last executing test programs: 49.340460401s ago: executing program 2 (id=172): r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000001040), 0x8400, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000003400), 0x2, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x121001, 0x4, 0x39}, 0x18) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x101100, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2018}) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000004fc0)) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) 49.339151886s ago: executing program 2 (id=173): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) truncate(&(0x7f0000000040)='./file0\x00', 0x6) 49.271161655s ago: executing program 2 (id=174): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000002c40)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x0, @empty, 0x9}, 0x1c, 0x0}}, {{&(0x7f0000002940)={0xa, 0x4e23, 0x10000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000002cc0)=ANY=[@ANYBLOB="1400000000000000290000000b000000000000050000000024000000000000002900000032000000", @ANYRES32], 0x40}}], 0x2, 0x80) 49.270842668s ago: executing program 2 (id=175): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x168, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x168, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_io_uring_setup(0x2f52, &(0x7f0000000040)={0x0, 0x1faa, 0x8, 0x0, 0x214}, &(0x7f00000000c0), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000004503"]) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000004503"]) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000618110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000040)='iso9660\x00', 0x8, 0x0) 49.141136002s ago: executing program 2 (id=176): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 49.140930762s ago: executing program 2 (id=177): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r5) ioctl$KVM_CHECK_EXTENSION(r5, 0xae01, 0x1) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r6, 0x330b) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000040)={0x0, 0x38d000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000080)={0xf000, 0x398000, 0x8}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r8, &(0x7f0000000200)={0x1d, r7, 0x8, {0x1, 0xf0, 0x4}}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@private=0xa010100}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x30}}, 0x0) sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r10, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_open_dev$tty20(0xc, 0x4, 0x0) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000040)={0x18, 0x0, {0x7, @broadcast, 'macvlan1\x00'}}, 0x1e) 39.549846114s ago: executing program 3 (id=284): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="e020c6c3b700"/18, 0x8dd672828c2e8c75}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040085) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_rsp={{0x7, 0xff, 0x4}, {0x6, 0x3}}]}}, 0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x6}]}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x8e54}, 0x10) r4 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0xfffffffffffff0eb, 0x40000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x20000000009) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d2, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000200)=0x10000) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x102, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r9}, 0x10) syz_clone(0x101000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r10, 0x200, 0x70bd2b, 0x0, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x2}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r10, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000300)=ANY=[@ANYBLOB='l\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000ffdbdf258300000008000300", @ANYRES32=r11, @ANYBLOB="50080580340000800a00010008021100000000000a00010008021100000000000a00010008021100000000000a000100ffffffffffff0000200000801c00028008009f00020000000800a00003000000080026006c090000e8000080880003808400018030000180050006000b000000050007000200000004000c000400090004000c00040001000500050005000000040008001800018004000a0005000600060000000400080004000b003800018004000900080002000000000004000a00040001000400090008000200030000000400010004000c00050005000700000004000c000a000100080211000000000050000380480001803000018005000700fc00000004000900060004000001000004000800060004007f00000004000c000800020004000000040001801000018004000c000500060002000000040002001c0000800a00010008021100000100000a00010008021100000100000c020080a4010380040002002c0001800c000180050005000b0000000c00018008000200020000000c0001800400010004000c0004000180040002008c0001802000018004000c000800020002000000040009000400080008000200010000002400018005000300030000000500030009000000050007007f00000006000400000100000800018004000a00200001800800020000000000050003000800000004000b00050006001900000014000180050006001800000008000200000000000800018004000a004400018018000180050003000800000004000b000400010004000b000800018004000c00180001800500060018000000050005000e00000004000a000800018004000c000400020098000180180001800600040069000000000000000900000004000a002c000180040008000400080004000a00050007000900000004000800050006000f000000050007000a00000014000180060004000700000006000400000e000024000180040009000400080004000c000500060016000000040001000400010004000a000c0001800400080004000a000c00018005000600170000001000038004000200040002000400f2000a000100ffffffffffff000014000280050018010100000008009f000100000034000280050018013800000005001901040000000800a1006d19000008009f00030000000800270003000000080026006c090000300000802c000280080027000200000008009f00050000000800270003000000080026006c0900000800a100ff7f0000340000800a000100080211000001000008000380040002001c000280080026006c0900000800a100020000000800270000000000d000008044000280080026006c0900000500190109000000080026006c0900000800a0000400000008002201de020000050019010b00000008009f00020000000800a1001c23691f7c0003800400020004000200700001802400018004000b0004000c000400080004000b00080002000300000008000200020000002400018005000500040000000400010004000b00050007000600000004000c000400080024000180050005000400000004000100080002000100000004000100050007000e0000000c000280050019010f00000094000080440002800800a0000900000008009f00040000000800a100000000000800a100ff0f000008002600a01400000800a000020000000800270003000000050018011d0000004c000280080022014301000005001801380000000800a000010000000800a1000a000000050019010c0000000800a100080000000800a000000000000800a100018000000800a0000100000020030080340002800800270001000000080022011f020000050019010a0000000500190108000000050019010a0000000800a00005000000100003800400020004000200040002000a0001000802110000010000ec0003800400020004000200dc0001804800018004000c000500070002000000050006001f0000000400080005000300080000000600040001000000050005000a00000005000600100000000600040009000000040001000c00018004000b0004000a00380001800500070066000000050006000300000004000c0005000500020000000400010004000800050005000400000005000600060000003400018004000c000800020004000000050003000d00000004000c00080002000300000004000100040001000500050001000000040001801400018005000600160000000400090004000900040002000a00010008021100000000004c000280080022015c00000008002600a70300000800a1000800000008002700000000000800a100060000000800a10005000000050019010e0000000800a1000700000005001801170000000a00010008021100000000000a00010008021100000100007001038004000200340101802c00018004000c0005000600180000000800020002000000050007000700000004000100050005000a00000034000180050007001a00000006000400040000000800020004000000050005000e00000004000a0004000900050006001e0000002c000180050007000900000004000900050005000100000004000c000500050006000000050005000c0000001400018004000100080002000300000004000b001000018004000c0005000500070000002400018004000b0004000b0004000c000400080004000c0005000500030000000400080028000180050007000d00000004000a00060004000200000006000400030000000600040006000000340001800500060008000000050007000400000005000700060000000400010006000400050004000800050005000b000000300001801400018005000500030000000400090004000c00180001800400090006000400020000000500060006000000040002000000"], 0x86c}, 0x1, 0x0, 0x0, 0x841}, 0xc804) bind$inet6(r1, &(0x7f0000000c00)={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) write(r3, &(0x7f00000000c0)="1800000016005f0214fffffffffffff8070000000e000000", 0x18) 37.423879636s ago: executing program 3 (id=322): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES16=r1, @ANYBLOB="010000000000000000000800000018000280140003801000018004000300080001000000000008000100", @ANYRES32=r2], 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00'}) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES16=r1, @ANYBLOB="010000000000000000000800000018000280140003801000018004000300080001000000000008000100", @ANYRES32=r2], 0x38}}, 0x0) (async) 37.418377348s ago: executing program 3 (id=324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x26e1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x64, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x64}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 37.359592502s ago: executing program 3 (id=326): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0x6281, &(0x7f0000000080)) r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000380)) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f03e, 0x4}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$rtc(&(0x7f0000000000), 0x100, 0xa2000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000240)={"a544d2d25a4cca291533387c5cee318e", 0x0, 0x0, {0x3, 0x4}, {0x0, 0x3}, 0x4, [0x0, 0x9, 0x8, 0xd7b, 0x7ff, 0x5, 0x2, 0x5, 0x8001, 0x200, 0x7, 0x2, 0xfffffffffffffffb, 0x18, 0x5]}) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x4000005) ioctl$TCFLSH(r7, 0x8925, 0x20001114) preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000340)=""/90, 0x5a}, {&(0x7f00000003c0)=""/118, 0x76}, {&(0x7f00000004c0)=""/154, 0x9a}], 0x3, 0x6, 0x5) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r8, 0x80685600, &(0x7f00000000c0)) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000040)=r3) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="a082b467d3a54eb9a50948680ed3c84b550e83aa3ce8ce81be371c4bee85f716fdee7b5794f222d770000067cd2185", @ANYRES16=r9, @ANYBLOB="010000000000000000000600000008000e002000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x10000080}, 0x4) 36.50076334s ago: executing program 3 (id=339): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r3}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r4}, 0x18) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f0000000140)={'hsr0\x00', {0x2, 0x0, @broadcast}}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYRES8=r2], 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 36.290463538s ago: executing program 3 (id=340): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000400000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="047405000000000008001b0003000000140003006272696465655f736c6176655f30"], 0x3c}, 0x1, 0x0, 0x0, 0x408c5}, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4e31, 0x4, @empty, 0x3}, 0x1c) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r6, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x0) 36.274960544s ago: executing program 32 (id=340): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000400000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="047405000000000008001b0003000000140003006272696465655f736c6176655f30"], 0x3c}, 0x1, 0x0, 0x0, 0x408c5}, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4e31, 0x4, @empty, 0x3}, 0x1c) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r6, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x0) 34.112113567s ago: executing program 33 (id=177): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r5) ioctl$KVM_CHECK_EXTENSION(r5, 0xae01, 0x1) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r6, 0x330b) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000040)={0x0, 0x38d000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000080)={0xf000, 0x398000, 0x8}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r8, &(0x7f0000000200)={0x1d, r7, 0x8, {0x1, 0xf0, 0x4}}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@private=0xa010100}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x30}}, 0x0) sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r10, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_open_dev$tty20(0xc, 0x4, 0x0) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000040)={0x18, 0x0, {0x7, @broadcast, 'macvlan1\x00'}}, 0x1e) 3.449900577s ago: executing program 4 (id=594): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000080)={0x1}, 0x8, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)={0xf, 0x7, 0x2, {{0x2, '.,'}, 0x7f}}, 0xf) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x102) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000006c0)={0x57, 0xf7fe, 0x7ff, {0x7, 0x1}, {0x61, 0x1800}, @cond=[{0x7, 0x218, 0x7, 0x0, 0x2, 0x3}, {0x8, 0x5, 0x1, 0x4f, 0x2009, 0xb}]}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$inet6(0xa, 0x5, 0x100000) ioctl$sock_ifreq(r4, 0x8926, &(0x7f0000000000)={'vcan0\x00', @ifru_ivalue=0xffffff80}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = socket(0x2, 0x2, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000017c0000040008800c00018006000600800a00000800028004000c"], 0x76}}, 0xc000) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x29, 0xfc, 0xb, 0x9, 0x30, @private0, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x7800, 0x700, 0x7fff, 0x82}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r11, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c9a02000c0000000d00000008000500", @ANYRES64=r9], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r12, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x4, r11, 0x1, 0x7, 0x6, @broadcast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x4, 0x3, 0xfc, 0xc6, 0x2, @local, @local, 0x7800, 0x20, 0x1, 0x101}}) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x130, r7, 0x0, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x4}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xff}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x1d}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) bind$unix(r5, &(0x7f0000000000)=@abs, 0x6e) 3.110434606s ago: executing program 4 (id=600): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000017859c4bfbdcd259fe170988307316164b", @ANYRES32=0xffffffffffffffff], 0x48) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r1, @ANYBLOB, @ANYRESOCT=r0], 0x18}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010300000000000000002d"], 0x14}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) socket$kcm(0x10, 0x400000002, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x311903, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x4048aecb, &(0x7f00000001c0)) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1000}) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r11, r10, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r12, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x101}) 3.110117053s ago: executing program 4 (id=601): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000001c0)={0x31, 0x6, 0x0, {0x2, 0x6, 0x8, 0x0, ')*-$[-*R'}}, 0x31) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x4, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) sendmsg$tipc(r1, &(0x7f00000004c0)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000200)="0d58db57f512275598b69643f498ad9841b908b859668ac998735ebb9862840273b8be83601a580c6091f3c8cc9825ef4781651914ed8d5cbb2f4f906139184c4e71fa6256afd4e27f14cfb829226f7daa38228fd1798c3a446b5f3971a662a92544a0f9057b1c64d2af45ba15cd14a0c4dfc00974ed772ec64704c6037744fd1e27ba5250b4b0498a7b01b3a8370b43523741afef24039e9c5103259ad2ca7ae1d794f0e4490ce4c1ceaf2e2932dc13ac6aa923d4de5af35d8ce1909b1aa39d8613f9711227770eeb5284f01bf02208356707799821fab4e4a459ead4ffaffd1809fc01b64ee7a058", 0xe9}, {&(0x7f0000000080)="d0d9d9cb277bc3e11fb0fbb5d620e3293ce43ec072cfcc9af6717e9cac1c8e31bbca7b3df33bf30bebbba677dbe3bf9ced6825b5c89c44ad481c6df3ab30d8ef13d74ee5edaf4c1c6f", 0x49}], 0x2, &(0x7f00000003c0)="23ecf8f564d9c013cc0956885060433ed1d40311961ae479824362137c759cf87f14bcb943a02a8e3e570e8fe0c342f0af1315a3ad06e52a4d00e9e0d2b8700d133ba65a5a2e7ebcb679fcdadb419f63d0beca8331b1ed9833691569ef9e7c6e47ca6c263b75ad30ff5a05dec41b55d56c7f77e56125d0561cafd0f998ff8c0cf21f7a59af3a4f486a6e587e75612c98edfad87da861577ccd49cd1b1b5ea6ffcde66b2e38360fd2da3ab1e5bb013a728f02bb92b5879a19a131020f9fee7f5553f6a30547b0df429cd9fe6a9c7b825f2e9503b1d453d16d28bbe7ba", 0xdc, 0x11}, 0x40000) bind$tipc(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 3.030422898s ago: executing program 4 (id=602): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x42) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x3, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_VERSION={0x5, 0x6, 0x6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) (rerun: 64) r6 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0) (async, rerun: 32) syz_usb_disconnect(r5) (async, rerun: 32) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x24044884) unlinkat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000080)=0x80) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000100), 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f00000000c0)={0x3, 'vlan0\x00', {0x1b93}, 0x401}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/cpu_byteorder', 0x200, 0x180) (async) socket(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r11) sendmsg$NLBL_CALIPSO_C_LIST(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)={0x34, r12, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004881}, 0x8004) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r9, @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 369.351479ms ago: executing program 0 (id=633): open(&(0x7f0000000100)='.\x00', 0x5d5481, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80440, 0x120) mount$9p_tcp(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=tcp,port=0x00003,privport,\x00']) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x6, 0xfffffffffffffffd]}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000140)={0x6, 0x421d, 0x6, 0x40}) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000040)=""/173, &(0x7f0000000100)=0xad) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x3, 0x0, 0x1, 0x8000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x200, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe) lseek(r1, 0x8, 0x2) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 309.571429ms ago: executing program 5 (id=634): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x800) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f01a, 0x2}) add_key(&(0x7f0000001580)='asymmetric\x00', 0x0, &(0x7f00000000c0)="303ec9000000000002d190c937dc6914243b0402d6dcb7154fe6727ae888746b024ee670a5882a0ad79716bb4e5704b7f62edac751478af9c641000000000000c56d496316ce53b6923e382e9cc4b869f43aad9fac60d1ced593e921e4beee153a1aa517758b852d3cba899db4e25069bfc8af3a4c6b04b1cd99e4a3cae03000020d43d5c4e3ca54bb7337a90b70415447999a649f0fe72adbd2252fa3aa9b062273d00baf0ba242e53f43269d85f9bab950dc1c02648d04ca978cb0affd122d79cab4058a50d3f934d8bdd9baaf886c8a1dea1e0752989685ff5ab078353c3b1cde84b639c2aefd1288d4", 0xfffffef5, r0) keyctl$set_timeout(0xf, r0, 0x7) 309.132887ms ago: executing program 5 (id=635): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r2 = socket$kcm(0xa, 0x1, 0x0) (rerun: 32) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x24000000) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) getpeername$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) sendto$packet(r1, &(0x7f0000000ac0)="e1a21e45ee2388a7cf0e453442c316e8be91eead056ecc3df7ce67b1d031bc6b11fd82059514c0df89b04868d0653c6d4ed81526310112f518134afad21507b4f680f0948a0716aeb99eed083e8a7000cb7c0c2667ae2a8f8be7e37fcc475bc987842b97e0736a86c0b0170a35a920f4661774a641dd7f3c8e2b0776526535dcb378e5ee0e1ad244af9a88f0af3c29fdc682f57484f699c674c83a4d0e8879f4e127fa1129cee779e6bf83b130c2c1b8dc50b514c9d5b067f94d0e6b90296cc9313be81ba8e7db3175f628391afb7df78e264d68cf6aa0c7de4bea89689c9fe1014a2caec33d5c36fcd0cfd00f1d934ca4ce6ddccd8614ddf3fd21f668be7f063b06a84c09cc895607f72692736648b18ab755b821ad71a8ccef0074d8bf3ffce8773eeee600b313458728294419ec809295589f66d06110965da836dc68817220522e3337ceb3918122c7117560f373a5fb2a1861744c516d26e9e2eff30dffa6f664c5119319ead626d4c81fcbb84d909cfe505fc5130ccd061231fb2aa15b17c844a6c5aa488a485a0c8f20fd0800e34bf2efbd6e328f537fd47564a338ffb410854d68b6caec7b2df12c8fe41767c9112f3942659371197f3d194d70fc1008e8b18ddaccc8bd3080f178a3261e7ed3b19fa2df18b91ddc81502801163ec8e3fe7087180543c89086eeaf0bab1af14a1a21079f3371527a2d92a40da356382073106fc82c339bcd4136cd20ca68648f2bb979d141ec881e2d0e722b9fef7a1f27e47af062a469b84d99f975c558441ccc1f6a4328b5077990a69c909c950a8c2f3c59e2cb7dd74e70bdead0db8182dd0f1077f2b5423c7ee3eed5409145d515c341193bea1c1b5fb35a2ca506dbcb9095a36934ded110b83ed7a4fadb37ca4a13a294641fa49cbc166fe3973898ef332cef76a8d89f619d9254dfa428b1fe81d4e07cf7d41ceb2d41871200d5a3037cc037ecfb924655d35facbd73ebad9eecf5a90fadaceb5422308a73c26e6463287c8ff36b5a0957e937f643ded802d2f6b9a0aebcb25d69b86572ff642b14054ad973f57db2cbb890cad4fc3784a0fb19452c4ad686ac5712fddfc266ce5b3289d688d94579942de8dcacc6f78d939a9f78476161ac72617e4667286da9977ea16c90b4e4912983b5a2d7029614a65a8e487ae3a8a05fb2d74860b6b924e93ad8f90c09dff6a870d4706625a950e1bd89865b19447b0b4a33a575623c8842d08d6a7c62c6ad92e90a5f2732ece502c343ce838a69e8f11798e0671bbee65cc95fa3b20964c62f3bfa644c4b4b19abb941616026455b69218364a4ca3f989b56f9aced42f143258a11172377060dd44af9e0864880157c1d7ba828cb892b393e3bea4608d4c0b8b95a3461859e64c97b2b6c23549eb3e451b2f6c71740e6d9e61ee9a85e1cef42b1e88cdbd6a39c2bc916d026dbab479f47e582f764e14fec6a0d487f6eaf69f8c6d64f172d3263df641b3a6362a60d36c4adda5550ed150b664c3f1a277a1bca4fe3cf6e683fac717a7c11f3a8b92859ba0aa351e2aeb006f175af501a1719f3d9e06aec6d590f5c0aade969d435139276b10a3e87ef11b571e942ff2c5a310329774217a0012b0362f771e56cc46b174a36a4599cf744291e906339c7b21fef6aa73f7df8b853f0e8f99bfc94d4e29d7eabb74f1c26cd9c88c851d953dc8897e804723ae45b856db1193bc5282d0e5e853d6c44c87de1d965e09d4abb275125355c534c22a7c0f68451de7fab28795d75cfc917f9be3653fca81be2cb2d3e1582e406d56c3ff2e55bbbff669f3238db70f2709fdbac469fa7894dbd226ef29d73a691406a4f8fedd860b6582d1b9bbd1af660c3da9b97c607e0aa2ecfbcb06520fba41e3329efe8021fecedd7d9d88482b555ced39454b1bc53ef06715b84e1ea85dfa089674fac2037a1fa26a0c47005d7c02c533cb542e5e035c3af4ec9407b535ed1351483ac54e930a461d9cd938270de6a844a98a9a4ce8826cafdeeeecced0ea7efb19e9fb8670b46e26811d1c7b207f5361ca18dc9e205a5dc8a7d5371ef12ddf86d088a250f246b1ecee7d2cb8d7ad4766d9e55fb1c959d8bd6c0f769e4659f30ad7fa51d346427b4a31869be16c36f0a090389552704e8e37158b457d91c15621269f0955e09412826966099e788d11504db48df07a84157e357c2ed8715e8a5e88191998810963e37eb0f191bcf5cc99688ce29c3a6bf2dedd355184e58e6613e6413f27304ffcc82a1021716c3bb5f1a03d606ebc84a09c61b8a6d0f902c716fbf1dc78d7acab2b9faccc66c7c4381d854bab968b710a990998a4755eeed5fb71b195d2043986abc848ded55a8afbe4b20e9f99403581f7ca41c7651df47aa31bb1326b6c230dff256a8f86f3ff0569fb88f1467b7255efb5bebb1319f754f4678ab3bb34cdadaef1df4057c2d99cc0a227a73680f51c64fd2114a0ea51bd5a270004d6d010262f6ed0a2e0e3e019675d79e36806d2bdad3938310fd94bb275efaec82f12398bdc50fd65f0f28383c2faef2b8e6385c1db0be7f650b216d2c9a728d621accd16e6642dc0059ccde6586c2e67137d2cbbd905c206b6c67f203898c0d20084252e7a64b4924e26551a5989161bc0d56cf2c0a9823e61eec2ffb51ff5e910551687c42a18b7cdeae6bd8b80f67a6154a9c38a5566d7357ace69311c62c1a70c1e42b454db381a818c989f67d22fa084e13541a22a5899273dcd8ae332209e682db31f80127d1cb20b2dcfee2786715bd338b64d4402dd810c958a54cd8c7b661ddc6226c60c2715ef3b204895e8b7176fb28a42f9848634e62ad50b67663a40d702a94e2558129792a656e4c15ced593cbff51e5baf83cb52db335158f0541c75093eca55a3617f3cad8c9ecc4cf8796ff233b1881c572ec21a645bad401dc52572b05828a0cdfdf98dacaf06da9f8b858a72f5dabc165f8fd8ce52cdf1ad55e866ed6f91b372fdb72fb0713e23424f026c43f5aa32240f7c8630f8827c0c54f7ef6c26a310b6fef0133d799df663a47a94bd4058e1392c653545a49a8f0b6ac89d323b56f8842b4767c1cdff0f0c12feed1ff9a6602d98f7a07ee097096fe071a95f61c39bb4c4ed2f7db85390dd1308ba14d826e3662f892229c1baa05e1df70ed86309aaca91b91a1ac5f05417ec60b6e5fadb4b6b15fbdaacd1de77ecf09e0b8ad321dedf0120dadcd39af0b67fc2ceccfb059a66171235b218172cb900672be56f9de2a382d0bcd6bc429f7bc67264befd7578cd58d4211507528771c6271ef412f1dfdf20bb92bc8bf2e3d102d19a7fd16cd98b2fbb53a4bcb3ddbabfa1b4f95398bbaff678f73638362608801395a01590919cbeb03d1f6f396d357bdadecd316bab24b7934f81202410df9216d2eb441cf3c2cdc1b9ca664fcf9320bb60f8db105e7e0712bda1640bbe0c2826a19304421dcf034b8ff0929fff8321317951d48be48682a3412994fc67dedcd33252d1a0357a77b4923f73a163f5e39adce42d9ff4ce4cdd04b3103c2bf507e181543f3a3f2598fafa368d97a760262f150bb132e5cce7ae8b427f017efcce25efbda52bcb061cdebbbe1f042958d422e25edf68225c7134d213e99e98788c492d6929626b63a0185b119438ce0599a2d49b8509ac9ebc93f469baf0099ed178a161fd977814c55b909e13e23d34a8158ad8a5398f611dc6023866099136e76fa6c345032c86f2d1ac488f288a327d89525005c8f210c96c3cdbdbac31e6a57e1e80554dc2c9f6c1f79b3e6041d60504d72b13f4eaf1cc4b7e68c130ef4b18bb3e56c39736be0ddfd1106f65b913e49f040124c7c50b86230c013eb5d24e859d757f0c06bff40308e449ac0108bcd6bc4f6905f257346a9af21bdd6a05186088482d3d1ed911337222a95daf3796cd9513ccab37be6a7cf0ccb8258c93ca6f134f1ea221608ec4882d6be978715f6e7785418140d08fe34c5c7401afd14c619e47ca75c2ce41d5936e93de89eca67f8b118072d43d0d1cca332111f850aa664088df66d064b29a8730d64822dd0a2ced037483dc7689459038743914a8bcf776d275ee3f9f967353882a5f92b2a19e0355065127a6af57bfb8689b2ea440b4d2485fd57e965ae4fa81442e531df80db4622182352cf375997e839e123154b79f74a897ed701aad1ff02b1c9eeb9eeccda491ff8f373d26f5061946856e49378a4f29a1c65473cbc3326b3a9bfb5e29545ab6eaa72b6797529a146dcce09ad3a9a7938609b524f62455585b9d0d35d3c171233d9b9cd033f11386b50bab6fbd6f28280ec906b1b5fcf16f48250fc4fbd875139a96b7e33205b1c26841574e32a0ca66e1c6cb5844758bc0157595c4d74e72755a7a910b2eea468ed00a8ee487f0ef50bab1f9d5f806f0b0b8c95886c98b5c4a125cad5c6115d9bfe7b71fab300caab8904ed28367f15e4778627d7cefe9c5b1ee008c10db456761b8f80b4efabb7c8e78cc8b46c7b2c14ca159243de3896ddd59721d42eee9543c3437e1ff70af165fb90a49e24f16279265db46e96a426819d2175e9de0bf586634bdc5d30e9390e9951c063a0ed34d9541c0c7dbd299ea44f2a3d71de0089f1e077c7290dc37e4aff4ad7122299efdc884af92f5afaac4cb88710b7160748d16993ae815e1121844ca64599ab0150172ec7e2f9ffec1705cefc3d48ce4b1fe20252a7395527157711a4a9acaec165f6dd360fe2e0a7209d05948fb25e34691593a1a9e064d2f7bbf84239bc48d4183942e07914c89abcd9a98791c66d6c4cf164d5c83b79a089a0e6b72db61e49e81b32859167e12c54e3bf970deb5cfb4655ff759aeef0b37a44b74ac5261a439e945fba59e8aca1c4bef52b5c9a800fae3e344f1f38a8e7c68d4adbe34a7da1fcf9c5f11420eec7423aa3c2f839f72878a60b71e884e504cc8565971bdd1e168d9b7f8f76f63d65399e2113bcb5de9b74bd8b3e6117cbe1ae9bfc388fecc08615cbd71256480553e6966d51190f6bba8128bdac5f45a8524536ca8f88bb891609fa9b584d9d4e385a407c3f191809fc62e48085ab7571a4deb122334479040272d38cc10789cf9ad28321845b2321d763abd2ac40bd1c7a2058fda1e6df15a489eecf6374061c7ce52a95b2103cfb590d848afd9775ebbb1d3cc539f3ad263c834174b4d218f901f2c34a523561d779650fa048fa7491eed2c3ff2b4c9233b4b748ad59d1e763d8dad0eb605b7814bfac8b9407a9a268ba96d06a14c8bc1bef1bbacac9d78cd15dab68b314b1aa5cda3cfa7536ecc721b872cb3f90eb2fb80c0def2c3248b783815fea666e582891758da92a004365a2f52e202be9c828310bb03ed31d813f5062bf83331d0dbedb56c9d90f56314d52f7b9e12711ef3d00cd33a885721af6e9cfd3e357407966c67e9c6d4678b57d868847f4923ca2ba053dd5b7018d03699e10482edb5fa5227a8ef3534b54eb154d4de4d2cdf9967dbd10b3ebf6ccdb9bb7c9c6d8e00d58fde65e76f3827de5d2173e0031d1da4cbc3d4c713c4c6cf6976102c1eb390282c1f9451f85931cee27400e780368f3fee4223c6f4346af2bda1cb28cd8578fdeabc69cca4be9573936ba5a94d313241da34c2df9ee6c0e1c713d24934057fcdb352967e17f8f9205512c5afd9220e0cacff345f66f80079ecdf3769b31634c7b482aff620d64c621396afdc616342b94736c3009ec6384e8f00666b4234b87844838df4ae48ef256292717ef0a5f17678a5fd7508fca23771f", 0x1000, 0x20008084, &(0x7f0000000240)={0x11, 0x7, r5, 0x1, 0x9, 0x6, @remote}, 0x14) (async, rerun: 64) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r4, 0x4068aea3, &(0x7f0000000040)) (async, rerun: 64) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r6 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='\x996\x19(\xef+\x89d\x8bQ\xccnB\xb4!eU\x82\xe7V\xe8!\x9a`:\xd1 8\xd7D\x1dSE\xed\xc4\xf0\xc3\x1c\xc4\xe8\xce\t\xc1y|YT\xa2\xae{\x02\x03-\x80\xed\x01\xea\xc2\x06\xb0\x94\x17,mb/\x00,\xff\xf7\x89\xd4\x00\x00[A\xb9\xb2\x9eD\xe8Q3\x0e\xa9\xba\x88\x1c\x1cyM\xd2\xa2\x91\xfa\x88Z-G\xc3F\xb0\xf5\x95()\r~\xc9*\xd8\xc4\x00\x00\x00', 0x0) (async) poll(&(0x7f0000000200)=[{r6, 0x1}], 0x1, 0x7) (async, rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="1b10284938c218a739ce2f69368a687b", 0x10}], 0x1, &(0x7f0000000a80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40041}], 0x1, 0x24010010) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x700, 0x7, 0x47d1, 0x7ff, {{0x22, 0x4, 0x0, 0x1a, 0x88, 0x0, 0x0, 0x62, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @ssrr={0x89, 0x23, 0xe2, [@private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1, @rand_addr=0x64010102, @loopback]}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x0, 0x11, "110a8064b9c36fd242ab0c5affc8fc"}]}, @cipso={0x86, 0x10, 0x3, [{0x7, 0x7, "c481427d52"}, {0x7, 0x3, "f6"}]}, @lsrr={0x83, 0x13, 0xc9, [@loopback, @rand_addr=0x64010102, @broadcast, @dev={0xac, 0x14, 0x14, 0x1f}]}, @ssrr={0x89, 0xf, 0xf5, [@empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x28}]}]}}}}}) (async, rerun: 32) fremovexattr(r0, &(0x7f00000002c0)=@known='user.incfs.size\x00') (async, rerun: 32) recvmmsg(r7, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000002640)=""/130, 0x82}], 0x1}, 0x8}], 0x1, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x800) 308.798602ms ago: executing program 0 (id=636): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000002c40)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x0, @empty, 0x9}, 0x1c, 0x0, 0xf5ff}}, {{&(0x7f0000002940)={0xa, 0x4e23, 0x10000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000002cc0)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000005000000002400000000000000290000003200000000000000000000000000ffffe0", @ANYRES32], 0x40}}], 0x2, 0x80) 220.460969ms ago: executing program 0 (id=637): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000004000023000500000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) syz_emit_ethernet(0x75, &(0x7f0000000000)={@remote, @random="977a48517a5a", @val={@val={0x88a8, 0x3, 0x1}, {0x8100, 0x5, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xf31e21557b286eac, 0x4, '4', "e052c29345dc5f199d02ec22af87609f2fe847fac4df2fc3d8aa28ea31c8b88b20b86de4168b1af140179767e82073da698fa2d3089e320868f45c460c4996a7452ff4a0c1e2b3259414c292137f1dec6f8fc86e96b86f1f36f33750"}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) ptrace(0x10, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000bc0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000004000023000500000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) (async) syz_emit_ethernet(0x75, &(0x7f0000000000)={@remote, @random="977a48517a5a", @val={@val={0x88a8, 0x3, 0x1}, {0x8100, 0x5, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xf31e21557b286eac, 0x4, '4', "e052c29345dc5f199d02ec22af87609f2fe847fac4df2fc3d8aa28ea31c8b88b20b86de4168b1af140179767e82073da698fa2d3089e320868f45c460c4996a7452ff4a0c1e2b3259414c292137f1dec6f8fc86e96b86f1f36f33750"}}}}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) (async) ptrace(0x10, 0x0) (async) 220.024911ms ago: executing program 0 (id=639): r0 = socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = getpid() syz_clone3(&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[r1], 0x1}, 0x58) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001ffff4ffffff000000ea00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010067726574617000001c000280050008000200000006000e0001000000080007007f00000108000a00", @ANYRES32=r4, @ANYBLOB], 0x54}}, 0x0) 139.910388ms ago: executing program 1 (id=641): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5, 0xd, 0x2}, {0xc1e, 0x8, 0xa2, 0x8001}, {0xfffe, 0x5, 0xfb, 0x1}]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0x3}}, './file0\x00'}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x1, 0x3, 0x53, 0xfffffff4}, {0x40, 0x4f, 0x1, 0x4}, {0x3, 0x9, 0x9, 0x9}, {0x7df0, 0x6, 0x80, 0x6}, {0x4, 0x2, 0x5, 0x7}]}, 0x10) ioctl$sock_proto_private(r1, 0x89e2, &(0x7f0000000140)="b1c1eb0bb3689e4ffb63b76f0d11016f1e2facd2cd95328d661ddd9cc4") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x1, 0x5, 0x2, 0x0, 0x10, 0xf, 0x2, 0x2, 0x5, 0xffffffff, 0x5, 0x0, 0x4, 0x7, 0x3, 0x6], 0xf7f5e000, 0x2400}) r2 = getpid() r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000002c0)={0x36c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x194, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0x89, 0x3, "ff71829acbe2e979a1e0e73980f1f76a3c046cf24a93eef3b8e987ff5dd64aa98b089d26d21f72f883b3accaf3433d275b7ee3d1fa639cd94f9393933e3e93038140b90e498e431e71884192960cadb5f222143e8e73971e72cd7b3751aeea22596a82388a1df73461b82d44b7a5c048a031cbdc33956c1a5dc8abe2ce28cf4828c0099ee4"}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ID={0x86, 0x3, "0e8f6bfd7ef3ae58ef7cc0aabbf5dc1916d051ddaefaf950b95861aa1ce0f60fc81d3a3bf27d73d86a4e2edc6ff34f05f3ffb6e23eec0873efedd04d6fecf447023f68794de4d53d534a2136281003c640f655620d0696a71c94688b6b5d5fe60295b77fb73e9c27352fa91a8bba73dfe7083b9dd08e68431f27c635a85ca26219fe"}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "fdf8c1e9243ddabb3514572fc0741f0cef51e8b0d80a536fb888e16327"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3ff}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xec7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff7}]}, @TIPC_NLA_NODE={0x180, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd1, 0x3, "d5caa15974e79232c1a66f57e9a2d5f8a45e0222824d8597607e17c5a13846e8f8038924747a75bb4fd081dca65535475161d4c3b6cab8d6c7dfd88d32f0956f2825ce89e4365a3f91beecab5c2a510e5c07370c776b917bd7031aa767fae103d5e139e0e7ae943023f84f7bbd21eeec648975b3ab873ad25d34d2186f04028b7b07b7ef1f057c40de9d8ba8af704b8d99ce668a50d340abe79d7ec660daabeb9060869eea1e363b0bab732636161dad7dd5ae7c55ffc5e00d8b2adfc49bebb08a6a70ad97c628720bc611899e"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ID={0x7, 0x3, "b4e630"}, @TIPC_NLA_NODE_ID={0x93, 0x3, "18b56d55f6b95327df797f75dca6f7b9bb29849006b0149a249b37beb5c26bd5599345ba4702d619f3e840cbc0f8dfe0e7e77fb0a58f22a6a9978df7520ee03aad9f44b9f818ac5c7d46f88f8929ce655709e78f18187c63aacf247e70116a72a81c373b5cb49c3cf72ef8cadef433983e79338e819540fb3bc828d0010a60268938164c70b31c3177b8d790fdce32"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x36c}, 0x1, 0x0, 0x0, 0x24008051}, 0x8000) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x98, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x48, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x2008000}, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a00), 0x82, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000a40)=0xe) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a80)={0x8, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000ac0)=r5, 0x4) recvmsg$can_j1939(r1, &(0x7f0000000c80)={&(0x7f0000000b00)=@nfc, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b80)=""/186, 0xba}], 0x1}, 0x40000043) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000dc0)={@fallback=r4, 0xb, 0x0, 0x4, &(0x7f0000000cc0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000d00)=[0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000e00)={r1, r1, 0x11, 0x0, @val=@netkit={@void, @value=r4, @void, @void, r7}}, 0x1c) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x7, 0x5002) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f40)={@cgroup=r4, 0x20, 0x1, 0x584d, &(0x7f0000000e40)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000e80)=[0x0], &(0x7f0000000ec0)=[0x0, 0x0], &(0x7f0000000f00)=[0x0, 0x0]}, 0x40) r8 = gettid() sched_setscheduler(r8, 0x3, &(0x7f0000000f80)) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f0000000fc0)=0x2, 0x4) ioctl$SNDCTL_FM_LOAD_INSTR(r4, 0x40285107) r10 = socket$isdn_base(0x22, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000001000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r10, 0x3, 0x2, 0x2, 0x4, {0xa, 0x4e22, 0x2b9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001080)="cbac52e73ff0846bc33450b31b5c2e3d01e5af8352b8f5d5fafdde3aaa83ca76dd7d93efb0e753883199326b2c0d80c9f0ffd1343c54c08e3da449ac4b", 0x3d}, {&(0x7f00000010c0)="93b61a20a784814aeee680a1f0", 0xd}, {&(0x7f0000001100)="ef55ff107f1bf20cd1176c1fe87533f867d7c65b147c5e7f1aa87f01de1b31ad973d45109f719a6fcf82f9ea22cc00e5e3d2d5c5f8f7cca02fd112d83f836afaafad9dd31277e68143ce308674e69603291f945b83c2cb83f09be4f83b5a71584c3dbdd6fc0581397de8e01d26882893c7f1f29ea93e967d0c", 0x79}, {&(0x7f0000001180)="601b8504faa26814b1cac9ad382c7ee544118cb27ee70d4672c82560c23fd4748aed3e52f825dc516f4e88a2ce826dd9ec8932fc1a355e2ce85e960d914a449c78", 0x41}, {&(0x7f0000001200)="e8e42b93a07916ca0c6daed4d9824a0fa9d8777a3cf07308702604cf8d70079711c664e3865bc14de69367dad713def74e5c98ac4b27df7551338617429d24ec7aee0df3bb7ad6478fe72c6ac5c4cb89c4b3ea01c89a23c8e2688e9c3fbbba45f9e0ccc019c9c2deb5a2298c685671b013b9929a98716f4b0bebf921005f9109d6d9f2951acb53f787802dfb560a2ef058e0bc9c80a93824a7611a9eb216479f06de9d79b8a2036e498ac689b70dfa390d71f6e04a3b283ba418f65a21e08763476feef7ffb9175244805586d1", 0xcd}, {&(0x7f0000001300)="88513affd6ddd2dc89476b5968fdda5642f6cc034ad5164f5a252c1f24de295c12f51a7ccf019c38627c34b10ece7f3fdc41108fc797d60a112b2a8f7587bb9c48d2f8e49c81833e1b0e3db2901535a8a432e081fecd1f2be93d44440938e89b7eb4c8e32b7be7051fa7d4365ca7a5751c0d8e49ad4952e3ac8fd046d42bdbf099ccd64ce340e69a7ce09b48c6f401cd6f73373dbabe701ec5c1a33920093197c28dcf7ca76d51f378e80e569ae92061b0e5edcfef5900adef559845a6136d25c0f1fa9a199c1541dd08211d80e6831e4557f13bb872b5", 0xd7}, {&(0x7f0000001400)="800214e60eae76cd39b1f517221e16c88ba4a5e8", 0x14}, {&(0x7f0000001440)="53819651e4abf8be9d02192722c66b351c34e6efcb5947235658940a3c5b4c8426244c76bd5e15abbacedf3ffe000375d65250c6155807eb3e1d677a96367699d0cc1782513b1921429a5b3a37624631cfdfbace5e15e3ff626d8aaafa8cb53fb1e7aaaf652ebc6b99f382c41dc8b38fb178524a232e", 0x76}], 0x8, &(0x7f0000001540)=[{0x48, 0x109, 0x4, "32b31eb6888d80c0c08ea3bfab7a3a77a74457e42df02c483cbff9c3d5c46076c6fa0bf3072bb574ca1004aba5e6ee732d2dc7e044ca90"}, {0xd0, 0x10d, 0x8000, "3886dfc3e56978e16ebe489139f6cfce51e1766ddae3cbffe713cde4b615f0e4a5290a72e7e14b7048d23058b9d6dc3a9873cab1c0bdce2b088e428e537ab8f5d8c03f55f4fb1698ce4b08ee1a08c030b7e4b7bf0378b82b9c4528b24eb142c2e1c75152af9f382db42c41c3a5f5afe10677c55881f5879e07e1124f0af2ca84a191b1c8d47574cf44e78fb01653ab8ddf31179dbb3bc29baab61fc6df73e5b1596354e83feb47d2150779b0be878142b704d6f35c7f9e730aaa"}, {0xf0, 0x84, 0x2, "d6ad5ba49dd7dcd7d639ceec8032bc3f8f8f40ce8001bc0a020e7e4f6810587fa2d0f85c4296cea9fcf74939260245dd458affb9a9dd8667ec414d59b11e880e9a6992c31ff8260a9cd1bf6edae05b161f8d0eeefd7c4d923f8249b27ae1b1bc4105bebb99b4e91ac8f7fc8a6085c45239dce319dfbb096d137846fa005a1703d1c9ef65ee965ebf35c0ccab6ec1ce96efdd1b7849b338d8dd73086e200d7cfc6517e5deec8e3fc3ccebc784a0e9e86ed2952256730b1e7d7b17abba1c1af8c76c67043515d51bc4452115e89a6a1c566dbd31064697692601fbfea34b7d"}, {0x18, 0x110, 0x0, "b6abcd2cd5b0"}, {0x1010, 0x108, 0xbf6, "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"}, {0xa8, 0x102, 0x4, "c3d1cc0337fb54f988c21adda22b9eac4e916a1bdf0c708fd71fa4902c94cfc569f9d49cdbc4a40d6654502e85fd077bb2247acf0a47afb233801f709aa8de773babb578bb5cbd53a73d6a1a3143606089707d1c0b7da864694b91e7e8094256c6bd3cee676918e48b41343ad2c7d5d70db77284b16d51c18fb83d81f3a232eba407d2190e4e5236d5842001de6d1dc566"}, {0xe8, 0x88, 0x3, "f51b36f839eeb4f92cec9d077a897e8ef7bd86ceda198d6e60175f45ab505b2ba4129da7244313d6b94775451d8f77c01eed9a602179a45903fd54c658be811eb0f72ec6abb626c6cae4de4f666aba5f097bfc0576e949a8e716fbe52efdddb5b674b422700967b7bcbfd6e5ca4562967234b97f6d3e9fabc632d5a968bfc1b3605d4a55b9ec2d838e63a1e8ea9838d818d247d82ba17f0d867a4158aed4474d9ed309e0599410d5c2b208324c6148653a0c20a68da3b568fa09ce602a0ee0ddb574c1a56e606a7ed08ff6bb17739ffa95"}], 0x13c0}, 0x804) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002980), r1) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000002a80)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x64, r11, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x30, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x6}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7fff}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x40}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x8004) 139.509394ms ago: executing program 5 (id=642): open(&(0x7f0000000000)='./cgroup\x00', 0x10000, 0xd1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="5952d4bd4d9d5b5666ba7a844cd292c9845ca99020e22a25b08b893fc1cf14876bea655ee8cd68d0f975ee4582521f48584755eade596a38fa2ee21dd46c2663df8ee595d5e28ffb3fc471df74c7511cd6d9b893fee829e670dc53f622190587af2e7327c1960a588a1f82f8ac39dce3562f8e324e", 0x75}, {&(0x7f00000000c0)="d599a5", 0x3}, {&(0x7f0000000780)="398e94e2180a415d080736f7e054c660fc1fa0", 0x13}], 0x3, 0x0, 0x0, 0x20000084}}], 0x1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000bc0), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r2, &(0x7f0000000080)}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000002380)=""/165, 0xa5}], 0x1, 0x3, 0x4) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000000c0)=0x0) setpriority(0x2, r4, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000040)=0x9, 0x4) 139.337541ms ago: executing program 1 (id=643): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="44000000cd080000000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300001000000800120034c20000"], 0x44}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000080)={@local, @empty, @val={@void, {0x8100, 0x6, 0x1, 0x2}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x48, 0x11, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @local}, {[], {0x4e22, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "446edbda135dec1b7ff546282b36b1a38fbf236115d21718", "a70370207c7c74f0628a37b426a9ce7e55826c16b20196e2b6298dc6997ea06e"}}}}}}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x0, 0x8000) dup(r0) 138.625613ms ago: executing program 0 (id=644): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x420080}, 0xc) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1407, 0x0, 0x7fffffff, 0x0, 0x8001, 0x800, 0x0, 0x8}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 70.648024ms ago: executing program 1 (id=645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc040}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x30}}, 0x24004090) 70.329345ms ago: executing program 5 (id=646): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000002c40)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x0, @empty, 0x9}, 0x1c, 0x0, 0xff00}}, {{&(0x7f0000002940)={0xa, 0x4e23, 0x10000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000002cc0)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000005000000002400000000000000290000003200000000000000000000000000ffffe0", @ANYRES32], 0x40}}], 0x2, 0x80) 70.074116ms ago: executing program 5 (id=647): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_newaddr={0x80, 0x14, 0x1, 0x70bd29, 0x25dfdbff, {0xa, 0x40, 0xbb, 0xfd, r6}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x5, 0x4, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x181}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8003}, @IFA_RT_PRIORITY={0x8, 0x9, 0xa78}, @IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x80}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x28}}, 0x0) 69.809028ms ago: executing program 1 (id=648): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) truncate(&(0x7f0000000040)='./file0\x00', 0x6) 2.586981ms ago: executing program 5 (id=649): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x10, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0x10, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x4000) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, 0x40) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="190000001000000000000000", @ANYRES32=r3, @ANYBLOB="d6c0226c6a632543ffa09de2f2f131faf6a8cc377dd4b977102239ea2fe2e32628b13e912afb9fe45f7c6e94c320bb4bc5a68bfc78008eb2365d8afd569a636fd5a64202f1f905964269ba910060a0b4897aca87daaf36313c757e74055e15885cd4b60ca1f2f846d087ed67d42a7801029e7e58fabfa358d344bed23d0459f3705d2a97f3cc2611a3", @ANYRES64=r2], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0x7fe2, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) msgget(0x1, 0x200) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x14, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x6, 0xcb, &(0x7f0000000280)=""/203, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xc, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000400)=[r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f00000004c0)=[{0x8, 0x5, 0x2, 0x6}, {0x1, 0x4, 0xa, 0x3}], 0x10, 0x1, @void, @value}, 0x94) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000780), 0x290080, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@map=r0, 0x35, 0x1, 0x7, &(0x7f00000005c0)=[0x0], 0x1, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740), 0x4) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="190000001000000000000000", @ANYRES32=r3, @ANYBLOB="d6c0226c6a632543ffa09de2f2f131faf6a8cc377dd4b977102239ea2fe2e32628b13e912afb9fe45f7c6e94c320bb4bc5a68bfc78008eb2365d8afd569a636fd5a64202f1f905964269ba910060a0b4897aca87daaf36313c757e74055e15885cd4b60ca1f2f846d087ed67d42a7801029e7e58fabfa358d344bed23d0459f3705d2a97f3cc2611a3", @ANYRES64=r2], 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) 1.708671ms ago: executing program 4 (id=652): mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@func={0x6, 0x1800}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) mount(&(0x7f0000000000)=@filename='./bus\x00', &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='ceph\x00', 0x400080, &(0x7f0000000140)='d\x00\x01cavd\xc2U\x1fa&\xf0\xca\xda7$\xda\x95\x804\x94\xc4\xc4\x9fN\f\x1e\x8d\x9a\xb2&\xab\x90\x1b\xb0-\xf6\a\xdf+\x11u:Cf\x94Z\xf3S/\xbf\xa9\xaa\xba\xddEO\xa3dH\abQ\\t\xf4#s\x94\xac\x0e\x00H5(+4\xcf') 1.075522ms ago: executing program 0 (id=653): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r0, 0x31f, &(0x7f0000000140)={0xb0, 0x16, 0xa}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000180)=0xb, 0x4) (async, rerun: 64) ioctl$CDROMVOLREAD(r0, 0x5313, &(0x7f0000000080)) (async, rerun: 64) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000100)) 0s ago: executing program 1 (id=654): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000500), 0x0, 0x0) read(r0, &(0x7f0000000040)=""/4, 0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="95010000ff00000085a80a5c06890bc22c89ea92d65122"]) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): p link [ 44.359493][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.361608][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.369109][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.373255][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.375306][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.383764][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.387432][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.389494][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.397102][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.429564][ T5941] hsr_slave_0: entered promiscuous mode [ 44.432541][ T5941] hsr_slave_1: entered promiscuous mode [ 44.436548][ T5940] team0: Port device team_slave_0 added [ 44.439684][ T5940] team0: Port device team_slave_1 added [ 44.459477][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.461548][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.468785][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.473348][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.475360][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.483841][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.524688][ T5938] hsr_slave_0: entered promiscuous mode [ 44.526729][ T5938] hsr_slave_1: entered promiscuous mode [ 44.528675][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.531022][ T5938] Cannot create hsr debugfs directory [ 44.543291][ T5939] hsr_slave_0: entered promiscuous mode [ 44.545345][ T5939] hsr_slave_1: entered promiscuous mode [ 44.547217][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.549399][ T5939] Cannot create hsr debugfs directory [ 44.578782][ T5940] hsr_slave_0: entered promiscuous mode [ 44.581001][ T5940] hsr_slave_1: entered promiscuous mode [ 44.582902][ T5940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.585052][ T5940] Cannot create hsr debugfs directory [ 44.763931][ T5941] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 44.772553][ T5941] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 44.777718][ T5941] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 44.784080][ T5941] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 44.802404][ T5939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 44.808545][ T5939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 44.813478][ T5939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 44.835424][ T5939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 44.859029][ T5938] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 44.862390][ T5938] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 44.870736][ T5938] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 44.874069][ T5938] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 44.894370][ T5940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.898063][ T5940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.902315][ T5940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.905457][ T5940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.923190][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.952256][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.957695][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.959844][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.968118][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.970201][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.984793][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.010227][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.015093][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.017166][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.021338][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.025919][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.027961][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.028435][ T39] audit: type=1400 audit(1737197194.008:114): avc: denied { sys_module } for pid=5941 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 45.043653][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.048387][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.053183][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.055370][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.065090][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.067317][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.080589][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.087459][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.089579][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.095023][ T5939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.100970][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.103003][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.122179][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.150567][ T5941] veth0_vlan: entered promiscuous mode [ 45.158707][ T5941] veth1_vlan: entered promiscuous mode [ 45.167593][ T5941] veth0_macvtap: entered promiscuous mode [ 45.173174][ T5941] veth1_macvtap: entered promiscuous mode [ 45.185418][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.188582][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.195845][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.201882][ T5941] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.204588][ T5941] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.207065][ T5941] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.209575][ T5941] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.226236][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.238416][ T5939] veth0_vlan: entered promiscuous mode [ 45.242703][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.248693][ T5939] veth1_vlan: entered promiscuous mode [ 45.272164][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.274600][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.293005][ T5940] veth0_vlan: entered promiscuous mode [ 45.293105][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.297382][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.297948][ T5939] veth0_macvtap: entered promiscuous mode [ 45.304663][ T5939] veth1_macvtap: entered promiscuous mode [ 45.307824][ T5938] veth0_vlan: entered promiscuous mode [ 45.310466][ T5940] veth1_vlan: entered promiscuous mode [ 45.317267][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.320454][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.325240][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.328707][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.330166][ T5941] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 45.332237][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.339417][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.344219][ T5938] veth1_vlan: entered promiscuous mode [ 45.351507][ T5939] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.354101][ T5939] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.356729][ T5939] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.359333][ T5939] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.365747][ T5940] veth0_macvtap: entered promiscuous mode [ 45.369787][ T5940] veth1_macvtap: entered promiscuous mode [ 45.382576][ T5938] veth0_macvtap: entered promiscuous mode [ 45.387646][ T5938] veth1_macvtap: entered promiscuous mode [ 45.392126][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.395476][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.398362][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.401534][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.404872][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.408424][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.411912][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.414584][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.417498][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.420905][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.426021][ T5940] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.428536][ T5940] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.431231][ T5940] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.433707][ T5940] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.448916][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.449259][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.451563][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.454402][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.459161][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.462386][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.465243][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.468155][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.471864][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.479831][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.483056][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.485992][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.488956][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.491942][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.495131][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.498605][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.505464][ T5938] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.508145][ T5938] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.510735][ T5938] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.513232][ T5938] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.535453][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.539275][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.545370][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.548108][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.565659][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.567967][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.575096][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.577391][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.592987][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.601131][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.603906][ T6010] misc userio: Can't change port type on an already running userio instance [ 45.622855][ T6014] overlayfs: failed to resolve './file0': -2 [ 45.665463][ T6021] netlink: 80 bytes leftover after parsing attributes in process `syz.0.9'. [ 45.689306][ T6031] ptrace attach of "/syz-executor exec"[5941] was attempted by " [ 45.691289][ T5954] Bluetooth: hci2: command tx timeout [ 45.694444][ T66] Bluetooth: hci0: command tx timeout [ 45.694458][ T5953] Bluetooth: hci1: command tx timeout [ 45.714419][ T5953] Bluetooth: hci3: command tx timeout [ 45.926251][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'. [ 45.928800][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 45.932622][ T6071] netlink: 'syz.3.24': attribute type 11 has an invalid length. [ 45.935807][ T6075] ieee802154 phy0 wpan0: encryption failed: -22 [ 45.958492][ T6081] netlink: 700 bytes leftover after parsing attributes in process `syz.1.28'. [ 46.115291][ T6108] 9pnet_fd: Insufficient options for proto=fd [ 46.270702][ T5980] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 46.430826][ T5980] usb 7-1: Using ep0 maxpacket: 8 [ 46.435099][ T5980] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 46.438699][ T5980] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 46.441689][ T5980] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.446320][ T5980] usb 7-1: config 0 descriptor?? [ 46.684059][ T5980] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 46.993519][ T6135] sp0: Synchronizing with TNC [ 47.020153][ T6140] 9pnet_fd: Insufficient options for proto=fd [ 47.037483][ T6138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.042462][ T6138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.052600][ T6138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.056705][ T6138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.060454][ T6138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.065011][ T6138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.068622][ T6138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.072954][ T6138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.077469][ T6138] batadv_slave_0: entered promiscuous mode [ 47.079831][ T6138] macsec1: entered allmulticast mode [ 47.082670][ T6138] batadv_slave_0: entered allmulticast mode [ 47.087558][ T6138] batadv_slave_0: left allmulticast mode [ 47.090207][ T6138] batadv_slave_0: left promiscuous mode [ 47.126724][ T25] usb 7-1: USB disconnect, device number 2 [ 47.139069][ T6145] /dev/nullb0: Can't open blockdev [ 47.198366][ T6151] overlay: ./file0 is not a directory [ 47.260335][ T6154] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 47.458681][ T6163] netlink: 236 bytes leftover after parsing attributes in process `syz.1.52'. [ 47.462599][ T6163] unsupported nlmsg_type 40 [ 47.500724][ T2302] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 47.536745][ T6174] 9pnet_fd: Insufficient options for proto=fd [ 47.651567][ T2302] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 47.655270][ T2302] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 47.658776][ T2302] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 47.662883][ T2302] usb 8-1: config 0 interface 0 has no altsetting 0 [ 47.667791][ T2302] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 47.671669][ T2302] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 47.676055][ T2302] usb 8-1: config 0 interface 0 has no altsetting 0 [ 47.679389][ T2302] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 47.683271][ T2302] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 47.687505][ T2302] usb 8-1: config 0 interface 0 has no altsetting 0 [ 47.690364][ T2302] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 47.694246][ T2302] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 47.697439][ T2302] usb 8-1: config 0 interface 0 has no altsetting 0 [ 47.700393][ T2302] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 47.703270][ T2302] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 47.706573][ T2302] usb 8-1: config 0 interface 0 has no altsetting 0 [ 47.709136][ T2302] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 47.711996][ T2302] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 47.715071][ T2302] usb 8-1: config 0 interface 0 has no altsetting 0 [ 47.717636][ T2302] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 47.720138][ T2302] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 47.723847][ T2302] usb 8-1: config 0 interface 0 has no altsetting 0 [ 47.726330][ T2302] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 47.728805][ T2302] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 47.731814][ T2302] usb 8-1: config 0 interface 0 has no altsetting 0 [ 47.736470][ T2302] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 47.739013][ T2302] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 47.741565][ T2302] usb 8-1: Product: syz [ 47.742776][ T2302] usb 8-1: Manufacturer: syz [ 47.744170][ T2302] usb 8-1: SerialNumber: syz [ 47.747996][ T2302] usb 8-1: config 0 descriptor?? [ 47.753114][ T2302] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 47.770890][ T66] Bluetooth: hci0: command tx timeout [ 47.770943][ T5954] Bluetooth: hci3: command tx timeout [ 47.771033][ T5953] Bluetooth: hci1: command tx timeout [ 47.771060][ T5953] Bluetooth: hci2: command tx timeout [ 47.786991][ T6192] input: syz1 as /devices/virtual/input/input7 [ 47.899059][ T6199] Bluetooth: MGMT ver 1.23 [ 47.903114][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'. [ 47.923177][ T6200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.927551][ T6200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.646520][ T39] kauditd_printk_skb: 136 callbacks suppressed [ 48.646530][ T39] audit: type=1400 audit(1737197197.628:251): avc: denied { create } for pid=6216 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 48.656452][ T39] audit: type=1400 audit(1737197197.628:252): avc: denied { write } for pid=6216 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 48.730023][ T39] audit: type=1400 audit(1737197197.708:253): avc: denied { create } for pid=6216 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.736413][ T39] audit: type=1400 audit(1737197197.708:254): avc: denied { connect } for pid=6216 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.793986][ T6227] netlink: 596 bytes leftover after parsing attributes in process `syz.0.71'. [ 48.797221][ T39] audit: type=1400 audit(1737197197.778:255): avc: denied { read } for pid=6226 comm="syz.0.71" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 48.803624][ T39] audit: type=1400 audit(1737197197.778:256): avc: denied { open } for pid=6226 comm="syz.0.71" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 48.810375][ T39] audit: type=1400 audit(1737197197.778:257): avc: denied { ioctl } for pid=6226 comm="syz.0.71" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 48.831860][ T6229] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.835896][ T39] audit: type=1400 audit(1737197197.818:258): avc: denied { getopt } for pid=6228 comm="syz.0.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.889811][ T39] audit: type=1400 audit(1737197197.868:259): avc: denied { create } for pid=6234 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 48.896053][ T39] audit: type=1400 audit(1737197197.868:260): avc: denied { create } for pid=6234 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 49.056352][ T6251] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 49.068207][ T6254] netlink: 160 bytes leftover after parsing attributes in process `syz.1.81'. [ 49.094093][ T6258] vxfs: Unknown parameter 'cpuacct' [ 49.096094][ T6258] new mount options do not match the existing superblock, will be ignored [ 49.191976][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 49.210294][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 49.222192][ T6273] process 'syz.0.88' launched './file0' with NULL argv: empty string added [ 49.452418][ T6307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6307 comm=syz.1.96 [ 49.455542][ T6306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6306 comm=syz.1.96 [ 49.488052][ T6311] syz.1.98: attempt to access beyond end of device [ 49.488052][ T6311] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 49.492138][ T6311] MINIX-fs: unable to read superblock [ 49.636405][ T6332] warning: `syz.1.107' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 49.677183][ T6335] overlay: ./file1 is not a directory [ 49.702382][ T6318] syz.2.99 uses obsolete (PF_INET,SOCK_PACKET) [ 49.780696][ T30] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 49.804018][ T6348] input: syz1 as /devices/virtual/input/input8 [ 49.850941][ T66] Bluetooth: hci2: command tx timeout [ 49.850990][ T5948] Bluetooth: hci0: command tx timeout [ 49.851305][ T5953] Bluetooth: hci1: command tx timeout [ 49.851328][ T5953] Bluetooth: hci3: command tx timeout [ 50.011520][ C2] usb 8-1: yurex_control_callback - control failed: -2 [ 50.014252][ T6006] usb 8-1: USB disconnect, device number 2 [ 50.023720][ T6006] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 50.173575][ T6372] overlayfs: failed to resolve './file0': -2 [ 50.302086][ T6382] tmpfs: Bad value for 'mpol' [ 50.460815][ T30] usb 7-1: device descriptor read/64, error -71 [ 50.481918][ T6388] 9pnet_fd: Insufficient options for proto=fd [ 50.582249][ T6396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6396 comm=syz.1.127 [ 50.710772][ T30] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 50.720983][ T6405] syz.3.129: attempt to access beyond end of device [ 50.720983][ T6405] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 50.724751][ T6405] efs: cannot read volume header [ 50.766206][ T6407] overlayfs: missing 'lowerdir' [ 50.769405][ T6407] SELinux: syz.3.130 (6407) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 50.847947][ T6418] 9pnet_fd: Insufficient options for proto=fd [ 50.850847][ T8] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 50.870737][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 50.873502][ T30] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 50.876001][ T30] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 50.879402][ T30] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 50.883006][ T30] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 50.887144][ T30] usb 7-1: config 0 interface 0 has no altsetting 0 [ 50.897736][ T30] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 50.898158][ T6427] netlink: 'syz.1.136': attribute type 11 has an invalid length. [ 50.901501][ T30] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 50.907284][ T30] usb 7-1: Product: syz [ 50.908867][ T30] usb 7-1: Manufacturer: syz [ 50.910211][ T30] usb 7-1: SerialNumber: syz [ 50.915496][ T30] usb 7-1: config 0 descriptor?? [ 50.919731][ T30] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 50.923263][ T30] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 50.974120][ T6440] ax25_connect(): syz.3.140 uses autobind, please contact jreuter@yaina.de [ 50.977064][ T6440] __nla_validate_parse: 1 callbacks suppressed [ 50.977072][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'. [ 50.982836][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.140'. [ 50.989452][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.140'. [ 51.004890][ T8] usb 5-1: not running at top speed; connect to a high speed hub [ 51.015305][ T8] usb 5-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.020010][ T8] usb 5-1: config 1 interface 0 has no altsetting 0 [ 51.025433][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 51.028916][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.032182][ T8] usb 5-1: Product: ⣘妬氂籖哶ඝ엠⭻좀춷醔삑唸슝藇⛛릸죪䝁ྶ⊮ᥖ䱗廻抿女䨲퍭至ꕚ兮燛␱ﮔ䨘挷⵷៎㗥몜飲䤘琨遙灥ꕷ㱿퉬ꌙ잦嵲仫优淘鸎䉲 [ 51.038871][ T8] usb 5-1: Manufacturer: Ў [ 51.040603][ T8] usb 5-1: SerialNumber: syz [ 51.052580][ T6440] bond0: (slave bond_slave_0): Releasing backup interface [ 51.272423][ T8] usb 5-1: USB disconnect, device number 2 [ 51.396615][ T6474] 9pnet_fd: Insufficient options for proto=fd [ 51.677983][ T5981] usb 7-1: USB disconnect, device number 5 [ 51.682661][ T5981] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 51.767771][ T6495] Process accounting resumed [ 51.785310][ T6509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.149'. [ 51.816979][ T6511] overlayfs: missing 'lowerdir' [ 51.859754][ T6514] loop9: detected capacity change from 0 to 8 [ 51.863928][ T6514] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 51.865934][ T6514] loop9: partition table partially beyond EOD, truncated [ 51.868627][ T6514] loop9: p1 size 81768186 extends beyond EOD, truncated [ 51.879628][ T5950] udevd[5950]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 51.931245][ T5948] Bluetooth: hci2: command tx timeout [ 51.931363][ T66] Bluetooth: hci3: command 0x0419 tx timeout [ 51.932479][ T5953] Bluetooth: hci0: command tx timeout [ 51.965137][ T6527] Unknown options in mask 5 [ 51.983204][ T6529] Zero length message leads to an empty skb [ 51.990021][ T6533] netlink: 'syz.1.157': attribute type 1 has an invalid length. [ 51.997752][ T6533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.005903][ T6533] bond1: (slave gretap1): making interface the new active one [ 52.009391][ T6533] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 52.017100][ T6533] syz.1.157 (6533) used greatest stack depth: 20368 bytes left [ 52.041171][ T6540] misc userio: Begin command sent, but we're already running [ 52.043435][ T6541] misc userio: Can't change port type on an already running userio instance [ 52.071880][ T6550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 52.206672][ T6565] team0: No ports can be present during mode change [ 52.350700][ T8] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 52.400161][ T6584] syz.2.175: attempt to access beyond end of device [ 52.400161][ T6584] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 52.405718][ T6584] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 52.500691][ T8] usb 8-1: Using ep0 maxpacket: 8 [ 52.503533][ T8] usb 8-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 52.507190][ T8] usb 8-1: config 1 interface 0 has no altsetting 0 [ 52.510703][ T8] usb 8-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.40 [ 52.513413][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.515693][ T8] usb 8-1: Product: syz [ 52.517395][ T8] usb 8-1: Manufacturer: syz [ 52.518794][ T8] usb 8-1: SerialNumber: syz [ 52.520726][ T5947] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.535066][ T6589] random: crng reseeded on system resumption [ 52.671391][ T5947] usb 6-1: Using ep0 maxpacket: 8 [ 52.674009][ T5947] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 52.677119][ T5947] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.681004][ T5947] usb 6-1: config 0 has no interface number 0 [ 52.682737][ T5947] usb 6-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFB, changing to 0x8B [ 52.686298][ T5947] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 52.689666][ T5947] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.694423][ T5947] usb 6-1: config 0 interface 52 has no altsetting 0 [ 52.698310][ T5947] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 52.701879][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 52.705031][ T5947] usb 6-1: Product: syz [ 52.706650][ T5947] usb 6-1: SerialNumber: syz [ 52.710092][ T5947] usb 6-1: config 0 descriptor?? [ 52.725611][ T6591] openvswitch: netlink: IP tunnel TTL not specified. [ 52.737951][ T6591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.177'. [ 52.744721][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 52.747522][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.750723][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.753055][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.755686][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.758360][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.760805][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.762997][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.765586][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.768625][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.771287][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.773523][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.776205][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.778374][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.780545][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.782770][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.785308][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.788440][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.791414][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.793729][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.793757][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.793765][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.793785][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.793792][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.793811][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.793818][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.793841][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.793848][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.793868][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.793875][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.793899][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.793906][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.793936][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.793944][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.793963][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.793971][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.793990][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.793997][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.794016][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.794024][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.794043][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.794050][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.794069][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.794076][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.794095][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.794102][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.794121][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.794128][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.794147][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.794154][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.794173][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.794180][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.794199][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.794207][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.794226][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.794234][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.794252][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.794265][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.794299][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.794312][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.794348][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 52.794362][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 52.919804][ T5947] input: syz (Stick) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.52/input/input10 [ 52.927291][ T8] usbhid 8-1:1.0: can't add hid device: -71 [ 52.929097][ T8] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 52.935723][ T8] usb 8-1: USB disconnect, device number 3 [ 53.541254][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 53.710818][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 53.713974][ T8] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 53.716486][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 53.719280][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 53.722178][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 53.725064][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 53.728762][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 53.731419][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.938728][ T8] usb 5-1: usb_control_msg returned -32 [ 53.940482][ T8] usbtmc 5-1:16.0: can't read capabilities [ 54.020755][ T5954] Bluetooth: hci3: command 0x0419 tx timeout [ 54.293014][ T6623] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 54.298782][ T35] usb 5-1: USB disconnect, device number 3 [ 54.887459][ T39] kauditd_printk_skb: 99 callbacks suppressed [ 54.887475][ T39] audit: type=1400 audit(1737197203.868:360): avc: denied { ioctl } for pid=6626 comm="syz.0.187" path="mnt:[4026533336]" dev="nsfs" ino=4026533336 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.899352][ T39] audit: type=1326 audit(1737197203.868:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6626 comm="syz.0.187" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f94585d29 code=0x0 [ 54.991055][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.187'. [ 54.997907][ T6628] syz.0.187: attempt to access beyond end of device [ 54.997907][ T6628] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 55.002355][ T6628] syz.0.187: attempt to access beyond end of device [ 55.002355][ T6628] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 55.005963][ T6628] syz.0.187: attempt to access beyond end of device [ 55.005963][ T6628] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 55.013563][ T6628] syz.0.187: attempt to access beyond end of device [ 55.013563][ T6628] nbd0: rw=0, sector=18, nr_sectors = 2 limit=0 [ 55.018498][ T6628] syz.0.187: attempt to access beyond end of device [ 55.018498][ T6628] nbd0: rw=0, sector=30, nr_sectors = 2 limit=0 [ 55.023495][ T6628] syz.0.187: attempt to access beyond end of device [ 55.023495][ T6628] nbd0: rw=0, sector=36, nr_sectors = 2 limit=0 [ 55.414376][ T2302] usb 6-1: USB disconnect, device number 2 [ 55.453226][ T6630] dvmrp1: entered allmulticast mode [ 55.556233][ T39] audit: type=1400 audit(1737197204.538:362): avc: denied { ioctl } for pid=6632 comm="syz.1.189" path="socket:[9096]" dev="sockfs" ino=9096 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 55.820206][ T39] audit: type=1400 audit(1737197204.798:363): avc: denied { create } for pid=6640 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 55.828112][ T39] audit: type=1400 audit(1737197204.798:364): avc: denied { getopt } for pid=6640 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 55.845188][ T39] audit: type=1400 audit(1737197204.828:365): avc: denied { listen } for pid=6645 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.437114][ T39] audit: type=1400 audit(1737197205.418:366): avc: denied { mount } for pid=6650 comm="syz.1.195" name="/" dev="autofs" ino=13400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 56.450937][ T39] audit: type=1400 audit(1737197205.428:367): avc: denied { write } for pid=6650 comm="syz.1.195" name="task" dev="proc" ino=9111 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 56.456971][ T39] audit: type=1400 audit(1737197205.438:368): avc: denied { add_name } for pid=6650 comm="syz.1.195" name="hugetlb.2MB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 56.465269][ T39] audit: type=1400 audit(1737197205.438:369): avc: denied { create } for pid=6650 comm="syz.1.195" name="hugetlb.2MB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 56.606690][ T6654] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.636475][ T6656] Cannot find add_set index 4 as target [ 56.882669][ T6671] netlink: 87 bytes leftover after parsing attributes in process `syz.0.201'. [ 57.101260][ T6680] bridge1: entered allmulticast mode [ 57.129503][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.206'. [ 57.735412][ T6697] kvm: emulating exchange as write [ 58.073575][ T6701] netlink: 'syz.0.213': attribute type 4 has an invalid length. [ 58.081135][ T6701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.213'. [ 58.096822][ T6701] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 58.590726][ T30] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 58.740683][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 58.743460][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.746589][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.749430][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 58.754258][ T30] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 58.756903][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.760269][ T30] usb 5-1: config 0 descriptor?? [ 59.170762][ T30] usbhid 5-1:0.0: can't add hid device: -71 [ 59.172567][ T30] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 59.175823][ T30] usb 5-1: USB disconnect, device number 4 [ 59.187710][ T6757] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 60.046495][ T39] kauditd_printk_skb: 21 callbacks suppressed [ 60.046504][ T39] audit: type=1400 audit(1737197209.028:391): avc: denied { wake_alarm } for pid=6808 comm="syz.0.252" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.056297][ T6809] block nbd0: shutting down sockets [ 60.056397][ T39] audit: type=1400 audit(1737197209.038:392): avc: denied { write } for pid=6808 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.095483][ T39] audit: type=1400 audit(1737197209.078:393): avc: denied { setopt } for pid=6812 comm="syz.0.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.142613][ T6817] binder: 6816:6817 unknown command 0 [ 60.144223][ T6817] binder: 6816:6817 ioctl c0306201 200001c0 returned -22 [ 60.193731][ T6819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 60.830878][ T39] audit: type=1400 audit(1737197209.808:394): avc: denied { mount } for pid=6826 comm="syz.0.259" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 60.837043][ T39] audit: type=1400 audit(1737197209.818:395): avc: denied { getopt } for pid=6830 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 60.842890][ T39] audit: type=1400 audit(1737197209.818:396): avc: denied { mounton } for pid=6826 comm="syz.0.259" path="/83/file0" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 60.848910][ T39] audit: type=1400 audit(1737197209.818:397): avc: denied { setopt } for pid=6830 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 60.889926][ T6833] netlink: 1328 bytes leftover after parsing attributes in process `syz.1.260'. [ 60.890018][ T39] audit: type=1400 audit(1737197209.868:398): avc: denied { read } for pid=6826 comm="syz.0.259" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 60.900282][ T39] audit: type=1400 audit(1737197209.868:399): avc: denied { open } for pid=6826 comm="syz.0.259" path="/83/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 60.907400][ T39] audit: type=1400 audit(1737197209.878:400): avc: denied { ioctl } for pid=6826 comm="syz.0.259" path="/83/file0/file0" dev="fuse" ino=0 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 61.038122][ T6835] netlink: 20 bytes leftover after parsing attributes in process `syz.0.261'. [ 61.392728][ T6845] 9pnet_virtio: no channels available for device syz [ 61.552666][ T6849] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 61.701579][ T6862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.270'. [ 61.704445][ T6862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.270'. [ 61.815870][ T6880] sg_write: data in/out 1048540/17 bytes for SCSI command 0x0-- guessing data in; [ 61.815870][ T6880] program syz.3.274 not setting count and/or reply_len properly [ 61.922151][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'. [ 62.030729][ T6899] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 62.058440][ T6902] netlink: 48 bytes leftover after parsing attributes in process `syz.1.281'. [ 62.134757][ T6906] rdma_op ffff88804f6749f0 conn xmit_rdma 0000000000000000 [ 62.138543][ T6906] capability: warning: `syz.1.283' uses deprecated v2 capabilities in a way that may be insecure [ 62.143418][ T70] Bluetooth: hci4: Frame reassembly failed (-84) [ 62.192660][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.284'. [ 62.195869][ T6910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6910 comm=syz.3.284 [ 62.368723][ T6929] ======================================================= [ 62.368723][ T6929] WARNING: The mand mount option has been deprecated and [ 62.368723][ T6929] and is ignored by this kernel. Remove the mand [ 62.368723][ T6929] option from the mount to silence this warning. [ 62.368723][ T6929] ======================================================= [ 62.731247][ T6940] netlink: 28 bytes leftover after parsing attributes in process `syz.0.293'. [ 62.733893][ T6940] netlink: 28 bytes leftover after parsing attributes in process `syz.0.293'. [ 62.928173][ T6952] tmpfs: Bad value for 'mpol' [ 63.029057][ T6961] bridge_slave_0: default FDB implementation only supports local addresses [ 63.036095][ T6964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.302'. [ 63.039595][ T6964] tipc: Started in network mode [ 63.041389][ T6964] tipc: Node identity 7, cluster identity 5 [ 63.043606][ T6964] tipc: Node number set to 7 [ 63.056186][ T6967] netlink: 44 bytes leftover after parsing attributes in process `syz.1.303'. [ 63.058943][ T6967] netlink: 43 bytes leftover after parsing attributes in process `syz.1.303'. [ 63.061599][ T6967] netlink: 'syz.1.303': attribute type 6 has an invalid length. [ 63.064086][ T6967] netlink: 'syz.1.303': attribute type 5 has an invalid length. [ 63.067095][ T6967] netlink: 43 bytes leftover after parsing attributes in process `syz.1.303'. [ 63.127629][ T8] IPVS: starting estimator thread 0... [ 63.158383][ T6981] openvswitch: netlink: Message has 1219 unknown bytes. [ 63.160463][ T6981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 63.165110][ T6984] netlink: 'syz.1.307': attribute type 64 has an invalid length. [ 63.167594][ T6984] netlink: 44 bytes leftover after parsing attributes in process `syz.1.307'. [ 63.172628][ T6984] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode broadcast(3) [ 63.210871][ T6979] IPVS: using max 38 ests per chain, 91200 per kthread [ 63.227368][ T6992] tun0: tun_chr_ioctl cmd 1074025672 [ 63.229605][ T6992] tun0: ignored: set checksum enabled [ 63.492502][ T7026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7026 comm=syz.1.316 [ 64.180723][ T66] Bluetooth: hci4: command 0xfc11 tx timeout [ 64.181604][ T5954] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 64.435548][ T7104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 64.439418][ T7104] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 64.759231][ T7125] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 64.766457][ T7122] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 64.798425][ T7128] ip6t_srh: unknown srh match flags 4000 [ 65.371708][ T70] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.397455][ T39] kauditd_printk_skb: 29 callbacks suppressed [ 65.397470][ T39] audit: type=1400 audit(1737197216.381:430): avc: denied { execute } for pid=7138 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 65.408723][ T39] audit: type=1400 audit(1737197216.381:431): avc: denied { execute_no_trans } for pid=7138 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 65.423847][ T7140] FAULT_INJECTION: forcing a failure. [ 65.423847][ T7140] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 65.428720][ T7140] CPU: 3 UID: 0 PID: 7140 Comm: syz.1.342 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 65.432571][ T7140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.435702][ T7140] Call Trace: [ 65.437046][ T7140] [ 65.438244][ T7140] dump_stack_lvl+0x16c/0x1f0 [ 65.440157][ T7140] should_fail_ex+0x497/0x5b0 [ 65.442184][ T7140] _copy_from_user+0x2e/0xd0 [ 65.444133][ T7140] copy_msghdr_from_user+0x99/0x160 [ 65.445921][ T7140] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 65.448136][ T7140] ? __lock_acquire+0xcc5/0x3c40 [ 65.450102][ T7140] ___sys_sendmsg+0xff/0x1e0 [ 65.451983][ T7140] ? __pfx____sys_sendmsg+0x10/0x10 [ 65.454012][ T7140] ? trace_lock_acquire+0x14e/0x1f0 [ 65.456056][ T7140] __sys_sendmmsg+0x201/0x420 [ 65.457963][ T7140] ? __pfx___sys_sendmmsg+0x10/0x10 [ 65.460049][ T7140] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 65.462455][ T7140] ? fput+0x67/0x440 [ 65.464034][ T7140] ? ksys_write+0x1ba/0x250 [ 65.465876][ T7140] ? __pfx_ksys_write+0x10/0x10 [ 65.467772][ T7140] __x64_sys_sendmmsg+0x9c/0x100 [ 65.469701][ T7140] ? lockdep_hardirqs_on+0x7c/0x110 [ 65.471700][ T7140] do_syscall_64+0xcd/0x250 [ 65.473459][ T7140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.475705][ T7140] RIP: 0033:0x7fb978f85d29 [ 65.477405][ T7140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.483778][ T7140] RSP: 002b:00007fb979d0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 65.487086][ T7140] RAX: ffffffffffffffda RBX: 00007fb979175fa0 RCX: 00007fb978f85d29 [ 65.490245][ T7140] RDX: 0000000000000002 RSI: 0000000020002c40 RDI: 0000000000000003 [ 65.492612][ T7140] RBP: 00007fb979d0d090 R08: 0000000000000000 R09: 0000000000000000 [ 65.495447][ T7140] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 65.498540][ T7140] R13: 0000000000000000 R14: 00007fb979175fa0 R15: 00007ffd853e24e8 [ 65.501685][ T7140] [ 65.511893][ T70] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.531439][ T7142] netlink: 'syz.1.343': attribute type 27 has an invalid length. [ 65.537599][ T66] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.542582][ T66] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.545914][ T66] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.550020][ T66] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.552722][ T66] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.555035][ T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.560771][ T39] audit: type=1400 audit(1737197216.541:432): avc: denied { mounton } for pid=7143 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 65.576851][ T7142] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.579608][ T7142] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.643596][ T7142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.649795][ T7142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.704236][ T7142] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.707959][ T7142] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.712239][ T7142] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.715572][ T7142] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.763651][ T70] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.786352][ T7145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.789975][ T7145] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.794313][ T7145] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 65.833226][ T70] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.843051][ T39] audit: type=1400 audit(1737197216.831:433): avc: denied { name_bind } for pid=7146 comm="syz.1.344" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 65.883129][ T7143] chnl_net:caif_netlink_parms(): no params data found [ 65.953386][ T7143] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.956195][ T7143] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.958347][ T7143] bridge_slave_0: entered allmulticast mode [ 65.960584][ T7143] bridge_slave_0: entered promiscuous mode [ 65.965389][ T7143] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.967461][ T7143] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.969525][ T7143] bridge_slave_1: entered allmulticast mode [ 65.972082][ T7143] bridge_slave_1: entered promiscuous mode [ 65.997148][ T7143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.015066][ T7143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.018294][ T39] audit: type=1400 audit(1737197217.001:434): avc: denied { setopt } for pid=7157 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.066318][ T70] bridge_slave_1: left allmulticast mode [ 66.068639][ T70] bridge_slave_1: left promiscuous mode [ 66.072458][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.077948][ T70] bridge_slave_0: left allmulticast mode [ 66.079615][ T70] bridge_slave_0: left promiscuous mode [ 66.083701][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.324018][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.328312][ T70] bond0 (unregistering): Released all slaves [ 66.335361][ T7143] team0: Port device team_slave_0 added [ 66.349431][ T7143] team0: Port device team_slave_1 added [ 66.375193][ T7143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.378075][ T7143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.387480][ T7143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.391621][ T7143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.393640][ T7143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.401010][ T7143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.418958][ T39] audit: type=1400 audit(1737197217.401:435): avc: denied { read } for pid=7172 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 66.465106][ T39] audit: type=1400 audit(1737197217.451:436): avc: denied { setopt } for pid=7172 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 66.478478][ T7143] hsr_slave_0: entered promiscuous mode [ 66.481299][ T7143] hsr_slave_1: entered promiscuous mode [ 66.483744][ T7143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.486547][ T7143] Cannot create hsr debugfs directory [ 66.513280][ T39] audit: type=1400 audit(1737197217.501:437): avc: denied { search } for pid=5649 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.519296][ T39] audit: type=1400 audit(1737197217.501:438): avc: denied { read } for pid=5649 comm="dhcpcd" name="n104" dev="tmpfs" ino=2946 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.529107][ T39] audit: type=1400 audit(1737197217.501:439): avc: denied { open } for pid=5649 comm="dhcpcd" path="/run/udev/data/n104" dev="tmpfs" ino=2946 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.594823][ T7181] FAULT_INJECTION: forcing a failure. [ 66.594823][ T7181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.599237][ T7181] CPU: 0 UID: 0 PID: 7181 Comm: syz.0.351 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 66.603325][ T7181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.607252][ T7181] Call Trace: [ 66.608653][ T7181] [ 66.609865][ T7181] dump_stack_lvl+0x16c/0x1f0 [ 66.611891][ T7181] should_fail_ex+0x497/0x5b0 [ 66.613558][ T7181] _copy_from_user+0x2e/0xd0 [ 66.615127][ T7181] move_addr_to_kernel+0x68/0x160 [ 66.617051][ T7181] __copy_msghdr+0x386/0x470 [ 66.618931][ T7181] copy_msghdr_from_user+0xc2/0x160 [ 66.621022][ T7181] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 66.623250][ T7181] ? __lock_acquire+0xcc5/0x3c40 [ 66.625276][ T7181] ___sys_sendmsg+0xff/0x1e0 [ 66.626705][ T7181] ? __pfx____sys_sendmsg+0x10/0x10 [ 66.628228][ T7181] ? trace_lock_acquire+0x14e/0x1f0 [ 66.629709][ T7181] __sys_sendmmsg+0x201/0x420 [ 66.631000][ T7181] ? __pfx___sys_sendmmsg+0x10/0x10 [ 66.632479][ T7181] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 66.634124][ T7181] ? fput+0x67/0x440 [ 66.635466][ T7181] ? ksys_write+0x1ba/0x250 [ 66.637163][ T7181] ? __pfx_ksys_write+0x10/0x10 [ 66.639128][ T7181] __x64_sys_sendmmsg+0x9c/0x100 [ 66.640392][ T7143] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.641127][ T7181] ? lockdep_hardirqs_on+0x7c/0x110 [ 66.641232][ T7181] do_syscall_64+0xcd/0x250 [ 66.647392][ T7181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.649786][ T7181] RIP: 0033:0x7f8f94585d29 [ 66.651579][ T7181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.657588][ T7181] RSP: 002b:00007f8f95362038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 66.659954][ T7181] RAX: ffffffffffffffda RBX: 00007f8f94775fa0 RCX: 00007f8f94585d29 [ 66.662429][ T7181] RDX: 0000000000000002 RSI: 0000000020002c40 RDI: 0000000000000003 [ 66.665196][ T7181] RBP: 00007f8f95362090 R08: 0000000000000000 R09: 0000000000000000 [ 66.667996][ T7181] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 66.670259][ T7181] R13: 0000000000000000 R14: 00007f8f94775fa0 R15: 00007fff07d42958 [ 66.673307][ T7181] [ 66.674577][ C0] vkms_vblank_simulate: vblank timer overrun [ 66.688987][ T7143] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.695723][ T7143] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.720582][ T7187] xt_CT: You must specify a L4 protocol and not use inversions on it [ 66.722933][ T7143] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.744417][ T70] hsr_slave_0: left promiscuous mode [ 66.749306][ T70] hsr_slave_1: left promiscuous mode [ 66.753416][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.755581][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.759505][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.761971][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.779733][ T70] veth1_macvtap: left promiscuous mode [ 66.781897][ T70] veth0_macvtap: left promiscuous mode [ 66.783824][ T70] veth1_vlan: left promiscuous mode [ 66.785502][ T70] veth0_vlan: left promiscuous mode [ 66.980874][ T5980] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 67.153928][ T5980] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 67.157336][ T5980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.159649][ T5980] usb 6-1: Product: syz [ 67.161178][ T5980] usb 6-1: Manufacturer: syz [ 67.162538][ T5980] usb 6-1: SerialNumber: syz [ 67.171268][ T5980] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 67.212428][ T66] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 67.217493][ T66] Bluetooth: hci2: Injecting HCI hardware error event [ 67.223807][ T66] Bluetooth: hci2: hardware error 0x00 [ 67.224032][ T5980] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 67.338846][ T70] team0 (unregistering): Port device team_slave_1 removed [ 67.396441][ T70] team0 (unregistering): Port device team_slave_0 removed [ 67.428843][ T7189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.431978][ T7189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.434517][ T7189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.437023][ T7189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.439641][ T7189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.442555][ T7189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.446783][ T7189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.450560][ T7189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.454544][ T7189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.457954][ T7189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.469676][ T35] usb 6-1: USB disconnect, device number 3 [ 67.534017][ T7204] xt_ipcomp: unknown flags 12 [ 67.621059][ T5954] Bluetooth: hci3: command tx timeout [ 67.688591][ T5948] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.699416][ T5948] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.702791][ T5948] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.718031][ T5948] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.721127][ T5948] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.724561][ T5948] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.916051][ T7143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.962970][ T7143] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.964145][ T7220] FAULT_INJECTION: forcing a failure. [ 67.964145][ T7220] name failslab, interval 1, probability 0, space 0, times 1 [ 67.968765][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.969174][ T7220] CPU: 3 UID: 0 PID: 7220 Comm: syz.0.361 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 67.971237][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.974143][ T7220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.979264][ T7220] Call Trace: [ 67.980226][ T7220] [ 67.980572][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.981076][ T7220] dump_stack_lvl+0x16c/0x1f0 [ 67.981095][ T7220] should_fail_ex+0x497/0x5b0 [ 67.981111][ T7220] ? fs_reclaim_acquire+0xae/0x150 [ 67.981122][ T7220] should_failslab+0xc2/0x120 [ 67.983982][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.985246][ T7220] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 67.989909][ T7209] chnl_net:caif_netlink_parms(): no params data found [ 67.991969][ T7220] ? __pfx___lock_acquire+0x10/0x10 [ 67.991983][ T7220] ? __alloc_skb+0x2b1/0x380 [ 67.992000][ T7220] __alloc_skb+0x2b1/0x380 [ 67.992014][ T7220] ? __pfx___alloc_skb+0x10/0x10 [ 67.992027][ T7220] ? hlock_class+0x4e/0x130 [ 67.992040][ T7220] ? mark_lock+0xb5/0xc60 [ 68.004226][ T7220] ? __pfx_mark_lock+0x10/0x10 [ 68.005605][ T7220] alloc_skb_with_frags+0xe4/0x850 [ 68.007075][ T7220] ? __ipv6_addr_label+0x1ce/0x3a0 [ 68.008554][ T7220] sock_alloc_send_pskb+0x7f1/0x980 [ 68.010050][ T7220] ? __lock_acquire+0xcc5/0x3c40 [ 68.011477][ T7220] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 68.013128][ T7220] ? __pfx___lock_acquire+0x10/0x10 [ 68.014617][ T7220] __ip6_append_data.isra.0+0x2ac3/0x45e0 [ 68.016253][ T7220] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 68.017851][ T7220] ? __pfx___ip6_append_data.isra.0+0x10/0x10 [ 68.019584][ T7220] ? ip6_mtu+0x231/0x4a0 [ 68.020813][ T7220] ? ip6_setup_cork+0xc21/0x1460 [ 68.022243][ T7220] ip6_make_skb+0x30b/0x4e0 [ 68.023554][ T7220] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 68.025151][ T7220] ? __pfx_ip6_make_skb+0x10/0x10 [ 68.026601][ T7220] ? find_held_lock+0x2d/0x110 [ 68.027996][ T7220] ? udpv6_sendmsg+0x2505/0x3040 [ 68.029489][ T7220] udpv6_sendmsg+0x2505/0x3040 [ 68.030877][ T7220] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 68.032475][ T7220] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 68.033954][ T7220] ? find_held_lock+0x59/0x110 [ 68.035333][ T7220] ? find_held_lock+0x2d/0x110 [ 68.036724][ T7220] ? __local_bh_enable_ip+0xa4/0x120 [ 68.038274][ T7220] ? lockdep_hardirqs_on+0x7c/0x110 [ 68.039763][ T7220] ? inet_autobind+0x145/0x1a0 [ 68.041146][ T7220] ? __local_bh_enable_ip+0xa4/0x120 [ 68.042657][ T7220] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 68.044142][ T7220] ? inet6_sendmsg+0x105/0x140 [ 68.045512][ T7220] inet6_sendmsg+0x105/0x140 [ 68.046840][ T7220] ____sys_sendmsg+0x68c/0xc90 [ 68.048230][ T7220] ? copy_msghdr_from_user+0x10b/0x160 [ 68.049782][ T7220] ? __pfx_____sys_sendmsg+0x10/0x10 [ 68.051299][ T7220] ? __lock_acquire+0xcc5/0x3c40 [ 68.052718][ T7220] ___sys_sendmsg+0x135/0x1e0 [ 68.054068][ T7220] ? __pfx____sys_sendmsg+0x10/0x10 [ 68.055559][ T7220] ? trace_lock_acquire+0x14e/0x1f0 [ 68.057066][ T7220] __sys_sendmmsg+0x201/0x420 [ 68.058434][ T7220] ? __pfx___sys_sendmmsg+0x10/0x10 [ 68.059931][ T7220] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 68.061664][ T7220] ? fput+0x67/0x440 [ 68.062801][ T7220] ? ksys_write+0x1ba/0x250 [ 68.064113][ T7220] ? __pfx_ksys_write+0x10/0x10 [ 68.065504][ T7220] __x64_sys_sendmmsg+0x9c/0x100 [ 68.066925][ T7220] ? lockdep_hardirqs_on+0x7c/0x110 [ 68.068466][ T7220] do_syscall_64+0xcd/0x250 [ 68.069802][ T7220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.071499][ T7220] RIP: 0033:0x7f8f94585d29 [ 68.072792][ T7220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.078267][ T7220] RSP: 002b:00007f8f95362038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 68.080631][ T7220] RAX: ffffffffffffffda RBX: 00007f8f94775fa0 RCX: 00007f8f94585d29 [ 68.082879][ T7220] RDX: 0000000000000002 RSI: 0000000020002c40 RDI: 0000000000000003 [ 68.085140][ T7220] RBP: 00007f8f95362090 R08: 0000000000000000 R09: 0000000000000000 [ 68.087393][ T7220] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 68.089663][ T7220] R13: 0000000000000000 R14: 00007f8f94775fa0 R15: 00007fff07d42958 [ 68.091915][ T7220] [ 68.140562][ T7209] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.143721][ T7209] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.145818][ T7209] bridge_slave_0: entered allmulticast mode [ 68.148113][ T7209] bridge_slave_0: entered promiscuous mode [ 68.154284][ T7209] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.156362][ T7209] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.158492][ T7209] bridge_slave_1: entered allmulticast mode [ 68.161420][ T7209] bridge_slave_1: entered promiscuous mode [ 68.187462][ T7235] mkiss: ax0: crc mode is auto. [ 68.190216][ T7209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.194512][ T7209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.235647][ T7237] xt_hashlimit: size too large, truncated to 1048576 [ 68.237062][ T7209] team0: Port device team_slave_0 added [ 68.244756][ T7209] team0: Port device team_slave_1 added [ 68.263029][ T5980] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 68.265207][ T5980] ath9k_htc: Failed to initialize the device [ 68.268636][ T35] usb 6-1: ath9k_htc: USB layer deinitialized [ 68.279156][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.281442][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.288901][ T7209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.295175][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.297183][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.306507][ T7209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.355960][ T7209] hsr_slave_0: entered promiscuous mode [ 68.366695][ T7209] hsr_slave_1: entered promiscuous mode [ 68.439852][ T7260] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 68.479223][ T7209] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 68.490853][ T7209] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.494970][ T7209] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 68.499321][ T7209] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 68.505572][ T7143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.505852][ T5980] hid (null): invalid report_size 48347 [ 68.512739][ T5980] hid-generic 0209:0007:0007.0002: invalid report_size 48347 [ 68.520690][ T5980] hid-generic 0209:0007:0007.0002: item 0 2 1 7 parsing failed [ 68.523148][ T5980] hid-generic 0209:0007:0007.0002: probe with driver hid-generic failed with error -22 [ 68.543421][ T7209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.549901][ T7209] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.573998][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.576059][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.582855][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.584943][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.612297][ T7143] veth0_vlan: entered promiscuous mode [ 68.615914][ T7143] veth1_vlan: entered promiscuous mode [ 68.647963][ T7143] veth0_macvtap: entered promiscuous mode [ 68.653170][ T7143] veth1_macvtap: entered promiscuous mode [ 68.663851][ T7209] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.666969][ T7209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.676658][ T7143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.679700][ T7143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.682782][ T7143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.685747][ T7143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.689094][ T7143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.692283][ T7143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.695236][ T7143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.697989][ T7143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.701162][ T7143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.705272][ T7143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.717069][ T7143] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.719502][ T7143] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.722121][ T7143] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.724529][ T7143] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.749088][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.755331][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.765803][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.768060][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.774959][ T7209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.914225][ T7209] veth0_vlan: entered promiscuous mode [ 68.920340][ T7209] veth1_vlan: entered promiscuous mode [ 68.929207][ T7209] veth0_macvtap: entered promiscuous mode [ 68.932225][ T7209] veth1_macvtap: entered promiscuous mode [ 68.940339][ T7209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.944666][ T7209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.948557][ T7209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.952229][ T7209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.955526][ T7209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.958495][ T7209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.961863][ T7209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.968230][ T7209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.972538][ T7209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.975608][ T7209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.978622][ T7209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.981543][ T7209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.984651][ T7209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.989334][ T7209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.993796][ T7209] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.996453][ T7209] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.998899][ T7209] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.003164][ T7209] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.016221][ T5954] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 69.055804][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.058108][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.073121][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.075671][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.160919][ T7336] FAULT_INJECTION: forcing a failure. [ 69.160919][ T7336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.166076][ T7336] CPU: 1 UID: 0 PID: 7336 Comm: syz.5.376 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 69.170325][ T7336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.174534][ T7336] Call Trace: [ 69.175511][ T7336] [ 69.176453][ T7336] dump_stack_lvl+0x16c/0x1f0 [ 69.177831][ T7336] should_fail_ex+0x497/0x5b0 [ 69.179203][ T7336] _copy_from_user+0x2e/0xd0 [ 69.180560][ T7336] copy_msghdr_from_user+0x99/0x160 [ 69.182056][ T7336] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 69.183721][ T7336] ? __lock_acquire+0xcc5/0x3c40 [ 69.185180][ T7336] ? hlock_class+0x4e/0x130 [ 69.186587][ T7336] ? __lock_acquire+0x15a9/0x3c40 [ 69.188188][ T7336] ___sys_sendmsg+0xff/0x1e0 [ 69.189562][ T7336] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.191100][ T7336] ? __pfx___lock_acquire+0x10/0x10 [ 69.192675][ T7336] ? __pfx___might_resched+0x10/0x10 [ 69.194233][ T7336] ? __might_fault+0xe3/0x190 [ 69.195622][ T7336] __sys_sendmmsg+0x201/0x420 [ 69.197104][ T7336] ? __pfx___sys_sendmmsg+0x10/0x10 [ 69.198912][ T7336] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 69.200656][ T7336] ? fput+0x67/0x440 [ 69.201794][ T7336] ? ksys_write+0x1ba/0x250 [ 69.203113][ T7336] ? __pfx_ksys_write+0x10/0x10 [ 69.204525][ T7336] __x64_sys_sendmmsg+0x9c/0x100 [ 69.205954][ T7336] ? lockdep_hardirqs_on+0x7c/0x110 [ 69.207813][ T7336] do_syscall_64+0xcd/0x250 [ 69.209247][ T7336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.210936][ T7336] RIP: 0033:0x7fce25585d29 [ 69.212401][ T7336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.218546][ T7336] RSP: 002b:00007fce26323038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 69.221376][ T7336] RAX: ffffffffffffffda RBX: 00007fce25775fa0 RCX: 00007fce25585d29 [ 69.223677][ T7336] RDX: 0000000000000002 RSI: 0000000020002c40 RDI: 0000000000000003 [ 69.225914][ T7336] RBP: 00007fce26323090 R08: 0000000000000000 R09: 0000000000000000 [ 69.228325][ T7336] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 69.230502][ T7336] R13: 0000000000000000 R14: 00007fce25775fa0 R15: 00007fff5d25e2e8 [ 69.232709][ T7336] [ 69.290839][ T66] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 69.297061][ T7338] infiniband syz2: set down [ 69.299612][ T7338] infiniband syz2: added ipvlan1 [ 69.330082][ T7338] RDS/IB: syz2: added [ 69.333697][ T7338] smc: adding ib device syz2 with port count 1 [ 69.335575][ T7338] smc: ib device syz2 port 1 has pnetid [ 69.565777][ T7370] overlay: ./file0 is not a directory [ 69.630700][ T7374] __nla_validate_parse: 1 callbacks suppressed [ 69.630711][ T7374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.385'. [ 69.700763][ T66] Bluetooth: hci3: command tx timeout [ 69.770927][ T66] Bluetooth: hci4: command tx timeout [ 69.878326][ T7388] FAULT_INJECTION: forcing a failure. [ 69.878326][ T7388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.883263][ T7388] CPU: 3 UID: 0 PID: 7388 Comm: syz.4.390 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 69.887137][ T7388] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.891136][ T7388] Call Trace: [ 69.892400][ T7388] [ 69.893498][ T7388] dump_stack_lvl+0x16c/0x1f0 [ 69.895255][ T7388] should_fail_ex+0x497/0x5b0 [ 69.897020][ T7388] _copy_from_user+0x2e/0xd0 [ 69.898777][ T7388] move_addr_to_kernel+0x68/0x160 [ 69.900653][ T7388] __copy_msghdr+0x386/0x470 [ 69.902381][ T7388] copy_msghdr_from_user+0xc2/0x160 [ 69.904322][ T7388] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 69.906478][ T7388] ? __lock_acquire+0xcc5/0x3c40 [ 69.908342][ T7388] ? hlock_class+0x4e/0x130 [ 69.910035][ T7388] ? __lock_acquire+0x15a9/0x3c40 [ 69.911917][ T7388] ___sys_sendmsg+0xff/0x1e0 [ 69.913652][ T7388] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.915569][ T7388] ? __pfx___lock_acquire+0x10/0x10 [ 69.917521][ T7388] ? __pfx___might_resched+0x10/0x10 [ 69.919473][ T7388] ? __might_fault+0xe3/0x190 [ 69.921156][ T7388] __sys_sendmmsg+0x201/0x420 [ 69.922927][ T7388] ? __pfx___sys_sendmmsg+0x10/0x10 [ 69.924871][ T7388] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 69.927093][ T7388] ? fput+0x67/0x440 [ 69.928557][ T7388] ? ksys_write+0x1ba/0x250 [ 69.930244][ T7388] ? __pfx_ksys_write+0x10/0x10 [ 69.932086][ T7388] __x64_sys_sendmmsg+0x9c/0x100 [ 69.933924][ T7388] ? lockdep_hardirqs_on+0x7c/0x110 [ 69.935859][ T7388] do_syscall_64+0xcd/0x250 [ 69.937572][ T7388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.939766][ T7388] RIP: 0033:0x7f90ea385d29 [ 69.941499][ T7388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.948023][ T7388] RSP: 002b:00007f90eb0f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 69.950281][ T7388] RAX: ffffffffffffffda RBX: 00007f90ea575fa0 RCX: 00007f90ea385d29 [ 69.952487][ T7388] RDX: 0000000000000002 RSI: 0000000020002c40 RDI: 0000000000000003 [ 69.954702][ T7388] RBP: 00007f90eb0f3090 R08: 0000000000000000 R09: 0000000000000000 [ 69.956966][ T7388] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 69.959209][ T7388] R13: 0000000000000000 R14: 00007f90ea575fa0 R15: 00007ffcaa018fb8 [ 69.961568][ T7388] [ 70.351053][ T7419] FAULT_INJECTION: forcing a failure. [ 70.351053][ T7419] name failslab, interval 1, probability 0, space 0, times 0 [ 70.354736][ T7419] CPU: 3 UID: 0 PID: 7419 Comm: syz.0.400 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 70.357773][ T7419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.360847][ T7419] Call Trace: [ 70.361817][ T7419] [ 70.362672][ T7419] dump_stack_lvl+0x16c/0x1f0 [ 70.364034][ T7419] should_fail_ex+0x497/0x5b0 [ 70.365412][ T7419] ? fs_reclaim_acquire+0xae/0x150 [ 70.366885][ T7419] should_failslab+0xc2/0x120 [ 70.368261][ T7419] __kmalloc_noprof+0xcb/0x510 [ 70.369640][ T7419] ? __import_iovec+0x1f2/0x6d0 [ 70.371053][ T7419] sock_kmalloc+0x111/0x170 [ 70.372383][ T7419] ____sys_sendmsg+0x876/0xc90 [ 70.373773][ T7419] ? copy_msghdr_from_user+0x10b/0x160 [ 70.375330][ T7419] ? __pfx_____sys_sendmsg+0x10/0x10 [ 70.376855][ T7419] ? __lock_acquire+0xcc5/0x3c40 [ 70.378311][ T7419] ? hlock_class+0x4e/0x130 [ 70.379639][ T7419] ? __lock_acquire+0x15a9/0x3c40 [ 70.381108][ T7419] ___sys_sendmsg+0x135/0x1e0 [ 70.382468][ T7419] ? __pfx____sys_sendmsg+0x10/0x10 [ 70.383965][ T7419] ? __pfx___lock_acquire+0x10/0x10 [ 70.385485][ T7419] ? __pfx___might_resched+0x10/0x10 [ 70.387004][ T7419] ? __might_fault+0xe3/0x190 [ 70.388395][ T7419] __sys_sendmmsg+0x201/0x420 [ 70.389760][ T7419] ? __pfx___sys_sendmmsg+0x10/0x10 [ 70.391269][ T7419] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 70.393018][ T7419] ? fput+0x67/0x440 [ 70.394157][ T7419] ? ksys_write+0x1ba/0x250 [ 70.395470][ T7419] ? __pfx_ksys_write+0x10/0x10 [ 70.396898][ T7419] __x64_sys_sendmmsg+0x9c/0x100 [ 70.398348][ T7419] ? lockdep_hardirqs_on+0x7c/0x110 [ 70.399827][ T7419] do_syscall_64+0xcd/0x250 [ 70.401208][ T7419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.402912][ T7419] RIP: 0033:0x7f8f94585d29 [ 70.404207][ T7419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.409711][ T7419] RSP: 002b:00007f8f95362038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 70.412115][ T7419] RAX: ffffffffffffffda RBX: 00007f8f94775fa0 RCX: 00007f8f94585d29 [ 70.414592][ T7419] RDX: 0000000000000002 RSI: 0000000020002c40 RDI: 0000000000000003 [ 70.416885][ T7419] RBP: 00007f8f95362090 R08: 0000000000000000 R09: 0000000000000000 [ 70.419179][ T7419] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 70.421447][ T7419] R13: 0000000000000000 R14: 00007f8f94775fa0 R15: 00007fff07d42958 [ 70.423729][ T7419] [ 70.900805][ T7209] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 70.904024][ T7209] CPU: 2 UID: 0 PID: 7209 Comm: syz-executor Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 70.907107][ T7209] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.908556][ T39] kauditd_printk_skb: 33 callbacks suppressed [ 70.908565][ T39] audit: type=1400 audit(1737197221.891:473): avc: denied { watch } for pid=7439 comm="syz.1.402" path="/140/file0" dev="tmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.910158][ T7209] Call Trace: [ 70.915306][ T7440] Process accounting resumed [ 70.917978][ T7209] [ 70.917987][ T7209] dump_stack_lvl+0x16c/0x1f0 [ 70.922843][ T7209] dump_header+0x101/0x900 [ 70.924153][ T7209] oom_kill_process+0x270/0xa60 [ 70.925566][ T7209] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 70.927177][ T7209] out_of_memory+0x351/0x1700 [ 70.928534][ T7209] ? __pfx_out_of_memory+0x10/0x10 [ 70.930001][ T7209] ? rcu_read_unlock+0x17/0x60 [ 70.931389][ T7209] ? find_held_lock+0x2d/0x110 [ 70.932778][ T7209] mem_cgroup_out_of_memory+0x207/0x270 [ 70.934371][ T7209] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 70.936120][ T7209] ? do_raw_spin_unlock+0x172/0x230 [ 70.937670][ T7209] try_charge_memcg+0x54c/0xaf0 [ 70.939082][ T7209] ? __pfx_try_charge_memcg+0x10/0x10 [ 70.940629][ T7209] ? __pfx_lock_release+0x10/0x10 [ 70.942082][ T7209] ? trace_lock_acquire+0x14e/0x1f0 [ 70.943580][ T7209] mem_cgroup_swapin_charge_folio+0x14c/0x380 [ 70.945327][ T7209] __read_swap_cache_async+0x436/0x660 [ 70.946890][ T7209] ? __pfx___read_swap_cache_async+0x10/0x10 [ 70.948613][ T7209] ? swp_swap_info+0xcf/0x130 [ 70.949963][ T7209] ? __pfx_swp_swap_info+0x10/0x10 [ 70.951442][ T7209] ? hlock_class+0x4e/0x130 [ 70.952756][ T7209] ? __lock_acquire+0x15a9/0x3c40 [ 70.954198][ T7209] swap_cluster_readahead+0x3ec/0x740 [ 70.955713][ T7209] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 70.957355][ T7209] ? filemap_get_entry+0x1a8/0x3c0 [ 70.958823][ T7209] ? get_vma_policy+0x248/0x3c0 [ 70.960237][ T7209] swapin_readahead+0x12c/0xd60 [ 70.961640][ T7209] ? get_swap_device+0x362/0x5e0 [ 70.963064][ T7209] ? __pfx_swapin_readahead+0x10/0x10 [ 70.964600][ T7209] ? __filemap_get_folio+0x2a5/0xaf0 [ 70.966114][ T7209] ? swap_cache_get_folio+0x1e0/0x460 [ 70.967671][ T7209] ? get_swap_device+0x245/0x5e0 [ 70.969062][ T7209] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 70.970643][ T7209] ? __pfx___lock_acquire+0x10/0x10 [ 70.972103][ T7209] do_swap_page+0x680/0x5970 [ 70.973392][ T7209] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 70.974993][ T7209] ? rcu_is_watching+0x12/0xc0 [ 70.976389][ T7209] ? trace_lock_acquire+0x14e/0x1f0 [ 70.977888][ T7209] ? __pfx_do_swap_page+0x10/0x10 [ 70.979341][ T7209] ? lock_acquire+0x2f/0xb0 [ 70.980652][ T7209] ? ___pte_offset_map+0x42/0x540 [ 70.982104][ T7209] ? __pfx_default_wake_function+0x10/0x10 [ 70.983764][ T7209] ? ___pte_offset_map+0x1b9/0x540 [ 70.985240][ T7209] __handle_mm_fault+0x1055/0x2a40 [ 70.986696][ T7209] ? lock_vma_under_rcu+0x6b9/0x980 [ 70.988204][ T7209] ? __pfx___handle_mm_fault+0x10/0x10 [ 70.989765][ T7209] ? __pfx_get_timespec64+0x10/0x10 [ 70.991266][ T7209] handle_mm_fault+0x3fa/0xaa0 [ 70.992648][ T7209] do_user_addr_fault+0x60d/0x13f0 [ 70.994113][ T7209] exc_page_fault+0x5c/0xc0 [ 70.995384][ T7209] asm_exc_page_fault+0x26/0x30 [ 70.996785][ T7209] RIP: 0033:0x7fce255b85e8 [ 70.998095][ T7209] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 71.003555][ T7209] RSP: 002b:00007fff5d25e610 EFLAGS: 00010293 [ 71.005297][ T7209] RAX: 0000000000000000 RBX: 0000000000000012 RCX: 00007fce255b85e5 [ 71.007541][ T7209] RDX: 00007fff5d25e650 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.009783][ T7209] RBP: 00007fff5d25e6ac R08: 0000000000000000 R09: 00007fce26324000 [ 71.012035][ T7209] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 71.014300][ T7209] R13: 0000000000010fa2 R14: 00007fff5d25e700 R15: 0000000000000bb8 [ 71.016559][ T7209] [ 71.020849][ T7209] memory: usage 307200kB, limit 307200kB, failcnt 99 [ 71.023352][ T7209] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 71.025933][ T7209] kmem: usage 1176kB, limit 9007199254740988kB, failcnt 0 [ 71.028004][ T7209] Memory cgroup stats for /syz5: [ 71.029712][ T7209] cache 313106432 [ 71.032407][ T7209] rss 0 [ 71.033240][ T7209] rss_huge 0 [ 71.034188][ T7209] shmem 313106432 [ 71.035254][ T7209] mapped_file 0 [ 71.036282][ T7209] dirty 0 [ 71.037138][ T7209] writeback 0 [ 71.038150][ T7209] workingset_refault_anon 8 [ 71.040288][ T7209] workingset_refault_file 0 [ 71.040408][ T7455] FAULT_INJECTION: forcing a failure. [ 71.040408][ T7455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.041884][ T7209] swap 196608 [ 71.045394][ T7455] CPU: 2 UID: 0 PID: 7455 Comm: syz.4.411 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 71.046354][ T7209] swapcached 0 [ 71.049318][ T7455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.050314][ T7209] pgpgin 76711 [ 71.053305][ T7455] Call Trace: [ 71.053311][ T7455] [ 71.053316][ T7455] dump_stack_lvl+0x16c/0x1f0 [ 71.053334][ T7455] should_fail_ex+0x497/0x5b0 [ 71.053350][ T7455] _copy_from_user+0x2e/0xd0 [ 71.053361][ T7455] ____sys_sendmsg+0x8d2/0xc90 [ 71.053375][ T7455] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.053387][ T7455] ? __lock_acquire+0xcc5/0x3c40 [ 71.053400][ T7455] ? hlock_class+0x4e/0x130 [ 71.053414][ T7455] ? __lock_acquire+0x15a9/0x3c40 [ 71.053427][ T7455] ___sys_sendmsg+0x135/0x1e0 [ 71.053438][ T7455] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.053447][ T7455] ? __pfx___lock_acquire+0x10/0x10 [ 71.053468][ T7455] ? __pfx___might_resched+0x10/0x10 [ 71.053480][ T7455] ? __might_fault+0xe3/0x190 [ 71.053496][ T7455] __sys_sendmmsg+0x201/0x420 [ 71.053507][ T7455] ? __pfx___sys_sendmmsg+0x10/0x10 [ 71.053521][ T7455] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 71.053539][ T7455] ? fput+0x67/0x440 [ 71.053552][ T7455] ? ksys_write+0x1ba/0x250 [ 71.053561][ T7455] ? __pfx_ksys_write+0x10/0x10 [ 71.053574][ T7455] __x64_sys_sendmmsg+0x9c/0x100 [ 71.053583][ T7455] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.053596][ T7455] do_syscall_64+0xcd/0x250 [ 71.053610][ T7455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.053625][ T7455] RIP: 0033:0x7f90ea385d29 [ 71.053634][ T7455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.053644][ T7455] RSP: 002b:00007f90eb0f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 71.053654][ T7455] RAX: ffffffffffffffda RBX: 00007f90ea575fa0 RCX: 00007f90ea385d29 [ 71.053661][ T7455] RDX: 0000000000000002 RSI: 0000000020002c40 RDI: 0000000000000003 [ 71.053667][ T7455] RBP: 00007f90eb0f3090 R08: 0000000000000000 R09: 0000000000000000 [ 71.059941][ T7209] pgpgout 269 [ 71.060535][ T7455] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 71.062256][ T7209] pgfault 571 [ 71.063428][ T7455] R13: 0000000000000000 R14: 00007f90ea575fa0 R15: 00007ffcaa018fb8 [ 71.064851][ T7209] pgmajfault 1 [ 71.066146][ T7455] [ 71.067573][ T7209] inactive_anon 313106432 [ 71.090928][ T7458] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 71.099285][ T7209] active_anon 0 [ 71.118930][ T7209] inactive_file 0 [ 71.120058][ T7209] active_file 0 [ 71.122935][ T7209] unevictable 0 [ 71.123996][ T7209] hierarchical_memory_limit 314572800 [ 71.125536][ T7209] hierarchical_memsw_limit 9223372036854771712 [ 71.127287][ T7209] total_cache 313106432 [ 71.128520][ T7209] total_rss 0 [ 71.129491][ T7209] total_rss_huge 0 [ 71.130591][ T7209] total_shmem 313106432 [ 71.133187][ T7209] total_mapped_file 0 [ 71.134368][ T7209] total_dirty 0 [ 71.135386][ T7209] total_writeback 0 [ 71.136493][ T7209] total_workingset_refault_anon 8 [ 71.137945][ T7209] total_workingset_refault_file 0 [ 71.139382][ T7209] total_swap 196608 [ 71.140507][ T7209] total_swapcached 0 [ 71.143060][ T7209] total_pgpgin 76711 [ 71.143829][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.144355][ T7209] total_pgpgout 269 [ 71.146093][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.147176][ T7209] total_pgfault 571 [ 71.150082][ T7209] total_pgmajfault 1 [ 71.151562][ T7209] total_inactive_anon 313106432 [ 71.152990][ T7209] total_active_anon 0 [ 71.154401][ T7209] total_inactive_file 0 [ 71.155603][ T7209] total_active_file 0 [ 71.156755][ T7209] total_unevictable 0 [ 71.157910][ T7209] anon_cost 0 [ 71.159002][ T7209] file_cost 0 [ 71.159981][ T7209] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.384,pid=7373,uid=0 [ 71.165624][ T7209] Memory cgroup out of memory: Killed process 7373 (syz.5.384) total-vm:101696kB, anon-rss:768kB, file-rss:23208kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 71.184012][ T39] audit: type=1400 audit(1737197222.171:474): avc: denied { sqpoll } for pid=7457 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 71.237443][ T39] audit: type=1400 audit(1737197222.221:475): avc: denied { create } for pid=7466 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.249101][ T39] audit: type=1400 audit(1737197222.231:476): avc: denied { getopt } for pid=7466 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.249429][ T7467] block nbd0: Unsupported socket: shutdown callout must be supported. [ 71.351719][ T30] e1000 0000:00:06.0 eth0: Reset adapter [ 71.368414][ T7480] FAULT_INJECTION: forcing a failure. [ 71.368414][ T7480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.373186][ T7480] CPU: 0 UID: 0 PID: 7480 Comm: syz.1.420 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 71.376243][ T7480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.379259][ T7480] Call Trace: [ 71.380201][ T7480] [ 71.381016][ T7480] dump_stack_lvl+0x16c/0x1f0 [ 71.382346][ T7480] should_fail_ex+0x497/0x5b0 [ 71.383655][ T7480] _copy_to_user+0x32/0xd0 [ 71.384876][ T7480] simple_read_from_buffer+0xd0/0x160 [ 71.386348][ T7480] proc_fail_nth_read+0x198/0x270 [ 71.387759][ T7480] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 71.389339][ T7480] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 71.390923][ T7480] vfs_read+0x1df/0xbe0 [ 71.392119][ T7480] ? __fget_files+0x1fc/0x3a0 [ 71.393459][ T7480] ? __pfx___mutex_lock+0x10/0x10 [ 71.394893][ T7480] ? __pfx_vfs_read+0x10/0x10 [ 71.396261][ T7480] ? __fget_files+0x206/0x3a0 [ 71.397627][ T7480] ksys_read+0x12b/0x250 [ 71.398842][ T7480] ? __pfx_ksys_read+0x10/0x10 [ 71.400219][ T7480] do_syscall_64+0xcd/0x250 [ 71.401525][ T7480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.403212][ T7480] RIP: 0033:0x7fb978f8473c [ 71.404498][ T7480] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 71.409181][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.422'. [ 71.409881][ T7480] RSP: 002b:00007fb979d0d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 71.414851][ T7480] RAX: ffffffffffffffda RBX: 00007fb979175fa0 RCX: 00007fb978f8473c [ 71.417048][ T7480] RDX: 000000000000000f RSI: 00007fb979d0d0a0 RDI: 0000000000000004 [ 71.419284][ T7480] RBP: 00007fb979d0d090 R08: 0000000000000000 R09: 0000000000000000 [ 71.421530][ T7480] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 71.423749][ T7480] R13: 0000000000000000 R14: 00007fb979175fa0 R15: 00007ffd853e24e8 [ 71.425977][ T7480] [ 71.426930][ C0] vkms_vblank_simulate: vblank timer overrun [ 71.501030][ T30] e1000 0000:00:06.0 eth0: Reset adapter [ 71.780861][ T66] Bluetooth: hci3: command tx timeout [ 71.850853][ T66] Bluetooth: hci4: command tx timeout [ 73.623069][ T30] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 73.851291][ T66] Bluetooth: hci3: command tx timeout [ 73.931657][ T66] Bluetooth: hci4: command tx timeout [ 76.011001][ T66] Bluetooth: hci4: command tx timeout [ 76.253795][ T78] cfg80211: failed to load regulatory.db [ 83.958044][ T7583] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.960823][ T7583] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.963467][ T7583] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.966065][ T7583] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.968965][ T39] audit: type=1400 audit(1737197234.951:477): avc: denied { associate } for pid=7584 comm="syz.0.424" name="cgroup.kill" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 83.970827][ T7583] geneve2: entered promiscuous mode [ 83.977552][ T7583] geneve2: entered allmulticast mode [ 83.981560][ T7583] batman_adv: batadv0: Adding interface: geneve2 [ 83.983935][ T7583] batman_adv: batadv0: Interface activated: geneve2 [ 83.995515][ T7585] overlay: Unknown parameter 'dont_appraise' [ 90.993017][ T39] audit: type=1400 audit(1737197241.981:478): avc: denied { append } for pid=7597 comm="syz.4.429" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.994531][ T7598] usb usb9: usbfs: process 7598 (syz.0.426) did not claim interface 0 before use [ 91.059445][ T7610] netlink: 32 bytes leftover after parsing attributes in process `syz.4.431'. [ 91.070350][ T7610] input: syz0 as /devices/virtual/input/input13 [ 91.143241][ T39] audit: type=1800 audit(1737197242.131:479): pid=7612 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.428" name="/" dev="fuse" ino=0 res=0 errno=0 [ 91.350707][ T5947] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 91.502681][ T5947] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 91.505810][ T5947] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 91.508590][ T5947] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 91.511254][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.515004][ T7615] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 91.520707][ T5947] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 91.530733][ T6006] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 91.700721][ T6006] usb 5-1: Using ep0 maxpacket: 8 [ 91.703535][ T6006] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 91.705902][ T6006] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.708721][ T6006] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.711917][ T6006] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.714751][ T6006] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.718478][ T6006] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 91.721326][ T6006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.748650][ T7634] netlink: 60 bytes leftover after parsing attributes in process `syz.5.437'. [ 91.752816][ T7634] program syz.5.437 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.782814][ T7637] sp0: Synchronizing with TNC [ 91.934931][ T6006] usb 5-1: usb_control_msg returned -32 [ 91.936614][ T6006] usbtmc 5-1:16.0: can't read capabilities [ 91.960374][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.440'. [ 91.966505][ T7647] bridge0: port 3(erspan0) entered blocking state [ 91.968576][ T7647] bridge0: port 3(erspan0) entered disabled state [ 91.970927][ T7647] erspan0: entered allmulticast mode [ 91.973042][ T7647] erspan0: entered promiscuous mode [ 91.974789][ T7647] bridge0: port 3(erspan0) entered blocking state [ 91.976816][ T7647] bridge0: port 3(erspan0) entered forwarding state [ 92.073413][ T39] audit: type=1400 audit(1737197243.061:480): avc: denied { read } for pid=7650 comm="syz.4.443" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 92.109485][ T7657] netlink: 28 bytes leftover after parsing attributes in process `syz.5.445'. [ 92.113601][ T7657] netlink: 'syz.5.445': attribute type 21 has an invalid length. [ 92.115931][ T7657] netlink: 128 bytes leftover after parsing attributes in process `syz.5.445'. [ 92.118642][ T7657] netlink: 'syz.5.445': attribute type 5 has an invalid length. [ 92.120951][ T7657] netlink: 'syz.5.445': attribute type 6 has an invalid length. [ 92.123129][ T7657] netlink: 3 bytes leftover after parsing attributes in process `syz.5.445'. [ 92.175264][ T39] audit: type=1400 audit(1737197243.161:481): avc: denied { write } for pid=7661 comm="syz.5.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 92.289139][ T7669] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 92.306223][ T6006] usb 5-1: USB disconnect, device number 5 [ 92.870551][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.449'. [ 93.025370][ T39] audit: type=1400 audit(1737197244.011:482): avc: denied { setopt } for pid=7692 comm="syz.0.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 93.026762][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.457'. [ 93.036139][ T7693] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 93.038905][ T7693] netlink: 'syz.0.457': attribute type 39 has an invalid length. [ 93.103820][ T39] audit: type=1800 audit(1737197244.091:483): pid=7670 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.447" name="/" dev="fuse" ino=0 res=0 errno=0 [ 93.131463][ T7611] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 93.138841][ T5981] usb 6-1: USB disconnect, device number 4 [ 93.140878][ T5954] Bluetooth: hci0: command 0x080f tx timeout [ 93.251234][ T6006] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 93.255606][ T7702] netlink: 16 bytes leftover after parsing attributes in process `syz.5.461'. [ 93.259018][ T39] audit: type=1400 audit(1737197244.241:484): avc: denied { write } for pid=7701 comm="syz.5.461" name="igmp6" dev="proc" ino=4026534017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 93.322868][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.463'. [ 93.401014][ T6006] usb 9-1: Using ep0 maxpacket: 32 [ 93.403761][ T6006] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 93.406287][ T6006] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 93.409488][ T6006] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 93.413038][ T6006] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 93.420666][ T6006] usb 9-1: config 0 interface 0 has no altsetting 0 [ 93.424093][ T6006] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 93.426670][ T6006] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 93.429036][ T6006] usb 9-1: Product: syz [ 93.430194][ T6006] usb 9-1: Manufacturer: syz [ 93.432226][ T6006] usb 9-1: SerialNumber: syz [ 93.434486][ T6006] usb 9-1: config 0 descriptor?? [ 93.437059][ T6006] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 93.437824][ T39] audit: type=1400 audit(1737197244.421:485): avc: denied { accept } for pid=7724 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 93.440135][ T6006] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 93.641675][ T7741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51275 sclass=netlink_route_socket pid=7741 comm=syz.5.474 [ 93.672933][ T39] audit: type=1400 audit(1737197244.661:486): avc: denied { bind } for pid=7740 comm="syz.5.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 93.828084][ T39] audit: type=1400 audit(1737197244.811:487): avc: denied { accept } for pid=7767 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.846462][ T5954] block nbd0: Receive control failed (result -107) [ 93.857564][ T7776] syz.0.481: attempt to access beyond end of device [ 93.857564][ T7776] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 93.861924][ T7776] syz.0.481: attempt to access beyond end of device [ 93.861924][ T7776] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 93.865582][ T7776] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 93.868371][ T7776] syz.0.481: attempt to access beyond end of device [ 93.868371][ T7776] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 93.872193][ T7776] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 93.875638][ T7776] syz.0.481: attempt to access beyond end of device [ 93.875638][ T7776] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 93.879309][ T7776] syz.0.481: attempt to access beyond end of device [ 93.879309][ T7776] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 93.883812][ T7776] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 93.886951][ T7776] syz.0.481: attempt to access beyond end of device [ 93.886951][ T7776] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 93.890832][ T7776] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 93.893870][ T7776] syz.0.481: attempt to access beyond end of device [ 93.893870][ T7776] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 93.897486][ T7776] syz.0.481: attempt to access beyond end of device [ 93.897486][ T7776] nbd0: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 93.902154][ T7776] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 93.905175][ T7776] syz.0.481: attempt to access beyond end of device [ 93.905175][ T7776] nbd0: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 93.908548][ T7781] bond2: entered promiscuous mode [ 93.909336][ T7776] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 93.911112][ T7781] bond2: entered allmulticast mode [ 93.913614][ T7776] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 93.915300][ T7781] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.951506][ T7763] nbd0: detected capacity change from 0 to 20 [ 93.954496][ T7631] block nbd0: Dead connection, failed to find a fallback [ 93.956684][ T7631] block nbd0: shutting down sockets [ 93.966428][ T7631] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.969512][ T7631] Buffer I/O error on dev nbd0, logical block 0, async page read [ 93.972120][ T7631] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.974735][ T7631] Buffer I/O error on dev nbd0, logical block 0, async page read [ 93.976988][ T7631] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.980511][ T7631] Buffer I/O error on dev nbd0, logical block 0, async page read [ 93.983450][ T7631] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.986057][ T7631] Buffer I/O error on dev nbd0, logical block 0, async page read [ 93.988366][ T7631] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.995602][ T7631] Buffer I/O error on dev nbd0, logical block 0, async page read [ 94.003412][ T7631] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.006022][ T7631] Buffer I/O error on dev nbd0, logical block 0, async page read [ 94.008398][ T7631] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.013944][ T7631] Buffer I/O error on dev nbd0, logical block 0, async page read [ 94.016282][ T7631] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.018849][ T7631] Buffer I/O error on dev nbd0, logical block 0, async page read [ 94.023798][ T7631] ldm_validate_partition_table(): Disk read failed. [ 94.026843][ T7631] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.029439][ T7631] Buffer I/O error on dev nbd0, logical block 0, async page read [ 94.032570][ T7631] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.035246][ T7631] Buffer I/O error on dev nbd0, logical block 0, async page read [ 94.037813][ T7631] Dev nbd0: unable to read RDB block 0 [ 94.039704][ T7631] nbd0: unable to read partition table [ 94.041808][ T7631] nbd0: partition table beyond EOD, truncated [ 94.050117][ T7631] ldm_validate_partition_table(): Disk read failed. [ 94.052614][ T7631] Dev nbd0: unable to read RDB block 0 [ 94.054400][ T7631] nbd0: unable to read partition table [ 94.056324][ T7631] nbd0: partition table beyond EOD, truncated [ 94.090869][ T5954] Bluetooth: hci4: command 0x0405 tx timeout [ 94.269119][ T7833] trusted_key: syz.1.499 sent an empty control message without MSG_MORE. [ 94.354278][ T5954] Bluetooth: hci4: unexpected event for opcode 0x080c [ 94.363949][ T35] usb 9-1: USB disconnect, device number 2 [ 94.366933][ T35] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 94.951019][ T7872] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 95.089032][ T7878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.103537][ T7878] binder: 7877:7878 ioctl c018620c 20000100 returned -22 [ 95.104796][ T7881] overlay: Unknown parameter 'fsname' [ 95.172659][ T7884] sch_fq: defrate 52860 ignored. [ 95.198205][ T7896] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.263997][ T7905] jfs: Unknown parameter 'grpquota' [ 95.298952][ T7912] bridge0: entered promiscuous mode [ 95.309965][ T7912] macvlan2: entered promiscuous mode [ 95.313463][ T7912] bridge0: port 3(macvlan2) entered blocking state [ 95.315516][ T7912] bridge0: port 3(macvlan2) entered disabled state [ 95.317390][ T7912] macvlan2: entered allmulticast mode [ 95.318994][ T7912] bridge0: entered allmulticast mode [ 95.322833][ T7912] macvlan2: left allmulticast mode [ 95.324686][ T7912] bridge0: left allmulticast mode [ 95.329216][ T7912] bridge0: left promiscuous mode [ 95.987606][ T7980] netlink: 'syz.4.548': attribute type 2 has an invalid length. [ 95.990194][ T7980] netlink: 'syz.4.548': attribute type 1 has an invalid length. [ 95.993611][ T7980] netlink: 'syz.4.548': attribute type 1 has an invalid length. [ 96.030907][ T7980] syz_tun: entered allmulticast mode [ 96.118525][ T39] kauditd_printk_skb: 21 callbacks suppressed [ 96.118542][ T39] audit: type=1400 audit(1737197247.101:509): avc: denied { create } for pid=7994 comm="syz.5.553" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.127191][ T39] audit: type=1400 audit(1737197247.101:510): avc: denied { mounton } for pid=7994 comm="syz.5.553" path="/48/file0" dev="tmpfs" ino=272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.213933][ T8012] sg_write: data in/out 3171656/120 bytes for SCSI command 0x0-- guessing data in; [ 96.213933][ T8012] program syz.4.559 not setting count and/or reply_len properly [ 96.284899][ T39] audit: type=1400 audit(1737197247.271:511): avc: denied { getopt } for pid=8028 comm="syz.1.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 96.336166][ T39] audit: type=1400 audit(1737197247.321:512): avc: denied { module_load } for pid=8035 comm="syz.0.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 96.337076][ T8037] Invalid ELF header type: 0 != 1 [ 97.248076][ T39] audit: type=1400 audit(1737197248.231:513): avc: denied { mounton } for pid=8053 comm="syz.0.572" path="/208/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 97.276984][ T8064] syz.4.575 uses old SIOCAX25GETINFO [ 97.457763][ T39] audit: type=1400 audit(1737197248.441:514): avc: denied { ioctl } for pid=8082 comm="syz.4.583" path="socket:[20064]" dev="sockfs" ino=20064 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 97.465031][ T39] audit: type=1400 audit(1737197248.451:515): avc: denied { execute } for pid=8082 comm="syz.4.583" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=20065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 97.526747][ T8090] __nla_validate_parse: 8 callbacks suppressed [ 97.526764][ T8090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.585'. [ 97.535108][ T8090] netlink: 'syz.4.585': attribute type 2 has an invalid length. [ 98.105258][ T8116] netlink: 20 bytes leftover after parsing attributes in process `syz.0.593'. [ 98.109607][ T8116] overlayfs: lower data-only dirs require metacopy support. [ 98.137720][ T39] audit: type=1400 audit(1737197249.121:516): avc: denied { mount } for pid=8115 comm="syz.0.593" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 98.317599][ T39] audit: type=1400 audit(1737197249.301:517): avc: denied { read } for pid=8120 comm="syz.1.595" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 98.324000][ T39] audit: type=1400 audit(1737197249.301:518): avc: denied { open } for pid=8120 comm="syz.1.595" path="/178/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 98.326983][ T8123] block device autoloading is deprecated and will be removed. [ 98.380097][ T8122] netlink: ct family unspecified [ 98.382396][ T8122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.387468][ T8119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.594'. [ 98.402338][ T8130] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.597'. [ 98.404937][ T8130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.597'. [ 98.453098][ T8134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.455740][ T8134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.540135][ T8136] xt_hashlimit: max too large, truncated to 1048576 [ 98.700856][ T2302] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 98.840741][ T5947] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 98.850712][ T2302] usb 6-1: Using ep0 maxpacket: 8 [ 98.853341][ T2302] usb 6-1: config 0 has no interfaces? [ 98.855194][ T2302] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 98.858817][ T2302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.863259][ T2302] usb 6-1: config 0 descriptor?? [ 98.970766][ T5947] usb 9-1: device descriptor read/64, error -71 [ 99.067855][ T9] usb 6-1: USB disconnect, device number 5 [ 99.202551][ T8143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.603'. [ 99.205210][ T8143] bridge_slave_1: left allmulticast mode [ 99.206846][ T8143] bridge_slave_1: left promiscuous mode [ 99.208588][ T8143] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.211073][ T5947] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 99.216618][ T8143] bridge_slave_0: left allmulticast mode [ 99.218260][ T8143] bridge_slave_0: left promiscuous mode [ 99.219972][ T8143] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.255513][ T8144] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20003 [ 99.284122][ T8147] netlink: 'syz.5.604': attribute type 28 has an invalid length. [ 99.286432][ T8147] netlink: 'syz.5.604': attribute type 3 has an invalid length. [ 99.288657][ T8147] netlink: 132 bytes leftover after parsing attributes in process `syz.5.604'. [ 99.328552][ T8149] netlink: 40 bytes leftover after parsing attributes in process `syz.5.605'. [ 99.350816][ T5947] usb 9-1: device descriptor read/64, error -71 [ 99.462230][ T5947] usb usb9-port1: attempt power cycle [ 99.476959][ T8160] veth1_macvtap: left promiscuous mode [ 99.478647][ T8160] macsec0: entered promiscuous mode [ 99.480186][ T8160] macsec0: entered allmulticast mode [ 99.488545][ T8160] veth1_macvtap: entered promiscuous mode [ 99.490249][ T8160] veth1_macvtap: entered allmulticast mode [ 99.492583][ T8160] macsec0: left promiscuous mode [ 99.494134][ T8160] macsec0: left allmulticast mode [ 99.495596][ T8160] veth1_macvtap: left allmulticast mode [ 99.841088][ T78] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 99.862179][ T5947] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 99.887136][ T5947] usb 9-1: device descriptor read/8, error -71 [ 100.120725][ T5947] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 100.135645][ T8188] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 100.139792][ T8188] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 100.141191][ T5947] usb 9-1: device descriptor read/8, error -71 [ 100.251727][ T5947] usb usb9-port1: unable to enumerate USB device [ 100.343135][ T8200] overlayfs: failed to resolve './file0': -2 [ 100.415238][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.622'. [ 100.449334][ T5947] libceph: connect (1)[c::]:6789 error -101 [ 100.452381][ T5947] libceph: mon0 (1)[c::]:6789 connect error [ 100.715746][ T5947] libceph: connect (1)[c::]:6789 error -101 [ 100.718993][ T5947] libceph: mon0 (1)[c::]:6789 connect error [ 101.232931][ T2302] libceph: connect (1)[c::]:6789 error -101 [ 101.235548][ T2302] libceph: mon0 (1)[c::]:6789 connect error [ 101.259225][ T8204] ceph: No mds server is up or the cluster is laggy [ 101.328516][ T8239] 9pnet_fd: p9_fd_create_tcp (8239): problem binding to privport [ 101.412298][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'. [ 101.424734][ T8251] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 101.476879][ T8260] netlink: 'syz.0.639': attribute type 1 has an invalid length. [ 101.484804][ T8260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.498023][ T8260] bond1: (slave gretap1): making interface the new active one [ 101.502516][ T8260] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 101.534556][ T8269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2253 sclass=netlink_route_socket pid=8269 comm=syz.1.643 [ 101.569999][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 101.570014][ T39] audit: type=1400 audit(1737197252.551:531): avc: denied { bind } for pid=8271 comm="syz.0.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 101.659174][ T39] audit: type=1400 audit(1737197252.641:532): avc: denied { mounton } for pid=8293 comm="syz.4.652" path="/71/bus" dev="tmpfs" ino=397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 101.659198][ T8294] ceph: separator ':' missing in source [ 101.684547][ T78] [ 101.685354][ T78] ====================================================== [ 101.687434][ T78] WARNING: possible circular locking dependency detected [ 101.689444][ T78] 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 Not tainted [ 101.692022][ T78] ------------------------------------------------------ [ 101.694691][ T78] kworker/1:2/78 is trying to acquire lock: [ 101.696452][ T78] ffff888025580aa8 (&q->q_usage_counter(queue)#51){++++}-{0:0}, at: blk_mq_alloc_request+0x59b/0x950 [ 101.700515][ T78] [ 101.700515][ T78] but task is already holding lock: [ 101.703213][ T78] ffff8880255810c0 (&q->limits_lock){+.+.}-{4:4}, at: sd_revalidate_disk.isra.0+0x52c/0xa8d0 [ 101.707151][ T78] [ 101.707151][ T78] which lock already depends on the new lock. [ 101.707151][ T78] [ 101.707564][ T39] audit: type=1400 audit(1737197252.671:533): avc: denied { ioctl } for pid=8304 comm="syz.4.655" path="/72/file0/file0" dev="9p" ino=38535850 ioctlcmd=0x5309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 101.710961][ T78] [ 101.710961][ T78] the existing dependency chain (in reverse order) is: [ 101.710969][ T78] [ 101.710969][ T78] -> #5 (&q->limits_lock){+.+.}-{4:4}: [ 101.710988][ T78] __mutex_lock+0x19b/0xa60 [ 101.725999][ T78] __nbd_set_size+0x2c0/0x730 [ 101.727946][ T78] nbd_start_device+0x8fd/0xd70 [ 101.729934][ T78] nbd_ioctl+0x21a/0xfd0 [ 101.731833][ T78] blkdev_ioctl+0x276/0x6d0 [ 101.732014][ T39] audit: type=1400 audit(1737197252.721:534): avc: denied { connect } for pid=8284 comm="syz.5.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 101.733707][ T78] __x64_sys_ioctl+0x190/0x200 [ 101.739659][ T8306] program syz.1.654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.741156][ T78] do_syscall_64+0xcd/0x250 [ 101.741180][ T78] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.745758][ T8306] erspan1: entered promiscuous mode [ 101.748024][ T78] [ 101.748024][ T78] -> #4 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 101.752751][ T78] blk_mq_submit_bio+0x1fb6/0x24c0 [ 101.754840][ T78] __submit_bio+0x384/0x540 [ 101.756733][ T78] submit_bio_noacct_nocheck+0x698/0xd70 [ 101.759026][ T78] submit_bio_noacct+0x93a/0x1e20 [ 101.761084][ T78] block_read_full_folio+0x812/0xa50 [ 101.763209][ T78] filemap_read_folio+0xc6/0x2a0 [ 101.765194][ T78] filemap_get_pages+0x155f/0x1be0 [ 101.767286][ T78] filemap_read+0x3ca/0xd70 [ 101.769286][ T78] blkdev_read_iter+0x187/0x480 [ 101.771118][ T78] vfs_read+0x87f/0xbe0 [ 101.772488][ T78] ksys_read+0x12b/0x250 [ 101.773867][ T78] do_syscall_64+0xcd/0x250 [ 101.775338][ T78] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.777188][ T78] [ 101.777188][ T78] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 101.779610][ T78] down_read+0x9a/0x330 [ 101.780997][ T78] page_cache_ra_unbounded+0x173/0x750 [ 101.782710][ T78] page_cache_ra_order+0x8f2/0xc80 [ 101.783425][ T39] audit: type=1400 audit(1737197252.771:535): avc: denied { write } for pid=8284 comm="syz.5.649" path="socket:[20315]" dev="sockfs" ino=20315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 101.784328][ T78] filemap_fault+0x14a5/0x2820 [ 101.790892][ T39] audit: type=1400 audit(1737197252.771:536): avc: denied { read } for pid=8284 comm="syz.5.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 101.792366][ T78] __do_fault+0x10a/0x490 [ 101.799477][ T78] do_pte_missing+0xebd/0x3e00 [ 101.801025][ T78] __handle_mm_fault+0x103c/0x2a40 [ 101.802622][ T78] handle_mm_fault+0x3fa/0xaa0 [ 101.804143][ T78] __get_user_pages+0x8d9/0x3b50 [ 101.805701][ T78] get_user_pages_unlocked+0x1c2/0x780 [ 101.807413][ T78] hva_to_pfn+0x8be/0xc20 [ 101.808813][ T78] kvm_follow_pfn+0x29f/0x3f0 [ 101.810311][ T78] __kvm_faultin_pfn+0x11c/0x1a0 [ 101.811889][ T78] kvm_mmu_faultin_pfn+0x469/0x1f30 [ 101.813522][ T78] kvm_tdp_page_fault+0x182/0x3d0 [ 101.815115][ T78] kvm_mmu_do_page_fault+0x58d/0x690 [ 101.816798][ T78] kvm_mmu_page_fault+0x20f/0x1bb0 [ 101.818435][ T78] handle_ept_violation+0x25a/0x640 [ 101.820065][ T78] vmx_handle_exit+0x733/0x1f70 [ 101.821612][ T78] vcpu_run+0x3047/0x4f50 [ 101.823009][ T78] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 101.824749][ T78] kvm_vcpu_ioctl+0x6ce/0x1520 [ 101.826252][ T78] __x64_sys_ioctl+0x190/0x200 [ 101.827770][ T78] do_syscall_64+0xcd/0x250 [ 101.829219][ T78] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.831086][ T78] [ 101.831086][ T78] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 101.833251][ T78] __might_fault+0x11b/0x190 [ 101.834722][ T78] _copy_from_user+0x29/0xd0 [ 101.836194][ T78] __blk_trace_setup+0xa8/0x180 [ 101.837729][ T78] blk_trace_setup+0x47/0x70 [ 101.839193][ T78] sg_ioctl+0x65e/0x2750 [ 101.840570][ T78] __x64_sys_ioctl+0x190/0x200 [ 101.842061][ T78] do_syscall_64+0xcd/0x250 [ 101.843504][ T78] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.845355][ T78] [ 101.845355][ T78] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 101.847616][ T78] __mutex_lock+0x19b/0xa60 [ 101.849070][ T78] blk_mq_init_sched+0x42b/0x640 [ 101.850668][ T78] elevator_init_mq+0x2cd/0x420 [ 101.852201][ T78] add_disk_fwnode+0x113/0x1300 [ 101.853710][ T78] sd_probe+0xa86/0x1000 [ 101.855062][ T78] really_probe+0x23e/0xa90 [ 101.856493][ T78] __driver_probe_device+0x1de/0x440 [ 101.858158][ T78] driver_probe_device+0x4c/0x1b0 [ 101.859721][ T78] __device_attach_driver+0x1df/0x310 [ 101.861423][ T78] bus_for_each_drv+0x157/0x1e0 [ 101.862952][ T78] __device_attach_async_helper+0x1d3/0x290 [ 101.864778][ T78] async_run_entry_fn+0x9c/0x530 [ 101.866391][ T78] process_one_work+0x9c5/0x1ba0 [ 101.867953][ T78] worker_thread+0x6c8/0xf00 [ 101.869405][ T78] kthread+0x2c1/0x3a0 [ 101.870763][ T78] ret_from_fork+0x45/0x80 [ 101.872181][ T78] ret_from_fork_asm+0x1a/0x30 [ 101.873698][ T78] [ 101.873698][ T78] -> #0 (&q->q_usage_counter(queue)#51){++++}-{0:0}: [ 101.876210][ T78] __lock_acquire+0x249e/0x3c40 [ 101.877762][ T78] lock_acquire.part.0+0x11b/0x380 [ 101.879356][ T78] blk_queue_enter+0x50f/0x640 [ 101.880890][ T78] blk_mq_alloc_request+0x59b/0x950 [ 101.882516][ T78] scsi_execute_cmd+0x1da/0xf40 [ 101.884058][ T78] read_capacity_16+0x213/0xe10 [ 101.885587][ T78] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 101.887386][ T78] scsi_rescan_device+0x243/0x340 [ 101.888970][ T78] ata_scsi_dev_rescan+0x1cb/0x470 [ 101.890602][ T78] process_one_work+0x9c5/0x1ba0 [ 101.892166][ T78] worker_thread+0x6c8/0xf00 [ 101.893633][ T78] kthread+0x2c1/0x3a0 [ 101.894958][ T78] ret_from_fork+0x45/0x80 [ 101.896389][ T78] ret_from_fork_asm+0x1a/0x30 [ 101.897884][ T78] [ 101.897884][ T78] other info that might help us debug this: [ 101.897884][ T78] [ 101.900763][ T78] Chain exists of: [ 101.900763][ T78] &q->q_usage_counter(queue)#51 --> &q->q_usage_counter(io)#49 --> &q->limits_lock [ 101.900763][ T78] [ 101.904996][ T78] Possible unsafe locking scenario: [ 101.904996][ T78] [ 101.907103][ T78] CPU0 CPU1 [ 101.908813][ T78] ---- ---- [ 101.910343][ T78] lock(&q->limits_lock); [ 101.911632][ T78] lock(&q->q_usage_counter(io)#49); [ 101.913881][ T78] lock(&q->limits_lock); [ 101.915869][ T78] rlock(&q->q_usage_counter(queue)#51); [ 101.917516][ T78] [ 101.917516][ T78] *** DEADLOCK *** [ 101.917516][ T78] [ 101.919814][ T78] 5 locks held by kworker/1:2/78: [ 101.921252][ T78] #0: ffff88801b088948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 101.924193][ T78] #1: ffffc9000168fd80 ((work_completion)(&(&ap->scsi_rescan_task)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 101.927812][ T78] #2: ffff888026f4c358 (&ap->scsi_scan_mutex){+.+.}-{4:4}, at: ata_scsi_dev_rescan+0x3e/0x470 [ 101.930761][ T78] #3: ffff888027192378 (&dev->mutex){....}-{4:4}, at: scsi_rescan_device+0x27/0x340 [ 101.933429][ T78] #4: ffff8880255810c0 (&q->limits_lock){+.+.}-{4:4}, at: sd_revalidate_disk.isra.0+0x52c/0xa8d0 [ 101.936429][ T78] [ 101.936429][ T78] stack backtrace: [ 101.938115][ T78] CPU: 1 UID: 0 PID: 78 Comm: kworker/1:2 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 101.941141][ T78] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.944186][ T78] Workqueue: events ata_scsi_dev_rescan [ 101.945776][ T78] Call Trace: [ 101.946744][ T78] [ 101.947617][ T78] dump_stack_lvl+0x116/0x1f0 [ 101.948979][ T78] print_circular_bug+0x419/0x5d0 [ 101.950461][ T78] check_noncircular+0x31a/0x400 [ 101.951884][ T78] ? __pfx_check_noncircular+0x10/0x10 [ 101.953444][ T78] ? lockdep_lock+0xc6/0x200 [ 101.954774][ T78] ? __pfx_lockdep_lock+0x10/0x10 [ 101.956223][ T78] __lock_acquire+0x249e/0x3c40 [ 101.957755][ T78] ? __pfx___lock_acquire+0x10/0x10 [ 101.959243][ T78] lock_acquire.part.0+0x11b/0x380 [ 101.960890][ T78] ? blk_mq_alloc_request+0x59b/0x950 [ 101.962448][ T78] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 101.964064][ T78] ? rcu_is_watching+0x12/0xc0 [ 101.965453][ T78] ? trace_lock_acquire+0x14e/0x1f0 [ 101.966946][ T78] ? blk_mq_alloc_request+0x59b/0x950 [ 101.968518][ T78] ? lock_acquire+0x2f/0xb0 [ 101.969820][ T78] ? blk_mq_alloc_request+0x59b/0x950 [ 101.971412][ T78] blk_queue_enter+0x50f/0x640 [ 101.972813][ T78] ? blk_mq_alloc_request+0x59b/0x950 [ 101.974354][ T78] ? __pfx_blk_queue_enter+0x10/0x10 [ 101.975885][ T78] ? add_lock_to_list+0x17d/0x390 [ 101.977348][ T78] ? lockdep_unlock+0x11a/0x290 [ 101.978753][ T78] blk_mq_alloc_request+0x59b/0x950 [ 101.980258][ T78] ? __pfx_blk_mq_alloc_request+0x10/0x10 [ 101.981917][ T78] ? find_held_lock+0x2d/0x110 [ 101.983302][ T78] scsi_execute_cmd+0x1da/0xf40 [ 101.984720][ T78] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 101.986265][ T78] ? sd_revalidate_disk.isra.0+0x52c/0xa8d0 [ 101.987958][ T78] read_capacity_16+0x213/0xe10 [ 101.989357][ T78] ? blk_mq_free_request+0x1e9/0x340 [ 101.990908][ T78] ? __pfx_read_capacity_16+0x10/0x10 [ 101.992461][ T78] ? __pfx___mutex_lock+0x10/0x10 [ 101.993914][ T78] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 101.995595][ T78] ? mark_held_locks+0x9f/0xe0 [ 101.996982][ T78] ? __pfx_sd_revalidate_disk.isra.0+0x10/0x10 [ 101.998770][ T78] ? kasan_save_stack+0x33/0x60 [ 102.000172][ T78] ? kasan_save_track+0x14/0x30 [ 102.001592][ T78] ? kasan_save_free_info+0x3b/0x60 [ 102.003082][ T78] ? __kasan_slab_free+0x51/0x70 [ 102.004511][ T78] ? kfree+0x14f/0x4b0 [ 102.005683][ T78] ? scsi_attach_vpd+0x4dc/0x580 [ 102.007133][ T78] ? scsi_rescan_device+0xf5/0x340 [ 102.008629][ T78] ? ata_scsi_dev_rescan+0x1cb/0x470 [ 102.010182][ T78] ? process_one_work+0x9c5/0x1ba0 [ 102.011675][ T78] ? worker_thread+0x6c8/0xf00 [ 102.013056][ T78] ? kthread+0x2c1/0x3a0 [ 102.014282][ T78] ? hlock_class+0x4e/0x130 [ 102.015592][ T78] ? mark_lock+0xb5/0xc60 [ 102.016843][ T78] ? mark_held_locks+0x9f/0xe0 [ 102.018246][ T78] ? kasan_quarantine_put+0x10a/0x240 [ 102.019809][ T78] ? lockdep_hardirqs_on+0x7c/0x110 [ 102.021315][ T78] ? kfree+0x14f/0x4b0 [ 102.022500][ T78] ? lockdep_hardirqs_on+0x7c/0x110 [ 102.024010][ T78] ? scsi_attach_vpd+0x4dc/0x580 [ 102.025446][ T78] ? scsi_attach_vpd+0x4dc/0x580 [ 102.026874][ T78] ? __pfx_sd_rescan+0x10/0x10 [ 102.028288][ T78] scsi_rescan_device+0x243/0x340 [ 102.029737][ T78] ata_scsi_dev_rescan+0x1cb/0x470 [ 102.031241][ T78] process_one_work+0x9c5/0x1ba0 [ 102.032669][ T78] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 102.034270][ T78] ? __pfx_process_one_work+0x10/0x10 [ 102.035807][ T78] ? rcu_is_watching+0x12/0xc0 [ 102.037221][ T78] ? assign_work+0x1a0/0x250 [ 102.038553][ T78] worker_thread+0x6c8/0xf00 [ 102.039889][ T78] ? __kthread_parkme+0x148/0x220 [ 102.041351][ T78] ? __pfx_worker_thread+0x10/0x10 [ 102.042815][ T78] kthread+0x2c1/0x3a0 [ 102.044008][ T78] ? _raw_spin_unlock_irq+0x23/0x50 [ 102.045494][ T78] ? __pfx_kthread+0x10/0x10 [ 102.046828][ T78] ret_from_fork+0x45/0x80 [ 102.048141][ T78] ? __pfx_kthread+0x10/0x10 [ 102.049478][ T78] ret_from_fork_asm+0x1a/0x30 [ 102.050895][ T78] VM DIAGNOSIS: 10:47:30 Registers: info registers vcpu 0 CPU#0 RAX=000000000009cc2c RBX=0000000000000000 RCX=ffffffff8b2a27c9 RDX=ffffed100d4c6fee RSI=ffffffff8bd1ef60 RDI=ffffffff8170a6b9 RBP=fffffbfff1bd2ef8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed100d4c6fed R10=ffff88806a637f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de977c0 R14=ffffffff905f4b50 R15=0000000000000000 RIP=ffffffff8b2a3baf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff07d41f80 CR3=000000005b68c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a3ee2d2927fb0e7 72c6ecaee6e774f3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f552e008ba676457 8b846ea01736c005 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 63e68b7c09ffd969 5d8db68641ad9c06 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cb8017a8ae621e0b f695916fb3a852ba ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001900 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000003e 002bb8c4b4050052 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003e00000000 0000003e00000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000b402efe0 0002ab0ab3bc7c0a ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 002f6fcfb41049fa 0000003e0000df3f ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ef9d306ae7d66005 27bc58be5f4bf338 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9ae4c925735fe2a4 8dcb9aeafb321eac ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851c1355 RDI=ffffffff9ab11b20 RBP=ffffffff9ab11ae0 RSP=ffffc9000168ea78 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002e R14=ffffffff851c12f0 R15=0000000000000000 RIP=ffffffff851c137f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020001000 CR3=00000000295d2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bce992049a20177e 53967c8bb5cfeaa2 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 32ad81b1fe592366 fb4c1c9db2eb7bc8 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8c79243108a1c2c7 a9d36246ef72f925 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9597c50fd6eb45cc 8417e5bc1070f7c9 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001880 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b30a870eb30e7cbc 0000003eb3107192 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0080010000800100 00800100b31245bc ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003e00800100 b30c6bca0000003e ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 008001000000003e 0000003e00800100 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b5a0893d59bfcfe3 a9ca2006049adf5e ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0e018f4decccab55 047529544702804e ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 118aeff6ca080030 0300080028030004 0024030002002203 0002002003000800 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80840046030010b0 80840046032401e0 8080840044034004 0040030008003803 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617073726501ff fffffffffffffff1 0850030204004c03 16040048030210b8 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030210b880840066 030010b080840066 030401e080808400 6403200400600300 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010010000a800401 0000000806060154 a60008000ae00300 10000ad003001000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0ac0030210000ab0 0301801000059003 2404007c03080400 7803020400700306 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04006c030c040068 030210b880840066 030010b080840066 030401e080808400 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6403200400600300 6e617073726501ff fffffffffffffff1 0850030204004c03 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000879ec RBX=0000000000000002 RCX=ffffffff8b2a27c9 RDX=ffffed100d506fee RSI=ffffffff8bd1ef60 RDI=ffffffff8170a6b9 RBP=ffffed1003ad1000 RSP=ffffc90000197e08 R8 =0000000000000000 R9 =ffffed100d506fed R10=ffff88806a837f6b R11=0000000000003b5f R12=0000000000000002 R13=ffff88801d688000 R14=ffffffff905f4b50 R15=0000000000000000 RIP=ffffffff8b2a3baf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f90ea5452d8 CR3=0000000053218000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcaa019350 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90ea402a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90ea402aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90ea402aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90ea402ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90ea402b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90ea402c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff910197cc RBX=ffffffff907a66f4 RCX=dffffc0000000000 RDX=1ffffffff20f4cde RSI=0000000000000000 RDI=ffffffff907a66b8 RBP=ffffffff907a66f4 RSP=ffffc900047375e8 R8 =ffffffff9101982c R9 =ffffffff910197d0 R10=ffffc90004737698 R11=0000000000010fbc R12=ffffffff907a66f4 R13=ffffffff820fbcf1 R14=ffffffff907a66b8 R15=ffffffff907a66f0 RIP=ffffffff814945c0 RFL=00000a07 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f2d889ec280 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb978f69ae0 CR3=00000000320a0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=00000000100001ff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005576e8655870 00005576e8655960 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff52e36740 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff52e35d60 0000003000000010 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f716d2f34706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f646e756f732f00 682e6c6974752f64 65726168732f6372 732f2e2e2f2e2e00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f716d2f34706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003375 70632f302f716d2f 34706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c7180fc37975f0ba 00000005576e8657 0000000000000091 0000000000000034 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a263b383a3a263a 383a3a26493b3a3a 26483b3a3a264b3b 3a0a00307f617930 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 264c383a3a264f38 3a3a264e383a3a26 49383a3a2648383a 3a2633383a3a2632 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020