last executing test programs: 18.889772624s ago: executing program 0 (id=352): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r1 = dup(r0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r1, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x1}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x5, &(0x7f00000004c0)=0x5, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0) close(r4) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x204, &(0x7f0000000040)={0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 18.832502579s ago: executing program 0 (id=353): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r1, 0x3b8a, &(0x7f00000001c0)={0x28, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x8001, 0x4) (async, rerun: 32) listen(r0, 0x2000) (async, rerun: 32) socket$alg(0x26, 0x5, 0x0) (rerun: 32) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={0x8}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r4, 0x0) (async) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) (async, rerun: 64) flock(0xffffffffffffffff, 0xa422928b49da8f63) (async, rerun: 64) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4, 0x5, @dev={0xfe, 0x80, '\x00', 0x28}, 0x9}, 0x1c) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000140003006d61ffffffff6e3000000000000000000400000000"], 0x40}}, 0x8044) 18.832301339s ago: executing program 0 (id=354): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001600350b27bd7000fcdbdf25adabff01ee2df96e2f76f113c80ce53843a7d43453b130302dce39e42d2cccfe255c3fc4eba092f98a1f49ca48e3457557c278fddab24163610a700628cf983a5533c288274917ffb821b5a11926c3a460e2dd67df9d74c5c9c86bf843737f7a2bfc1c78cbafbda60a2273970ca773cdd6e1577f8dc1c63909958486e472de75eb52207270010feb310129b18d0b5690caba4bd88295b8a36b0aad95047b054487aaad704311b863dadc95dcadf5e517237fd192b54d995a6e7cfce6d20903b2166d746db5200959fb4c5c4257b7fd404e3e9ebbc793aa2054"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4004) 18.782660898s ago: executing program 0 (id=355): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000380)='\xab\x00\x1a\x9c\x0fv\x99\xd8PYcK\xb7\xe6!t\xa9\xcf\x8d\xbf\x1e\x9ea#\x94\x89\x81L\xd5a\xc1\x96X\\\xac\xfc\xed\x11 \xa9\xf8t\xef\x0eT\x82:6\x16xEw\x85\xbd\r\rt\xc6Jk\x04\xa8f\xde0\xbc\xbe^3\xce\xd1\x7f\xfaH\xdbQ\xea\xbd\xf5D\xf5', 0xfffffffffffffffe) add_key$user(&(0x7f0000000480), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="94", 0x1, 0xfffffffffffffffe) unshare(0x4e020200) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r1, 0x67, 0x62}, &(0x7f00000002c0)={'enc=', 'raw', ' hash=', {'blake2s-128-arm\x00'}}, &(0x7f0000000400)="8da18a43b054e883914048ddd2e3841bc64d147b1a7a88000105c266609df07c98b0f79aa5c97d3b444237d7f61fb880cf70c3984e6c601e2a97da38ecad2859e6a9bc7fb0c280b92c6b86668c00d2da3f4ce058eea4790abb7c3d92dfb5f3ddeafdfc1b5158f1", &(0x7f00000004c0)=""/98) 18.710409121s ago: executing program 0 (id=356): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, 0x0, 0x10, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10048840) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x140, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xb0, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf685d86814b48efb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x50, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x140}, 0x1, 0x0, 0x0, 0x40000}, 0x41) 18.631561182s ago: executing program 0 (id=357): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 18.58718532s ago: executing program 32 (id=357): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 3.270392442s ago: executing program 4 (id=593): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r1, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 3.201023654s ago: executing program 4 (id=595): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="38edff00550001070000000000c1f46d00000007000000b6ec456d79107d960104a6be3d1f7bc597459c062e074fab0eb120fe5d8ea5feaa3e27cce32ad5945a28b00c6b5eed11283ce8f8b664519232ce077361a4e3323567f308316f495c5ffe78e524c65d02939940a917f878", @ANYRES16, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01000000000000000000000000400000000000010000001e8deb082bee721ce0ed00"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x1faa38a7f853eb33) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x644c2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) (async) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x103102, 0x0) (async) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r4) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r4, &(0x7f0000008100)={0x2020, 0x0, 0x0, 0x0}, 0xfffffddd) write$FUSE_INIT(r4, &(0x7f0000000200)={0x50, 0x0, r6, {0x7, 0x1f, 0xfdfffffd, 0xa5a020b, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6}}, 0x50) (async) syz_fuse_handle_req(r4, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001, 0x0, r7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000006100)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0xa, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, 0x0, 0x91) 3.152143602s ago: executing program 4 (id=596): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f40), 0x48a41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x4000000, 0xdd86}}}}}}}, 0xfdef) 3.032183826s ago: executing program 4 (id=597): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="180300000000020000000000000000001812000060acbaa667e48078fff82b089572b52d523d3ab1d5d4ccc0a3381f2c8a715a8c29c95a8fc136c6b756621406f7936f5335152ea6b29bd8d68815562b004607c0989221b1b211a79d491f4fb7d0667c9d36b9d6a17c1be2445bd0e9db074ccb33cd29e9aba320037fa8bfe2f4c03b837a93f8f54aee537c68fea9c0ba3e8ce5c07f9908de039d1f3ba3bcce10d119c6e2c6605b8fe801ec708bb301580f91fe392bdcba28f1d9e2287744fd208420f7dae3f237928ea60ac48763a2c4574fcbbb10d01b4649bd97236da40996bab38755e00c4a22ca57bf", @ANYRES32=r0, @ANYBLOB="0000000000000000b50a000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r1, &(0x7f00000004c0)=""/57, 0x39) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@metacopy_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 3.031323418s ago: executing program 4 (id=598): r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1b, 0x80, 0x43, 0x5, 0x1}, 0x10) r1 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000080)=0x1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0040, 0x0) write$snapshot(r2, &(0x7f0000000100)="75d06a3d4a3e34410b51906cabd8b83c23f232f26227e7ce99748b28c609a8b5a71420afe9ca5123acbcbcf94c7de96a5e6ee513ae3db0f22df3ac0d75e25b5cfa8f129a78f49e7d37ef4ab184b25bb0df8a7e587e1bffe99fa9f7780bd2fe89548bb219145541e3f2e3e8fda4673c7b537aa6fe9ac6e6598397292d26de0cd3d57a11108bfa869c749efc0384e8131932e3120528a4f1ad96d37f0184cd13acb9ddb09e316dd77bc84d0d7db701fea95ea5dc6c40e0c9481fb03cde00ede4b5bbdffcca03cb8639", 0xc8) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x1, 0x2, 0x3, 0x400}, {0xbf0, 0xd, 0x10, 0x4}]}, 0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000280)) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0xffff, 0x301080) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000300)) r5 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x4, 0xf0201) write$snddsp(r5, &(0x7f0000000380)="d81618527849c0f3023829ad5eedadd2bde6bbc3c69003658f77b687cd8f989a0386bf76111808a3d9a6c1b4b2f3a6c87666ae55837fe0f11f5912c86a078458e354ea51169c01dbd13870e96c7d7ef6ea38b5077b388fc5b8e24d05df34741b83f6f8938bd51486aae672abb0bfb4e8ac1da9650a34723d94fc01f74445ec1b7af76b73063dd139fc0037e2deb8aead8ed86192ae425c0bdde78e", 0x9b) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000440)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x2, 0x297171, 0x3e403b}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000540), 0x210100, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000580)={0x48, 0x7, r6, 0x0, 0x1, 0x0, 0x9, 0x3c5d7c, 0x2737e4}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r6, 0x80189439, &(0x7f0000000640)) r9 = syz_open_dev$audion(&(0x7f0000000680), 0x1, 0x200000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r9, 0xc0bc5351, &(0x7f00000006c0)={0x28e, 0x1, 'client1\x00', 0x6, "f2fb3d4abf0affeb", "29b72ee54531fbcb3d521193e7cd750c51db6b672a41b91cf359e26033fed2b8", 0x8, 0x101}) creat(&(0x7f0000000780)='./file0\x00', 0x4) r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000007c0), 0x14800, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r9, 0x3b88, &(0x7f0000000800)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f0000000840)={0x28, 0x3, r11, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9}) ioctl$USBDEVFS_ALLOW_SUSPEND(r10, 0x5522) recvmmsg(r3, &(0x7f0000008a40)=[{{&(0x7f0000000880)=@xdp, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000900)=""/58, 0x3a}, {&(0x7f0000000940)=""/41, 0x29}, {&(0x7f0000000980)=""/232, 0xe8}], 0x3}, 0x3}, {{&(0x7f0000000ac0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000b40)=""/220, 0xdc}, {&(0x7f0000000c40)=""/253, 0xfd}, {&(0x7f0000000d40)=""/109, 0x6d}, {&(0x7f0000000dc0)=""/143, 0x8f}, {&(0x7f0000000e80)=""/192, 0xc0}, {&(0x7f0000000f40)=""/33, 0x21}], 0x6, &(0x7f0000001000)=""/68, 0x44}, 0x7}, {{&(0x7f0000001080)=@nl=@proc, 0x80, &(0x7f0000002480)=[{&(0x7f0000001100)=""/71, 0x47}, {&(0x7f0000001180)=""/173, 0xad}, {&(0x7f0000001240)=""/118, 0x76}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/165, 0xa5}, {&(0x7f0000002380)=""/37, 0x25}, {&(0x7f00000023c0)=""/180, 0xb4}], 0x7, &(0x7f0000002500)=""/197, 0xc5}, 0x1}, {{&(0x7f0000002600)=@nfc_llcp, 0x80, &(0x7f0000003940)=[{&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)}, {&(0x7f00000036c0)=""/158, 0x9e}, {&(0x7f0000003780)=""/6, 0x6}, {&(0x7f00000037c0)=""/50, 0x32}, {&(0x7f0000003800)=""/3, 0x3}, {&(0x7f0000003840)=""/220, 0xdc}], 0x7, &(0x7f00000039c0)=""/2, 0x2}}, {{&(0x7f0000003a00)=@can, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000003a80)=""/213, 0xd5}, {&(0x7f0000003b80)=""/4096, 0x1000}, {&(0x7f0000004b80)=""/76, 0x4c}, {&(0x7f0000004c00)=""/202, 0xca}, {&(0x7f0000004d00)=""/122, 0x7a}, {&(0x7f0000004d80)=""/60, 0x3c}, {&(0x7f0000004dc0)=""/78, 0x4e}, {&(0x7f0000004e40)=""/120, 0x78}], 0x8, &(0x7f0000004f40)=""/56, 0x38}, 0x8}, {{&(0x7f0000004f80)=@tipc, 0x80, &(0x7f0000006100)=[{&(0x7f0000005000)=""/193, 0xc1}, {&(0x7f0000005100)=""/4096, 0x1000}], 0x2, &(0x7f0000006140)=""/152, 0x98}, 0x400}, {{&(0x7f0000006200)=@qipcrtr, 0x80, &(0x7f00000077c0)=[{&(0x7f0000006280)=""/4096, 0x1000}, {&(0x7f0000007280)=""/109, 0x6d}, {&(0x7f0000007300)=""/193, 0xc1}, {&(0x7f0000007400)=""/113, 0x71}, {&(0x7f0000007480)=""/244, 0xf4}, {&(0x7f0000007580)=""/29, 0x1d}, {&(0x7f00000075c0)=""/90, 0x5a}, {&(0x7f0000007640)=""/102, 0x66}, {&(0x7f00000076c0)=""/224, 0xe0}], 0x9, &(0x7f0000007880)}, 0xf401}, {{0x0, 0x0, &(0x7f0000008a00)=[{&(0x7f00000078c0)=""/4096, 0x1000}, {&(0x7f00000088c0)=""/208, 0xd0}, {&(0x7f00000089c0)=""/21, 0x15}], 0x3}, 0x8a000000}], 0x8, 0x10002, &(0x7f0000008c40)={0x77359400}) accept$unix(r12, &(0x7f0000008c80)=@abs, &(0x7f0000008d00)=0x6e) 2.072242702s ago: executing program 4 (id=600): syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') r0 = socket$pppl2tp(0x18, 0x1, 0x1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="200706"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000640)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x58, r5, 0x1, 0x70bd25, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x58}, 0x1, 0xf000, 0x0, 0x3000011}, 0x8c0) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0xba70}) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x369}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.069298976s ago: executing program 1 (id=610): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f00000000c0)={0x8, 0xcea, 0x4, 0x81}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x402800) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000240)=0xb75) close(r1) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000010000100"/20, @ANYRES16=r1, @ANYBLOB="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"], 0x60}}, 0x88) 984.619157ms ago: executing program 1 (id=612): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000040)=0x2108003, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1, 0x0, 0x0, 0x4044}, 0x4000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000006c0)={0x73622a85, 0x100b}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) fchdir(r2) r4 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x100000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0xa4, 0x0, &(0x7f00000005c0)=[@free_buffer={0x40086303, r4}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@flat=@weak_handle={0x77682a85, 0x80, 0x3}, @fda={0x66646185, 0x8, 0x2, 0x15}, @fda={0x66646185, 0x0, 0x0, 0x13}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}, 0x40}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000480)={@fda={0x66646185, 0x1, 0x0, 0x1e}, @flat=@weak_handle={0x77682a85, 0x100, 0x2}, @fda={0x66646185, 0x5, 0x2, 0x19}}, &(0x7f0000000280)={0x0, 0x20, 0x38}}}, @acquire], 0x0, 0x0, 0x0}) r5 = dup3(r3, r2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2000000, &(0x7f0000000500)="39ad"}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffe53, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYRESOCT=r1, @ANYBLOB="b5"], 0x6c}}, 0x0) 984.41824ms ago: executing program 3 (id=613): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r1, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 911.153249ms ago: executing program 1 (id=614): r0 = fanotify_init(0x4, 0x0) lseek(r0, 0xff, 0x2) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffff}}, './file0\x00'}) get_mempolicy(&(0x7f0000000080), &(0x7f0000000100), 0x6, &(0x7f000049e000/0x2000)=nil, 0x3) 910.389138ms ago: executing program 3 (id=615): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'syz_tun\x00', &(0x7f0000000280)=@ethtool_drvinfo={0x3, "80c1ea18c60ae80c9f47de6130590a2b5f45d3b8a34577ebce27ff60d0efa7f3", "9ab28f3b42b6ec142a85e1f2482d7fd59ba5c4d125d50e5aa635bdfbeb89b66c", "e90056816391adfc327222c3e8f8b9e7ce12b8a525e81ff65144daee5036eeaf", "fc089027e46663b854b4c592cbd43e537013872f9e1f945c9159338b1a47cf10", "38879d6c1675723af97bd0fcf2a34de372fdf5f42a4e716c5be23c246f007d01", "89e077cd410cd504dc7da9a6", 0x4, 0xffff, 0x18, 0x4, 0xffffff81}}) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) setreuid(0x0, r2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2, 0x2}, 0xe) listen(r3, 0x0) r4 = io_uring_setup(0x66d0, &(0x7f0000000140)={0x0, 0x49fd, 0x10003, 0x20002, 0x185}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000190008002cbd7000fedbdf25028020050001ff020001800000001900a6fb98abb1814a1873bdfe68b01a3573ad4c1c87cccabf1901b71068b2edbd8a20fba83e926016bd1b0f05e341fd1953b26bdab53ef1bd1c72bbed65699441b569bb7318912f42b5c7d8ea19c79b3a838611473668e9b14e4f3a02f60c926b64634dd2f4402ec81fedaa1e", @ANYRES32=r2, @ANYBLOB="08000100ac1414aa0600150006000000"], 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc010}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x8000) 909.986331ms ago: executing program 1 (id=616): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f40), 0x48a41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x8000000, 0xdd86}}}}}}}, 0xfdef) 802.090755ms ago: executing program 3 (id=617): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x15, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x101d0) 760.524111ms ago: executing program 3 (id=618): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000840)={0xfffffff2, 0x2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xaf) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000880), 0x800, 0x0) ioctl$DVD_WRITE_STRUCT(r5, 0x5390, &(0x7f0000000000)=@disckey={0x2, 0x3, "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"}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002030000", @ANYRES32=r6, @ANYBLOB="000001000a0001000180c2000000000008000f0001"], 0x30}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000008c0)={0x0, 0x6dd}, 0x8) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xc0145b0e, &(0x7f0000000040)) 758.982694ms ago: executing program 1 (id=619): r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x800) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x2, 0x300) close(0x3) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x64, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]]}, 0x64}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b1a887a1114"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@assoc_resp={{{}, {}, @broadcast, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x2d, 0x1a, {0x2000, 0x3, 0x3, 0x0, {0xfffffffffffffffe, 0x1ffe, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x5, 0x10}}}, 0x44) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xb0, 0x3ff, 0x34325241, 0x0, [], [0x2b8, 0x200000], [0x0, 0x9, 0x0, 0x3]}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1f, 0x0, 0x0, 0x1000, 0x4090c, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r6, 0x0, 0x0}, 0x20) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x800, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x13f, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a}}, 0x20}}, 0x20048010) 478.548586ms ago: executing program 2 (id=620): syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010102, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r1], 0x20}}, 0x0) pread64(r0, &(0x7f0000000040)=""/111, 0x6f, 0x6c38) 390.596748ms ago: executing program 2 (id=621): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000001500)={&(0x7f0000000040), 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/70, 0x46}, {&(0x7f0000000140)=""/49, 0x31}, {&(0x7f00000003c0)=""/164, 0xa4}, {&(0x7f0000000300)=""/135, 0x87}, {&(0x7f0000001540)=""/4110, 0x100e}, {&(0x7f0000000480)=""/219, 0xdb}], 0x6, &(0x7f00000014c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000840)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0x2b8, r4, 0x25b02e3c37a58da9, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x1d0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x7, 0x4}, {0x3, 0x6}, {0x1, 0x7}, {0x1, 0x3}, {0x1, 0x9}, {0x7}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x7, 0x2}, {0x7, 0x8}, {0x5, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x6, 0x5}, {}, {0x6, 0x6}, {0x1, 0x3}, {0x3, 0x6}, {0x5, 0x3}, {0x5, 0x7}, {0x5, 0x7}, {0x5, 0x2}, {0x7, 0x6}, {0x1}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x6}, {0x4, 0x2}, {0x4}, {0x3, 0x7}, {0x6, 0x1}, {}, {0x7, 0x5}, {0x7}, {0x0, 0x5}, {0x7, 0x7}, {0x1, 0x8}, {0x7, 0x4}, {0x6, 0xa}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x8}, {0x3, 0x6}, {0x1, 0x9}, {0x4, 0x7}, {0x2, 0x1}, {0x7, 0x3}, {0x6, 0x1}, {0x4, 0x6}, {0x0, 0x9}, {0x4, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x1, 0x4}, {0x4, 0x5}, {0x2, 0x9}, {0x3}, {0x7, 0x5}, {0x6, 0x9}, {0x6, 0x8}, {0x1}, {0x0, 0x2}, {0x5}, {0x3, 0x9}, {0x1, 0x2}, {0x7, 0xa}, {0x7}, {0x0, 0x4}, {0x4, 0x9}, {0x4, 0x8}, {0x3, 0x8}, {0x1}, {0x4, 0x3}, {0x6, 0x6}, {0x3, 0x5}, {0x3, 0x6}, {0x6, 0xa}, {0x7, 0x9}, {0x0, 0x3}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x0, 0x8}, {0x4, 0x5}, {0x7, 0x4}, {0x6, 0x4}, {0x1, 0x4}, {0x0, 0x6}, {0x1, 0x9}, {0x2}, {0x1, 0x1}, {0x1, 0x4}, {0x0, 0x6}, {0x0, 0x8}, {0x4, 0x3}, {0x2, 0x2}, {0x3}, {0x0, 0x4}, {0x0, 0xa}, {0x2, 0x5}, {0x3}, {0x3, 0x8}, {0x4, 0x9}, {0x0, 0x4}, {0x2, 0x3}, {0x7}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x5}, {0x6, 0xa}, {}, {0x6}, {0x6, 0x4}, {0x4, 0x4}, {0x1}, {0x0, 0x6}, {0x0, 0x1}, {0x4, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0x1, 0x6, 0x48, 0x6c, 0x48, 0x18, 0x2, 0x6c, 0x10, 0xb, 0x2, 0x4]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xc44e, 0x7, 0x0, 0x1, 0xff28, 0x1, 0x7]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x9}, {0x0, 0x7}, {0x6, 0x1}, {0x1, 0x2}, {0x7, 0xa}, {0x3, 0x1}, {0x7, 0xa}, {0x1, 0xa}, {0x3, 0x8}, {0x7, 0x9}, {0x1, 0x8}, {0x1, 0x7}, {0x5, 0x2}, {0x3, 0x7}, {0x2}, {0x5, 0x1}, {0x2, 0x4}, {0x4, 0x8}, {0x0, 0x4}, {0x0, 0x4}, {0x6, 0x8}, {0x2, 0x4}, {0x0, 0x7}, {0x0, 0x9}, {0x6, 0x8}, {0x2, 0x3}, {0x6, 0x3}, {}, {0x0, 0x8}, {0x2, 0x4}, {0x5, 0xa}, {0x2, 0x3}, {0x2, 0x6}, {0x7}, {0x2, 0x6}, {0x4, 0x8}, {0x1, 0x9}, {0x2, 0x3}, {0x5, 0x4}, {0x1}, {0x7, 0x8}, {0x6, 0x1}, {0x2, 0x3}, {0x7, 0x1}, {0x0, 0x5}, {0x0, 0x1}, {0x5, 0x4}, {0x3, 0x8}, {0x0, 0x9}, {0x1, 0x6}, {0x7, 0x2}, {0x6, 0x8}, {0x2, 0x4}, {0x5, 0x4}, {}, {0x3}, {0x0, 0x2}, {0x4, 0x3}, {0x6, 0xa}, {0x2}, {0x2, 0x2}, {0x0, 0x9}, {0x3}, {0x2}, {0x1, 0x6}, {0x0, 0x2}, {0x7, 0xa}, {0x0, 0x1}, {0x6, 0x5}, {0x5, 0x8}, {0x7, 0x3}, {0x2, 0x6}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1, 0x18, 0x60, 0x1b, 0xb, 0x36, 0x16, 0x12, 0x6c, 0x1b, 0x48, 0x60, 0x24, 0x18, 0x5, 0x5, 0x5, 0x6, 0x6c, 0x3, 0x3, 0x18, 0x48, 0x48, 0x3, 0xc]}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xfffb, 0xfff5, 0xa98, 0xa766, 0x1, 0x5, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x101, 0x3, 0x5, 0x3, 0x2, 0x2, 0x3ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x5, 0xa}, {0x1, 0x6}, {0x0, 0x3}, {0x1, 0x5}, {0x2, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x5, 0x3}, {0x7, 0x9}, {0x7, 0x8}, {0x1, 0x9}, {0x1, 0x9}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {}, {0x7, 0x6}, {0x0, 0x5}, {0x5, 0x3}, {0x1, 0x2}, {0x2, 0x1}, {0x3, 0x2}, {0x5, 0x6}, {0x2, 0x5}, {0x1, 0x2}, {0x2, 0x1}, {0x7, 0x6}, {0x3}, {0x0, 0x6}, {0x6, 0x7}, {0x0, 0x8}, {0x6}, {0x7, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x7, 0x5}, {0x6, 0x8}, {0x5, 0xa}, {0x3, 0x8}, {0x4, 0x4}, {0x6, 0x9}, {0x0, 0x4}, {0x0, 0x2}, {0x0, 0xa}, {0x5, 0x2}, {0x2, 0x3}, {0x7, 0x7}, {0x3, 0x8}, {0x1, 0x5}, {0x6, 0x7}, {0x1, 0x1}, {0x0, 0x4}, {0x1, 0x1}, {0x3, 0x8}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x60, 0x3, 0x18, 0x16, 0x18, 0x60, 0x1b, 0x6c, 0x3, 0x24, 0x18, 0x6, 0x16, 0x2, 0x2, 0x5, 0x1d, 0x24, 0x4]}]}]}, @NL80211_ATTR_TX_RATES={0xd4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x16, 0xe9175af2175779bf, 0x6c, 0xb, 0x1, 0x3, 0xb, 0x6c, 0x9, 0x60, 0x9, 0x62, 0x5, 0x3, 0x18, 0x0, 0x6c, 0x9, 0x48, 0x1b, 0x2, 0x9, 0x36, 0x4]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0x3}, {0x0, 0xa}, {0x1, 0x8}, {0x4, 0xa}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x5}, {0x6, 0x4}, {0x0, 0x7}, {0x1, 0x6}, {0x4}, {0x4, 0x9}, {0x7, 0x1}, {0x1, 0x5}, {0x6, 0x9}, {0x1, 0x6}, {0x4, 0x1}, {0x5, 0x8}, {0x5, 0x8}, {0x0, 0x1}, {0x1, 0x5}, {0x5}, {0x7, 0x4}, {0x1, 0x6}, {0x0, 0x3}, {0x5, 0x8}, {0x2, 0x7}, {0x0, 0x8}, {0x5, 0x6}, {0x6, 0x1}, {0x2, 0x9}, {0x1}, {0x7, 0x6}, {0x2, 0x1}, {0x2, 0x6}, {0x7, 0x8}, {0x1, 0x3}, {0x3, 0x9}, {0x7, 0x3}, {0x1, 0x5}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x8}, {0x0, 0x3}, {0x7}, {0x3, 0x9}, {0x0, 0x8}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0xa}, {0x4, 0x8}, {0x1, 0x1}, {0x0, 0x2}, {0x5, 0x2}, {0x0, 0x2}, {0x5, 0x5}, {0x3, 0x5}, {0x4, 0x7}, {0x4, 0x7}, {0x7, 0x2}, {0x1, 0x3}, {0x2, 0x4}, {}, {0x1, 0x4}, {0x0, 0x8}, {0x1, 0x4}, {0x1, 0x1}, {0x1, 0x2}, {0x1}, {}, {0x2, 0x9}, {0x5, 0x6}, {0x7, 0x7}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xce9, 0xdb, 0x8, 0x40, 0x9, 0x2, 0xfff8, 0x6]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x480, 0x6, 0x8, 0x0, 0x5, 0x3, 0x7f, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0x24, 0x6, 0x60, 0x6, 0x16, 0x0, 0x16, 0x9, 0x12, 0x18, 0x0, 0xb, 0x5, 0x1, 0x16, 0xb, 0x12, 0x3, 0x30, 0x0, 0x3, 0x49, 0x48, 0x16, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x300, 0xffffffff, 0x98, 0x0, 0x1d0, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xd8, 0x138, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}, {0x9}}, @common=@set={{0x40}, {{0x0, [0x7, 0x4, 0x1, 0x4, 0x3, 0x5], 0x5}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000880)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x4e, {0x2, 0x4e21, @empty}, 'veth0_macvtap\x00'}) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) write(r0, 0x0, 0x0) (async) recvmsg$unix(r1, &(0x7f0000001500)={&(0x7f0000000040), 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/70, 0x46}, {&(0x7f0000000140)=""/49, 0x31}, {&(0x7f00000003c0)=""/164, 0xa4}, {&(0x7f0000000300)=""/135, 0x87}, {&(0x7f0000001540)=""/4110, 0x100e}, {&(0x7f0000000480)=""/219, 0xdb}], 0x6, &(0x7f00000014c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000840)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0x2b8, r4, 0x25b02e3c37a58da9, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x1d0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x7, 0x4}, {0x3, 0x6}, {0x1, 0x7}, {0x1, 0x3}, {0x1, 0x9}, {0x7}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x7, 0x2}, {0x7, 0x8}, {0x5, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x6, 0x5}, {}, {0x6, 0x6}, {0x1, 0x3}, {0x3, 0x6}, {0x5, 0x3}, {0x5, 0x7}, {0x5, 0x7}, {0x5, 0x2}, {0x7, 0x6}, {0x1}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x6}, {0x4, 0x2}, {0x4}, {0x3, 0x7}, {0x6, 0x1}, {}, {0x7, 0x5}, {0x7}, {0x0, 0x5}, {0x7, 0x7}, {0x1, 0x8}, {0x7, 0x4}, {0x6, 0xa}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x8}, {0x3, 0x6}, {0x1, 0x9}, {0x4, 0x7}, {0x2, 0x1}, {0x7, 0x3}, {0x6, 0x1}, {0x4, 0x6}, {0x0, 0x9}, {0x4, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x1, 0x4}, {0x4, 0x5}, {0x2, 0x9}, {0x3}, {0x7, 0x5}, {0x6, 0x9}, {0x6, 0x8}, {0x1}, {0x0, 0x2}, {0x5}, {0x3, 0x9}, {0x1, 0x2}, {0x7, 0xa}, {0x7}, {0x0, 0x4}, {0x4, 0x9}, {0x4, 0x8}, {0x3, 0x8}, {0x1}, {0x4, 0x3}, {0x6, 0x6}, {0x3, 0x5}, {0x3, 0x6}, {0x6, 0xa}, {0x7, 0x9}, {0x0, 0x3}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x0, 0x8}, {0x4, 0x5}, {0x7, 0x4}, {0x6, 0x4}, {0x1, 0x4}, {0x0, 0x6}, {0x1, 0x9}, {0x2}, {0x1, 0x1}, {0x1, 0x4}, {0x0, 0x6}, {0x0, 0x8}, {0x4, 0x3}, {0x2, 0x2}, {0x3}, {0x0, 0x4}, {0x0, 0xa}, {0x2, 0x5}, {0x3}, {0x3, 0x8}, {0x4, 0x9}, {0x0, 0x4}, {0x2, 0x3}, {0x7}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x5}, {0x6, 0xa}, {}, {0x6}, {0x6, 0x4}, {0x4, 0x4}, {0x1}, {0x0, 0x6}, {0x0, 0x1}, {0x4, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0x1, 0x6, 0x48, 0x6c, 0x48, 0x18, 0x2, 0x6c, 0x10, 0xb, 0x2, 0x4]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xc44e, 0x7, 0x0, 0x1, 0xff28, 0x1, 0x7]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x9}, {0x0, 0x7}, {0x6, 0x1}, {0x1, 0x2}, {0x7, 0xa}, {0x3, 0x1}, {0x7, 0xa}, {0x1, 0xa}, {0x3, 0x8}, {0x7, 0x9}, {0x1, 0x8}, {0x1, 0x7}, {0x5, 0x2}, {0x3, 0x7}, {0x2}, {0x5, 0x1}, {0x2, 0x4}, {0x4, 0x8}, {0x0, 0x4}, {0x0, 0x4}, {0x6, 0x8}, {0x2, 0x4}, {0x0, 0x7}, {0x0, 0x9}, {0x6, 0x8}, {0x2, 0x3}, {0x6, 0x3}, {}, {0x0, 0x8}, {0x2, 0x4}, {0x5, 0xa}, {0x2, 0x3}, {0x2, 0x6}, {0x7}, {0x2, 0x6}, {0x4, 0x8}, {0x1, 0x9}, {0x2, 0x3}, {0x5, 0x4}, {0x1}, {0x7, 0x8}, {0x6, 0x1}, {0x2, 0x3}, {0x7, 0x1}, {0x0, 0x5}, {0x0, 0x1}, {0x5, 0x4}, {0x3, 0x8}, {0x0, 0x9}, {0x1, 0x6}, {0x7, 0x2}, {0x6, 0x8}, {0x2, 0x4}, {0x5, 0x4}, {}, {0x3}, {0x0, 0x2}, {0x4, 0x3}, {0x6, 0xa}, {0x2}, {0x2, 0x2}, {0x0, 0x9}, {0x3}, {0x2}, {0x1, 0x6}, {0x0, 0x2}, {0x7, 0xa}, {0x0, 0x1}, {0x6, 0x5}, {0x5, 0x8}, {0x7, 0x3}, {0x2, 0x6}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1, 0x18, 0x60, 0x1b, 0xb, 0x36, 0x16, 0x12, 0x6c, 0x1b, 0x48, 0x60, 0x24, 0x18, 0x5, 0x5, 0x5, 0x6, 0x6c, 0x3, 0x3, 0x18, 0x48, 0x48, 0x3, 0xc]}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xfffb, 0xfff5, 0xa98, 0xa766, 0x1, 0x5, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x101, 0x3, 0x5, 0x3, 0x2, 0x2, 0x3ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x5, 0xa}, {0x1, 0x6}, {0x0, 0x3}, {0x1, 0x5}, {0x2, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x5, 0x3}, {0x7, 0x9}, {0x7, 0x8}, {0x1, 0x9}, {0x1, 0x9}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {}, {0x7, 0x6}, {0x0, 0x5}, {0x5, 0x3}, {0x1, 0x2}, {0x2, 0x1}, {0x3, 0x2}, {0x5, 0x6}, {0x2, 0x5}, {0x1, 0x2}, {0x2, 0x1}, {0x7, 0x6}, {0x3}, {0x0, 0x6}, {0x6, 0x7}, {0x0, 0x8}, {0x6}, {0x7, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x7, 0x5}, {0x6, 0x8}, {0x5, 0xa}, {0x3, 0x8}, {0x4, 0x4}, {0x6, 0x9}, {0x0, 0x4}, {0x0, 0x2}, {0x0, 0xa}, {0x5, 0x2}, {0x2, 0x3}, {0x7, 0x7}, {0x3, 0x8}, {0x1, 0x5}, {0x6, 0x7}, {0x1, 0x1}, {0x0, 0x4}, {0x1, 0x1}, {0x3, 0x8}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x60, 0x3, 0x18, 0x16, 0x18, 0x60, 0x1b, 0x6c, 0x3, 0x24, 0x18, 0x6, 0x16, 0x2, 0x2, 0x5, 0x1d, 0x24, 0x4]}]}]}, @NL80211_ATTR_TX_RATES={0xd4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x16, 0xe9175af2175779bf, 0x6c, 0xb, 0x1, 0x3, 0xb, 0x6c, 0x9, 0x60, 0x9, 0x62, 0x5, 0x3, 0x18, 0x0, 0x6c, 0x9, 0x48, 0x1b, 0x2, 0x9, 0x36, 0x4]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0x3}, {0x0, 0xa}, {0x1, 0x8}, {0x4, 0xa}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x5}, {0x6, 0x4}, {0x0, 0x7}, {0x1, 0x6}, {0x4}, {0x4, 0x9}, {0x7, 0x1}, {0x1, 0x5}, {0x6, 0x9}, {0x1, 0x6}, {0x4, 0x1}, {0x5, 0x8}, {0x5, 0x8}, {0x0, 0x1}, {0x1, 0x5}, {0x5}, {0x7, 0x4}, {0x1, 0x6}, {0x0, 0x3}, {0x5, 0x8}, {0x2, 0x7}, {0x0, 0x8}, {0x5, 0x6}, {0x6, 0x1}, {0x2, 0x9}, {0x1}, {0x7, 0x6}, {0x2, 0x1}, {0x2, 0x6}, {0x7, 0x8}, {0x1, 0x3}, {0x3, 0x9}, {0x7, 0x3}, {0x1, 0x5}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x8}, {0x0, 0x3}, {0x7}, {0x3, 0x9}, {0x0, 0x8}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0xa}, {0x4, 0x8}, {0x1, 0x1}, {0x0, 0x2}, {0x5, 0x2}, {0x0, 0x2}, {0x5, 0x5}, {0x3, 0x5}, {0x4, 0x7}, {0x4, 0x7}, {0x7, 0x2}, {0x1, 0x3}, {0x2, 0x4}, {}, {0x1, 0x4}, {0x0, 0x8}, {0x1, 0x4}, {0x1, 0x1}, {0x1, 0x2}, {0x1}, {}, {0x2, 0x9}, {0x5, 0x6}, {0x7, 0x7}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xce9, 0xdb, 0x8, 0x40, 0x9, 0x2, 0xfff8, 0x6]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x480, 0x6, 0x8, 0x0, 0x5, 0x3, 0x7f, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0x24, 0x6, 0x60, 0x6, 0x16, 0x0, 0x16, 0x9, 0x12, 0x18, 0x0, 0xb, 0x5, 0x1, 0x16, 0xb, 0x12, 0x3, 0x30, 0x0, 0x3, 0x49, 0x48, 0x16, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x300, 0xffffffff, 0x98, 0x0, 0x1d0, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xd8, 0x138, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}, {0x9}}, @common=@set={{0x40}, {{0x0, [0x7, 0x4, 0x1, 0x4, 0x3, 0x5], 0x5}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) (async) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000880)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x4e, {0x2, 0x4e21, @empty}, 'veth0_macvtap\x00'}) (async) socket$netlink(0x10, 0x3, 0x4) (async) write(r6, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) (async) 332.61179ms ago: executing program 2 (id=622): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) personality(0x500006) prctl$PR_GET_SECCOMP(0x15) syz_io_uring_setup(0x238, &(0x7f0000000040)={0x0, 0x4, 0x8000}, &(0x7f0000000000), &(0x7f00000001c0)) 332.273614ms ago: executing program 2 (id=623): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xe}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kvm_fpu\x00', r1}, 0x18) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="000096000a000200ab0600aaaa00000006000500374262"], 0x30}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xe}) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kvm_fpu\x00', r1}, 0x18) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="000096000a000200ab0600aaaa00000006000500374262"], 0x30}}, 0x0) (async) 180.156123ms ago: executing program 2 (id=624): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r0, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 179.413658ms ago: executing program 3 (id=625): r0 = userfaultfd(0x80001) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r5, 0x300000b, 0x11, r3, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x101080, 0x0) mmap$KVM_VCPU(&(0x7f0000115000/0x4000)=nil, r5, 0x3000014, 0x4000010, r6, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x90}) ioctl$KVM_CAP_HYPERV_SEND_IPI(r2, 0x4068aea3, &(0x7f0000000380)) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r7, 0x8910, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f00000000c0)={0x2, 0x1, &(0x7f00000001c0)=""/123, &(0x7f0000000240)=""/153, &(0x7f0000000300)=""/124, 0xf000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 178.565017ms ago: executing program 2 (id=626): r0 = memfd_secret(0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000000)={0xffff}) ioctl$CDROMPLAYBLK(r0, 0x5317, &(0x7f0000000040)={0x10001, 0x9}) io_setup(0x1, &(0x7f0000000080)=0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x4a001, 0x4d) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_trace', 0x4000, 0x128) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048800}, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) io_pgetevents(r1, 0x5, 0x2, &(0x7f00000002c0)=[{}, {}], &(0x7f0000000340)={r6, r7+10000000}, &(0x7f00000003c0)={&(0x7f0000000380)={[0xb2a8]}, 0x8}) setsockopt$llc_int(r2, 0x10c, 0x6, &(0x7f0000000400)=0x3, 0x4) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000a80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f0000000480)={0x584, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x51b, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @broadcast, @random="9702fd8ca26d", {0x9, 0x7}}, 0x0, 0x94b, 0x40, @val={0x10, 0x1, 0x62}, [{0xdd, 0xc3, "8ad23230a4bacb28725db80951b61de8934b671d8d9e4485eba2dc5e92d255b6391a64b7acb3a48525f13cc3d6377387a02e92e9afbf12a158ee5bd6e9550cad85b24ca877c60dc532e6881e55423ac0f61c2d7c63d164394b2696120d0fbf5ada7881d9bef6c275294e54c23f9f9dbe896c8581ab30f6c7c4527769425b8eaa90564c09f45dadc05dbe4cab6d2f41a4e3fca9834b2b34188fc813395bb4a0eb7504025d21425a3f190b2bf83202c8e47d1861ed155a8e41f5a0ee320ce15006973233"}, {0xdd, 0xa0, "44d1d05b2647563c22af18d1044294e130a86147362c931605064943710dbc78bce3c6a33342f5866aece5a1d267f8962da3eb65f110d44e2ddebd9e8b508ad8c175b6e93759ec9241af735ad024b79f0ae5f062f3e707cac64a40f9099108bf61c961b7f351a0a45d7bfc2775fbc2d8660f1e816f3047b923d99a834f3299009a6c19cc6449ea9a7bab9c53596274c60a0fe0f318a1f84c3a10818da2dc7586"}, {0xdd, 0xd1, "85c82f18ebfa0de4d393b0d231fec4fd21f45653e0bdea945c5cf0ff4fb264d8c16b36cdf88cf331f6ff36a2ef25f9bff21cc2a89c823eea0266767286c71e149bd05048d4625426cde6d642771f92bc6ac935932588cda354be864378845f2ef0260dc5f78e690907e36e3b36ff1a99c6abb624be85a1b05f093fe56b712289d4d7d039e065cce977a671187437a33293b4f059339a7fe90268c2a88ae6b840fc2464df64bcedb68966ecd365223fef7f8aeb6a508f7a92c4900242cafe64e3be46fed8bb61c948cd9c76e9b2a0acab04"}, {0xdd, 0xeb, "b4bca9f4a282646d2d1873bd1f869ce375a32660338b364c1b207b912b15c6a6de13067ece83fd1c40ef7d6c99fd69581635ce5ce8ab307aba0bf95610e35a026ea13327498b406477b724b639e4ca8dc7675d1927460bb011f10b533398558bd9a612a57d9e77fcafb458df48107204e35d785b187fc947d7bf1345abaddd60082e3ccda8a6a5cd05ec48e0112d08d431e3113929d669b6394049b1a65a686853a11ec05510d7cbe8f65cd9e57119e66562699d59e3556b198400eb9c0e3385d9cbdbd0ecd5c7b373b350ae5d8be6f3221817984bef7e1c37ccdb592f2e3046306b541fe96e8a801736f2"}, {0xdd, 0xa4, "e1288dffa74c960624e3727260ac19ead915dec1aa0db9da59eea5956750df460cbffca0a24bc70a7bfb9ad003d8ae305bea115361c4eb83160f0e91d665c9850159e78d87604ef23b9c2725dfdf608005331f6175c8657ab3efdc836db0496184ff5fe99e5a9d444d18ca86d6a525692c84b1a102e16959e00c4b7e0ad8b87d83f007854265fedf133d07be954cf8ea09be3ff3de06fef4f450558bf3990ddac6c95a15"}, {0xdd, 0x93, "5978d7cbc9e969d46781e8911b786e961ad5b9699e180b1ddd2761f447d315bf8cb3c7f1e2b64ff6a81ab568a44d6c04cf56dc3238989cbced5707e72ef2a8b6c3183fd2056fbb77921e0b7befbb6c56d133f6a196fbcc7f3cf427d49a745b0257a9c08032d0b947ccea9fae2faf0756d6ec905595fc3483ea24ba7aaaab22b32af3cd2549c7fa04cfa03f597c8aa5b389b205"}, {0xdd, 0x92, "00fd1310c0a7fe09ea2bd7577b314e8055f0b4f051e862204bf05135069b8c089d265e59c195e8a94364dc646590892f71c682f338bb09de41dc02b27b313e44f52cc14da127d701366da0a6fb2cc71036ed7f2361030d0310e8fcfc532c842b2e4a614220f40d4fc7b12e6fae5b4ee1047c68dd346b8d3d5d9ba1bdef8eef80234e9ff44950ef359fb5a2cae7ab74f24ba3"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x4f, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x7f}, @device_a, @device_b, @random="ef8d29e542bf", {0x7, 0x7f}}, @tdls_setup_req={0xc, 0x0, "", 0x0, @void, @void, @val={0x2d, 0x1a, {0x800, 0x3, 0x5, 0x0, {0x899, 0xff, 0x0, 0x114, 0x0, 0x1, 0x1, 0x2}, 0x8, 0x1000, 0x1}}, @val={0x65, 0x12, {@initial, @device_b, @device_b}}}}}]}, 0x584}, 0x1, 0x0, 0x0, 0x20004080}, 0x4001040) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), r3) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, r8, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000811) r9 = signalfd4(r0, &(0x7f0000000c00)={[0x8]}, 0x8, 0x0) r10 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r10, &(0x7f0000000c40)={0xa, 0x0, 0x800, @mcast1, 0x3, 0x1}, 0x20) io_getevents(r1, 0x8, 0xa, &(0x7f0000000c80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000dc0)={0x77359400}) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r0, r11, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000e80)=[@text16={0x10, &(0x7f0000000e00)="0f0052cd66b9ad0800000f3266b9c80b000066b8a900000066ba000000000f3066b8009000000f23d80f21f86635c00000200f23f866b9870200000f320f01c366b9800000c00f326635001000000f3066b85d0000000f23d00f21f86635200000080f23f8f20f128c42d466b9930000400f32", 0x73}], 0x1, 0xe, &(0x7f0000000ec0), 0x0) clock_gettime(0x0, &(0x7f0000000f00)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000f40)={0x0, 0x0}) write$evdev(r3, &(0x7f0000000f80)=[{{}, 0x0, 0xff, 0x3ab}, {{r12, r13/1000+10000}, 0x3, 0x8384, 0x7}, {{0x77359400}, 0x4, 0x3, 0x1000}, {{r14, r15/1000+10000}, 0x14, 0x2, 0xe}], 0x60) syz_clone3(&(0x7f0000001240)={0x8af86e66d803c6b4, &(0x7f0000001000), &(0x7f0000001040)=0x0, &(0x7f0000001080), {0x5}, &(0x7f00000010c0)=""/124, 0x7c, &(0x7f0000001140)=""/188, &(0x7f0000001200)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6, {r2}}, 0x58) syz_open_procfs(r16, &(0x7f00000012c0)='oom_score\x00') ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000001300)={0x0}) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000001340)={r17, 0x1}) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000001380)={0x401, 0x6dd}) getsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f00000013c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000001400)=0x30) 254.3µs ago: executing program 3 (id=627): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f40), 0x48a41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x40000000, 0xdd86}}}}}}}, 0xfdef) 0s ago: executing program 1 (id=628): r0 = io_uring_setup(0x177f, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x0, 0x4}) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) ftruncate(r0, 0x81) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={0x0}, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=629): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:32684' (ED25519) to the list of known hosts. [ 44.718708][ T40] audit: type=1400 audit(1748522178.474:62): avc: denied { name_bind } for pid=5913 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 44.740420][ T40] audit: type=1400 audit(1748522178.494:63): avc: denied { write } for pid=5914 comm="sh" path="pipe:[2885]" dev="pipefs" ino=2885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 44.752319][ T40] audit: type=1400 audit(1748522178.504:64): avc: denied { execute } for pid=5914 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 44.759343][ T40] audit: type=1400 audit(1748522178.504:65): avc: denied { execute_no_trans } for pid=5914 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.735167][ T40] audit: type=1400 audit(1748522180.494:66): avc: denied { mounton } for pid=5914 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 46.739448][ T5914] cgroup: Unknown subsys name 'net' [ 46.889579][ T5914] cgroup: Unknown subsys name 'cpuset' [ 46.896445][ T5914] cgroup: Unknown subsys name 'rlimit' [ 47.113460][ T5920] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 47.943021][ T5914] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.176733][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 51.176744][ T40] audit: type=1400 audit(1748522184.934:80): avc: denied { execmem } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.401272][ T40] audit: type=1400 audit(1748522185.154:81): avc: denied { create } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.410340][ T40] audit: type=1400 audit(1748522185.154:82): avc: denied { read write } for pid=5930 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.417907][ T40] audit: type=1400 audit(1748522185.154:83): avc: denied { open } for pid=5930 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.425364][ T40] audit: type=1400 audit(1748522185.164:84): avc: denied { ioctl } for pid=5930 comm="syz-executor" path="socket:[4005]" dev="sockfs" ino=4005 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.439958][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.448409][ T5937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.451623][ T5937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.455633][ T5937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.458763][ T5937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.462538][ T5937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.467119][ T5942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.468102][ T5936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.469753][ T5942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.472216][ T5936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.478115][ T40] audit: type=1400 audit(1748522185.234:85): avc: denied { read } for pid=5934 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.479261][ T5936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.480111][ T5941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.480788][ T5941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.481535][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.483868][ T5941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.495224][ T40] audit: type=1400 audit(1748522185.234:86): avc: denied { open } for pid=5934 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.495512][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.496103][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.500565][ T5942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.502903][ T40] audit: type=1400 audit(1748522185.244:87): avc: denied { mounton } for pid=5934 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.506776][ T5946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.522592][ T5946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.761656][ T40] audit: type=1400 audit(1748522185.514:88): avc: denied { module_request } for pid=5930 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 51.833779][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 51.846981][ T5930] chnl_net:caif_netlink_parms(): no params data found [ 51.863028][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 52.012048][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 52.083643][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.086355][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.088579][ T5934] bridge_slave_0: entered allmulticast mode [ 52.092351][ T5934] bridge_slave_0: entered promiscuous mode [ 52.099553][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.101711][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.103872][ T5934] bridge_slave_1: entered allmulticast mode [ 52.106866][ T5934] bridge_slave_1: entered promiscuous mode [ 52.202997][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.205473][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.207770][ T5930] bridge_slave_0: entered allmulticast mode [ 52.210501][ T5930] bridge_slave_0: entered promiscuous mode [ 52.216672][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.218932][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.221620][ T5930] bridge_slave_1: entered allmulticast mode [ 52.224299][ T5930] bridge_slave_1: entered promiscuous mode [ 52.228586][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.231576][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.233815][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.236203][ T5943] bridge_slave_0: entered allmulticast mode [ 52.238844][ T5943] bridge_slave_0: entered promiscuous mode [ 52.245194][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.247531][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.249814][ T5943] bridge_slave_1: entered allmulticast mode [ 52.252443][ T5943] bridge_slave_1: entered promiscuous mode [ 52.285288][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.371135][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.415133][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.417444][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.419778][ T5935] bridge_slave_0: entered allmulticast mode [ 52.422417][ T5935] bridge_slave_0: entered promiscuous mode [ 52.428086][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.434047][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.441773][ T5934] team0: Port device team_slave_0 added [ 52.444215][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.446528][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.448779][ T5935] bridge_slave_1: entered allmulticast mode [ 52.451413][ T5935] bridge_slave_1: entered promiscuous mode [ 52.455373][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.483790][ T5934] team0: Port device team_slave_1 added [ 52.580231][ T5943] team0: Port device team_slave_0 added [ 52.587236][ T5930] team0: Port device team_slave_0 added [ 52.612627][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.617786][ T5943] team0: Port device team_slave_1 added [ 52.620688][ T5930] team0: Port device team_slave_1 added [ 52.623449][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.628508][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.640925][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.647532][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.695681][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.697905][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.706171][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.790791][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.793365][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.803747][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.810531][ T5935] team0: Port device team_slave_0 added [ 52.812852][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.815801][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.828180][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.833626][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.836161][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.844259][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.848572][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.851477][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.862411][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.869723][ T5935] team0: Port device team_slave_1 added [ 52.922172][ T5934] hsr_slave_0: entered promiscuous mode [ 52.924613][ T5934] hsr_slave_1: entered promiscuous mode [ 52.961064][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.963264][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.972020][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.976199][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.978444][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.986410][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.091452][ T5943] hsr_slave_0: entered promiscuous mode [ 53.093725][ T5943] hsr_slave_1: entered promiscuous mode [ 53.095830][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.098340][ T5943] Cannot create hsr debugfs directory [ 53.102440][ T5930] hsr_slave_0: entered promiscuous mode [ 53.105012][ T5930] hsr_slave_1: entered promiscuous mode [ 53.107042][ T5930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.109451][ T5930] Cannot create hsr debugfs directory [ 53.145422][ T5935] hsr_slave_0: entered promiscuous mode [ 53.147612][ T5935] hsr_slave_1: entered promiscuous mode [ 53.149659][ T5935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.151932][ T5935] Cannot create hsr debugfs directory [ 53.494546][ T5934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.502020][ T5934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.506566][ T5934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.510836][ T5934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.543795][ T5943] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.545310][ T5946] Bluetooth: hci1: command tx timeout [ 53.546484][ T5942] Bluetooth: hci2: command tx timeout [ 53.547053][ T5294] Bluetooth: hci0: command tx timeout [ 53.547901][ T5937] Bluetooth: hci3: command tx timeout [ 53.552436][ T5943] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.565827][ T5943] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.570003][ T5943] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.615682][ T5935] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.620026][ T5935] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.633026][ T5935] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.647723][ T5935] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.680659][ T5930] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.686007][ T5930] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.695607][ T5930] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.701767][ T5930] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.709455][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.739801][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.760980][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.768563][ T1200] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.770927][ T1200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.797457][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.800181][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.814173][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.830268][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.839530][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.842563][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.865468][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.869264][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.871505][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.886485][ T1200] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.888777][ T1200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.900453][ T1200] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.902834][ T1200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.909673][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.933351][ T5943] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.938647][ T5943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.948078][ T40] audit: type=1400 audit(1748522187.704:89): avc: denied { sys_module } for pid=5934 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.962917][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.976726][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.979632][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.995077][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.998043][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.031455][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.068510][ T5934] veth0_vlan: entered promiscuous mode [ 54.077317][ T5934] veth1_vlan: entered promiscuous mode [ 54.093496][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.102437][ T5934] veth0_macvtap: entered promiscuous mode [ 54.110472][ T5934] veth1_macvtap: entered promiscuous mode [ 54.143177][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.146829][ T5943] veth0_vlan: entered promiscuous mode [ 54.149718][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.158165][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.165865][ T5934] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.168658][ T5934] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.171468][ T5934] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.175997][ T5934] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.183420][ T5943] veth1_vlan: entered promiscuous mode [ 54.199546][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.224971][ T5943] veth0_macvtap: entered promiscuous mode [ 54.233148][ T5943] veth1_macvtap: entered promiscuous mode [ 54.255991][ T5935] veth0_vlan: entered promiscuous mode [ 54.269457][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.272568][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.289279][ T5935] veth1_vlan: entered promiscuous mode [ 54.297553][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.302117][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.304911][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.306902][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.316830][ T5930] veth0_vlan: entered promiscuous mode [ 54.320372][ T5943] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.323385][ T5943] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.326531][ T5943] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.329296][ T5943] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.338977][ T5935] veth0_macvtap: entered promiscuous mode [ 54.349640][ T5935] veth1_macvtap: entered promiscuous mode [ 54.358261][ T5930] veth1_vlan: entered promiscuous mode [ 54.365823][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.366497][ T5934] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.390613][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.396502][ T5935] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.399319][ T5935] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.402186][ T5935] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.405827][ T5935] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.443321][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.449422][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.460298][ T5930] veth0_macvtap: entered promiscuous mode [ 54.472613][ T5930] veth1_macvtap: entered promiscuous mode [ 54.480177][ T1200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.482941][ T1200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.500769][ T1200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.503352][ T1200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.511529][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.516747][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 54.527610][ T1200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.529590][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.530908][ T1200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.538294][ T5930] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.541394][ T5930] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.544149][ T5930] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.547290][ T5930] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.604300][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.610082][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.632679][ T1200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.636409][ T1200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.706775][ T6015] No such timeout policy "syz1" [ 54.772051][ T6020] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.11'. [ 54.873146][ T6022] QAT: failed to copy from user. [ 55.174505][ T838] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 55.334515][ T838] usb 8-1: Using ep0 maxpacket: 32 [ 55.338914][ T838] usb 8-1: unable to get BOS descriptor or descriptor too short [ 55.342755][ T838] usb 8-1: config index 0 descriptor too short (expected 34347, got 43) [ 55.345928][ T838] usb 8-1: config 31 has too many interfaces: 196, using maximum allowed: 32 [ 55.348792][ T838] usb 8-1: config 31 has an invalid descriptor of length 0, skipping remainder of the config [ 55.352060][ T838] usb 8-1: config 31 has 1 interface, different from the descriptor's value: 196 [ 55.354960][ T838] usb 8-1: config 31 has no interface number 0 [ 55.357300][ T838] usb 8-1: config 31 interface 81 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.361410][ T838] usb 8-1: config 31 interface 81 has no altsetting 0 [ 55.366572][ T838] usb 8-1: string descriptor 0 read error: -22 [ 55.368608][ T838] usb 8-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 55.371428][ T838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.483548][ T6038] process 'syz.1.14' launched '/dev/fd/3' with NULL argv: empty string added [ 55.624758][ T5937] Bluetooth: hci2: command tx timeout [ 55.625662][ T5942] Bluetooth: hci1: command tx timeout [ 55.627147][ T5937] Bluetooth: hci0: command tx timeout [ 55.637753][ T5946] Bluetooth: hci3: command tx timeout [ 55.728695][ T6052] netlink: 'syz.0.16': attribute type 2 has an invalid length. [ 55.734325][ T6052] netlink: 'syz.0.16': attribute type 1 has an invalid length. [ 55.863121][ T6065] syz.2.23 uses obsolete (PF_INET,SOCK_PACKET) [ 56.128591][ T6075] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 56.193434][ T40] kauditd_printk_skb: 86 callbacks suppressed [ 56.193445][ T40] audit: type=1400 audit(1748522189.944:176): avc: denied { ioctl } for pid=6074 comm="syz.2.25" path="socket:[9615]" dev="sockfs" ino=9615 ioctlcmd=0xf50e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 56.244083][ T6077] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.273115][ T6005] usb 8-1: USB disconnect, device number 2 [ 56.362633][ T6079] tipc: Started in network mode [ 56.364240][ T6079] tipc: Node identity 5656e41ddb6b, cluster identity 4711 [ 56.366988][ T6079] tipc: Enabled bearer , priority 0 [ 56.372900][ T6078] tipc: Resetting bearer [ 56.636198][ T5977] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 56.792914][ T5977] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 56.796701][ T5977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 56.800117][ T5977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 56.803123][ T5977] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 56.807356][ T5977] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 56.810148][ T5977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.814294][ T5977] usb 6-1: config 0 descriptor?? [ 56.919207][ T6089] netlink: 'syz.0.29': attribute type 10 has an invalid length. [ 56.971846][ T6090] netlink: 'syz.0.29': attribute type 10 has an invalid length. [ 56.974972][ T6090] netlink: 2 bytes leftover after parsing attributes in process `syz.0.29'. [ 57.003946][ T40] audit: type=1400 audit(1748522190.754:177): avc: denied { ioctl } for pid=6091 comm="syz.2.30" path="socket:[7803]" dev="sockfs" ino=7803 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.033750][ T5977] usbhid 6-1:0.0: can't add hid device: -71 [ 57.037751][ T5977] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 57.047728][ T5977] usb 6-1: USB disconnect, device number 2 [ 57.067257][ T40] audit: type=1800 audit(1748522190.824:178): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.30" name="dmabuf" dev="dmabuf" ino=1 res=0 errno=0 [ 57.081736][ T6078] tipc: Disabling bearer [ 57.094340][ T6089] batman_adv: batadv0: Adding interface: team0 [ 57.096670][ T6089] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.104233][ T6089] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 57.108420][ T6090] team0: entered promiscuous mode [ 57.110238][ T6090] team_slave_0: entered promiscuous mode [ 57.114053][ T6090] team_slave_1: entered promiscuous mode [ 57.117515][ T6090] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.119959][ T6090] batman_adv: batadv0: Interface activated: team0 [ 57.122569][ T6090] batman_adv: batadv0: Interface deactivated: team0 [ 57.125711][ T6090] batman_adv: batadv0: Removing interface: team0 [ 57.128641][ T6090] bridge0: port 3(team0) entered blocking state [ 57.130881][ T6090] bridge0: port 3(team0) entered disabled state [ 57.132953][ T6090] team0: entered allmulticast mode [ 57.136115][ T6090] team_slave_0: entered allmulticast mode [ 57.137935][ T6090] team_slave_1: entered allmulticast mode [ 57.144437][ T6090] bridge0: port 3(team0) entered blocking state [ 57.146542][ T6090] bridge0: port 3(team0) entered forwarding state [ 57.152669][ T6102] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.160019][ T40] audit: type=1400 audit(1748522190.914:179): avc: denied { write } for pid=6101 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.171770][ T40] audit: type=1400 audit(1748522190.924:180): avc: denied { ioctl } for pid=6103 comm="syz.3.33" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 57.203618][ T40] audit: type=1400 audit(1748522190.954:181): avc: denied { create } for pid=6109 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 57.213141][ T40] audit: type=1400 audit(1748522190.954:182): avc: denied { ioctl } for pid=6109 comm="syz.1.36" path="socket:[9651]" dev="sockfs" ino=9651 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 57.228539][ T40] audit: type=1400 audit(1748522190.964:183): avc: denied { ioctl } for pid=6109 comm="syz.1.36" path="socket:[9652]" dev="sockfs" ino=9652 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 57.239967][ T6116] warning: `syz.3.37' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 57.253436][ T40] audit: type=1400 audit(1748522190.994:184): avc: denied { create } for pid=6114 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 57.262116][ T40] audit: type=1400 audit(1748522191.004:185): avc: denied { write } for pid=6114 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 57.303595][ T6132] ======================================================= [ 57.303595][ T6132] WARNING: The mand mount option has been deprecated and [ 57.303595][ T6132] and is ignored by this kernel. Remove the mand [ 57.303595][ T6132] option from the mount to silence this warning. [ 57.303595][ T6132] ======================================================= [ 57.346766][ T6138] netlink: 20 bytes leftover after parsing attributes in process `syz.1.39'. [ 57.351250][ T6138] SELinux: Context system_u:object_r:cron_log_t:s0 is not valid (left unmapped). [ 57.358812][ T6135] tty tty3: ldisc open failed (-12), clearing slot 2 [ 57.406524][ T1200] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 57.417052][ T6146] netlink: 312 bytes leftover after parsing attributes in process `syz.3.45'. [ 57.482212][ T6150] syz.0.42 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 57.595686][ T6157] IPv6: NLM_F_REPLACE set, but no existing node found! [ 57.602990][ T6157] IPv6: NLM_F_REPLACE set, but no existing node found! [ 57.642703][ T5946] Bluetooth: hci2: Malformed Event: 0x13 [ 57.646498][ T6162] tmpfs: Unknown parameter '00000000000000000006' [ 57.706663][ T5946] Bluetooth: hci1: command tx timeout [ 57.706703][ T5937] Bluetooth: hci2: command tx timeout [ 57.714885][ T5937] Bluetooth: hci0: command tx timeout [ 57.714913][ T5946] Bluetooth: hci3: command tx timeout [ 58.010826][ T6191] kernel read not supported for file /policy (pid: 6191 comm: syz.1.61) [ 58.081066][ T6202] mmap: syz.1.64 (6202): VmData 37859328 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 58.218429][ T6219] capability: warning: `syz.2.69' uses deprecated v2 capabilities in a way that may be insecure [ 58.258202][ T6223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 58.334488][ T59] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 58.431687][ T6234] syz.0.73: attempt to access beyond end of device [ 58.431687][ T6234] loop0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 58.438015][ T6234] syz.0.73: attempt to access beyond end of device [ 58.438015][ T6234] loop0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 58.442090][ T6234] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 58.449332][ T6234] syz.0.73: attempt to access beyond end of device [ 58.449332][ T6234] loop0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 58.455346][ T6234] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 58.462211][ T6234] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 58.465073][ T59] usb 8-1: device descriptor read/64, error -71 [ 58.465713][ T6234] UDF-fs: Scanning with blocksize 512 failed [ 58.471503][ T6234] syz.0.73: attempt to access beyond end of device [ 58.471503][ T6234] loop0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 58.476998][ T6234] syz.0.73: attempt to access beyond end of device [ 58.476998][ T6234] loop0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 58.481252][ T6236] netlink: 'syz.0.73': attribute type 5 has an invalid length. [ 58.482207][ T6234] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 58.490859][ T6234] syz.0.73: attempt to access beyond end of device [ 58.490859][ T6234] loop0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 58.496453][ T6234] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 58.500415][ T6234] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 58.503439][ T6234] UDF-fs: Scanning with blocksize 1024 failed [ 58.510939][ T6234] syz.0.73: attempt to access beyond end of device [ 58.510939][ T6234] loop0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 58.516995][ T6234] syz.0.73: attempt to access beyond end of device [ 58.516995][ T6234] loop0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 58.522924][ T6234] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 58.527479][ T6234] syz.0.73: attempt to access beyond end of device [ 58.527479][ T6234] loop0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 58.532990][ T6234] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 58.537541][ T6234] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 58.540759][ T6234] UDF-fs: Scanning with blocksize 2048 failed [ 58.545612][ T6234] syz.0.73: attempt to access beyond end of device [ 58.545612][ T6234] loop0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 58.551386][ T6234] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 58.552685][ T6239] 9pnet_fd: p9_fd_create_tcp (6239): problem connecting socket to 127.0.0.1 [ 58.556121][ T6234] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 58.563074][ T6234] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 58.566595][ T6234] UDF-fs: Scanning with blocksize 4096 failed [ 58.569187][ T6234] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 58.705168][ T59] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 58.818697][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'. [ 58.821616][ T6247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.79'. [ 58.835646][ T59] usb 8-1: device descriptor read/64, error -71 [ 58.850858][ T6249] overlayfs: workdir and upperdir must be separate subtrees [ 58.944895][ T59] usb usb8-port1: attempt power cycle [ 59.114507][ T838] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 59.285715][ T59] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 59.289633][ T838] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 59.293715][ T838] usb 6-1: config 0 interface 0 has no altsetting 0 [ 59.299397][ T838] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 59.303230][ T838] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 59.306421][ T59] usb 8-1: device descriptor read/8, error -71 [ 59.307559][ T838] usb 6-1: Product: syz [ 59.310443][ T838] usb 6-1: Manufacturer: syz [ 59.312428][ T838] usb 6-1: SerialNumber: syz [ 59.317370][ T838] usb 6-1: config 0 descriptor?? [ 59.327502][ T838] usb 6-1: selecting invalid altsetting 0 [ 59.523298][ T838] usb 6-1: USB disconnect, device number 3 [ 59.544523][ T59] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 59.564970][ T59] usb 8-1: device descriptor read/8, error -71 [ 59.674615][ T59] usb usb8-port1: unable to enumerate USB device [ 59.794642][ T5937] Bluetooth: hci1: command tx timeout [ 59.794745][ T5942] Bluetooth: hci2: command tx timeout [ 59.797078][ T5946] Bluetooth: hci0: command tx timeout [ 60.143981][ T6305] binder: 6304:6305 ioctl c0306201 200000000240 returned -11 [ 60.145620][ T6306] binder: 6304:6306 ioctl c0306201 2000000004c0 returned -11 [ 60.149649][ T6305] binder: BINDER_SET_CONTEXT_MGR already set [ 60.152358][ T6305] binder: 6304:6305 ioctl 4018620d 200000000180 returned -16 [ 60.334081][ T6313] netlink: 'syz.1.99': attribute type 39 has an invalid length. [ 60.724487][ T836] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 60.759935][ T6335] mmap: syz.0.107 (6335) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 60.814594][ T53] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 60.884752][ T6338] Zero length message leads to an empty skb [ 60.894524][ T836] usb 7-1: Using ep0 maxpacket: 8 [ 60.897564][ T836] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 60.901107][ T836] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 60.904057][ T836] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 60.908334][ T836] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.913692][ T836] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 60.917538][ T836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.974459][ T53] usb 6-1: Using ep0 maxpacket: 32 [ 60.980854][ T53] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x2 has an invalid bInterval 202, changing to 11 [ 60.985573][ T53] usb 6-1: config 1 interface 0 has no altsetting 0 [ 60.991150][ T53] usb 6-1: New USB device found, idVendor=046d, idProduct=00fe, bcdDevice= 0.40 [ 60.995187][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.998481][ T53] usb 6-1: Product: †[ 61.000224][ T53] usb 6-1: Manufacturer: 攅ਆ繫ℨ긤뷴ꅣ입齈녗ç­îƒƒë†Žíšã¿ˆé­‘â€‘á¡«ê™¤é¹«áµ¥ç¶šï·ºê·¬ç¸›å¾¾ê° [ 61.005005][ T53] usb 6-1: SerialNumber: አ[ 61.126135][ T836] usb 7-1: GET_CAPABILITIES returned 0 [ 61.128582][ T836] usbtmc 7-1:16.0: can't read capabilities [ 61.224524][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 61.241626][ T40] kauditd_printk_skb: 89 callbacks suppressed [ 61.241640][ T40] audit: type=1400 audit(1748522194.994:275): avc: denied { read } for pid=6348 comm="syz.3.110" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 61.249954][ T6349] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.110'. [ 61.251275][ T40] audit: type=1400 audit(1748522194.994:276): avc: denied { open } for pid=6348 comm="syz.3.110" path="/dev/input/event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 61.263297][ T40] audit: type=1400 audit(1748522194.994:277): avc: denied { read write } for pid=6348 comm="syz.3.110" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 61.272504][ T40] audit: type=1400 audit(1748522195.004:278): avc: denied { open } for pid=6348 comm="syz.3.110" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 61.281880][ T40] audit: type=1400 audit(1748522195.034:279): avc: denied { ioctl } for pid=6348 comm="syz.3.110" path="/dev/input/event2" dev="devtmpfs" ino=947 ioctlcmd=0x4525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 61.324455][ T6352] openvswitch: netlink: Key type 30 is not supported [ 61.334278][ T40] audit: type=1400 audit(1748522195.084:280): avc: denied { write } for pid=6321 comm="syz.2.102" name="usbtmc0" dev="devtmpfs" ino=2859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 61.380395][ T40] audit: type=1400 audit(1748522195.134:281): avc: denied { create } for pid=6356 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 61.387326][ T40] audit: type=1400 audit(1748522195.134:282): avc: denied { write } for pid=6356 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 61.393363][ T40] audit: type=1400 audit(1748522195.134:283): avc: denied { write } for pid=6356 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 61.421742][ T53] usbhid 6-1:1.0: can't add hid device: -71 [ 61.422117][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.114'. [ 61.423681][ T53] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 61.429001][ T40] audit: type=1400 audit(1748522195.184:284): avc: denied { ioctl } for pid=6360 comm="syz.3.114" path="socket:[9088]" dev="sockfs" ino=9088 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.431279][ T53] usb 6-1: USB disconnect, device number 4 [ 61.434594][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.114'. [ 61.552671][ T10] usb 7-1: USB disconnect, device number 2 [ 61.994555][ T53] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 62.145533][ T6385] overlayfs: cannot append lower layer [ 62.150581][ T6385] Invalid option length (1047906) for dns_resolver key [ 62.155617][ T53] usb 5-1: not running at top speed; connect to a high speed hub [ 62.161637][ T53] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 62.164344][ T53] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 62.167854][ T53] usb 5-1: config 1 has no interface number 1 [ 62.169886][ T53] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 62.175493][ T53] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 62.178312][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.180886][ T53] usb 5-1: Product:  [ 62.182218][ T53] usb 5-1: Manufacturer: µ諢뎆ዾ羇ê‹å¼‡à´‘é“šìŠçƒ”眴侮擭ä“ç ä¡µæž’刜穅⣬ï±íŠÔˆäˆœå²´êµ·ë½˜é’˜ã‡…ẅ㖾洡챢⦹玲쾇沾䬠꟣ᕇᚄڞ晑挆⭈맓ᥘ桀ç˜á´¨ë¶®ëº‡ã•”éž™èˆî˜§ä³±áƒŒè›¦éš›Û‰è¨•ì­•ê¦â’Œæƒ¸ãŒšæ«ƒç‚µë»¥äš¥ã›Ÿã­¿ä’„æ•çŸ¹ê§¡ï‰æ«·ä·‰ç­¹ï»ê¶«ã”‘ò埡㆘许ﵪ頞 [ 62.191239][ T53] usb 5-1: SerialNumber: Ðœ [ 62.522186][ T6410] tmpfs: Invalid gid '0x00000000ffffffff' [ 62.576965][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 62.627031][ T53] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 62.629701][ T53] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 62.638083][ T53] usb 5-1: USB disconnect, device number 2 [ 62.663656][ T6421] pimreg3: entered allmulticast mode [ 62.667637][ T5931] udevd[5931]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 62.738555][ T6424] tmpfs: Bad value for 'mpol' [ 63.305435][ T6426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.134'. [ 63.573458][ T6445] netlink: 'syz.1.139': attribute type 1 has an invalid length. [ 63.576165][ T6445] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.139'. [ 63.726923][ T6449] delete_channel: no stack [ 64.031039][ T6472] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.070636][ T6478] binder: 6477:6478 unknown command 60 [ 64.072448][ T6478] binder: 6477:6478 ioctl c0306201 2000000003c0 returned -22 [ 64.247512][ T6492] overlayfs: conflicting options: userxattr,redirect_dir=on [ 64.280917][ T6494] tmpfs: Bad value for 'nr_blocks' [ 64.646153][ T6512] syzkaller0: entered promiscuous mode [ 64.648364][ T6512] syzkaller0: entered allmulticast mode [ 66.196469][ T6546] netlink: 'syz.2.170': attribute type 12 has an invalid length. [ 66.199672][ T6546] netlink: 'syz.2.170': attribute type 29 has an invalid length. [ 66.202151][ T6546] netlink: 148 bytes leftover after parsing attributes in process `syz.2.170'. [ 66.367308][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 66.367318][ T40] audit: type=1400 audit(1748522200.124:325): avc: denied { ioctl } for pid=6558 comm="syz.3.175" path="socket:[14341]" dev="sockfs" ino=14341 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 66.376942][ T40] audit: type=1400 audit(1748522200.124:326): avc: denied { execute } for pid=6558 comm="syz.3.175" path="/23/pids.current" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.447754][ T6569] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 66.453498][ T6572] fuse: Unknown parameter 'ŽÂ²[ë<ïYÕ' [ 66.466855][ T40] audit: type=1400 audit(1748522200.224:327): avc: denied { bind } for pid=6564 comm="syz.0.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 66.757725][ T6575] netlink: 'syz.3.179': attribute type 10 has an invalid length. [ 66.766402][ T6575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.772952][ T6575] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 66.880003][ T6577] netlink: 20 bytes leftover after parsing attributes in process `syz.3.180'. [ 66.913705][ T6579] netlink: 'syz.3.181': attribute type 2 has an invalid length. [ 66.917145][ T6579] netlink: 1184 bytes leftover after parsing attributes in process `syz.3.181'. [ 66.946738][ T40] audit: type=1400 audit(1748522200.704:328): avc: denied { ioctl } for pid=6580 comm="syz.3.182" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.957546][ T40] audit: type=1400 audit(1748522200.704:329): avc: denied { create } for pid=6580 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 66.965157][ T40] audit: type=1400 audit(1748522200.704:330): avc: denied { sys_admin } for pid=6580 comm="syz.3.182" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 67.009419][ T40] audit: type=1400 audit(1748522200.764:331): avc: denied { mount } for pid=6580 comm="syz.3.182" name="/" dev="rpc_pipefs" ino=11694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 67.057710][ T40] audit: type=1400 audit(1748522200.814:332): avc: denied { sqpoll } for pid=6588 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 67.061972][ T6589] netlink: 'syz.1.184': attribute type 10 has an invalid length. [ 67.084302][ T6589] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 67.090804][ T40] audit: type=1400 audit(1748522200.844:333): avc: denied { create } for pid=6591 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 67.099596][ T6592] program syz.3.185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.105551][ T40] audit: type=1400 audit(1748522200.844:334): avc: denied { write } for pid=6588 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.196793][ T6600] netlink: 4180 bytes leftover after parsing attributes in process `syz.1.188'. [ 67.289551][ T6605] netlink: 'syz.0.189': attribute type 1 has an invalid length. [ 67.536282][ T6620] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 67.545316][ T6628] netlink: 'syz.1.195': attribute type 1 has an invalid length. [ 67.595804][ T6628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.599959][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'. [ 67.643925][ T6628] veth3: entered promiscuous mode [ 67.649579][ T6628] bond1: (slave veth3): Enslaving as an active interface with a down link [ 67.698050][ T6628] nvme_fabrics: missing parameter 'transport=%s' [ 67.700210][ T6628] nvme_fabrics: missing parameter 'nqn=%s' [ 67.702692][ T6628] netlink: 24 bytes leftover after parsing attributes in process `syz.1.195'. [ 67.706117][ T6628] netlink: 80 bytes leftover after parsing attributes in process `syz.1.195'. [ 67.809579][ T6646] openvswitch: netlink: Duplicate or invalid key (type 0). [ 67.811871][ T6646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.831037][ T6642] bio_check_eod: 2 callbacks suppressed [ 67.831048][ T6642] syz.2.198: attempt to access beyond end of device [ 67.831048][ T6642] loop2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 67.840767][ T6642] gfs2: error -5 reading superblock [ 67.871040][ T6653] : entered promiscuous mode [ 67.873767][ T6653] netlink: 20 bytes leftover after parsing attributes in process `syz.3.202'. [ 67.876827][ T6653] 8021q: VLANs not supported on vcan0 [ 68.285405][ T6689] xt_CT: You must specify a L4 protocol and not use inversions on it [ 68.468315][ T6697] netlink: 'syz.2.215': attribute type 5 has an invalid length. [ 68.474109][ T6697] ip6erspan0: entered promiscuous mode [ 68.478464][ T6699] netlink: 'syz.2.215': attribute type 5 has an invalid length. [ 68.511628][ T6701] sp0: Synchronizing with TNC [ 68.515390][ T6701] [U] è [ 68.554744][ T6283] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.725190][ T6283] usb 5-1: Using ep0 maxpacket: 8 [ 68.728617][ T6283] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 68.731852][ T6283] usb 5-1: config 179 has no interface number 0 [ 68.734306][ T6283] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 68.738780][ T6283] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 68.743064][ T6283] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 68.747668][ T6283] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 68.752057][ T6283] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 68.757292][ T6283] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 68.761403][ T6283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.771781][ T6690] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 68.984045][ T6283] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input5 [ 69.178452][ T836] usb 5-1: USB disconnect, device number 3 [ 69.178546][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 69.183896][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 69.183990][ T836] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 69.234572][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 69.597959][ T6728] fuse: Bad value for 'user_id' [ 69.599563][ T6728] fuse: Bad value for 'user_id' [ 69.608835][ T1200] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.645414][ T6730] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 69.995464][ T6764] tc_dump_action: action bad kind [ 70.081695][ T6769] netlink: 28 bytes leftover after parsing attributes in process `syz.0.241'. [ 70.088209][ T6769] netlink: 28 bytes leftover after parsing attributes in process `syz.0.241'. [ 70.096164][ T6769] gretap0: entered promiscuous mode [ 70.099550][ T6769] gretap0: left promiscuous mode [ 71.112364][ T6814] netlink: 'syz.1.253': attribute type 62 has an invalid length. [ 71.149881][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.152567][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.575910][ T6835] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 71.593142][ T6835] CIFS: Unable to determine destination address [ 71.756764][ T6840] ceph: No source [ 71.760954][ T6840] program syz.2.260 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.203851][ T40] kauditd_printk_skb: 52 callbacks suppressed [ 72.203866][ T40] audit: type=1400 audit(1748522205.954:387): avc: denied { read } for pid=6844 comm="syz.3.263" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.241477][ T40] audit: type=1400 audit(1748522205.994:388): avc: denied { create } for pid=6849 comm="syz.3.265" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 72.272396][ T6855] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 72.274631][ T6855] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 72.278174][ T6855] vhci_hcd vhci_hcd.0: Device attached [ 72.280478][ T6856] vhci_hcd: cannot find the pending unlink 1023 [ 72.282624][ T6856] vhci_hcd: connection closed [ 72.285005][ T1148] vhci_hcd: stop threads [ 72.288471][ T1148] vhci_hcd: release socket [ 72.290181][ T1148] vhci_hcd: disconnect device [ 72.307179][ T6858] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.325730][ T40] audit: type=1400 audit(1748522206.084:389): avc: denied { checkpoint_restore } for pid=6859 comm="syz.1.268" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.393484][ T6858] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.438015][ T6870] netlink: 'syz.3.270': attribute type 62 has an invalid length. [ 72.448260][ T6858] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.528491][ T6858] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.586147][ T6882] xt_nfacct: accounting object `syz1' does not exists [ 72.614520][ T53] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 72.628555][ T6858] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.642487][ T6858] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.655840][ T6858] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.666834][ T6858] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.754527][ T53] usb 6-1: device descriptor read/64, error -71 [ 72.916984][ T40] audit: type=1800 audit(1748522206.674:390): pid=6889 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.277" name="/" dev="9p" ino=2 res=0 errno=0 [ 72.994601][ T53] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 73.125001][ T53] usb 6-1: device descriptor read/64, error -71 [ 73.148862][ T6903] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 73.150473][ T6905] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 73.234783][ T53] usb usb6-port1: attempt power cycle [ 73.512323][ T40] audit: type=1400 audit(1748522207.264:391): avc: denied { write } for pid=6911 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.521490][ T40] audit: type=1400 audit(1748522207.264:392): avc: denied { read } for pid=6911 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.574520][ T53] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 73.595319][ T53] usb 6-1: device descriptor read/8, error -71 [ 73.628397][ T6914] rtc_cmos 00:05: Alarms can be up to one day in the future [ 73.722718][ T6919] netlink: 20 bytes leftover after parsing attributes in process `syz.3.289'. [ 73.864783][ T53] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 73.886118][ T53] usb 6-1: device descriptor read/8, error -71 [ 73.967925][ T6928] netlink: 20 bytes leftover after parsing attributes in process `syz.0.292'. [ 74.018649][ T53] usb usb6-port1: unable to enumerate USB device [ 74.187540][ T40] audit: type=1400 audit(1748522207.944:393): avc: denied { write } for pid=6939 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.189272][ T6940] netlink: 'syz.2.297': attribute type 4 has an invalid length. [ 74.230195][ T6942] serio: Serial port ptm2 [ 74.352077][ T40] audit: type=1400 audit(1748522208.104:394): avc: denied { ioctl } for pid=6946 comm="syz.2.300" path="socket:[15439]" dev="sockfs" ino=15439 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 74.424553][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 74.427655][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 74.583804][ T6957] overlayfs: empty lowerdir [ 74.680860][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 74.683706][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.304'. [ 74.690508][ T6961] ipvlan2: entered allmulticast mode [ 74.692261][ T6961] erspan0: entered allmulticast mode [ 74.700745][ T6961] netlink: 160 bytes leftover after parsing attributes in process `syz.3.304'. [ 74.742703][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.306'. [ 74.746713][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.306'. [ 74.750212][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.306'. [ 74.753783][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.306'. [ 74.763872][ T40] audit: type=1400 audit(1748522208.514:395): avc: denied { write } for pid=6966 comm="syz.2.307" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.770812][ T40] audit: type=1400 audit(1748522208.514:396): avc: denied { connect } for pid=6966 comm="syz.2.307" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.920426][ T6971] ptm ptm35: ldisc open failed (-12), clearing slot 35 [ 74.966498][ T6976] xt_cgroup: path and classid specified [ 75.110720][ T6988] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.313'. [ 75.378993][ T7005] netlink: 'syz.3.319': attribute type 1 has an invalid length. [ 75.970018][ T7033] netlink: 'syz.1.328': attribute type 9 has an invalid length. [ 76.161704][ T7046] fuse: Bad value for 'rootmode' [ 76.165333][ T7046] ptrace attach of "/syz-executor exec"[5943] was attempted by "/syz-executor exec"[7046] [ 76.200180][ T7044] Bluetooth: MGMT ver 1.23 [ 76.422584][ T7071] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7071 comm=syz.1.339 [ 76.427622][ T7071] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7071 comm=syz.1.339 [ 76.485941][ T836] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 76.539492][ T7080] tipc: Started in network mode [ 76.542107][ T7080] tipc: Node identity 4, cluster identity 4711 [ 76.544082][ T7080] tipc: Node number set to 4 [ 76.614478][ T836] usb 7-1: device descriptor read/64, error -71 [ 76.776232][ T7089] binder: 7088:7089 ioctl c00c620f 200000000240 returned -22 [ 76.854787][ T836] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 76.899668][ T7101] netlink: 'syz.0.349': attribute type 9 has an invalid length. [ 76.984919][ T836] usb 7-1: device descriptor read/64, error -71 [ 77.064609][ T839] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 77.105552][ T836] usb usb7-port1: attempt power cycle [ 77.223774][ T839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 77.228000][ T839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.231639][ T839] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 77.235300][ T839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.244967][ T839] usb 6-1: config 0 descriptor?? [ 77.312655][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 77.312671][ T40] audit: type=1400 audit(1748522211.064:430): avc: denied { execute } for pid=7120 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 77.323888][ T40] audit: type=1400 audit(1748522211.064:431): avc: denied { execute_no_trans } for pid=7120 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 77.384636][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 77.385671][ T5937] Bluetooth: hci4: command 0x1003 tx timeout [ 77.437488][ T5937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.442912][ T5937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.445682][ T836] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 77.450626][ T5937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.455150][ T5937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.458987][ T5937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.465183][ T5946] Bluetooth: hci3: command 0x0405 tx timeout [ 77.466502][ T46] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.467554][ T836] usb 7-1: device descriptor read/8, error -71 [ 77.522418][ T40] audit: type=1400 audit(1748522211.274:432): avc: denied { create } for pid=7123 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 77.556831][ T46] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.576783][ T7121] chnl_net:caif_netlink_parms(): no params data found [ 77.611833][ T46] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.660951][ T7121] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.663248][ T7121] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.665574][ T7121] bridge_slave_0: entered allmulticast mode [ 77.668340][ T7121] bridge_slave_0: entered promiscuous mode [ 77.670226][ T839] usbhid 6-1:0.0: can't add hid device: -71 [ 77.671867][ T7121] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.672382][ T839] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 77.677233][ T7121] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.679317][ T839] usb 6-1: USB disconnect, device number 9 [ 77.679808][ T7121] bridge_slave_1: entered allmulticast mode [ 77.688472][ T7121] bridge_slave_1: entered promiscuous mode [ 77.704487][ T836] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 77.721150][ T46] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.735786][ T836] usb 7-1: device descriptor read/8, error -71 [ 77.749220][ T7121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.756868][ T7121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.807931][ T7121] team0: Port device team_slave_0 added [ 77.811414][ T7121] team0: Port device team_slave_1 added [ 77.849245][ T836] usb usb7-port1: unable to enumerate USB device [ 77.873080][ T7121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.876127][ T7121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.886344][ T7121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.890490][ T7121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.892649][ T7121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.901737][ T7121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.983675][ T7121] hsr_slave_0: entered promiscuous mode [ 77.985914][ T7121] hsr_slave_1: entered promiscuous mode [ 77.987924][ T7121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.990228][ T7121] Cannot create hsr debugfs directory [ 77.999354][ T46] team0: left allmulticast mode [ 78.001100][ T46] team_slave_0: left allmulticast mode [ 78.002798][ T46] team_slave_1: left allmulticast mode [ 78.006173][ T46] bridge0: port 3(team0) entered disabled state [ 78.010272][ T46] bridge_slave_1: left allmulticast mode [ 78.012018][ T46] bridge_slave_1: left promiscuous mode [ 78.013822][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.017813][ T46] bridge_slave_0: left allmulticast mode [ 78.019598][ T46] bridge_slave_0: left promiscuous mode [ 78.021454][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.174538][ T836] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 78.324531][ T836] usb 6-1: Using ep0 maxpacket: 16 [ 78.328522][ T836] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 78.334262][ T836] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 78.338602][ T836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.341808][ T836] usb 6-1: Product: í’€ [ 78.343583][ T836] usb 6-1: Manufacturer: 侞跎瓛⋰ﱲæ¢èŠŒç€¤é‚°ïŽ€å²¡ê£¯áŒ¸êˆá¤ªãª…á¢á¹ì…੶隤䚕ṟ㔔å‹ë½¢é¹—뺽å±ä„¢íŸ¦ê„£ [ 78.349055][ T836] usb 6-1: SerialNumber: syz [ 78.392019][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.398869][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.403480][ T46] bond0 (unregistering): Released all slaves [ 78.475788][ T46] bond1 (unregistering): Released all slaves [ 78.539365][ T7146] 9pnet_fd: Insufficient options for proto=fd [ 78.589090][ T836] usb 6-1: 2:1 : no UAC_FORMAT_TYPE desc [ 78.607297][ T836] usb 6-1: USB disconnect, device number 10 [ 78.649551][ T5931] udevd[5931]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.719523][ T7121] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.727843][ T7121] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.741741][ T7121] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.756492][ T7121] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.789443][ T7166] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 78.843556][ T7121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.858695][ T46] hsr_slave_0: left promiscuous mode [ 78.861001][ T46] hsr_slave_1: left promiscuous mode [ 78.863095][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.867114][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.870863][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.873250][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.879902][ T7173] __nla_validate_parse: 2 callbacks suppressed [ 78.879914][ T7173] netlink: 16 bytes leftover after parsing attributes in process `syz.3.370'. [ 78.897331][ T46] veth1_macvtap: left promiscuous mode [ 78.899321][ T46] veth0_macvtap: left promiscuous mode [ 78.901232][ T46] veth1_vlan: left promiscuous mode [ 78.902942][ T46] veth0_vlan: left promiscuous mode [ 79.154569][ T7180] netlink: 8680 bytes leftover after parsing attributes in process `syz.2.372'. [ 79.157460][ T40] audit: type=1400 audit(1748522212.904:433): avc: denied { setopt } for pid=7179 comm="syz.2.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.163561][ T7180] IPv6: NLM_F_CREATE should be specified when creating new route [ 79.168185][ T7180] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 79.171058][ T7180] IPv6: NLM_F_CREATE should be set when creating new route [ 79.173643][ T7180] IPv6: NLM_F_CREATE should be set when creating new route [ 79.182995][ T7180] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 79.467173][ T46] team_slave_1 (unregistering): left promiscuous mode [ 79.472057][ T46] team0 (unregistering): Port device team_slave_1 removed [ 79.526588][ T46] team_slave_0 (unregistering): left promiscuous mode [ 79.530038][ T46] team0 (unregistering): Port device team_slave_0 removed [ 79.556559][ T5937] Bluetooth: hci1: command tx timeout [ 80.046704][ T7121] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.055742][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.058142][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.064249][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.067355][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.122320][ T7196] NILFS (nullb0): couldn't find nilfs on the device [ 80.238817][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 80.238937][ T40] audit: type=1400 audit(1748522213.974:434): avc: denied { ioctl } for pid=7204 comm="syz.2.378" path="socket:[15781]" dev="sockfs" ino=15781 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.242514][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 80.243040][ T7121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.282590][ T7208] bond2: entered promiscuous mode [ 80.284244][ T7208] bond2: entered allmulticast mode [ 80.287400][ T7208] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.415110][ T7121] veth0_vlan: entered promiscuous mode [ 80.422631][ T7121] veth1_vlan: entered promiscuous mode [ 80.451021][ T7121] veth0_macvtap: entered promiscuous mode [ 80.455702][ T7121] veth1_macvtap: entered promiscuous mode [ 80.468453][ T7121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.474638][ T7121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.479569][ T7121] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.482330][ T7121] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.485806][ T7121] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.488528][ T7121] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.513101][ T7240] netlink: 277 bytes leftover after parsing attributes in process `syz.1.384'. [ 80.548489][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.550954][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.565687][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.568122][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.581725][ T40] audit: type=1400 audit(1748522214.334:435): avc: denied { mounton } for pid=7121 comm="syz-executor" path="/syzkaller.YhvUQL/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 80.672436][ T40] audit: type=1400 audit(1748522214.424:436): avc: denied { unmount } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 80.776701][ T7271] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.779294][ T7271] macvtap0: entered allmulticast mode [ 80.780487][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.781514][ T7271] veth0_macvtap: entered allmulticast mode [ 80.788413][ T7271] netlink: 'syz.4.392': attribute type 3 has an invalid length. [ 80.791959][ T7271] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 80.806928][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'. [ 80.832320][ T7277] xfs: Unknown parameter 'discardÿ·' [ 80.833644][ T40] audit: type=1400 audit(1748522214.584:437): avc: denied { mounton } for pid=7276 comm="syz.3.394" path="/83/bus" dev="tmpfs" ino=464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 80.910328][ T40] audit: type=1400 audit(1748522214.664:438): avc: denied { read } for pid=7285 comm="syz.3.396" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 80.918430][ T40] audit: type=1400 audit(1748522214.664:439): avc: denied { open } for pid=7285 comm="syz.3.396" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 80.935260][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 81.019773][ T7299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.398'. [ 81.139328][ T7312] program syz.2.400 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.205705][ T1114] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 81.208066][ T1114] ata1.00: irq_stat 0x40000000 [ 81.209610][ T1114] ata1.00: failed command: ZAC MANAGEMENT OUT [ 81.212934][ T1114] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 12 [ 81.212934][ T1114] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 81.218144][ T1114] ata1.00: status: { DRDY ERR } [ 81.219807][ T1114] ata1.00: error: { ABRT } [ 81.221317][ T1114] ata1.00: device reported invalid CHS sector 0 [ 81.395382][ T9] cfg80211: failed to load regulatory.db [ 81.460872][ T1114] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 81.463047][ T1114] ata1: failed to read log page 10h (errno=-5) [ 81.465239][ T1114] ata1.00: exception Emask 0x1 SAct 0x40000 SErr 0x0 action 0x0 [ 81.467651][ T1114] ata1.00: irq_stat 0x40000000 [ 81.469285][ T1114] ata1.00: failed command: WRITE FPDMA QUEUED [ 81.471165][ T1114] ata1.00: cmd 61/00:90:36:81:08/01:00:00:00:00/40 tag 18 ncq dma 131072 out [ 81.471165][ T1114] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 81.479396][ T1114] ata1.00: status: { DRDY } [ 81.483656][ T1114] ata1.00: configured for UDMA/100 [ 81.486009][ T1114] ata1: EH complete [ 81.532897][ T7359] netlink: 'syz.2.411': attribute type 10 has an invalid length. [ 81.535813][ T7359] netlink: 40 bytes leftover after parsing attributes in process `syz.2.411'. [ 81.538674][ T7359] team0: Device geneve0 is up. Set it down before adding it as a team port [ 81.541611][ T7359] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 81.555896][ T7363] netlink: 16 bytes leftover after parsing attributes in process `syz.3.412'. [ 81.625542][ T5942] Bluetooth: hci1: command tx timeout [ 81.628649][ T7373] overlayfs: conflicting options: metacopy=off,verity=on [ 81.801641][ T7396] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 808 [ 82.332622][ T7423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.337734][ T7423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.342047][ T7423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.347644][ T7424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.347810][ T7423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.350513][ T7424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.549127][ T7428] team_slave_0: entered promiscuous mode [ 82.551460][ T7428] team_slave_0: left promiscuous mode [ 82.574538][ T6283] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 82.638162][ T7432] capability: warning: `syz.1.429' uses 32-bit capabilities (legacy support in use) [ 82.652824][ T7435] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.655888][ T7435] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.658619][ T7435] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.661384][ T7435] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.670039][ T7435] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.672901][ T7435] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.676328][ T7435] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.679344][ T7435] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.746156][ T6283] usb 8-1: Using ep0 maxpacket: 32 [ 82.749425][ T6283] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 82.752576][ T6283] usb 8-1: config 0 has no interface number 0 [ 82.756873][ T6283] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 82.760804][ T6283] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.763907][ T6283] usb 8-1: Product: syz [ 82.765750][ T6283] usb 8-1: Manufacturer: syz [ 82.767568][ T6283] usb 8-1: SerialNumber: syz [ 82.771654][ T6283] usb 8-1: config 0 descriptor?? [ 82.775193][ T6283] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 82.824782][ T5942] Bluetooth: hci4: command 0xfc11 tx timeout [ 82.824827][ T5937] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 82.884958][ T836] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 82.911755][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 82.911766][ T40] audit: type=1400 audit(1748522216.664:458): avc: denied { watch } for pid=7449 comm="syz.2.435" path="/119/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 82.931789][ T40] audit: type=1400 audit(1748522216.664:459): avc: denied { watch_sb watch_reads } for pid=7449 comm="syz.2.435" path="/119/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.975616][ T6283] usb 8-1: qt2_attach - failed to power on unit: -71 [ 82.984109][ T6283] quatech2 8-1:0.51: probe with driver quatech2 failed with error -71 [ 82.994070][ T6283] usb 8-1: USB disconnect, device number 7 [ 83.034666][ T836] usb 6-1: Using ep0 maxpacket: 8 [ 83.038615][ T836] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 83.041938][ T836] usb 6-1: config 179 has no interface number 0 [ 83.044667][ T836] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 83.049092][ T836] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 83.053409][ T836] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 83.058257][ T836] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 83.063568][ T836] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 83.067354][ T836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.076440][ T7432] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 83.286011][ T836] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input7 [ 83.495290][ T836] usb 6-1: USB disconnect, device number 11 [ 83.497244][ C2] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 83.497267][ C2] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 83.516470][ T836] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 83.704524][ T5937] Bluetooth: hci1: command tx timeout [ 83.733094][ T5937] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 83.733201][ T5937] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 83.736394][ T5937] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 83.739538][ T5937] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 83.742747][ T5937] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 83.746125][ T5937] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 83.749230][ T5937] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 83.752093][ T5937] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 83.756181][ T5937] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 83.760495][ T5937] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 83.845012][ T7487] netlink: 'syz.3.448': attribute type 11 has an invalid length. [ 83.948703][ T7494] netlink: 'syz.2.451': attribute type 62 has an invalid length. [ 83.954019][ T7494] 9pnet_fd: Insufficient options for proto=fd [ 84.126000][ T7510] mkiss: ax0: crc mode is auto. [ 84.134834][ T40] audit: type=1400 audit(1748522217.894:460): avc: denied { write } for pid=7511 comm="syz.1.458" lport=49596 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 84.142706][ T40] audit: type=1400 audit(1748522217.894:461): avc: denied { setopt } for pid=7511 comm="syz.1.458" lport=49596 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 84.170968][ T40] audit: type=1400 audit(1748522217.924:462): avc: denied { read } for pid=5646 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 84.192695][ T40] audit: type=1400 audit(1748522217.944:463): avc: denied { write } for pid=7511 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.202925][ T40] audit: type=1400 audit(1748522217.954:464): avc: denied { mounton } for pid=7513 comm="syz.2.459" path="/125/bus" dev="tmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.224952][ T40] audit: type=1400 audit(1748522217.964:465): avc: denied { read write } for pid=5943 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.232755][ T40] audit: type=1400 audit(1748522217.964:466): avc: denied { open } for pid=5943 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.242558][ T40] audit: type=1400 audit(1748522217.964:467): avc: denied { ioctl } for pid=5943 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.245764][ T7517] netlink: 'syz.1.460': attribute type 10 has an invalid length. [ 84.277259][ T7517] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 84.381145][ T7527] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 84.466625][ T7534] sctp: [Deprecated]: syz.2.466 (pid 7534) Use of int in max_burst socket option deprecated. [ 84.466625][ T7534] Use struct sctp_assoc_value instead [ 84.530088][ T7539] __nla_validate_parse: 7 callbacks suppressed [ 84.530100][ T7539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.466'. [ 84.536952][ T7539] netlink: 60 bytes leftover after parsing attributes in process `syz.2.466'. [ 84.540100][ T7539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.466'. [ 84.542973][ T7539] netlink: 60 bytes leftover after parsing attributes in process `syz.2.466'. [ 84.545786][ T7539] netlink: 104 bytes leftover after parsing attributes in process `syz.2.466'. [ 84.678435][ T7541] IPv6: sit1: Disabled Multicast RS [ 84.680696][ T7541] sit1: entered allmulticast mode [ 84.841339][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.473'. [ 84.930696][ T7562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.934345][ T7562] batadv_slave_0: entered promiscuous mode [ 85.058804][ T7576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.480'. [ 85.161372][ T7587] ISOFS: Unable to identify CD-ROM format. [ 85.200842][ T7592] netlink: 'syz.3.486': attribute type 1 has an invalid length. [ 85.204060][ T7592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.224501][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 85.499565][ T7620] binder: 7619:7620 ioctl c0306201 200000000340 returned -14 [ 85.538244][ T7624] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 85.599719][ T7636] FAULT_INJECTION: forcing a failure. [ 85.599719][ T7636] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 85.603716][ T7636] CPU: 0 UID: 0 PID: 7636 Comm: syz.4.501 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 85.603731][ T7636] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.603738][ T7636] Call Trace: [ 85.603742][ T7636] [ 85.603746][ T7636] dump_stack_lvl+0x16c/0x1f0 [ 85.603782][ T7636] should_fail_ex+0x512/0x640 [ 85.603816][ T7636] _copy_from_user+0x2e/0xd0 [ 85.603835][ T7636] copy_msghdr_from_user+0x98/0x160 [ 85.603850][ T7636] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 85.603870][ T7636] ___sys_sendmsg+0xfe/0x1d0 [ 85.603884][ T7636] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.603896][ T7636] ? __lock_acquire+0x622/0x1c90 [ 85.603927][ T7636] __sys_sendmsg+0x16d/0x220 [ 85.603946][ T7636] ? __pfx___sys_sendmsg+0x10/0x10 [ 85.603968][ T7636] do_syscall_64+0xcd/0x4c0 [ 85.603983][ T7636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.603995][ T7636] RIP: 0033:0x7f7d60d8e969 [ 85.604004][ T7636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.604014][ T7636] RSP: 002b:00007f7d61bc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.604024][ T7636] RAX: ffffffffffffffda RBX: 00007f7d60fb5fa0 RCX: 00007f7d60d8e969 [ 85.604031][ T7636] RDX: 0000000000000041 RSI: 0000200000000100 RDI: 0000000000000004 [ 85.604037][ T7636] RBP: 00007f7d61bc9090 R08: 0000000000000000 R09: 0000000000000000 [ 85.604043][ T7636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.604049][ T7636] R13: 0000000000000000 R14: 00007f7d60fb5fa0 R15: 00007ffe5e27e698 [ 85.604063][ T7636] [ 85.784916][ T5937] Bluetooth: hci1: command tx timeout [ 85.911885][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.507'. [ 85.913122][ T7642] fuse: Unknown parameter 'fd.0x0000000000000005' [ 86.107246][ T7666] futex_wake_op: syz.3.509 tries to shift op by -1; fix this program [ 86.188669][ T7670] FAULT_INJECTION: forcing a failure. [ 86.188669][ T7670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.192905][ T7670] CPU: 1 UID: 0 PID: 7670 Comm: syz.3.511 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 86.192920][ T7670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.192926][ T7670] Call Trace: [ 86.192930][ T7670] [ 86.192935][ T7670] dump_stack_lvl+0x16c/0x1f0 [ 86.192957][ T7670] should_fail_ex+0x512/0x640 [ 86.192975][ T7670] _copy_to_user+0x32/0xd0 [ 86.192993][ T7670] simple_read_from_buffer+0xcb/0x170 [ 86.193006][ T7670] proc_fail_nth_read+0x197/0x270 [ 86.193032][ T7670] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.193045][ T7670] ? rw_verify_area+0xcf/0x680 [ 86.193061][ T7670] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.193072][ T7670] vfs_read+0x1e4/0xc60 [ 86.193085][ T7670] ? __pfx___mutex_lock+0x10/0x10 [ 86.193099][ T7670] ? __pfx_vfs_read+0x10/0x10 [ 86.193113][ T7670] ? __fget_files+0x20e/0x3c0 [ 86.193129][ T7670] ksys_read+0x12a/0x250 [ 86.193139][ T7670] ? __pfx_ksys_read+0x10/0x10 [ 86.193154][ T7670] do_syscall_64+0xcd/0x4c0 [ 86.193169][ T7670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.193180][ T7670] RIP: 0033:0x7fa012b8d37c [ 86.193189][ T7670] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 86.193199][ T7670] RSP: 002b:00007fa013994030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 86.193209][ T7670] RAX: ffffffffffffffda RBX: 00007fa012db5fa0 RCX: 00007fa012b8d37c [ 86.193216][ T7670] RDX: 000000000000000f RSI: 00007fa0139940a0 RDI: 0000000000000005 [ 86.193222][ T7670] RBP: 00007fa013994090 R08: 0000000000000000 R09: 0000000000000000 [ 86.193228][ T7670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.193234][ T7670] R13: 0000000000000000 R14: 00007fa012db5fa0 R15: 00007ffd44488a78 [ 86.193247][ T7670] [ 86.604187][ T5999] hid (null): unknown global tag 0xd [ 86.606958][ T5999] hid (null): report_id 119323660 is invalid [ 86.609414][ T5999] hid (null): invalid report_size 8738 [ 86.611109][ T5999] hid (null): global environment stack underflow [ 86.614456][ T5999] hid (null): report_id 3884777691 is invalid [ 86.616820][ T5999] hid (null): unknown global tag 0xc [ 86.618454][ T5999] hid (null): report_id 0 is invalid [ 86.620118][ T5999] hid (null): unknown global tag 0xe [ 86.621765][ T5999] hid (null): report_id 3285422488 is invalid [ 86.623635][ T5999] hid (null): unknown global tag 0xc [ 86.626123][ T5999] hid (null): invalid report_count 14687 [ 86.627880][ T5999] hid (null): invalid report_size 1163006712 [ 86.629701][ T5999] hid (null): unknown global tag 0xd [ 86.631312][ T5999] hid (null): unknown global tag 0xc [ 86.633064][ T5999] hid (null): unknown global tag 0xc [ 86.636032][ T5999] hid (null): unknown global tag 0xc [ 86.637668][ T5999] hid (null): unknown global tag 0xc2 [ 86.639340][ T5999] hid (null): unknown global tag 0xc [ 86.641146][ T5999] hid (null): unknown global tag 0xd [ 86.642793][ T5999] hid (null): unknown global tag 0xd [ 86.644793][ T5999] hid (null): report_id 1896865222 is invalid [ 86.646955][ T5999] hid (null): report_id 47192 is invalid [ 86.649032][ T5999] hid (null): unknown global tag 0xc [ 86.651893][ T5999] hid (null): invalid report_count 55948 [ 86.653797][ T5999] hid (null): unknown global tag 0xd [ 86.655642][ T5999] hid (null): unknown global tag 0xc [ 86.657370][ T5999] hid (null): unknown global tag 0xd [ 86.659091][ T5999] hid (null): unknown global tag 0xca [ 86.660771][ T5999] hid (null): unknown global tag 0xd [ 86.662495][ T5999] hid (null): unknown global tag 0xe [ 86.664189][ T5999] hid (null): invalid report_count 2110175616 [ 86.666284][ T5999] hid (null): unknown global tag 0xd [ 86.668605][ T5999] hid (null): unknown global tag 0x1e [ 86.670486][ T5999] hid (null): report_id 0 is invalid [ 86.672244][ T5999] hid (null): unknown global tag 0xd [ 86.673968][ T5999] hid (null): unknown global tag 0xd [ 86.678492][ T5999] hid-generic 0005:0000:0000.0002: unknown main item tag 0x4 [ 86.681007][ T5999] hid-generic 0005:0000:0000.0002: reserved main item tag 0xe [ 86.683417][ T5999] hid-generic 0005:0000:0000.0002: unknown main item tag 0x7 [ 86.685920][ T5999] hid-generic 0005:0000:0000.0002: reserved main item tag 0xe [ 86.688972][ T5999] hid-generic 0005:0000:0000.0002: unknown main item tag 0x2 [ 86.691998][ T5999] hid-generic 0005:0000:0000.0002: ignoring exceeding usage max [ 86.695949][ T5999] hid-generic 0005:0000:0000.0002: unknown global tag 0xd [ 86.698842][ T5999] hid-generic 0005:0000:0000.0002: item 0 2 1 13 parsing failed [ 86.702517][ T5999] hid-generic 0005:0000:0000.0002: probe with driver hid-generic failed with error -22 [ 86.789783][ T7686] kvm: pic: level sensitive irq not supported [ 86.790210][ T7686] kvm: pic: non byte read [ 86.796299][ T7687] overlayfs: failed to get inode (-116) [ 86.797832][ T7686] kvm: pic: non byte read [ 86.798208][ T7687] overlayfs: failed to get inode (-116) [ 86.800970][ T7686] kvm: pic: non byte read [ 86.804221][ T7686] kvm: pic: non byte read [ 86.807355][ T7686] kvm: pic: non byte read [ 86.809848][ T7686] kvm: pic: single mode not supported [ 86.809858][ T7686] kvm: pic: level sensitive irq not supported [ 86.812075][ T7686] kvm: pic: non byte read [ 86.817095][ T7686] kvm: pic: non byte read [ 86.819675][ T7686] kvm: pic: non byte read [ 86.822252][ T7686] kvm: pic: non byte read [ 87.445905][ T7725] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1280 sclass=netlink_xfrm_socket pid=7725 comm=syz.3.528 [ 87.901086][ T7741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.904935][ T7741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.023556][ T40] kauditd_printk_skb: 160 callbacks suppressed [ 88.023571][ T40] audit: type=1400 audit(1748522221.774:628): avc: denied { create } for pid=7745 comm="syz.2.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 88.035845][ T40] audit: type=1400 audit(1748522221.784:629): avc: denied { bind } for pid=7745 comm="syz.2.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 88.087211][ T40] audit: type=1400 audit(1748522221.844:630): avc: denied { write } for pid=7745 comm="syz.2.533" path="socket:[20086]" dev="sockfs" ino=20086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 88.154502][ T5973] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 88.284536][ T5973] usb 9-1: device descriptor read/64, error -71 [ 88.534850][ T5973] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 88.549866][ T40] audit: type=1400 audit(1748522222.304:631): avc: denied { mount } for pid=7754 comm="syz.3.536" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 88.558544][ T40] audit: type=1400 audit(1748522222.304:632): avc: denied { remount } for pid=7754 comm="syz.3.536" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 88.564939][ T40] audit: type=1400 audit(1748522222.314:633): avc: denied { unmount } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 88.600314][ T7761] fuse: Unknown parameter '000000000000000000000040x0000000000000004' [ 88.609040][ T7761] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 88.665176][ T5973] usb 9-1: device descriptor read/64, error -71 [ 88.670037][ T40] audit: type=1400 audit(1748522222.424:634): avc: denied { create } for pid=7762 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.717323][ T40] audit: type=1400 audit(1748522222.474:635): avc: denied { write } for pid=7764 comm="syz.3.540" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.733034][ T40] audit: type=1400 audit(1748522222.484:636): avc: denied { execute } for pid=7764 comm="syz.3.540" path="/144/cpu.stat" dev="tmpfs" ino=791 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.775159][ T5973] usb usb9-port1: attempt power cycle [ 88.910697][ T40] audit: type=1400 audit(1748522222.664:637): avc: denied { connect } for pid=7772 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.914523][ T5937] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 88.915518][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 88.983459][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 89.005756][ T7782] autofs: Bad value for 'fd' [ 89.124985][ T5973] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 89.145279][ T5973] usb 9-1: device descriptor read/8, error -71 [ 89.190631][ T7791] syz.2.546: attempt to access beyond end of device [ 89.190631][ T7791] loop2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 89.197068][ T7791] qnx6: unable to read the first superblock [ 89.199803][ T7791] syz.2.546: attempt to access beyond end of device [ 89.199803][ T7791] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 89.205041][ T7791] qnx6: unable to read the first superblock [ 89.207544][ T7791] qnx6: unable to read the first superblock [ 89.394657][ T5973] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 89.415199][ T5973] usb 9-1: device descriptor read/8, error -71 [ 89.534824][ T5973] usb usb9-port1: unable to enumerate USB device [ 89.664678][ T34] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 89.698206][ T7799] netlink: 36 bytes leftover after parsing attributes in process `syz.3.549'. [ 89.794640][ T34] usb 9-1: device descriptor read/64, error -71 [ 90.044511][ T34] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 90.153271][ T7802] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 90.184894][ T34] usb 9-1: device descriptor read/64, error -71 [ 90.221752][ T7806] binder: 7805:7806 ioctl c0306201 200000000100 returned -22 [ 90.304735][ T34] usb usb9-port1: attempt power cycle [ 90.654518][ T34] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 90.675142][ T34] usb 9-1: device descriptor read/8, error -71 [ 90.839685][ T7812] openvswitch: netlink: Duplicate key (type 0). [ 90.914673][ T34] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 90.951074][ T7819] netlink: 292 bytes leftover after parsing attributes in process `syz.3.558'. [ 91.124541][ T34] usb 9-1: device not accepting address 9, error -71 [ 91.134983][ T34] usb usb9-port1: unable to enumerate USB device [ 91.230301][ T7832] fuse: Invalid rootmode [ 91.232299][ T7832] squashfs: Unknown parameter 'noreÑç)Qcovere' [ 91.274759][ T7846] kvm: emulating exchange as write [ 91.308114][ T7854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.572'. [ 92.126383][ T7883] unknown channel width for channel at 909000KHz? [ 92.129417][ T7883] unknown channel width for channel at 909000KHz? [ 92.132116][ T7883] unknown channel width for channel at 909000KHz? [ 92.195058][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'. [ 92.197864][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'. [ 92.846181][ T7960] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 93.709256][ T7964] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.712162][ T7964] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 93.720298][ T7964] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 93.725783][ T7964] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 93.728161][ T7964] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.730904][ T7964] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.735996][ T7964] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.738073][ T7964] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 93.741581][ T7964] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 93.743668][ T7964] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 93.749050][ T7964] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 93.787180][ T5937] Bluetooth: hci0: unexpected event for opcode 0x0c23 [ 93.799533][ T40] kauditd_printk_skb: 55 callbacks suppressed [ 93.799548][ T40] audit: type=1400 audit(1748522227.554:693): avc: denied { setopt } for pid=7993 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.801789][ T7993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.930715][ T7999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.602'. [ 93.953064][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 94.034598][ T836] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 94.180387][ T8003] netlink: 'syz.1.602': attribute type 21 has an invalid length. [ 94.183653][ T8003] netlink: 156 bytes leftover after parsing attributes in process `syz.1.602'. [ 94.196726][ T836] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 94.201080][ T836] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.205305][ T836] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 94.208935][ T836] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.215492][ T836] usb 9-1: config 0 descriptor?? [ 94.396172][ T40] audit: type=1400 audit(1748522228.154:694): avc: denied { write } for pid=8006 comm="syz.3.604" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.406965][ T8007] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8007 comm=syz.3.604 [ 94.412013][ T8007] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8007 comm=syz.3.604 [ 94.421345][ T40] audit: type=1400 audit(1748522228.174:695): avc: denied { audit_write } for pid=8006 comm="syz.3.604" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 94.469291][ T40] audit: type=1400 audit(1748522228.224:696): avc: denied { setopt } for pid=8011 comm="syz.3.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 94.473424][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.477502][ T40] audit: type=1400 audit(1748522228.224:697): avc: denied { getopt } for pid=8011 comm="syz.3.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 94.480336][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.492950][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.496981][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.500180][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.503210][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.506580][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.509878][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.512953][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.516255][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.519302][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.522385][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.525641][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.528885][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.532087][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.535486][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.538707][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.541980][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.545399][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.548503][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.550825][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.553671][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.556942][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.560112][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.563163][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.567397][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.570572][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.573696][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.577013][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.580218][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 94.633164][ T836] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 94.636034][ T836] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 94.638887][ T836] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 94.641861][ T836] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 94.644838][ T836] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 94.648974][ T836] elan 0003:04F3:0755.0003: failed to start in urb: -90 [ 94.658319][ T836] elan 0003:04F3:0755.0003: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 94.719956][ T8023] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 94.720052][ T40] audit: type=1400 audit(1748522228.474:698): avc: denied { mounton } for pid=8022 comm="syz.3.608" path="/166/bus" dev="9p" ino=35913859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.723624][ T8023] overlayfs: missing 'lowerdir' [ 94.743712][ T40] audit: type=1400 audit(1748522228.494:699): avc: denied { remove_name } for pid=8022 comm="syz.3.608" name="file0" dev="9p" ino=35913965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.752187][ T40] audit: type=1400 audit(1748522228.494:700): avc: denied { rename } for pid=8022 comm="syz.3.608" name="file0" dev="9p" ino=35913965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.759555][ T40] audit: type=1400 audit(1748522228.494:701): avc: denied { unlink } for pid=8022 comm="syz.3.608" name="control" dev="9p" ino=35913860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.769755][ T40] audit: type=1400 audit(1748522228.514:702): avc: denied { listen } for pid=8022 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.896065][ T8035] binder: BINDER_SET_CONTEXT_MGR already set [ 94.899339][ T8035] binder: 8033:8035 ioctl 4018620d 200000000100 returned -16 [ 94.903117][ T8035] binder: 8033:8035 ioctl c0306201 200000000180 returned -11 [ 94.907190][ T8035] netlink: 76 bytes leftover after parsing attributes in process `syz.1.612'. [ 95.143104][ T8052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.198897][ T8052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.243956][ T7996] pº: renamed from vlan0 (while UP) [ 95.254213][ T8055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.488091][ T8060] set match dimension is over the limit! [ 95.727529][ T8076] sp0: Synchronizing with TNC [ 95.734742][ T8074] [U] è [ 95.784588][ T5942] Bluetooth: hci3: command 0x0405 tx timeout [ 95.784952][ T5937] Bluetooth: hci1: command 0x0c1a tx timeout [ 95.785154][ T5294] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.928259][ T8084] ================================================================== [ 95.931698][ T8084] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x1d4/0x200 [ 95.935534][ T8084] Read of size 8 at addr ffff888052bfd558 by task syz.1.629/8084 [ 95.940786][ T8084] [ 95.941828][ T8084] CPU: 3 UID: 0 PID: 8084 Comm: syz.1.629 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 95.941851][ T8084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.941865][ T8084] Call Trace: [ 95.941872][ T8084] [ 95.941879][ T8084] dump_stack_lvl+0x116/0x1f0 [ 95.941917][ T8084] print_report+0xcd/0x680 [ 95.941941][ T8084] ? __virt_addr_valid+0x81/0x610 [ 95.941962][ T8084] ? __phys_addr+0xe8/0x180 [ 95.941982][ T8084] ? __list_del_entry_valid_or_report+0x1d4/0x200 [ 95.942002][ T8084] kasan_report+0xe0/0x110 [ 95.942024][ T8084] ? __list_del_entry_valid_or_report+0x1d4/0x200 [ 95.942051][ T8084] __list_del_entry_valid_or_report+0x1d4/0x200 [ 95.942071][ T8084] bt_accept_unlink+0x34/0x2e0 [ 95.942094][ T8084] l2cap_sock_teardown_cb+0x1a3/0x3c0 [ 95.942123][ T8084] l2cap_chan_del+0xbd/0x8f0 [ 95.942141][ T8084] l2cap_conn_del+0x37a/0x730 [ 95.942160][ T8084] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 95.942186][ T8084] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 95.942205][ T8084] l2cap_disconn_cfm+0x96/0xd0 [ 95.942223][ T8084] hci_conn_hash_flush+0x10e/0x260 [ 95.942253][ T8084] hci_dev_close_sync+0x602/0x11d0 [ 95.942281][ T8084] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 95.942311][ T8084] hci_dev_do_close+0x2e/0x90 [ 95.942336][ T8084] hci_dev_close+0x183/0x1e0 [ 95.942362][ T8084] hci_sock_ioctl+0x2b3/0x7d0 [ 95.942386][ T8084] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 95.942412][ T8084] sock_do_ioctl+0x115/0x280 [ 95.942440][ T8084] ? __pfx_sock_do_ioctl+0x10/0x10 [ 95.942469][ T8084] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 95.942496][ T8084] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 95.942524][ T8084] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 95.942554][ T8084] sock_ioctl+0x227/0x6b0 [ 95.942570][ T8084] ? __pfx_sock_ioctl+0x10/0x10 [ 95.942585][ T8084] ? hook_file_ioctl_common+0x145/0x410 [ 95.942607][ T8084] ? selinux_file_ioctl+0x180/0x270 [ 95.942631][ T8084] ? selinux_file_ioctl+0xb4/0x270 [ 95.942657][ T8084] ? __pfx_sock_ioctl+0x10/0x10 [ 95.942673][ T8084] __x64_sys_ioctl+0x18b/0x210 [ 95.942702][ T8084] do_syscall_64+0xcd/0x4c0 [ 95.942726][ T8084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.942745][ T8084] RIP: 0033:0x7f500558e969 [ 95.942760][ T8084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.942779][ T8084] RSP: 002b:00007f50064ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.942799][ T8084] RAX: ffffffffffffffda RBX: 00007f50057b5fa0 RCX: 00007f500558e969 [ 95.942812][ T8084] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000004 [ 95.942825][ T8084] RBP: 00007f5005610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 95.942837][ T8084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.942850][ T8084] R13: 0000000000000000 R14: 00007f50057b5fa0 R15: 00007ffe2000e758 [ 95.942870][ T8084] [ 95.942876][ T8084] [ 96.048846][ T8084] Allocated by task 8023: [ 96.050196][ T8084] kasan_save_stack+0x33/0x60 [ 96.051755][ T8084] kasan_save_track+0x14/0x30 [ 96.053234][ T8084] __kasan_kmalloc+0xaa/0xb0 [ 96.054821][ T8084] __kmalloc_noprof+0x223/0x510 [ 96.056401][ T8084] sk_prot_alloc+0x1a8/0x2a0 [ 96.057935][ T8084] sk_alloc+0x36/0xc20 [ 96.059312][ T8084] bt_sock_alloc+0x3b/0x3a0 [ 96.060818][ T8084] l2cap_sock_alloc.constprop.0+0x33/0x1d0 [ 96.062663][ T8084] l2cap_sock_create+0x123/0x1f0 [ 96.064269][ T8084] bt_sock_create+0x185/0x350 [ 96.065764][ T8084] __sock_create+0x335/0x8d0 [ 96.067307][ T8084] __sys_socket+0x14d/0x260 [ 96.068777][ T8084] __x64_sys_socket+0x72/0xb0 [ 96.070542][ T8084] do_syscall_64+0xcd/0x4c0 [ 96.072233][ T8084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.074131][ T8084] [ 96.074920][ T8084] Freed by task 8023: [ 96.076220][ T8084] kasan_save_stack+0x33/0x60 [ 96.077728][ T8084] kasan_save_track+0x14/0x30 [ 96.079755][ T8084] kasan_save_free_info+0x3b/0x60 [ 96.081420][ T8084] __kasan_slab_free+0x51/0x70 [ 96.082945][ T8084] kfree+0x2b4/0x4d0 [ 96.084334][ T8084] __sk_destruct+0x740/0x980 [ 96.085981][ T8084] sk_destruct+0xc2/0xf0 [ 96.087343][ T8084] __sk_free+0xf4/0x3e0 [ 96.088676][ T8084] sk_free+0x6a/0x90 [ 96.089945][ T8084] l2cap_sock_kill+0x171/0x2d0 [ 96.091454][ T8084] l2cap_sock_release+0x189/0x210 [ 96.093218][ T8084] __sock_release+0xb0/0x270 [ 96.094712][ T8084] sock_close+0x1c/0x30 [ 96.096087][ T8084] __fput+0x3ff/0xb70 [ 96.097304][ T8084] task_work_run+0x150/0x240 [ 96.098713][ T8084] exit_to_user_mode_loop+0xeb/0x110 [ 96.100451][ T8084] do_syscall_64+0x3f6/0x4c0 [ 96.101901][ T8084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.103755][ T8084] [ 96.104526][ T8084] The buggy address belongs to the object at ffff888052bfd000 [ 96.104526][ T8084] which belongs to the cache kmalloc-2k of size 2048 [ 96.108835][ T8084] The buggy address is located 1368 bytes inside of [ 96.108835][ T8084] freed 2048-byte region [ffff888052bfd000, ffff888052bfd800) [ 96.113189][ T8084] [ 96.113975][ T8084] The buggy address belongs to the physical page: [ 96.116088][ T8084] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x52bf8 [ 96.118807][ T8084] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 96.121916][ T8084] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 96.124261][ T8084] page_type: f5(slab) [ 96.125878][ T8084] raw: 00fff00000000040 ffff88801b442f00 dead000000000100 dead000000000122 [ 96.128907][ T8084] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 96.131493][ T8084] head: 00fff00000000040 ffff88801b442f00 dead000000000100 dead000000000122 [ 96.134548][ T8084] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 96.138034][ T8084] head: 00fff00000000003 ffffea00014afe01 00000000ffffffff 00000000ffffffff [ 96.141528][ T8084] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 96.144874][ T8084] page dumped because: kasan: bad access detected [ 96.147375][ T8084] page_owner tracks the page as allocated [ 96.149665][ T8084] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5930, tgid 5930 (syz-executor), ts 53685974461, free_ts 0 [ 96.157717][ T8084] post_alloc_hook+0x1c0/0x230 [ 96.159728][ T8084] get_page_from_freelist+0x135c/0x3950 [ 96.161974][ T8084] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 96.164746][ T8084] alloc_pages_mpol+0x1fb/0x550 [ 96.166731][ T8084] new_slab+0x23b/0x330 [ 96.168432][ T8084] ___slab_alloc+0xd9c/0x1940 [ 96.170339][ T8084] __slab_alloc.constprop.0+0x56/0xb0 [ 96.172481][ T8084] __kmalloc_cache_noprof+0xfb/0x3e0 [ 96.174634][ T8084] rtnl_newlink+0x11b/0x2000 [ 96.176535][ T8084] rtnetlink_rcv_msg+0x95b/0xe90 [ 96.178488][ T8084] netlink_rcv_skb+0x155/0x420 [ 96.180489][ T8084] netlink_unicast+0x53a/0x7f0 [ 96.182443][ T8084] netlink_sendmsg+0x8d1/0xdd0 [ 96.184382][ T8084] __sys_sendto+0x4a0/0x520 [ 96.186283][ T8084] __x64_sys_sendto+0xe0/0x1c0 [ 96.188222][ T8084] do_syscall_64+0xcd/0x4c0 [ 96.190155][ T8084] page_owner free stack trace missing [ 96.192417][ T8084] [ 96.193427][ T8084] Memory state around the buggy address: [ 96.195172][ T8084] ffff888052bfd400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.197632][ T8084] ffff888052bfd480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.200103][ T8084] >ffff888052bfd500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.202690][ T8084] ^ [ 96.205027][ T8084] ffff888052bfd580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.208170][ T8084] ffff888052bfd600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.210706][ T8084] ================================================================== [ 96.215807][ T8084] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 96.218024][ T8084] CPU: 2 UID: 0 PID: 8084 Comm: syz.1.629 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 96.221480][ T8084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.224695][ T8084] Call Trace: [ 96.225717][ T8084] [ 96.226635][ T8084] dump_stack_lvl+0x3d/0x1f0 [ 96.228044][ T8084] panic+0x71c/0x800 [ 96.229249][ T8084] ? __pfx_panic+0x10/0x10 [ 96.230587][ T8084] ? mark_held_locks+0x49/0x80 [ 96.232116][ T8084] ? preempt_schedule_thunk+0x16/0x30 [ 96.233770][ T8084] ? __list_del_entry_valid_or_report+0x1d4/0x200 [ 96.235745][ T8084] ? preempt_schedule_common+0x44/0xc0 [ 96.237381][ T8084] ? __list_del_entry_valid_or_report+0x1d4/0x200 [ 96.239334][ T8084] check_panic_on_warn+0xab/0xb0 [ 96.240892][ T8084] end_report+0x107/0x170 [ 96.242212][ T8084] kasan_report+0xee/0x110 [ 96.243643][ T8084] ? __list_del_entry_valid_or_report+0x1d4/0x200 [ 96.245615][ T8084] __list_del_entry_valid_or_report+0x1d4/0x200 [ 96.247542][ T8084] bt_accept_unlink+0x34/0x2e0 [ 96.249080][ T8084] l2cap_sock_teardown_cb+0x1a3/0x3c0 [ 96.251081][ T8084] l2cap_chan_del+0xbd/0x8f0 [ 96.252576][ T8084] l2cap_conn_del+0x37a/0x730 [ 96.254044][ T8084] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 96.255909][ T8084] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 96.257610][ T8084] l2cap_disconn_cfm+0x96/0xd0 [ 96.259148][ T8084] hci_conn_hash_flush+0x10e/0x260 [ 96.260771][ T8084] hci_dev_close_sync+0x602/0x11d0 [ 96.262383][ T8084] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 96.264136][ T8084] hci_dev_do_close+0x2e/0x90 [ 96.265620][ T8084] hci_dev_close+0x183/0x1e0 [ 96.267081][ T8084] hci_sock_ioctl+0x2b3/0x7d0 [ 96.268571][ T8084] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 96.270239][ T8084] sock_do_ioctl+0x115/0x280 [ 96.271875][ T8084] ? __pfx_sock_do_ioctl+0x10/0x10 [ 96.273593][ T8084] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 96.275647][ T8084] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 96.277680][ T8084] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 96.279860][ T8084] sock_ioctl+0x227/0x6b0 [ 96.281233][ T8084] ? __pfx_sock_ioctl+0x10/0x10 [ 96.282765][ T8084] ? hook_file_ioctl_common+0x145/0x410 [ 96.284502][ T8084] ? selinux_file_ioctl+0x180/0x270 [ 96.286109][ T8084] ? selinux_file_ioctl+0xb4/0x270 [ 96.287672][ T8084] ? __pfx_sock_ioctl+0x10/0x10 [ 96.289177][ T8084] __x64_sys_ioctl+0x18b/0x210 [ 96.290676][ T8084] do_syscall_64+0xcd/0x4c0 [ 96.292101][ T8084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.293942][ T8084] RIP: 0033:0x7f500558e969 [ 96.295698][ T8084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.301510][ T8084] RSP: 002b:00007f50064ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.304069][ T8084] RAX: ffffffffffffffda RBX: 00007f50057b5fa0 RCX: 00007f500558e969 [ 96.306509][ T8084] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000004 [ 96.308993][ T8084] RBP: 00007f5005610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 96.311448][ T8084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.313906][ T8084] R13: 0000000000000000 R14: 00007f50057b5fa0 R15: 00007ffe2000e758 [ 96.316266][ T8084] [ 96.317861][ T8084] Kernel Offset: disabled [ 96.319251][ T8084] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:37:09 Registers: info registers vcpu 0 CPU#0 RAX=0000000000110309 RBX=0000000000000000 RCX=ffffffff8b7b6419 RDX=0000000000000000 RSI=ffffffff8dc0416f RDI=ffffffff8bf52dc0 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e08 R8 =0000000000000001 R9 =ffffed100d48663d R10=ffff88806a4331eb R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90876250 R15=0000000000000000 RIP=ffffffff8b7b4f7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6974000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2e71fffc CR3=000000004c1ed000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5e27ea20 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7d60e11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7d60e11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7d60e11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7d60e11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7d60e11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7d60e11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000001a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000df013 RBX=0000000000000001 RCX=ffffffff8b7b6419 RDX=0000000000000000 RSI=ffffffff8dc0416f RDI=ffffffff8bf52dc0 RBP=ffffed1003b51488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a663d R10=ffff88806a5331eb R11=0000000000000001 R12=0000000000000001 R13=ffff88801da8a440 R14=ffffffff90876250 R15=0000000000000000 RIP=ffffffff8b7b4f7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a74000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f50057b7bac CR3=000000004dc84000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff729ec490 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda34411a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda34411a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda34411a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda34411aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda34411b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda34411c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a743840 RCX=ffffffff81af616d RDX=ffff888029492440 RSI=ffffffff81af6149 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc9000633f778 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed100d4e8709 R15=ffff88806a63cfc0 RIP=ffffffff81af614b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6b74000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055555ac08808 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda34411a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda34411a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda34411a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda34411aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda34411b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda34411c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c3010f320f000002 87b966f8230f2000 00c03566f8210fd8 230f00009000b866 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 320f40000093b966 d4428c120ff2f823 0f08000020350004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5db866300f000010 003566320fc00000 80b966c3010f320f 00000287b966f823 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a34bf274abe7caa2 b59f35ef5049f49f 4e2380ef8eefbda1 9b5d3d8d6b34dd68 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c04e14e5bae6f2e b1c74f0df4204261 4a2e2b842c53fcfc e810030d0361237f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ed3610c72cfba6a0 6d3601d727a14dc1 2cf5443e317bb202 dc41de09bb38f382 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c6712f89906564dc 6443a9e895c1595e 269d088c9b063551 f04b2062e851f0b4 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8557f6b5 RDI=ffffffff9ae67620 RBP=ffffffff9ae675e0 RSP=ffffc9000c25f3f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9ae675e0 R15=ffffffff8557f650 RIP=ffffffff8557f6df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f50064ba6c0 ffffffff 00c00000 GS =0000 ffff8880d6c74000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f50064b9f98 CR3=000000002cdb5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5005611a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5005611a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5005611a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5005611aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5005611b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5005611c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5005783488 00007f5005783480 00007f5005783478 00007f5005783450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50062ed100 00007f5005783440 00007f5005783458 00007f50057834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5005783498 00007f5005783490 00007f5005783488 00007f5005783480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000