 123.484832][ T7274] FS: 0000000000000000(0000) GS:ffff8880d69b2000(0000) knlGS:0000000000000000 [ 123.487647][ T7274] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.489720][ T7274] CR2: 000000110c2e1f59 CR3: 0000000026edc000 CR4: 0000000000352ef0 [ 123.492197][ T7274] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 123.494815][ T7274] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 123.497279][ T7274] Call Trace: [ 123.498342][ T7274] [ 123.499289][ T7274] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 123.501172][ T7274] debug_object_assert_init+0x1ec/0x2f0 [ 123.502944][ T7274] ? __pfx_debug_object_assert_init+0x10/0x10 [ 123.505203][ T7274] ? rcu_is_watching+0x12/0xc0 [ 123.506733][ T7274] __try_to_del_timer_sync+0x7f/0x170 [ 123.508359][ T7274] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 123.510164][ T7274] ? __timer_delete_sync+0x174/0x1b0 [ 123.511768][ T7274] ? __timer_delete_sync+0x17f/0x1b0 [ 123.513584][ T7274] __timer_delete_sync+0xf4/0x1b0 [ 123.515171][ T7274] rxe_qp_do_cleanup+0x5c3/0x7e0 [ 123.516784][ T7274] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 123.518646][ T7274] ? __pfx_rxe_qp_do_cleanup+0x10/0x10 [ 123.520353][ T7274] execute_in_process_context+0x3a/0x160 [ 123.522129][ T7274] ? __pfx_rxe_qp_cleanup+0x10/0x10 [ 123.523906][ T7274] __rxe_cleanup+0x267/0x3c0 [ 123.525423][ T7274] ? __pfx___rxe_cleanup+0x10/0x10 [ 123.527043][ T7274] ? _raw_spin_unlock+0x28/0x50 [ 123.528575][ T7274] ? __rxe_add_to_pool+0xa9/0x340 [ 123.530176][ T7274] rxe_create_qp+0x3f7/0x5f0 [ 123.531636][ T7274] create_qp+0x62d/0xa80 [ 123.533008][ T7274] ? __pfx_create_qp+0x10/0x10 [ 123.534743][ T7274] ib_create_qp_kernel+0x9f/0x310 [ 123.536336][ T7274] rdma_create_qp+0x10c/0x340 [ 123.537830][ T7274] rds_ib_setup_qp+0xc86/0x19a0 [ 123.539370][ T7274] ? __pfx_rds_ib_setup_qp+0x10/0x10 [ 123.541028][ T7274] ? __pfx_rds_ib_qp_event_handler+0x10/0x10 [ 123.542901][ T7274] ? rcu_is_watching+0x12/0xc0 [ 123.544467][ T7274] ? trace_contention_end+0xdd/0x130 [ 123.546143][ T7274] rds_ib_cm_initiate_connect+0x1e8/0x3d0 [ 123.547871][ T7274] ? __pfx_rds_ib_cm_initiate_connect+0x10/0x10 [ 123.549863][ T7274] ? lockdep_unlock+0x64/0xe0 [ 123.551349][ T7274] rds_rdma_cm_event_handler_cmn+0x61f/0x8c0 [ 123.553272][ T7274] ? __pfx_rds_rdma_cm_event_handler_cmn+0x10/0x10 [ 123.555323][ T7274] ? __pfx_mark_held_locks+0x10/0x10 [ 123.556985][ T7274] cma_cm_event_handler+0x94/0x300 [ 123.558623][ T7274] cma_work_handler+0x15b/0x230 [ 123.560124][ T7274] process_one_work+0x9cc/0x1b70 [ 123.561705][ T7274] ? __pfx_process_one_work+0x10/0x10 [ 123.563222][ T65] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 123.563606][ T7274] ? assign_work+0x1a0/0x250 [ 123.568044][ T7274] worker_thread+0x6c8/0xf10 [ 123.569517][ T7274] ? __pfx_worker_thread+0x10/0x10 [ 123.571122][ T7274] kthread+0x3c2/0x780 [ 123.572414][ T7274] ? __pfx_kthread+0x10/0x10 [ 123.573960][ T7274] ? __pfx_kthread+0x10/0x10 [ 123.575413][ T7274] ? __pfx_kthread+0x10/0x10 [ 123.576861][ T7274] ? __pfx_kthread+0x10/0x10 [ 123.578337][ T7274] ? rcu_is_watching+0x12/0xc0 [ 123.579852][ T7274] ? __pfx_kthread+0x10/0x10 [ 123.581330][ T7274] ret_from_fork+0x45/0x80 [ 123.582741][ T7274] ? __pfx_kthread+0x10/0x10 [ 123.584301][ T7274] ret_from_fork_asm+0x1a/0x30 [ 123.585817][ T7274] [ 123.586789][ T7274] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 123.589047][ T7274] CPU: 0 UID: 0 PID: 7274 Comm: kworker/u32:26 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 123.592784][ T7274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.596161][ T7274] Workqueue: rdma_cm cma_work_handler [ 123.597846][ T7274] Call Trace: [ 123.598906][ T7274] [ 123.599836][ T7274] dump_stack_lvl+0x3d/0x1f0 [ 123.601276][ T7274] panic+0x71c/0x800 [ 123.602489][ T7274] ? __pfx_panic+0x10/0x10 [ 123.603906][ T7274] ? show_trace_log_lvl+0x29b/0x3e0 [ 123.605511][ T7274] ? check_panic_on_warn+0x1f/0xb0 [ 123.607084][ T7274] ? debug_print_object+0x1a2/0x2b0 [ 123.608703][ T7274] check_panic_on_warn+0xab/0xb0 [ 123.610272][ T7274] __warn+0xf6/0x3c0 [ 123.611547][ T7274] ? debug_print_object+0x1a2/0x2b0 [ 123.613184][ T7274] report_bug+0x3c3/0x580 [ 123.614566][ T7274] ? debug_print_object+0x1a2/0x2b0 [ 123.616192][ T7274] handle_bug+0x184/0x210 [ 123.617569][ T7274] exc_invalid_op+0x17/0x50 [ 123.619001][ T7274] asm_exc_invalid_op+0x1a/0x20 [ 123.620523][ T7274] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 123.622313][ T7274] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 20 75 f4 8b 4c 89 e6 48 c7 c7 a0 69 f4 8b e8 5f ce a5 fc 90 <0f> 0b 90 90 58 83 05 b6 65 b1 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 123.628296][ T7274] RSP: 0018:ffffc900252cf3e8 EFLAGS: 00010282 [ 123.630208][ T7274] RAX: 0000000000000000 RBX: 0000000000000005 RCX: ffffffff817adff8 [ 123.632636][ T7274] RDX: ffff888027e90000 RSI: ffffffff817ae005 RDI: 0000000000000001 [ 123.635162][ T7274] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 123.637669][ T7274] R10: 0000000000000001 R11: 203a47554245444f R12: ffffffff8bf47080 [ 123.640103][ T7274] R13: ffffffff8b8fc6c0 R14: 0000000000000000 R15: ffffc900252cf4a8 [ 123.642556][ T7274] ? __warn_printk+0x198/0x350 [ 123.644074][ T7274] ? __warn_printk+0x1a5/0x350 [ 123.645525][ T7274] ? debug_print_object+0x1a1/0x2b0 [ 123.647130][ T7274] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 123.648965][ T7274] debug_object_assert_init+0x1ec/0x2f0 [ 123.650639][ T7274] ? __pfx_debug_object_assert_init+0x10/0x10 [ 123.652493][ T7274] ? rcu_is_watching+0x12/0xc0 [ 123.654022][ T7274] __try_to_del_timer_sync+0x7f/0x170 [ 123.655611][ T7274] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 123.657416][ T7274] ? __timer_delete_sync+0x174/0x1b0 [ 123.658993][ T7274] ? __timer_delete_sync+0x17f/0x1b0 [ 123.660583][ T7274] __timer_delete_sync+0xf4/0x1b0 [ 123.662130][ T7274] rxe_qp_do_cleanup+0x5c3/0x7e0 [ 123.663696][ T7274] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 123.665537][ T7274] ? __pfx_rxe_qp_do_cleanup+0x10/0x10 [ 123.667240][ T7274] execute_in_process_context+0x3a/0x160 [ 123.669013][ T7274] ? __pfx_rxe_qp_cleanup+0x10/0x10 [ 123.670644][ T7274] __rxe_cleanup+0x267/0x3c0 [ 123.672102][ T7274] ? __pfx___rxe_cleanup+0x10/0x10 [ 123.673818][ T7274] ? _raw_spin_unlock+0x28/0x50 [ 123.675355][ T7274] ? __rxe_add_to_pool+0xa9/0x340 [ 123.676942][ T7274] rxe_create_qp+0x3f7/0x5f0 [ 123.678417][ T7274] create_qp+0x62d/0xa80 [ 123.679758][ T7274] ? __pfx_create_qp+0x10/0x10 [ 123.681276][ T7274] ib_create_qp_kernel+0x9f/0x310 [ 123.682852][ T7274] rdma_create_qp+0x10c/0x340 [ 123.684351][ T7274] rds_ib_setup_qp+0xc86/0x19a0 [ 123.685892][ T7274] ? __pfx_rds_ib_setup_qp+0x10/0x10 [ 123.687547][ T7274] ? __pfx_rds_ib_qp_event_handler+0x10/0x10 [ 123.689445][ T7274] ? rcu_is_watching+0x12/0xc0 [ 123.690955][ T7274] ? trace_contention_end+0xdd/0x130 [ 123.692608][ T7274] rds_ib_cm_initiate_connect+0x1e8/0x3d0 [ 123.694421][ T7274] ? __pfx_rds_ib_cm_initiate_connect+0x10/0x10 [ 123.696370][ T7274] ? lockdep_unlock+0x64/0xe0 [ 123.697850][ T7274] rds_rdma_cm_event_handler_cmn+0x61f/0x8c0 [ 123.699715][ T7274] ? __pfx_rds_rdma_cm_event_handler_cmn+0x10/0x10 [ 123.701751][ T7274] ? __pfx_mark_held_locks+0x10/0x10 [ 123.703400][ T7274] cma_cm_event_handler+0x94/0x300 [ 123.705032][ T7274] cma_work_handler+0x15b/0x230 [ 123.706569][ T7274] process_one_work+0x9cc/0x1b70 [ 123.708149][ T7274] ? __pfx_process_one_work+0x10/0x10 [ 123.709842][ T7274] ? assign_work+0x1a0/0x250 [ 123.711270][ T7274] worker_thread+0x6c8/0xf10 [ 123.712689][ T7274] ? __pfx_worker_thread+0x10/0x10 [ 123.714284][ T7274] kthread+0x3c2/0x780 [ 123.715518][ T7274] ? __pfx_kthread+0x10/0x10 [ 123.716947][ T7274] ? __pfx_kthread+0x10/0x10 [ 123.718411][ T7274] ? __pfx_kthread+0x10/0x10 [ 123.719858][ T7274] ? __pfx_kthread+0x10/0x10 [ 123.721329][ T7274] ? rcu_is_watching+0x12/0xc0 [ 123.722821][ T7274] ? __pfx_kthread+0x10/0x10 [ 123.724278][ T7274] ret_from_fork+0x45/0x80 [ 123.725685][ T7274] ? __pfx_kthread+0x10/0x10 [ 123.727135][ T7274] ret_from_fork_asm+0x1a/0x30 [ 123.728643][ T7274] [ 123.730279][ T7274] Kernel Offset: disabled [ 123.731640][ T7274] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:50:09 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000070 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854e2db5 RDI=ffffffff9ae264a0 RBP=ffffffff9ae26460 RSP=ffffc900252cef90 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=65646f6320656854 R12=0000000000000000 R13=0000000000000070 R14=ffffffff9ae26460 R15=ffffffff854e2d50 RIP=ffffffff854e2ddf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2e1f59 CR3=000000002ce8e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4caacee0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4956e11a4a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4956e11a57 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4956e11a51 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4956e11a65 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4956e11aeb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4956e11bc9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffc900036b7cc0 RCX=ffffffff8236388e RDX=ffffffff82363f58 RSI=0000000000000000 RDI=0000000000000007 RBP=ffffc900036b7b08 RSP=ffffc900036b7a78 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=dffffc0000000000 R15=ffff8880238a4700 RIP=ffffffff81bb4f90 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f85eaa96280 ffffffff 00c00000 GS =0000 ffff8880d6ab2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555570e435c8 CR3=0000000031662000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000f40000 Opmask01=0000000000000411 Opmask02=00000000ff0bffff Opmask03=0104100080810010 Opmask04=00000000ffdfffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6fcdaf90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6fcdb3d0 0000003000000010 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73001605121f0073 431e161e035c1810 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1f115c435d4316 10120300161e121d ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f7379732f002f73 75622f7379732f00 2f6d657473797362 75732f7379732f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000074743d65 6c6f736e00000000 3000303a372f6b63 6f6c622f7665642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000231 0000000000000000 30706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 756d006469766976 0000556ed00473fe 00000000000000b1 000000000000302e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000003b1 0000000000007974 00736576616c7300 306d656d702f6b63 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffffffffc 00005d7ffed7fff7 00007fffffcf79f9 30007fefbfbffcef ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69305f474f5b647c 6930382433273f39 7b27697a787c7a30 23333a3a38263342 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556ed0056200 0000556e00057230 0000000000000021 0000000003104552 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00004d5500054030 0000000000000021 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a4415a0 RCX=ffffffff81af38b9 RDX=ffff888061152440 RSI=ffffffff81af3893 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900037177f8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed100d4882b5 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88806a63b040 RIP=ffffffff81af3895 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f717cffc500 ffffffff 00c00000 GS =0000 ffff8880d6bb2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000560151ec86b0 CR3=0000000035852000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c4c0c004 Opmask01=0000000000000003 Opmask02=00000000004fc003 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0302000100008881 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff0f 0e0d0c0b0a090807 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffff0f0e0d0c0b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0302000100008881 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000ff0000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff00ff ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000ff0000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00310000560151ec bf28000000000000 0000000000006d72 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056015100662d 0000560151ed5ca0 0000560151ed5cc0 665f65676e006d72 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560151004902 0000560151c25c8f 0000560151c25cc0 495f4a484100425d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffed1003d1e649 RBX=ffffed1003d1e64a RCX=ffffffff822c3f49 RDX=ffffed1003d1e64a RSI=0000000000000004 RDI=ffff88801e8f3248 RBP=ffffed1003d1e649 RSP=ffffc90003347750 R8 =0000000000000000 R9 =ffffed1003d1e649 R10=ffff88801e8f324b R11=0000000000000000 R12=ffff88801e8f3200 R13=0000000000000001 R14=0000000000000000 R15=0000000000000119 RIP=ffffffff8220c1d1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cb2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3bf9ae7d60 CR3=000000003116c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3bf8f836a3 00007f3bf8f836a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd1ae01b40 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555558ea4c1a 0000555558ea4460 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555558ea6432 0000555558ea5500 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d802000688030004 8400068403040400 0680030680040280 0320100001800401 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000806060101 e802d40200018e03 280200018c032802 00018a0302d80200 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d802000688030004 8400068403040400 0680030680040280 0320100001800401 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02a0032008000290 0302208080808200 068e03000200068c 033c0200068a0302 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0120100004800402 080004a808000100 000008060a0169b8 0220808080820004 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000