last executing test programs: 3.976674315s ago: executing program 0 (id=525): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)={{0xcc, 0x44, 0x2, 0x2b1, 0x43, 0x74, 0x33, 0x8}, "563b992fe6c1929e7f0a25cef14bd3b4fb1f8f71078da68fdbeba36fa6f09c0d11209cfc49c8a5b8648fb363c096a9cd4d4198719b794df0e4ac1837e83f2933a6e2e3719fcf758c8f377490ae8b0e3a7228be0a2f1705dd92109e080b95967c4119a1f6b7c9d14700bd60322be9560ed34d", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x692) fcntl$setstatus(r1, 0x4, 0x42000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8, 0x6}}}, 0x34}}, 0x0) syz_emit_vhci(&(0x7f0000000880)=ANY=[@ANYBLOB="02c93010000c0005001708080000007f00"], 0x15) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_io_uring_setup(0x4a60, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xfffffffe, 0x1b3}, 0x0, 0x0) syz_clone(0x80843711, 0x0, 0xfffffcf7, 0x0, 0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000140)=0x3) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e22, 0xfffffffd, @mcast2}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x691]}}, 0x5c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r9, 0x80de02bd3ca0bfdb, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x4000845}, 0x800) getsockopt$IP6T_SO_GET_REVISION_TARGET(r7, 0x29, 0x50, 0x0, &(0x7f0000000180)=0x2b) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x18) splice(r10, 0x0, r11, 0x0, 0x200000000001, 0x0) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r12, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r12, &(0x7f00000041c0)={0x2020}, 0x2020) 3.034943288s ago: executing program 0 (id=546): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='minix\x00', 0x80081f, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x24) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0), 0x2, 0x1) 2.95772581s ago: executing program 0 (id=552): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xb9, @local, 0x3, 0x2}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = semget$private(0x0, 0x4, 0x262) semtimedop(r1, &(0x7f0000000000)=[{0x1, 0xcd27, 0x1000}, {0x2, 0x9, 0x1000}], 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 2.049072527s ago: executing program 0 (id=569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x101800, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="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", 0xff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c4c00007af20f1de06061", @ANYRES16=r3, @ANYBLOB="bbfb2bbd7000fddbdf21670000000800010078000000"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x202, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYRES16=r0], 0xc0}}, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xc) 1.999022626s ago: executing program 0 (id=570): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) (async) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18300200000000000000000003000000075a01001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800007fffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) io_setup(0x20, &(0x7f0000001140)=0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000040)=0xd0) close_range(r3, 0xffffffffffffffff, 0x0) (async) openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r4) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3c00000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) write$cgroup_type(r5, &(0x7f0000000280), 0x2b) r7 = openat$cgroup_procs(r2, 0x0, 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x5, 0x8, r0, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2, r0}]) 1.859422905s ago: executing program 0 (id=571): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x144, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, {0x18, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x144}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = socket$kcm(0xa, 0x2, 0x3a) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x80044d17, &(0x7f0000000100)) r6 = syz_open_dev$evdev(&(0x7f0000000380), 0xb, 0x0) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f00000000c0)={0x3, 0x0, 0x2, 0x2, "412d13cc00"}) getsockopt$sock_int(r4, 0x1, 0x0, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x144, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, {0x18, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x144}}, 0x0) (async) pipe(&(0x7f0000000300)) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) socket$kcm(0xa, 0x2, 0x3a) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (async) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x80044d17, &(0x7f0000000100)) (async) syz_open_dev$evdev(&(0x7f0000000380), 0xb, 0x0) (async) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f00000000c0)={0x3, 0x0, 0x2, 0x2, "412d13cc00"}) (async) getsockopt$sock_int(r4, 0x1, 0x0, 0x0, &(0x7f00000000c0)) (async) 1.763282142s ago: executing program 2 (id=573): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000100)}, 0x20000000}, {{&(0x7f0000000200)={0x2, 0x80, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)="5309d0945c427819ec4fbf6e2811c0c10b229b4722c4a51c7670f4402d75df6dace991300441ded20cf67762dd86537e9dc719c4c0c6886588c512b72fa8ebf145085adc5796d6a18aab9da819abefd758e0701e9fa3c811d39bc55b25c82f5ff89fcfab252d54300fcc4984", 0x6c}], 0x1}}], 0x2, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x6000, &(0x7f0000000300)={[{@huge_within_size}]}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20044040) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000001c0)='ceph\x00', 0x208004, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f00000001c0)={0x2, 'ip6gre0\x00'}, 0x18) rmdir(&(0x7f00000001c0)='./file0/file0\x00') 1.762616131s ago: executing program 1 (id=574): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) r1 = dup(r0) fallocate(r1, 0x10, 0x0, 0x1062200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xae, 0x66}, [@call={0x16}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) 1.679535809s ago: executing program 2 (id=575): mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000000080)={0x20, 0x0, r1, {0x7, 0x4, 0xbde, 0x6}}, 0x20) open$dir(&(0x7f00000001c0)='./file0/file0\x00', 0x80, 0x1a0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2}, [@NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0x3}, {}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040014) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r3 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000640)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) 1.675969448s ago: executing program 1 (id=576): sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000a0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x380, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x173}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x254}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xda4a069eb657005b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x400}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x45) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000140), 0x400001, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x178, r1, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "730134fd9de874c8bc6236674489237e2b9416d14b5dbe96"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "394837c08c6a4089f001e886af30297780bb3af9f9072d74"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fbc0d50a80c0371723f7298d1cf5cacdce4fe702fdd5a26a"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ca7cf4d20d470e799535cb6bddfb2e72704d3d8b1b8c5fff"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6fc95c7448ad5733a458c8a575f8abe50d722b5700b93e41"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x178}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x101040, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) writev(r2, &(0x7f0000001980)=[{&(0x7f0000000480)="6cfc9d23591869483e7717fe70c7dcddd713e643645563a579a9947a6b6c94c27ee0c3546a5814696d4846bf5d27dedd9edf20d6971453ff8e76c9fa25299df347c773035cded7b747042f1f2c56dd14b21b8104ce1f51557c8fd119a40c79d609e6f4ae907aae495cfb9c0bbe48b066356dcba0cd9cd330682361d1b7b30567184629c44da7af9e5835b6dc29c143819c384cda4270e613701c9ad2e01fb8eb207ad38e4ce4503173bcb9758a686e4df3acfb17c66c4d84262effae92d4cbdc3720d62fb5de2a17348189959e01cc344ebe8f6a3f81e5c22f7eee70a7b0c2627d096ddf4d86ad9754c4dd36643d58dd573a596e41d17cbd", 0xf8}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="8754268817f6f07a87f85edf6c3fa87f7dfdef9589ba1823e63798267915d41331d373083ce2f397866e127c00052a211242873dc37b9a592ea19a031d3d7972c43b123f67eb528ce761479df05f30f1957bef763ae350996af343a704b9b760787c824b74a5879ac7726496186fcd88a2c05dcdd4caac436e1cdbb908d4c4d13c885c8c009e7913d91ae062480bc5d7fd1410b206ed8839935b7445e29de36c7eb6b23b539df463fff4b3a1709e1f", 0xaf}, {&(0x7f0000000680)="c1a82bbd3b3042590bf1fb632e43fca0e8b5e36be122e196317e62a3065b7a41d4e205e4a2e1352ad073c2d710633bcf19e478dcd2275ceb8bb6015092fcde0f1bfc9a3cc5eb4d74f56b264f3f7866eff7221db8706fc6b7dd267016c8930d3312104165dcb8f0c7d31083e6699f004ea38d9d559d9eb1ecd5f15e1ae9b3b836e472ced6c33bb202148953d31d7e894cb36ecf64cee07de0ccf507c697580e9a02c9c1d58c4f2bf1c3068437c40ae901778c9993fcbae1a8", 0xb8}, {&(0x7f0000000740)="7480943d4f8f688ed8fbeb3f401cf91184db624b21a020223e22c0addb64227866fba3aeda687d6298b3cd136891a95d6e3563cb45db84b662cc5ff1da5fa4650ef4c08130d2344021bc45b97b8385ba15aa9959819eb556bc37e97a9e55a8fcbaabdea9310eb355b007b45249b9934f19560cc39387fea7538b51808e60874fec9954e4d80866bfbb4cb83bcd082588e1704be8ff8aee8be620161dc031afe1b1b8adc6599c", 0xa6}, {&(0x7f0000000800)="25bdf3ede5dcd503eb94704453e83ff74306d024495da521e736d34f0c32f8ddd68261e16bc46106cbac15353f51521c5d70d306c7f1bfb710755ce0870ddd11364b9d224f314a05751eac34221ac0b24f134889d02f462cb64107d9970047b2b7e3f17acee4707a88b168b158cc4b8270815a52bc1dfe3ba5eea4d25f639cbc98516148df825ff1d8c0dec11acf68b5249b2e5a0582098d5fcadfbabb166706fc36533581645e1d6e6c3c037c46dac8bc84b81e129cf4879d4d59b64e737f0300a50656575d7cc18be86706be0f52cfc4e1cf32ab029e15f05420d3458eec2f8c1ead", 0xe3}, {&(0x7f0000000900)="253259170b97145b03b31e4cacee6e79c3a864e803a9a8b6acc717627028b12c1210f4b44eae0f805e1b060654256b4880db5e65d5452758cce2d97931a0980b35b685", 0x43}, {&(0x7f0000000980)="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", 0x1000}], 0x8) r3 = getuid() r4 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001a40)={0x0, 0x0}, &(0x7f0000001a80)=0xc) getresuid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)=0x0) r7 = getpgid(0x0) sendmsg$nl_netfilter(r0, &(0x7f0000003200)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000031c0)={&(0x7f0000001b80)={0x160c, 0x8, 0x6, 0x201, 0x70bd27, 0x25dfdbfd, {0x7, 0x0, 0x4}, [@generic="2558308e13334ed8b2be27ab965b44526cfbd0421075ce0e03a7226de07652366caa818c2fbfa0447f180b7063c67382959586895c943052cd9fae9236647c8dacb10a904a8b11b54a2de1b42df9c6950e2b36b416ff0ec3c11bef74ed91890f9191b0ad59686715b1285c085358c364e0f24ce628536aa65aa6ba72d734d68274d28291fd3446089960a599f1403dd3bb51cb13527bc7f3903be355621cb0e06598cc79348f96a32a248e85eab3caa9758e454b5d92e52f6bb81dbdfd78ccfbd642bbf359ac03b7d011953fa85874c3e12923b97bafd0f9ba6d4ab0d54b29d9d340404b", @nested={0x12b, 0x6d, 0x0, 0x1, [@typed={0x49, 0x5c, 0x0, 0x0, @binary="edb0c8ee439065dc50f4a6117bc87b054787c348a4a35528696b9147ea57b318ba1eef3313f9cd9e8abacb03b1b5ae1ec3c0d50ccd9341a0e7d5b69c1952a63f4b355d7934"}, @typed={0x14, 0x3a, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x14, 0xdd, 0x0, 0x0, @ipv6=@empty}, @generic="b741abc1c6a67cfce495deeed6bbb12decb405b7c3b20300a9e8d14d52f1857b18a7ad296b5795f20ab071e66b05efcc42f6f057f5eab943444584873508623affb166414c4f91f5625558c6b578cdecbeb523e4fb767a0a320ac77c8d2aa6d7387a1fc973b9b90e3c2a48243d453c055ffd8c734a3f42e49e5654e2", @generic="9c25b39c5a89ede4992514cfcd9fddc5afedd13df7d46a3c60df27761a6181d9d582bd2f8e5d2e3f95b7b32607d912148f04558fe897c8"]}, @typed={0x8, 0x128, 0x0, 0x0, @uid=r3}, @nested={0xc6, 0x6e, 0x0, 0x1, [@typed={0x84, 0x2d, 0x0, 0x0, @binary="45a44aef8339001d8327a0105350333c2cd56fd1422038eda4bc05f6f4fdefbfeb779dca6b124bc54553e43387f34f1a02887062eb70ce30341ec33415ca742c7d67d3dc4d19ac6b754cd8fd8df96e975c23f1fb4f7adef7401e39aa17b309da53b0beea1f6149c2738131c13d237f72e7ea7763d23553d4664b4103cad2ce97"}, @nested={0x4, 0xe9}, @generic="a6cf42714b6796ed19e43182227212a5ae190ab2631843d73dde", @nested={0x4, 0x2}, @typed={0xc, 0x118, 0x0, 0x0, @u64=0x7fffffffffffffff}, @nested={0x4, 0x147}, @nested={0x4, 0x7a}, @typed={0x8, 0x49, 0x0, 0x0, @pid=r4}]}, @nested={0x150, 0x0, 0x0, 0x1, [@nested={0x4, 0x7d}, @generic="d03a4b5c6a4bb405650bebe8b5f7a65ca59766b7bc9ad450a7c2ac3809edca8d49a642a17c21c169890528f1001a35ef01d73e0c7c3e160d7c697c3c6851155e7992d173b354e5055829978df6e500ead69f53dee5656ddcd58b7cdb54843285a7db0a5c66d6a3f5843928adbd21b85d60bda62891beea598b29fd450474bb9fe53dab4ff06ba1ee08401c19d79b9e57a50a1f969c85673cbf8cd7d22775c7a7fa48ae10540963c9599027cfd4b257a3cc2fe16605", @generic="75f7d8016488fbf2052a2f078317e7da7a9ca1652969e2a9d7c7aeffd3cbbd1f2f70e0bfbc10ac57e91f34a842855942dfe981946def32d7c9cbc3d1f3fcdd603b9e892c680923cfb31a330d95e57ca2e336b3466cab56efbdaa4c5feb6fa144edfcd3e877f82efa", @nested={0x4, 0x51}, @generic="2c466f5942a96f962fb484a1266759c2159346371e7527", @nested={0x4, 0x2f}, @nested={0x4, 0x123}, @typed={0x8, 0x57, 0x0, 0x0, @uid=r5}]}, @generic="686dafa00c3bbae5d12092985fef1f774e5d131078a03806b919f8699cd6163be03daa134632fa7a96066f107b7da75bf836ef8631501b57b832cd719dccd74b8a5165f253243e8d", @typed={0x14, 0x22, 0x0, 0x0, @ipv6=@private2}, @generic="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", @typed={0x8, 0x67, 0x0, 0x0, @uid=r6}, @nested={0x162, 0xa0, 0x0, 0x1, [@typed={0x8, 0xbc, 0x0, 0x0, @pid=r7}, @generic="0a4724cc31037a698cd35e12922d4a9a6f4ed000b853145e3f53bb27ab069864fbc66bb9f7e5b5970ab6b86654801057d3e2a89af5f4f210363b262814f4182205157cff73d94dc336a1e58a1632c39ac4e44e871021c1a61ed7968858791c3c2ca41b64c7de289a76429ec4a5f5ccc7de7e6a1bfb920917bd3e9491cb94a9192ac2f900a6ecb3ae8f09629288e8fb33fc60d0aa9bfb084d47357bff3e2d64e181519de19586068ec5023b118fc2e5d67c0119477541ebb9cbdf65f9fc5f28a04e2e65119ef5c3177a8f355eb5c1c997f27a989d", @typed={0x4, 0xc6}, @nested={0x4, 0xf4}, @nested={0x4, 0x1a}, @generic, @nested={0x4, 0x9c}, @generic="d4d97d070608f3b0171d06fdd1c45e3393b050f083c76ede2ca085a1c26799e883713d01f620bf4e0393c49ad4a8f26ee9cfc66a44d347c7e884ecb6f7cd0f6eea4f457f00766b7f87614c7f935af18110726430585da3a06a6a3eb2358bacb42aabfbc2e657c31e57707647e07d", @nested={0x4, 0xea}]}]}, 0x160c}}, 0x840) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000003240)={"905ef490abc55025f5eabacad01a754d7485c73136a9a24193a543a67c1ff099", r0, 0xffffffffffffffff}) write$sequencer(r2, &(0x7f0000003280)=[@s={0x5, @SEQ_MIDIPUTC=0xc7, 0x19, 0x7f}, @v={0x93, 0x7, 0x80, 0xd, @MIDI_NOTEON=@special, 0xe, 0x2}, @raw={0xf2, 0x3, "af633159b383"}], 0x14) openat$dir(0xffffffffffffff9c, &(0x7f00000032c0)='./file0\x00', 0x101144, 0x9d) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000003300), 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r9, 0x6, 0x1, &(0x7f0000003340)=@gcm_256={{0x304}, "a9926e5d37b34d8f", "a04ea9d4ee7b2cff47d2c18b8c8641da3943c0e05112c0aa5341a984c2a45483", "659fac17", "ed6f70109cc8f6bf"}, 0x38) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000003380)=0x9) setsockopt$inet_tcp_int(r9, 0x6, 0x1b, &(0x7f00000033c0)=0x7f, 0x4) close_range(r2, r8, 0x0) recvfrom$inet(r0, &(0x7f0000003400)=""/4096, 0x1000, 0x0, &(0x7f0000004400)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000004440)=0x1, 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000044c0), r9) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000045c0)={&(0x7f0000004480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004580)={&(0x7f0000004500)={0x70, r10, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x53}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "95977dc08c01eebfe43cd97fcf1c9b6579703641973a6a6b"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vlan0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000004600)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000004740)={'tunl0\x00', &(0x7f0000004680)={'erspan0\x00', 0x0, 0x80, 0x8, 0x6967, 0x6, {{0x1f, 0x4, 0x1, 0x1e, 0x7c, 0x67, 0x0, 0x7, 0x2f, 0x0, @loopback, @local, {[@cipso={0x86, 0x5b, 0x0, [{0x2, 0x4, 'Up'}, {0x6, 0x6, "3b5a88e0"}, {0x0, 0x6, "52a588c6"}, {0x1, 0x11, "921d02b85404003905083f322b7e50"}, {0x2, 0xd, "5870d59842b98de0d0be37"}, {0x6, 0x8, "71735c8e413b"}, {0x1, 0x5, "4186a2"}, {0x1, 0x9, "0af48d2bf7d787"}, {0x4, 0x11, "e05a7d402c9230c3e2eb7f546ea11f"}]}, @timestamp={0x44, 0xc, 0xb0, 0x0, 0xf, [0x789d4f80, 0xfff]}]}}}}}) sendmsg$FOU_CMD_DEL(r9, &(0x7f0000004840)={&(0x7f0000004640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004800)={&(0x7f0000004780)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0xa}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8, 0xb, r11}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) stat(&(0x7f0000004880)='./file0\x00', &(0x7f00000048c0)) syz_emit_ethernet(0x1da, &(0x7f0000004940)={@local, @broadcast, @val={@val={0x88a8, 0x5, 0x1, 0x2}, {0x8100, 0x5, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x43, 0x4, 0x1, 0x34, 0x1c4, 0x65, 0x0, 0x7, 0x11, 0x0, @loopback, @private=0xa010100, {[@ssrr={0x89, 0x1b, 0xac, [@broadcast, @multicast1, @multicast2, @multicast1, @multicast1, @loopback]}, @ssrr={0x89, 0x17, 0x31, [@loopback, @multicast1, @rand_addr=0x64010100, @private=0xa010100, @remote]}, @noop, @timestamp_addr={0x44, 0x4c, 0x50, 0x1, 0x1, [{@remote, 0x8207}, {@remote, 0xde8}, {@remote, 0x400080}, {@broadcast, 0x800}, {@local, 0x7}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}, {@rand_addr=0x64010102, 0x7b}, {@broadcast, 0x4}]}, @timestamp_prespec={0x44, 0x4c, 0x98, 0x3, 0x1, [{@empty, 0x6}, {@private=0xa010101, 0x3}, {@private=0xa010101, 0x1}, {@multicast1, 0x6}, {@rand_addr=0x64010102, 0x4}, {@local, 0x4}, {@private=0xa010101, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x22}, 0xd3}, {@empty, 0x6}]}, @cipso={0x86, 0x26, 0x5, [{0x2, 0x7, "b731c88913"}, {0x0, 0x8, "62e9d0544ca1"}, {0x5, 0x8, "25fdeb639859"}, {0x1, 0x9, "9e1ee61e792ade"}]}, @ra={0x94, 0x4}, @end]}}, "6900a7f21147c0776dfd716c477762274e3015f29d5482a12a54b6c959ef0406a9a1c2a3fb4d8e451b8dbf37fa512ff7054a67806dbac248887ff3cb0c03381a226aa1cc804ce0653d384f38b180e0c2a12221a986cec8a437930bdc2ba536c1f7bb45645185437d54cbce750ae6293c04109c62bfa378a2e7896e5035f3f07abc8f151b988b19f8fd856fd78de77d92bb2057da81ac04a03c0cc8b7bf53c03fdf2079e20598898a1d0c02f4562bcc2f08574f34d2da8f8a"}}}}, &(0x7f0000004b40)={0x0, 0x1, [0xbce, 0x779, 0x826, 0x1ba]}) 1.675445271s ago: executing program 1 (id=577): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xb9, @local, 0x3, 0x2}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = semget$private(0x0, 0x4, 0x262) semtimedop(r1, &(0x7f0000000000)=[{0x1, 0xcd27, 0x1000}, {0x2, 0x9, 0x1000}], 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 1.378408494s ago: executing program 3 (id=580): setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) syz_clone3(&(0x7f0000001240)={0xc0000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') (async, rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a115bd3b96445dde", "1f7400000000000515b07c2b1dd4a800", "62266bd8", "d1b29b99d21d88a2"}, 0x28) (async, rerun: 64) r3 = socket$alg(0x26, 0x5, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) write$binfmt_script(r2, &(0x7f0000000780)={'#! ', './file0'}, 0xb) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000480)=[{0x8, 0xff, 0x0, 0x6}]}) msgget$private(0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000000313908d2000300000a14000000050a0100319cd2000000000001ca9e8ee3e78500000534000000030a01010000000000000000080000000900010073797a310000000008000b40000000040900010073797a3000000000140000001100010000000000000000000100000a835a678bc55e9b6a8fb4a037e7f14caa86121fc5a81c81cdb869800fcaf75d5e71565304dcebda5de028"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4) close_range(r4, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x34}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.148344817s ago: executing program 3 (id=581): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003b00), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@host}) r2 = syz_io_uring_setup(0x72d1, &(0x7f0000000500)={0x0, 0xd2a7, 0x10100, 0x0, 0x181}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x7fff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r5, 0xc01064c1, &(0x7f0000000100)={r6}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, &(0x7f0000000200)) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 819.873127ms ago: executing program 3 (id=582): r0 = socket(0x11, 0x800000003, 0x0) r1 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36b, 0x10100, 0x0, 0x155}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd=r1, 0x40, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7ff, @rand_addr=' \x01\x00', 0x3, 0x1}, 0x20) madvise(&(0x7f0000122000/0x4000)=nil, 0x4000, 0x66) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000000000)={0xfc, {"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", 0x1029}}, 0x1006) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) r7 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOBLANK(r7, 0x4611, 0x4) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x9, 0x40, 0x0, 0x51, 0xa}) 818.889538ms ago: executing program 2 (id=583): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffd, 0x8800) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x4, 0x6, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3fffffffffffffff, 0x0, 0x9, 0xa3, 0x0, 0x0, 0x0, 0x20, 0x200, 0x0, 0x8000000000000000, 0x0, 0x0, 0x8000000c874, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15b, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000009c0)={{0x6, 0x0, 0x7fffffff, 0x2, 'syz1\x00', 0x406}, 0x1, 0x400, 0x2, r2, 0x3, 0x200, 'syz1\x00', &(0x7f0000000b00)=['/dev/snd/controlC#\x00', '/\x97Y?\xa6yF\x0eY\x00'/21, '\x9e\xde\xe8u\xc3;\x84\x06\x89\xccQ\xa4\v\xfa\xbd\x1d\xa0\xfdH\x8b\x94M3\xd3\x13\x03\xb2\x00\xe3\x02\xaf\x06\x00\x00\x00\xf3\xff\x00\x008\xab\x8a6v\x8a\b#\xee\x96^@\xf29\xf1\xac\xba\n\x1df\x85\xb3&\xc9\x9b\x1e\xb0\xccI[#\xe7+\xb4\xdf\x95\x10\xc7\"\xd8\xebIt^\x16J\x93\x8c\'\xb8)r`\xb0\xda\xb2\xe2\x03p\x16A\b \x9f`\xe4\xd8\xfb\xbc\x19}Saa\xe2\x12\xb9\xc0>\x98\xdf<\xcb\xe9\xe3\x7f\xfc\x1d\xcc\xba\x97\xd3\xc8B\x9d(E\xe2\x1bb\xadr\xdfZZ\x8dt\xcd)\x1d>\xb1\x7f\r\x06W\xc4}\xaap\x95\xee\xc7/\x1e\xe2\xed\'\xddO\xe4\x11t\xd7\x7f\x1b\xa9\xfc\x80\xaf\x0fz.\xfd%\xe9\xa4\xda\xb8\"XH^\x0e(\xa6\xbe\xf0\x01\x8e\x1f\xd6\x93\xf8\xef\x89\x13\x1f\xf4\xfa\xb7\x84\xe3\xf8\xca\xb2\xc5\x0e\xcb12\xa4jO\xab\xf6\x00dK\x13\xe2\xd3o\x95\x02\xcf\xbd,Q*\xa3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00]>V\xd0R\xf5\xcf-\xcb\xeb\x19\x13\x94\xda\xf3\x9f\x0eF\x1e\xb8\xbe\xca\xc2\x8fRS*\"t\x82\x89:\xae\x8fy\xd4\xbd,2\x14.\xddD\xcb\xbd\xff9\xc52\x9c\xafx{p9\xab.\x8b[N\n\xd4\x86\xcbG\x9c\xa3)\x1e\x94\xeb\vfK\x87O\xcb\xf5\xf2\x99\x0eq\xc1o\xab\xe3\xf2\xdc\xcem\x12\xbf\x9e\xa0Cq\xc1\xb8\x84\xd4\x10-{M@\xf77)\xc3\x18\x12.]W\xb4m\xe7\xdf\xf6\x9e\x94,V\xaa\xcbq\xf5\xab\xc7\x05\xf5\xce\b#\xa3\x18\xe7\xa7\x9a\\R\xe1m\x80\xddn\x02&\x13\xc4\x1c\xb4\xced7\xf8\xb8\xb5\x9ft^\x98\xab0-\x16\x9c\x8c\xbe\xe9\x8c_\xab\x04\x1dy\x99|`wU$a \xa3\xbf\xa6\f\xb4\xbe\x06\xc1\xf4fx\xf8^\b\xd7.S\xbd\xb5\xe6{\xdd\xa7&d\xa4\xbeW!\n\x8d\x12\xd1u\xcb\xa2\x1a?\xa7\xb1\xb2\x18\xb3v\xa92\xe4\xc1c\x7f~*\xb4\xecV\xe3\x94\xe9A$\xcf~\x15$\x8fC\xe5-n\x1cf\xc1\xa3\x03\xe8I\xae\x8e\a@\x9d\xb7\xf1\xbb\x91\xbf\xd3\x9ah\'f\x9bW\xe0I;\xc9\xed]\xf8\x89\x13\a\x004\x85\xcf{J\x1e\xb3\x13\xad\xf7\xf2-M\xff\xb9\x98\x0f0\x14\x01\x88\x83\x85r\xc1\xdc\x16\x17\xde\xed\x14\xe3$\xc1i\xec\xa0\xd4Z\x03\x9e_\xd0\tn}\x95?\xb7\x8e\x90\xe8\xae!WP\xe70\n\xbc3\x00'/613], 0x28d}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2400000aaaaaaaaaafe886445cbac1e0101e0000001220e9078ad1414bb"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000000000000000000000000000bc001000000000009500000000000000d607370430dacb5c4260330d0fa924c6348532985a6fb1c5d99b498158ca226bdc4d309e6e9feed57e"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r5}, 0x10) r6 = socket$kcm(0x21, 0x2, 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xab00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) recvmsg$kcm(r6, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x210) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e07090908"], 0xa) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) r8 = socket(0x11, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) 749.993727ms ago: executing program 1 (id=584): socketpair(0x1f, 0xa, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fchdir(0xffffffffffffffff) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x3, 0x0, 0x600}}, 0x30) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/153, 0x99}, {&(0x7f0000000180)}, {&(0x7f0000000280)=""/159, 0x9f}, {&(0x7f00000001c0)=""/84, 0x54}], 0x4) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801c}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) 679.952434ms ago: executing program 1 (id=585): ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x14) (async) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x1f, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) (async) read$msr(r0, 0x0, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (rerun: 32) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x14, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20008850) (async) sendmsg$nl_route_sched(r1, 0x0, 0x20000800) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x80047437, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000080)={0x4000000, 0xd85, 0x40003}) close_range(r6, r6, 0x0) 679.073502ms ago: executing program 3 (id=586): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x2, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) sendto$ax25(r3, &(0x7f00000003c0)="2d309b04f300e3db23adb5e8d3596907ec437dbb4772a21187c277777358f4a829487df6fd2227baa92afd0f8e391da06a1f0246f79bcb6d68e2604a972251a7cde752782d440514ef10fb4013c40e73ccf0afd48ee5ff0069266ff72ea4d438f49d3ef86b0e41e37df89ef4d821293beef652d7bfc9e36bfca8f33c509460bee47417102367c1fbe21da36552085fb5d4afd7bd0b921e7755028ed3d9070000007cad45de3713bd239f746f9c8c47d3c09a85a9b5be60bd4345f073eb1e175fe8e074f4306da4b6", 0xc8, 0x4005, &(0x7f0000000200)={{0x3, @bcast, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendmsg(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) close(r0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000100)={{0x9, 0xfffffffa}, {0x9, 0x1003ff}, 0xffffffff, 0x7}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000000000001400000018000180140002006e6574646576734000000000000000000500190001000000f2fe75ca492d6b05b777e0d9359a7039f422b92c111bf3554b23a9ead667031c6a5db2bda742c714164a94e804194de08be49fe9e2f91a0237a7b10b9745fcebc11d2c790edb1841a1e333d4734bb5ffbd0ed88c6a95b7fa5d60092d56b5f8a3eea342768790e9f88d582216a76c066005b5cde17484bb2eead71a039dcb03fa681e66cfb44a34b11ed7c912a094cd7f316eec186db2fd5a7ec3a32a28cee0d619eb6bd2f5d124c5af08a594"], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}}, 0x44080) 599.964233ms ago: executing program 1 (id=587): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000001c0)=';-H?', 0x4, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000000c0)={r1}) (async) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@canfd={0xd, {{0x4, 0x1}, 0x2a, 0x3, 0x0, 0x0, "65a7b151893bc265209dfc0c25ed7dcc4dc1c52011cd09597f574d7ab226313c2968e4ea0a7dc45dfc1e59b964860e9ac580548459dc27b3389496476bf96490"}}}}, &(0x7f0000000140)={0x1, 0x1, [0x1d8, 0x337, 0x2ad, 0x482]}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000080)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) socket$inet_smc(0x2b, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x26080, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000200)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000002c0)) 469.150017ms ago: executing program 2 (id=588): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$cec(&(0x7f0000000180), 0x0, 0xea62b504a9e82281) (async) syz_open_dev$cec(&(0x7f0000000180), 0x0, 0xea62b504a9e82281) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x6, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff}, [@exit, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @jmp={0x5, 0x0, 0xd, 0x2, 0x5, 0xfffffffffffffff8, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x3b, &(0x7f0000000300)=""/59, 0x41000, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000340)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r1, r1, r1, r1, r1, r1], 0x0, 0x10, 0x8, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x6, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff}, [@exit, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @jmp={0x5, 0x0, 0xd, 0x2, 0x5, 0xfffffffffffffff8, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x3b, &(0x7f0000000300)=""/59, 0x41000, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000340)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r1, r1, r1, r1, r1, r1], 0x0, 0x10, 0x8, @void, @value}, 0x94) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000010c0)={r2, r3, 0x25, 0x4, @void}, 0x10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000010c0)={r2, r3, 0x25, 0x4, @void}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000100)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffb, 0x0, 0x5, 0x7, 0x2d3e, 0x756a]}, &(0x7f0000000200)=0x78) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4000000000100, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000000c0)={0xc, 0x1, 0x0, "6040a7190200002000000000000000ff1057e31e94000000000000000006ff00", 0x42303159}) setreuid(0xee01, 0xee01) (async) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x0, 0x100) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x0, 0x100) sendfile(r4, r4, &(0x7f0000002700)=0x9, 0x6) 340.121508ms ago: executing program 2 (id=589): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0xfffffffffffffeb9) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x101, 0x4) readv(r0, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/47, 0x2f}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet_nvme_icreq_pdu(r2, &(0x7f00000002c0)={{0x0, 0x0, 0x80, 0x8}, 0x0, 0x0, 0x2, 0xfff}, 0x80, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)='L', 0x1}], 0x1}}], 0x1, 0x8090) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') lseek(r3, 0xffffffffffffff73, 0x2) ioctl$KVM_CAP_STEAL_TIME(r3, 0x4068aea3, &(0x7f00000000c0)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r4, 0x25, 0x3, @val=@iter={&(0x7f0000000880)=@map_fd=r3, 0x10}}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x1, 0x7800, 0x4, 0x9, {{0x9, 0x4, 0x0, 0x4, 0x24, 0x64, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010101, {[@ssrr={0x89, 0x7, 0x41, [@dev={0xac, 0x14, 0x14, 0x32}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0xf5, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x7e, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0x14, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x3, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x80000000}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x800}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0xe5, 0x0, 0x0, 0x40f00, 0x26, '\x00', r5, @sk_lookup, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r3, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 339.516041ms ago: executing program 3 (id=590): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf25010000000000000009410000004c001800000096756470"], 0x68}, 0x1, 0x0, 0x0, 0x20004080}, 0x46010) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000140)=0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x14, r2, 0x331}, 0x14}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x378, 0xffffffff, 0xf8, 0xf8, 0x1c0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x9000000, 0x0, 0x2, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000"}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r7, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES8=r0], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) mount$overlay(0x0, &(0x7f0000006200)='./bus\x00', &(0x7f0000000000), 0x4002, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r9 = syz_open_dev$I2C(&(0x7f0000000080), 0xbed1, 0x163282) ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000300)={&(0x7f00000002c0)=[{0xffff, 0x10, 0xfd, &(0x7f0000000800)="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"}, {0x2, 0x4000, 0x15, &(0x7f00000000c0)="796f3d20822bbaca4ce33cdee6bcc5455adcc77adb"}, {0x5a, 0x400, 0xcb, &(0x7f0000000900)="f894b7e80acf069a27f344b9f6b307c1a0d2d966ee912025fff533f9d94d939665a53c7db014f5fc102802333894f737b99f5bf53e0267bf34fed9e252f9850023101fb655c9f7e0f9ce4ae1c65c61af3ee31fe301fdce278dbb9971539aef2d5e47988f92469591efa45b450bc2cb370eca775c6a54061f7acd9bcaded2fd295326dec65eb9b84a7e95a6b3aa9eeb89474130cdd39adcffc5c191616f44e3ed95961d6624f7abecd260c2ff62d33a9a7f3abd6c66cab3c0b42efaafbdef3fc62e3e46159755c1f7e7520e"}, {0xf, 0x800, 0x5, &(0x7f0000000140)="1bb8d07f28"}], 0x4}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20008, 0x1bee2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc001}, 0x0) 355.303µs ago: executing program 3 (id=591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd0fe874bf", 0x6}], 0x1, 0x0, 0x9) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000001300008200000008000300433060f3", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) accept4$bt_l2cap(r5, 0x0, 0x0, 0x0) r6 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000440), 0x8a0043, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000680)=0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000000)={0x8, r0}, 0x0) 0s ago: executing program 2 (id=592): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xb9, @local, 0x3, 0x2}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = semget$private(0x0, 0x4, 0x262) semtimedop(r1, &(0x7f0000000000)=[{0x1, 0xcd27, 0x1000}, {0x2, 0x9, 0x1000}], 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 0s ago: executing program 3 (id=594): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x20203143, 0x0, [0x2], [0x800], [], [0x0, 0x0, 0x6]}) (async) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) (async) truncate(&(0x7f00000000c0)='./file0\x00', 0x6) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) (async, rerun: 32) unshare(0x64000600) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f00000001c0)={r3}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000180)={r3, 0x6, 0x9, 0x5, 0x2, [], [0xc13, 0xf7ff0001, 0x0, 0x4], [0x6, 0x3, 0x5b, 0x4], [0x7, 0x3, 0xffff, 0x7ffffffffffffffb]}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000200)={r3, 0x7, 0x4d, 0x2627, 0x1, [], [0x382, 0xffff, 0x4, 0x3], [0x8, 0x7fff, 0x5, 0x4], [0x7f, 0x4, 0x811, 0x10]}) clock_settime(0x2, &(0x7f0000000000)={0x77359400}) kernel console output (not intermixed with test programs): [ 43.559214][ T40] audit: type=1400 audit(1750511074.274:60): avc: denied { rlimitinh } for pid=5855 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.565177][ T40] audit: type=1400 audit(1750511074.274:61): avc: denied { siginh } for pid=5855 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:11153' (ED25519) to the list of known hosts. [ 44.361873][ T40] audit: type=1400 audit(1750511075.094:62): avc: denied { name_bind } for pid=5893 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 44.378699][ T40] audit: type=1400 audit(1750511075.114:63): avc: denied { write } for pid=5894 comm="sh" path="pipe:[3775]" dev="pipefs" ino=3775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 44.414878][ T40] audit: type=1400 audit(1750511075.144:64): avc: denied { execute } for pid=5894 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 44.424092][ T40] audit: type=1400 audit(1750511075.144:65): avc: denied { execute_no_trans } for pid=5894 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.378065][ T40] audit: type=1400 audit(1750511077.104:66): avc: denied { mounton } for pid=5894 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 46.380738][ T5894] cgroup: Unknown subsys name 'net' [ 46.515151][ T5894] cgroup: Unknown subsys name 'cpuset' [ 46.520474][ T5894] cgroup: Unknown subsys name 'rlimit' [ 46.728753][ T5922] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 47.476908][ T5894] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 50.520364][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 50.520375][ T40] audit: type=1400 audit(1750511081.254:80): avc: denied { execmem } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 50.758480][ T40] audit: type=1400 audit(1750511081.484:81): avc: denied { create } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.765219][ T40] audit: type=1400 audit(1750511081.484:82): avc: denied { create } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.771451][ T40] audit: type=1400 audit(1750511081.484:83): avc: denied { read write } for pid=5932 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.779614][ T40] audit: type=1400 audit(1750511081.484:84): avc: denied { read write } for pid=5931 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.786972][ T40] audit: type=1400 audit(1750511081.484:85): avc: denied { open } for pid=5931 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.787905][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 50.794956][ T40] audit: type=1400 audit(1750511081.484:86): avc: denied { open } for pid=5932 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.797078][ T5945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 50.797653][ T5941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 50.797890][ T5941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 50.798325][ T5941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 50.798587][ T5941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 50.800100][ T5941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 50.805292][ T40] audit: type=1400 audit(1750511081.494:87): avc: denied { ioctl } for pid=5932 comm="syz-executor" path="socket:[7224]" dev="sockfs" ino=7224 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.810096][ T5941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 50.810572][ T5941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 50.813302][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 50.813587][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 50.816129][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 50.816984][ T40] audit: type=1400 audit(1750511081.524:88): avc: denied { read } for pid=5932 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 50.817105][ T5946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 50.817157][ T40] audit: type=1400 audit(1750511081.524:89): avc: denied { open } for pid=5932 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 50.818151][ T5946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 50.819313][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 50.819887][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 50.820242][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 50.820851][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 50.866707][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 50.869411][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.052518][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 51.096489][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 51.220218][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 51.245812][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.248421][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.251511][ T5933] bridge_slave_0: entered allmulticast mode [ 51.255406][ T5933] bridge_slave_0: entered promiscuous mode [ 51.264256][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.267222][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.271485][ T5933] bridge_slave_1: entered allmulticast mode [ 51.275614][ T5933] bridge_slave_1: entered promiscuous mode [ 51.356385][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 51.372208][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.374700][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.377020][ T5932] bridge_slave_0: entered allmulticast mode [ 51.379853][ T5932] bridge_slave_0: entered promiscuous mode [ 51.432679][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.435892][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.440124][ T5932] bridge_slave_1: entered allmulticast mode [ 51.443858][ T5932] bridge_slave_1: entered promiscuous mode [ 51.450398][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.457107][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.593892][ T5933] team0: Port device team_slave_0 added [ 51.595957][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.598606][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.601153][ T5939] bridge_slave_0: entered allmulticast mode [ 51.604790][ T5939] bridge_slave_0: entered promiscuous mode [ 51.622143][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.624366][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.626526][ T5931] bridge_slave_0: entered allmulticast mode [ 51.629327][ T5931] bridge_slave_0: entered promiscuous mode [ 51.634439][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.641234][ T5933] team0: Port device team_slave_1 added [ 51.643850][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.646675][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.650361][ T5939] bridge_slave_1: entered allmulticast mode [ 51.653747][ T5939] bridge_slave_1: entered promiscuous mode [ 51.656601][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.660344][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.662415][ T5931] bridge_slave_1: entered allmulticast mode [ 51.665384][ T5931] bridge_slave_1: entered promiscuous mode [ 51.681883][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.784370][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.807484][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.810000][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.819303][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.825810][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.829918][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.834994][ T5932] team0: Port device team_slave_0 added [ 51.837542][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.840391][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.848957][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.853743][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.871580][ T5932] team0: Port device team_slave_1 added [ 51.921108][ T5931] team0: Port device team_slave_0 added [ 51.956070][ T5939] team0: Port device team_slave_0 added [ 51.959417][ T5931] team0: Port device team_slave_1 added [ 51.961715][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.963898][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.972736][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.003799][ T5939] team0: Port device team_slave_1 added [ 52.021900][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.024305][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.032877][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.095709][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.098460][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.108428][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.133934][ T5933] hsr_slave_0: entered promiscuous mode [ 52.136757][ T5933] hsr_slave_1: entered promiscuous mode [ 52.160562][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.163459][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.174440][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.179650][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.182346][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.192565][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.220790][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.223221][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.231263][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.352303][ T5932] hsr_slave_0: entered promiscuous mode [ 52.354581][ T5932] hsr_slave_1: entered promiscuous mode [ 52.356659][ T5932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.360497][ T5932] Cannot create hsr debugfs directory [ 52.382147][ T5931] hsr_slave_0: entered promiscuous mode [ 52.384426][ T5931] hsr_slave_1: entered promiscuous mode [ 52.386818][ T5931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.390069][ T5931] Cannot create hsr debugfs directory [ 52.456166][ T5939] hsr_slave_0: entered promiscuous mode [ 52.458713][ T5939] hsr_slave_1: entered promiscuous mode [ 52.460727][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.463128][ T5939] Cannot create hsr debugfs directory [ 52.743587][ T5933] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.752911][ T5933] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.759680][ T5933] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.773802][ T5933] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.792531][ T5932] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.797425][ T5932] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.803258][ T5932] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.809592][ T5932] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.857688][ T5931] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.860803][ T5941] Bluetooth: hci1: command tx timeout [ 52.860850][ T5937] Bluetooth: hci3: command tx timeout [ 52.860868][ T5943] Bluetooth: hci2: command tx timeout [ 52.870719][ T5931] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.888865][ T5931] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.893191][ T5931] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.934726][ T5939] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.938510][ T5937] Bluetooth: hci0: command tx timeout [ 52.939749][ T5939] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.947264][ T5939] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.953797][ T5939] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.995872][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.007574][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.043303][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.057650][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.059986][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.065073][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.071568][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.074061][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.084495][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.087374][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.100915][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.115390][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.117503][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.140972][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.148880][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.169608][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.171865][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.180500][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.196246][ T5932] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.202319][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.204789][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.212976][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.215993][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.242231][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.245273][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.381808][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.411231][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.425818][ T5932] veth0_vlan: entered promiscuous mode [ 53.435198][ T5932] veth1_vlan: entered promiscuous mode [ 53.447286][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.470774][ T5932] veth0_macvtap: entered promiscuous mode [ 53.480738][ T5933] veth0_vlan: entered promiscuous mode [ 53.485844][ T5933] veth1_vlan: entered promiscuous mode [ 53.490254][ T5932] veth1_macvtap: entered promiscuous mode [ 53.514704][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.525757][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.531235][ T5931] veth0_vlan: entered promiscuous mode [ 53.535091][ T5932] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.537920][ T5932] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.540974][ T5932] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.543660][ T5932] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.550149][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.566918][ T5931] veth1_vlan: entered promiscuous mode [ 53.573885][ T5933] veth0_macvtap: entered promiscuous mode [ 53.579698][ T5933] veth1_macvtap: entered promiscuous mode [ 53.607006][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.611822][ T5931] veth0_macvtap: entered promiscuous mode [ 53.620774][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.634968][ T5931] veth1_macvtap: entered promiscuous mode [ 53.644385][ T5933] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.647635][ T5933] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.651005][ T5933] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.654063][ T5933] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.665058][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.667586][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.681247][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.700922][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.705138][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.707339][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.720092][ T5931] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.722774][ T5931] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.725537][ T5931] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.728128][ T5931] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.733508][ T5939] veth0_vlan: entered promiscuous mode [ 53.737684][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.741198][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.758016][ T5932] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 53.767659][ T5939] veth1_vlan: entered promiscuous mode [ 53.773742][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.776657][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.820100][ T5939] veth0_macvtap: entered promiscuous mode [ 53.842025][ T5939] veth1_macvtap: entered promiscuous mode [ 53.848123][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.851555][ T6022] xt_ecn: cannot match TCP bits for non-tcp packets [ 53.852792][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.864725][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.875551][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.877011][ T6023] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 53.877011][ T6023] The task syz.0.1 (6023) triggered the difference, watch for misbehavior. [ 53.891997][ T5939] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.895526][ T5939] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.896383][ T6025] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.900452][ T5939] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.907676][ T5939] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.917340][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.921704][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.956975][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.960822][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.982372][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.985373][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.066430][ T6033] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6'. [ 54.083315][ T6033] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬' [ 54.198012][ T6044] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8'. [ 54.422661][ T6054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9240 sclass=netlink_route_socket pid=6054 comm=syz.1.11 [ 54.472144][ T6059] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13'. [ 54.641685][ T6066] usb usb8: usbfs: process 6066 (syz.1.16) did not claim interface 0 before use [ 54.697656][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 54.701725][ T6069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17'. [ 54.766191][ T6071] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 54.771990][ T6071] overlayfs: overlapping lowerdir path [ 54.921648][ T6091] syz.1.26 uses obsolete (PF_INET,SOCK_PACKET) [ 54.944979][ T5937] Bluetooth: hci2: command tx timeout [ 54.949047][ T5937] Bluetooth: hci1: command tx timeout [ 54.949508][ T5941] Bluetooth: hci3: command tx timeout [ 54.983667][ T6099] random: crng reseeded on system resumption [ 55.065451][ T6109] syzkaller1: entered promiscuous mode [ 55.067315][ T6109] syzkaller1: entered allmulticast mode [ 55.545924][ T40] kauditd_printk_skb: 128 callbacks suppressed [ 55.545934][ T40] audit: type=1400 audit(1750511086.274:218): avc: denied { read } for pid=6136 comm="syz.2.37" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 55.556791][ T40] audit: type=1400 audit(1750511086.274:219): avc: denied { open } for pid=6136 comm="syz.2.37" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 55.564736][ T40] audit: type=1400 audit(1750511086.294:220): avc: denied { ioctl } for pid=6136 comm="syz.2.37" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x64b6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 55.577534][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'. [ 55.585160][ T6139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.38'. [ 55.588548][ T40] audit: type=1400 audit(1750511086.324:221): avc: denied { bind } for pid=6138 comm="syz.0.38" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.595329][ T40] audit: type=1400 audit(1750511086.324:222): avc: denied { name_bind } for pid=6138 comm="syz.0.38" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 55.602348][ T40] audit: type=1400 audit(1750511086.324:223): avc: denied { node_bind } for pid=6138 comm="syz.0.38" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 55.628331][ T40] audit: type=1400 audit(1750511086.354:224): avc: denied { setopt } for pid=6142 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.662662][ T40] audit: type=1400 audit(1750511086.394:225): avc: denied { setopt } for pid=6146 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.674686][ T40] audit: type=1400 audit(1750511086.394:226): avc: denied { ioctl } for pid=6146 comm="syz.2.41" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.684553][ T40] audit: type=1400 audit(1750511086.394:227): avc: denied { set_context_mgr } for pid=6146 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 55.930136][ T6166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'. [ 55.930309][ T6166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'. [ 55.930446][ T6166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'. [ 56.049502][ T6175] Zero length message leads to an empty skb [ 56.148312][ T5941] Bluetooth: hci0: command tx timeout [ 56.238875][ T5974] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 56.336007][ T6196] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 56.398451][ T5974] usb 7-1: Using ep0 maxpacket: 16 [ 56.403708][ T5974] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 32, using maximum allowed: 30 [ 56.408111][ T5974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.412764][ T5974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.415945][ T5974] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 32 [ 56.420248][ T5974] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 56.423584][ T5974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.429919][ T5974] usb 7-1: config 0 descriptor?? [ 56.587412][ T6209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6209 comm=syz.1.61 [ 56.596024][ T6209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6209 comm=syz.1.61 [ 56.621396][ T6209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.639039][ T6160] input: syz0 as /devices/virtual/input/input5 [ 56.861385][ T6217] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.892936][ T6217] tipc: Started in network mode [ 56.894534][ T6217] tipc: Node identity ba80f4585a1, cluster identity 4711 [ 56.896764][ T6217] tipc: Enabled bearer , priority 0 [ 56.902746][ T6216] tipc: Resetting bearer [ 57.018811][ T5941] Bluetooth: hci1: command tx timeout [ 57.018908][ T5937] Bluetooth: hci3: command tx timeout [ 57.562537][ T6216] tipc: Disabling bearer [ 57.618660][ T6222] process 'syz.1.65' launched './file1' with NULL argv: empty string added [ 57.739080][ T5937] Bluetooth: hci2: command tx timeout [ 57.800354][ T6238] netlink: 'syz.1.71': attribute type 23 has an invalid length. [ 57.843646][ T6244] Bluetooth: MGMT ver 1.23 [ 57.937241][ T6246] capability: warning: `syz.1.75' uses deprecated v2 capabilities in a way that may be insecure [ 57.959407][ T6252] xt_CONNSECMARK: invalid mode: 0 [ 58.219268][ T5937] Bluetooth: hci0: command tx timeout [ 58.388343][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.406907][ T6290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=6290 comm=syz.0.90 [ 58.412948][ T6290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=6290 comm=syz.0.90 [ 58.493040][ T6297] binder: 6296:6297 ioctl c0306201 200000000080 returned -14 [ 58.548821][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 58.554965][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.559634][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.562589][ T10] usb 8-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 58.565495][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.569352][ T10] usb 8-1: config 0 descriptor?? [ 58.794818][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 58.797613][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 58.806196][ T10] usb 8-1: USB disconnect, device number 2 [ 58.889998][ T838] usb 7-1: USB disconnect, device number 2 [ 59.006013][ T6325] binder_alloc: binder_alloc_mmap_handler: 6318 200000ffd000-200001000000 already mapped failed -16 [ 59.010109][ T6325] binder: BINDER_SET_CONTEXT_MGR already set [ 59.012030][ T6325] binder: 6318:6325 ioctl 4018620d 200000000040 returned -16 [ 59.098946][ T5937] Bluetooth: hci3: command tx timeout [ 59.122877][ T6331] netdevsim netdevsim2: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 59.151791][ T6333] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 59.197098][ T6340] __nla_validate_parse: 28 callbacks suppressed [ 59.197110][ T6340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.106'. [ 59.201871][ T6340] netlink: 'syz.2.106': attribute type 7 has an invalid length. [ 59.204226][ T6340] netlink: 'syz.2.106': attribute type 8 has an invalid length. [ 59.207115][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.106'. [ 59.240039][ T6337] netlink: 16 bytes leftover after parsing attributes in process `syz.0.105'. [ 59.249468][ T6341] netlink: 20 bytes leftover after parsing attributes in process `syz.2.106'. [ 59.359348][ T6345] fuseblk: Unknown parameter 'bN.Eq!9}'‰ÜÅDlizE' [ 59.396602][ T6350] xt_hashlimit: max too large, truncated to 1048576 [ 59.400378][ T6352] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 59.406665][ T6350] Cannot find set identified by id 0 to match [ 59.450269][ T6357] netlink: 36 bytes leftover after parsing attributes in process `syz.0.112'. [ 59.474552][ T6358] block device autoloading is deprecated and will be removed. [ 59.486134][ T6357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6357 comm=syz.0.112 [ 59.528922][ T6350] md2: using deprecated bitmap file support [ 59.531020][ T6350] md2: error: bitmap file must be a regular file [ 59.583543][ T6363] netlink: 44 bytes leftover after parsing attributes in process `syz.2.113'. [ 59.694145][ T6367] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 59.791994][ T6380] use of bytesused == 0 is deprecated and will be removed in the future, [ 59.795575][ T6380] use the actual size instead. [ 59.820416][ T6383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29542 sclass=netlink_route_socket pid=6383 comm=syz.3.120 [ 60.025220][ T6409] ======================================================= [ 60.025220][ T6409] WARNING: The mand mount option has been deprecated and [ 60.025220][ T6409] and is ignored by this kernel. Remove the mand [ 60.025220][ T6409] option from the mount to silence this warning. [ 60.025220][ T6409] ======================================================= [ 60.170204][ T6410] /dev/sr0: Can't open blockdev [ 60.268499][ T10] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 60.269086][ T6409] /dev/sr0: Can't open blockdev [ 60.425291][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 60.429922][ T10] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 60.432542][ T10] usb 7-1: can't read configurations, error -71 [ 60.601071][ T40] kauditd_printk_skb: 101 callbacks suppressed [ 60.601082][ T40] audit: type=1400 audit(1750511091.334:329): avc: denied { create } for pid=6426 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.606736][ T6427] @: renamed from vlan0 (while UP) [ 60.609808][ T40] audit: type=1400 audit(1750511091.334:330): avc: denied { ioctl } for pid=6426 comm="syz.0.134" path="socket:[11693]" dev="sockfs" ino=11693 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.622116][ T40] audit: type=1400 audit(1750511091.354:331): avc: denied { execute } for pid=6426 comm="syz.0.134" path="/proc/101/net/vlan/vlan0" dev="proc" ino=4026533688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 60.748352][ T29] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 60.807853][ T40] audit: type=1400 audit(1750511091.534:332): avc: denied { mount } for pid=6428 comm="syz.1.135" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 60.817765][ T40] audit: type=1400 audit(1750511091.534:333): avc: denied { read } for pid=6428 comm="syz.1.135" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 60.824377][ T40] audit: type=1400 audit(1750511091.544:334): avc: denied { open } for pid=6428 comm="syz.1.135" path="/36/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 60.832982][ T40] audit: type=1400 audit(1750511091.544:335): avc: denied { watch } for pid=6428 comm="syz.1.135" path="/36" dev="tmpfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.841080][ T40] audit: type=1400 audit(1750511091.544:336): avc: denied { watch_sb } for pid=6428 comm="syz.1.135" path="/36" dev="tmpfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 60.848149][ T40] audit: type=1400 audit(1750511091.544:337): avc: denied { append } for pid=6428 comm="syz.1.135" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 60.858382][ T838] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 60.879606][ T40] audit: type=1400 audit(1750511091.614:338): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 60.907117][ T6432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6432 comm=syz.1.136 [ 60.912485][ T29] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 60.915003][ T29] usb 8-1: config 0 has no interface number 0 [ 60.925199][ T29] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 60.929668][ T29] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 60.933970][ T29] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 60.942339][ T29] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 60.947311][ T29] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 60.953886][ T29] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 60.960634][ T29] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 60.964393][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.973590][ T29] usb 8-1: config 0 descriptor?? [ 60.976089][ T6420] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 60.981741][ T6420] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 60.997873][ T29] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 61.001299][ T838] usb 5-1: device descriptor read/64, error -71 [ 61.088344][ T53] IPVS: starting estimator thread 0... [ 61.198447][ T6448] IPVS: using max 42 ests per chain, 100800 per kthread [ 61.208872][ T29] usb 8-1: USB disconnect, device number 3 [ 61.218021][ T29] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 61.240525][ T6456] bond0: option ad_select: unable to set because the bond device is up [ 61.251480][ T838] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 61.260132][ T6457] vxcan0: tx address claim with different name [ 61.385435][ T838] usb 5-1: device descriptor read/64, error -71 [ 61.390702][ T54] IPVS: starting estimator thread 0... [ 61.393811][ T6461] netlink: 'syz.1.146': attribute type 16 has an invalid length. [ 61.492944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 61.497314][ T838] usb usb5-port1: attempt power cycle [ 61.498411][ T6462] IPVS: using max 42 ests per chain, 100800 per kthread [ 61.502934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 61.506196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 61.589598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 61.593199][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 61.597909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 61.608373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 61.668356][ T54] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 61.784856][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.794625][ T6471] bridge_slave_1: left allmulticast mode [ 61.796859][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.809880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 61.813320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 61.832030][ T54] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 61.834695][ T54] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 61.838554][ T54] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 61.841483][ T54] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 61.844812][ T54] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 61.849575][ T54] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 61.852477][ T54] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 61.855053][ T54] usb 6-1: Product: syz [ 61.856569][ T54] usb 6-1: Manufacturer: syz [ 61.867437][ T54] cdc_wdm 6-1:1.0: skipping garbage [ 61.869765][ T54] cdc_wdm 6-1:1.0: skipping garbage [ 61.878423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 61.880977][ T54] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 61.883358][ T54] cdc_wdm 6-1:1.0: Unknown control protocol [ 61.885849][ T838] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 61.922459][ T838] usb 5-1: device descriptor read/8, error -71 [ 61.954158][ T6479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.152'. [ 62.038564][ T6480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.152'. [ 62.121287][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 62.124063][ T54] usb 6-1: USB disconnect, device number 2 [ 62.124095][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 62.127962][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 62.178504][ T838] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 62.200332][ T838] usb 5-1: device descriptor read/8, error -71 [ 62.321340][ T838] usb usb5-port1: unable to enumerate USB device [ 62.648320][ T838] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 62.808391][ T838] usb 7-1: Using ep0 maxpacket: 8 [ 62.811217][ T838] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 62.814786][ T838] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 62.817840][ T838] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 62.821104][ T838] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.825044][ T838] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 62.827797][ T838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.927738][ T53] hid-generic 3730:1B2E:07FF.0002: unknown main item tag 0x6 [ 62.931246][ T53] hid-generic 3730:1B2E:07FF.0002: item fetching failed at offset 3/4 [ 62.935148][ T53] hid-generic 3730:1B2E:07FF.0002: probe with driver hid-generic failed with error -22 [ 62.981475][ T6511] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 63.040511][ T838] usb 7-1: GET_CAPABILITIES returned 0 [ 63.042221][ T838] usbtmc 7-1:16.0: can't read capabilities [ 63.055579][ T6517] netlink: 'syz.3.164': attribute type 11 has an invalid length. [ 63.058925][ T6517] netlink: 'syz.3.164': attribute type 11 has an invalid length. [ 63.061402][ T6517] netlink: 224 bytes leftover after parsing attributes in process `syz.3.164'. [ 63.195659][ T6527] hpfs: Bad magic ... probably not HPFS [ 63.202130][ T6527] binder: 6526:6527 ioctl c0306201 200000000080 returned -14 [ 63.260096][ T10] usb 7-1: USB disconnect, device number 5 [ 63.534173][ T6544] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 63.858440][ T53] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 63.880765][ T6557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.172'. [ 63.885218][ T6557] netlink: 'syz.2.172': attribute type 20 has an invalid length. [ 64.018425][ T53] usb 6-1: Using ep0 maxpacket: 8 [ 64.022560][ T53] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 64.025929][ T53] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 64.029516][ T53] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 64.034833][ T53] usb 6-1: config 250 has no interface number 0 [ 64.037454][ T53] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 64.042843][ T53] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 64.048178][ T53] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 64.052748][ T53] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 64.056960][ T53] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 64.062874][ T53] usb 6-1: config 250 interface 228 has no altsetting 0 [ 64.067351][ T53] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 64.071196][ T53] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 64.074634][ T53] usb 6-1: Product: syz [ 64.076455][ T53] usb 6-1: SerialNumber: syz [ 64.084583][ T53] hub 6-1:250.228: bad descriptor, ignoring hub [ 64.087283][ T53] hub 6-1:250.228: probe with driver hub failed with error -5 [ 64.293929][ T53] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 64.295344][ T6579] misc userio: The device must be registered before sending interrupts [ 64.329644][ T53] usb 6-1: USB disconnect, device number 3 [ 64.336046][ T53] usblp0: removed [ 64.568063][ T6608] xt_ecn: cannot match TCP bits for non-tcp packets [ 64.640274][ T6610] block device autoloading is deprecated and will be removed. [ 64.747451][ T6618] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 64.765908][ T6617] __nla_validate_parse: 1 callbacks suppressed [ 64.765925][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 64.838367][ T53] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 64.995835][ T6630] (syz.0.194,6630,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 64.998398][ T53] usb 6-1: Using ep0 maxpacket: 32 [ 64.998696][ T6630] (syz.0.194,6630,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 65.002843][ T53] usb 6-1: config 0 has no interfaces? [ 65.007997][ T53] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 65.012952][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.019612][ T53] usb 6-1: Product: syz [ 65.021502][ T53] usb 6-1: Manufacturer: syz [ 65.023639][ T53] usb 6-1: SerialNumber: syz [ 65.032134][ T53] usb 6-1: config 0 descriptor?? [ 65.236548][ T53] usb 6-1: USB disconnect, device number 4 [ 65.437051][ T6658] tmpfs: Bad value for 'mpol' [ 65.833073][ T6670] binder: BINDER_SET_CONTEXT_MGR already set [ 65.837932][ T6670] binder: 6669:6670 ioctl 4018620d 2000000000c0 returned -16 [ 65.837961][ T6676] binder_alloc: binder_alloc_mmap_handler: 6669 200000ffd000-200001000000 already mapped failed -16 [ 65.846629][ T6670] binder_alloc: 6669: binder_alloc_buf, no vma [ 66.134683][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.210'. [ 66.137950][ T6688] bridge_slave_1: left allmulticast mode [ 66.140233][ T6688] bridge_slave_1: left promiscuous mode [ 66.142473][ T6688] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.150126][ T6688] bridge_slave_0: left allmulticast mode [ 66.152010][ T6688] bridge_slave_0: left promiscuous mode [ 66.153830][ T6688] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.424453][ T6671] syz.3.209 (6671): drop_caches: 2 [ 66.462462][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 66.462472][ T40] audit: type=1400 audit(1750511097.194:385): avc: denied { read } for pid=6706 comm="syz.3.216" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 66.463153][ T6704] pim6reg1: entered promiscuous mode [ 66.464951][ T40] audit: type=1400 audit(1750511097.194:386): avc: denied { open } for pid=6706 comm="syz.3.216" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 66.474326][ T6704] pim6reg1: entered allmulticast mode [ 66.475604][ T40] audit: type=1400 audit(1750511097.204:387): avc: denied { map } for pid=6698 comm="syz.0.213" path="/dev/video3" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 66.490869][ T6707] geneve2: entered allmulticast mode [ 66.585235][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'. [ 66.589416][ T6715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.638900][ T6715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.681163][ T6718] warning: `syz.1.220' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 66.783828][ T6727] netlink: 'syz.3.224': attribute type 11 has an invalid length. [ 66.783825][ T40] audit: type=1800 audit(1750511097.514:388): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.222" name="bpf-map" dev="anon_inodefs" ino=1073 res=0 errno=0 [ 66.797594][ T40] audit: type=1400 audit(1750511097.514:389): avc: denied { setopt } for pid=6726 comm="syz.3.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.820276][ T6732] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 66.823083][ T6732] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 66.825815][ T6732] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 66.828696][ T6732] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 66.832289][ T6732] geneve2: entered promiscuous mode [ 66.834038][ T6732] geneve2: entered allmulticast mode [ 66.905506][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.228'. [ 66.944232][ T6748] pim6reg: entered allmulticast mode [ 66.980499][ T40] audit: type=1400 audit(1750511097.714:390): avc: denied { mounton } for pid=6750 comm="syz.1.230" path="/proc/172/task" dev="proc" ino=15470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 67.080571][ T6762] xt_SECMARK: invalid mode: 0 [ 67.084618][ T6762] netlink: 28 bytes leftover after parsing attributes in process `syz.2.233'. [ 67.210189][ T40] audit: type=1400 audit(1750511097.944:391): avc: denied { append } for pid=6779 comm="syz.2.238" name="001" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 67.300851][ T40] audit: type=1400 audit(1750511098.034:392): avc: denied { getopt } for pid=6785 comm="syz.0.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 67.411241][ T6804] netlink: 'syz.2.243': attribute type 7 has an invalid length. [ 67.416168][ T6800] program syz.0.244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.416440][ T40] audit: type=1400 audit(1750511098.144:393): avc: denied { mount } for pid=6802 comm="syz.1.245" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 67.420806][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'. [ 67.428663][ T6803] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 67.430075][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'. [ 67.432064][ T40] audit: type=1400 audit(1750511098.164:394): avc: denied { module_load } for pid=6799 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 67.432281][ T6805] Invalid ELF header type: 0 != 1 [ 67.435592][ T6801] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 67.442544][ T6800] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 67.444762][ T6801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.445802][ T6800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.755897][ T6839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=6839 comm=syz.1.256 [ 67.948419][ T5974] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 67.957442][ T6855] tipc: Started in network mode [ 67.960681][ T6855] tipc: Node identity 6fc3, cluster identity 4711 [ 67.962935][ T6855] tipc: Node number set to 28611 [ 67.963747][ T6857] netlink: 20 bytes leftover after parsing attributes in process `syz.3.259'. [ 67.967961][ T6857] netlink: 40 bytes leftover after parsing attributes in process `syz.3.259'. [ 68.078551][ T5974] usb 5-1: device descriptor read/64, error -71 [ 68.103576][ T6873] netlink: 'syz.3.264': attribute type 5 has an invalid length. [ 68.303943][ T6882] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.318399][ T5974] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 68.370630][ T6882] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.448330][ T5974] usb 5-1: device descriptor read/64, error -71 [ 68.522334][ T6882] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.568923][ T5974] usb usb5-port1: attempt power cycle [ 68.688778][ T6882] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.871992][ T6882] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.881509][ T6882] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.889398][ T6882] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.896556][ T6882] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.938338][ T5974] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 68.969893][ T5974] usb 5-1: device descriptor read/8, error -71 [ 68.986490][ T6898] netlink: 504 bytes leftover after parsing attributes in process `syz.3.270'. [ 69.212917][ T5974] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 69.228814][ T5974] usb 5-1: device descriptor read/8, error -71 [ 69.352899][ T5974] usb usb5-port1: unable to enumerate USB device [ 69.362026][ T6929] 9pnet_virtio: no channels available for device 127.0.0.1 [ 69.373152][ T6936] netlink: 'syz.3.281': attribute type 4 has an invalid length. [ 69.385527][ T6936] netlink: 'syz.3.281': attribute type 4 has an invalid length. [ 69.497165][ T6944] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 69.527273][ T6947] No source specified [ 69.738483][ T61] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 69.900238][ T61] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.903751][ T61] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.907350][ T61] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.912103][ T61] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.915114][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.919913][ T61] usb 8-1: config 0 descriptor?? [ 70.218920][ T61] usbhid 8-1:0.0: can't add hid device: -71 [ 70.220923][ T61] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 70.227872][ T61] usb 8-1: USB disconnect, device number 4 [ 70.354082][ T6958] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 70.443409][ T6960] mac80211_hwsim hwsim8 wlan0: default FDB implementation only supports local addresses [ 70.446603][ T6961] mac80211_hwsim hwsim8 wlan0: default FDB implementation only supports local addresses [ 70.640169][ T6968] veth3: entered promiscuous mode [ 70.664577][ T6969] veth3: entered promiscuous mode [ 70.673884][ T6973] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 70.743718][ T6972] mmap: syz.3.294 (6972) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 70.792841][ T6978] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 70.838213][ T6978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6978 comm=syz.0.295 [ 70.896476][ T6987] 9pnet_virtio: no channels available for device syz [ 71.130051][ T10] IPVS: starting estimator thread 0... [ 71.185697][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.187812][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.228414][ T7003] IPVS: using max 42 ests per chain, 100800 per kthread [ 72.094542][ T7013] netlink: 'syz.1.305': attribute type 1 has an invalid length. [ 72.112134][ T7012] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 72.115077][ T7012] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 72.118572][ T7012] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 72.122328][ T7012] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 72.129216][ T7012] bond2: (slave geneve2): making interface the new active one [ 72.134276][ T7012] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 72.262441][ T7022] binder: 7018:7022 ioctl c0306201 200000000240 returned -11 [ 72.306473][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 72.306490][ T40] audit: type=1400 audit(1750511103.034:413): avc: denied { write } for pid=7036 comm="syz.2.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 72.375322][ T7041] overlayfs: missing 'lowerdir' [ 72.380663][ T7041] syz.2.312 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 72.431633][ T40] audit: type=1400 audit(1750511103.164:414): avc: denied { mount } for pid=7044 comm="syz.1.313" name="/" dev="ramfs" ino=15744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 72.436659][ T7045] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 72.507551][ T40] audit: type=1400 audit(1750511103.234:415): avc: denied { mounton } for pid=7054 comm="syz.3.317" path="/proc/281/cgroup" dev="proc" ino=17411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 72.515344][ T40] audit: type=1400 audit(1750511103.244:416): avc: denied { remount } for pid=7054 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 72.538903][ T40] audit: type=1400 audit(1750511103.274:417): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 72.581963][ T7065] netlink: 'syz.1.318': attribute type 11 has an invalid length. [ 72.585147][ T7065] __nla_validate_parse: 2 callbacks suppressed [ 72.585160][ T7065] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.318'. [ 72.594621][ T40] audit: type=1400 audit(1750511103.324:418): avc: denied { module_request } for pid=7064 comm="syz.1.318" kmod="crypto-cmac(aes-generic)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 72.648429][ T40] audit: type=1400 audit(1750511103.374:419): avc: denied { mount } for pid=7064 comm="syz.1.318" name="/" dev="pstore" ino=1921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 72.655577][ T40] audit: type=1400 audit(1750511103.374:420): avc: denied { remount } for pid=7064 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 72.664216][ T40] audit: type=1400 audit(1750511103.394:421): avc: denied { connect } for pid=7064 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.670318][ T7065] netlink: 'syz.1.318': attribute type 10 has an invalid length. [ 72.670373][ T7072] smc: net device bond0 applied user defined pnetid SYZ0 [ 72.673983][ T7074] netlink: 32 bytes leftover after parsing attributes in process `syz.3.322'. [ 72.696251][ T7065] team0: Port device wlan1 added [ 72.700892][ T7064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.753291][ T40] audit: type=1400 audit(1750511103.484:422): avc: denied { ioctl } for pid=7073 comm="syz.3.322" path="socket:[16470]" dev="sockfs" ino=16470 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 72.845962][ T7090] netlink: 80 bytes leftover after parsing attributes in process `syz.1.326'. [ 72.988928][ T7114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.333'. [ 73.259149][ T5937] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 73.277052][ T7134] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.280794][ T7134] bond0: (slave bond1): Enslaving as an active interface with an up link [ 73.312495][ T7138] xt_socket: unknown flags 0xc [ 73.361013][ T7142] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 73.383828][ T7142] binder: 7141:7142 ioctl c0306201 0 returned -14 [ 73.965427][ T7153] Malformed UNC in devname [ 73.965427][ T7153] [ 73.967700][ T7153] CIFS: VFS: Malformed UNC in devname [ 74.320914][ T7180] syz_tun: entered allmulticast mode [ 74.356894][ T7186] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 74.421556][ T7192] ip6t_rpfilter: unknown options [ 74.568706][ T5974] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 74.589014][ T7211] overlayfs: conflicting options: nfs_export=on,index=off [ 74.596367][ T7211] 9p: Unknown access argument 18446744073709551615: -34 [ 74.648341][ T61] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 74.718415][ T5974] usb 7-1: Using ep0 maxpacket: 8 [ 74.721490][ T5974] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 74.725119][ T5974] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 74.728367][ T5974] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 74.731527][ T5974] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.735798][ T5974] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 74.738669][ T5974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.798460][ T61] usb 5-1: Using ep0 maxpacket: 8 [ 74.802353][ T61] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 74.805903][ T61] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 74.809415][ T61] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 74.812573][ T61] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 74.815786][ T61] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.820265][ T61] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 74.823174][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.948407][ T5974] usb 7-1: GET_CAPABILITIES returned 0 [ 74.950245][ T5974] usbtmc 7-1:16.0: can't read capabilities [ 74.957872][ T7220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.365'. [ 74.962322][ T7220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.365'. [ 74.972508][ T7220] netlink: 'syz.1.365': attribute type 1 has an invalid length. [ 74.975104][ T7220] netlink: 224 bytes leftover after parsing attributes in process `syz.1.365'. [ 75.029025][ T61] usb 5-1: usb_control_msg returned -32 [ 75.030999][ T61] usbtmc 5-1:16.0: can't read capabilities [ 75.129113][ T7225] geneve3: entered promiscuous mode [ 75.158063][ T10] usb 7-1: USB disconnect, device number 6 [ 75.224436][ T7230] netlink: 40 bytes leftover after parsing attributes in process `syz.1.369'. [ 75.262751][ T7230] netlink: 'syz.1.369': attribute type 4 has an invalid length. [ 75.473604][ T7236] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 75.477155][ T7236] SELinux: failed to load policy [ 75.790614][ T7251] bond0: entered promiscuous mode [ 75.792429][ T7251] bond_slave_0: entered promiscuous mode [ 75.794274][ T7251] bond_slave_1: entered promiscuous mode [ 75.796114][ T7251] bond1: entered promiscuous mode [ 75.922145][ T7258] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 76.010428][ T7263] netlink: 'syz.2.378': attribute type 15 has an invalid length. [ 76.013986][ T7263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 76.020670][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.074151][ T7263] bridge_slave_1 (unregistering): left allmulticast mode [ 76.076525][ T7263] bridge_slave_1 (unregistering): left promiscuous mode [ 76.079486][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.440285][ T7282] bridge0: entered promiscuous mode [ 76.442601][ T7282] macsec1: entered promiscuous mode [ 76.446517][ T7282] bridge0: port 2(macsec1) entered blocking state [ 76.449803][ T7282] bridge0: port 2(macsec1) entered disabled state [ 76.452619][ T7282] macsec1: entered allmulticast mode [ 76.454841][ T7282] bridge0: entered allmulticast mode [ 76.459257][ T7282] macsec1: left allmulticast mode [ 76.461697][ T7282] bridge0: left allmulticast mode [ 76.465777][ T7282] bridge0: left promiscuous mode [ 76.493539][ T7284] netlink: 'syz.3.385': attribute type 39 has an invalid length. [ 76.661400][ T7290] sp0: Synchronizing with TNC [ 76.681047][ T7293] syz_tun: left allmulticast mode [ 76.716683][ T7296] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 76.968294][ T61] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 77.105713][ T7314] netlink: 'syz.3.392': attribute type 12 has an invalid length. [ 77.130038][ T61] usb 7-1: unable to get BOS descriptor or descriptor too short [ 77.132910][ T61] usb 7-1: not running at top speed; connect to a high speed hub [ 77.136201][ T61] usb 7-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config [ 77.140500][ T61] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.146439][ T61] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 77.149687][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.152348][ T61] usb 7-1: Product: syz [ 77.153664][ T61] usb 7-1: Manufacturer: syz [ 77.155091][ T61] usb 7-1: SerialNumber: syz [ 77.381802][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 77.381815][ T40] audit: type=1400 audit(1750511108.114:456): avc: denied { read } for pid=7289 comm=2321202E2F66696C65300A name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 77.408438][ T53] usb 5-1: USB disconnect, device number 10 [ 77.498412][ T5937] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 77.498458][ T5943] Bluetooth: hci4: command 0x1003 tx timeout [ 78.067368][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 78.778482][ T5937] Bluetooth: hci2: command 0x0406 tx timeout [ 79.498542][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout [ 79.498849][ T7297] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 79.636111][ T7297] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 79.642414][ T7297] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 79.645238][ T7297] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 79.647165][ T7297] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 79.650262][ T7297] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 79.652234][ T7297] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 79.654856][ T7297] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 79.659166][ T7297] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 79.661529][ T7297] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.664532][ T7297] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.673311][ T7322] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 79.693555][ T61] usb 7-1: 0:2 : does not exist [ 79.723225][ T7330] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 79.726638][ T61] usb 7-1: USB disconnect, device number 7 [ 79.727973][ T7330] SET target dimension over the limit! [ 79.759729][ T6323] udevd[6323]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 79.767328][ T7333] futex_wake_op: syz.3.398 tries to shift op by 32; fix this program [ 79.795925][ T7329] cgroup: none used incorrectly [ 79.800068][ T7337] netlink: 16 bytes leftover after parsing attributes in process `syz.3.399'. [ 79.845445][ T40] audit: type=1400 audit(1750511110.574:457): avc: denied { setattr } for pid=7339 comm="syz.1.401" name="[io_uring]" dev="anon_inodefs" ino=16913 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 79.845896][ T7340] capability: warning: `syz.1.401' uses 32-bit capabilities (legacy support in use) [ 79.854969][ T40] audit: type=1400 audit(1750511110.574:458): avc: denied { ioctl } for pid=7339 comm="syz.1.401" path="socket:[16914]" dev="sockfs" ino=16914 ioctlcmd=0xf9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 79.889739][ T40] audit: type=1400 audit(1750511110.624:459): avc: denied { create } for pid=7343 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.897314][ T40] audit: type=1400 audit(1750511110.624:460): avc: denied { write } for pid=7343 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.903483][ T40] audit: type=1400 audit(1750511110.624:461): avc: denied { nlmsg_write } for pid=7343 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.007265][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.400'. [ 80.060386][ T40] audit: type=1400 audit(1750511110.794:462): avc: denied { ioctl } for pid=7351 comm="syz.3.404" path="socket:[16067]" dev="sockfs" ino=16067 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.074922][ T7358] usb usb8: usbfs: process 7358 (syz.2.406) did not claim interface 0 before use [ 80.078425][ T40] audit: type=1326 audit(1750511110.794:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7357 comm="syz.2.406" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c398e929 code=0x7ffc0000 [ 80.085143][ T40] audit: type=1326 audit(1750511110.794:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7357 comm="syz.2.406" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c398e929 code=0x7ffc0000 [ 80.093046][ T40] audit: type=1326 audit(1750511110.794:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7357 comm="syz.2.406" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f15c398e929 code=0x7ffc0000 [ 80.128324][ T6326] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 80.183616][ T7366] syzkaller1: entered promiscuous mode [ 80.185322][ T7366] syzkaller1: entered allmulticast mode [ 80.279810][ T6326] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.282999][ T6326] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 80.286073][ T6326] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 80.290611][ T6326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.297997][ T6326] usb 6-1: config 0 descriptor?? [ 80.311785][ T6326] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 80.311966][ T6326] dvb-usb: bulk message failed: -22 (3/0) [ 80.316247][ T6326] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 80.323001][ T6326] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 80.323033][ T6326] usb 6-1: media controller created [ 80.324219][ T6326] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 80.335726][ T6326] dvb-usb: bulk message failed: -22 (6/0) [ 80.335801][ T6326] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 80.337631][ T6326] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input9 [ 80.350082][ T6326] dvb-usb: schedule remote query interval to 150 msecs. [ 80.352199][ T6326] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 80.391863][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'. [ 80.394625][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.412'. [ 80.397575][ T7378] netlink: 36 bytes leftover after parsing attributes in process `syz.3.412'. [ 80.473169][ T5941] block nbd0: Receive control failed (result -107) [ 80.509720][ T61] dvb-usb: bulk message failed: -22 (1/0) [ 80.511629][ T61] dvb-usb: error while querying for an remote control event. [ 80.518475][ T7378] nbd0: detected capacity change from 0 to 256 [ 80.522380][ T5935] block nbd0: Dead connection, failed to find a fallback [ 80.524715][ T5935] block nbd0: shutting down sockets [ 80.526490][ T5935] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.536412][ T5935] Buffer I/O error on dev nbd0, logical block 0, async page read [ 80.540598][ T5935] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.544081][ T5935] Buffer I/O error on dev nbd0, logical block 0, async page read [ 80.547779][ T5935] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.551941][ T5935] Buffer I/O error on dev nbd0, logical block 0, async page read [ 80.555088][ T5935] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.559230][ T5935] Buffer I/O error on dev nbd0, logical block 0, async page read [ 80.562874][ T5935] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.566821][ T5935] Buffer I/O error on dev nbd0, logical block 0, async page read [ 80.570139][ T5935] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.573752][ T5935] Buffer I/O error on dev nbd0, logical block 0, async page read [ 80.576864][ T5935] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.583874][ T5935] Buffer I/O error on dev nbd0, logical block 0, async page read [ 80.586996][ T5935] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.593831][ T5935] Buffer I/O error on dev nbd0, logical block 0, async page read [ 80.596895][ T5935] ldm_validate_partition_table(): Disk read failed. [ 80.599159][ T5935] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.601947][ T5935] Buffer I/O error on dev nbd0, logical block 0, async page read [ 80.604422][ T5935] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.612874][ T5935] Buffer I/O error on dev nbd0, logical block 0, async page read [ 80.615652][ T5935] Dev nbd0: unable to read RDB block 0 [ 80.617725][ T5935] nbd0: unable to read partition table [ 80.630131][ T7393] netlink: 'syz.0.416': attribute type 21 has an invalid length. [ 80.633783][ T7393] netlink: 'syz.0.416': attribute type 6 has an invalid length. [ 80.636214][ T5935] ldm_validate_partition_table(): Disk read failed. [ 80.636432][ T5935] Dev nbd0: unable to read RDB block 0 [ 80.638820][ T7393] netlink: 132 bytes leftover after parsing attributes in process `syz.0.416'. [ 80.642831][ T5935] nbd0: unable to read partition table [ 80.668541][ T6326] dvb-usb: bulk message failed: -22 (1/0) [ 80.672913][ T6326] dvb-usb: error while querying for an remote control event. [ 80.828348][ T6326] dvb-usb: bulk message failed: -22 (1/0) [ 80.830311][ T6326] dvb-usb: error while querying for an remote control event. [ 80.939888][ T6326] usb 6-1: USB disconnect, device number 5 [ 80.954152][ T6326] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 81.039465][ T7423] netlink: 'syz.0.425': attribute type 11 has an invalid length. [ 81.042087][ T7423] netlink: 44 bytes leftover after parsing attributes in process `syz.0.425'. [ 81.420787][ T837] cfg80211: failed to load regulatory.db [ 81.439535][ T7430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.428'. [ 81.452628][ T7430] program syz.3.428 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.456323][ T7430] program syz.3.428 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.514507][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 81.588380][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout [ 81.602861][ T7447] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 81.658390][ T5941] Bluetooth: hci0: command 0x0c1a tx timeout [ 81.658545][ T5937] Bluetooth: hci2: command 0x0406 tx timeout [ 81.666757][ T7456] netlink: zone id is out of range [ 81.668855][ T7456] netlink: zone id is out of range [ 81.671073][ T7456] netlink: zone id is out of range [ 81.671583][ T7458] program /dev/ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.673236][ T7456] netlink: zone id is out of range [ 81.677766][ T7456] netlink: zone id is out of range [ 81.680724][ T7456] netlink: zone id is out of range [ 81.682539][ T7456] netlink: zone id is out of range [ 81.684214][ T7456] netlink: zone id is out of range [ 81.685889][ T7456] netlink: zone id is out of range [ 81.720992][ T7462] program syz.3.440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.739020][ T5937] Bluetooth: hci3: command 0x0c1a tx timeout [ 81.848769][ T7493] dlm: non-version read from control device 0 [ 81.854433][ T7493] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 81.856595][ T7493] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 81.860590][ T7493] vhci_hcd vhci_hcd.0: Device attached [ 81.864301][ T7493] mmap: syz.0.449 (7493): VmData 37462016 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 82.048582][ T6326] vhci_hcd: vhci_device speed not set [ 82.101231][ T7495] vhci_hcd: connection closed [ 82.103308][ T46] vhci_hcd: stop threads [ 82.106806][ T46] vhci_hcd: release socket [ 82.109250][ T46] vhci_hcd: disconnect device [ 82.118366][ T6326] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 82.122221][ T6326] usb 37-1: enqueue for inactive port 0 [ 82.188310][ T6326] vhci_hcd: vhci_device speed not set [ 82.322563][ T7520] hfs: can't find a HFS filesystem on dev sr0 [ 82.391693][ T7524] exFAT-fs (nullb0): invalid boot record signature [ 82.393852][ T7524] exFAT-fs (nullb0): failed to read boot sector [ 82.395807][ T7524] exFAT-fs (nullb0): failed to recognize exfat type [ 82.472458][ T7530] netlink: 'syz.1.459': attribute type 1 has an invalid length. [ 82.506237][ T7534] SELinux: policydb version 1402900228 does not match my version range 15-34 [ 82.510779][ T7534] SELinux: failed to load policy [ 82.550754][ T40] kauditd_printk_skb: 131 callbacks suppressed [ 82.550765][ T40] audit: type=1400 audit(1750511113.285:597): avc: denied { write } for pid=7537 comm="syz.1.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 82.563691][ T40] audit: type=1400 audit(1750511113.295:598): avc: denied { ioctl } for pid=7537 comm="syz.1.463" path="socket:[19516]" dev="sockfs" ino=19516 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.576357][ T7541] netlink: 'syz.3.464': attribute type 23 has an invalid length. [ 82.808800][ T40] audit: type=1400 audit(1750511113.545:599): avc: denied { create } for pid=7551 comm="syz.1.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 82.827569][ T40] audit: type=1400 audit(1750511113.545:600): avc: denied { bind } for pid=7551 comm="syz.1.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 82.836819][ T7560] SELinux: syz.0.469 (7560) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 82.837824][ T7563] dlm: non-version read from control device 0 [ 82.865324][ T40] audit: type=1400 audit(1750511113.595:601): avc: denied { write } for pid=7561 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 82.958242][ T7574] ocfs2: Unknown parameter '^' [ 83.160200][ T7590] overlay: Unknown parameter 'func' [ 83.195594][ T7592] __nla_validate_parse: 6 callbacks suppressed [ 83.195606][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'. [ 83.203873][ T40] audit: type=1400 audit(1750511113.935:602): avc: denied { setopt } for pid=7591 comm="syz.1.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 83.244618][ T40] audit: type=1400 audit(1750511113.975:603): avc: denied { listen } for pid=7593 comm="syz.1.480" lport=35582 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.283185][ T40] audit: type=1400 audit(1750511114.015:604): avc: denied { write } for pid=7593 comm="syz.1.480" lport=35582 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 83.291366][ T40] audit: type=1400 audit(1750511114.025:605): avc: denied { setopt } for pid=7593 comm="syz.1.480" lport=35582 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 83.299114][ T40] audit: type=1400 audit(1750511114.025:606): avc: denied { getopt } for pid=7593 comm="syz.1.480" lport=35582 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 83.588243][ T7613] netlink: 32 bytes leftover after parsing attributes in process `syz.0.485'. [ 83.657720][ T5937] Bluetooth: hci1: command 0x0c1a tx timeout [ 83.730025][ T7634] netlink: 100 bytes leftover after parsing attributes in process `syz.3.491'. [ 83.738712][ T5937] Bluetooth: hci2: command 0x0406 tx timeout [ 83.740290][ T5941] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.817734][ T5941] Bluetooth: hci3: command 0x0c1a tx timeout [ 83.870375][ T7643] netlink: 596 bytes leftover after parsing attributes in process `syz.2.493'. [ 83.900869][ T7645] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 83.943609][ T7647] xt_CT: You must specify a L4 protocol and not use inversions on it [ 83.967902][ T7649] hpfs: Bad magic ... probably not HPFS [ 83.970566][ T7650] hpfs: Bad magic ... probably not HPFS [ 83.977025][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'. [ 84.196043][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.499'. [ 84.200257][ T7662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7662 comm=syz.2.499 [ 84.356185][ T7668] netlink: 16 bytes leftover after parsing attributes in process `syz.2.501'. [ 84.359948][ T7668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.501'. [ 84.549060][ T7683] vlan2: entered allmulticast mode [ 84.551156][ T7683] bond0: entered allmulticast mode [ 84.553174][ T7683] bond_slave_0: entered allmulticast mode [ 84.555321][ T7683] bond_slave_1: entered allmulticast mode [ 84.559460][ T7683] bridge0: port 1(vlan2) entered blocking state [ 84.562043][ T7683] bridge0: port 1(vlan2) entered disabled state [ 84.566453][ T7683] bond_slave_0: entered promiscuous mode [ 84.569176][ T7683] bond_slave_1: entered promiscuous mode [ 84.580602][ T7686] netlink: 'syz.2.505': attribute type 5 has an invalid length. [ 85.398613][ T7710] trusted_key: encrypted_key: keylen parameter is missing [ 85.477356][ T7718] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000004 [ 85.572820][ T7724] blk_print_req_error: 27 callbacks suppressed [ 85.572836][ T7724] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.581495][ T7724] buffer_io_error: 27 callbacks suppressed [ 85.581506][ T7724] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.589206][ T7724] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.592011][ T7724] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.595417][ T7724] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.598281][ T7724] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.600815][ T7724] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.603650][ T7724] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.606210][ T7724] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.609116][ T7724] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.611582][ T7724] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.614307][ T7724] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.616821][ T7724] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.620282][ T7724] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.623490][ T7724] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.626945][ T7724] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.629298][ T7724] ldm_validate_partition_table(): Disk read failed. [ 85.633247][ T7724] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.636058][ T7724] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.639154][ T7724] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.641923][ T7724] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.644563][ T7724] Dev nbd0: unable to read RDB block 0 [ 85.648245][ T7724] nbd0: unable to read partition table [ 85.668915][ T7724] befs: (nbd0): unable to read superblock [ 85.696924][ T7727] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7727 comm=syz.0.520 [ 85.701901][ T7727] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7727 comm=syz.0.520 [ 85.736775][ T837] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 85.817791][ T5937] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.888225][ T837] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 85.891787][ T837] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 85.894837][ T837] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 85.898362][ T837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.907110][ T7720] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 85.907648][ T5937] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.915057][ T837] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 86.127292][ T837] usb 7-1: USB disconnect, device number 8 [ 86.337450][ T7737] ip6t_srh: unknown srh match flags 4000 [ 86.473221][ T7746] netlink: 16 bytes leftover after parsing attributes in process `syz.0.525'. [ 86.476555][ T5941] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 86.480800][ T7748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.527'. [ 86.622409][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.625927][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.629337][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.632525][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.635615][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.639606][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.642700][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.645723][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.649157][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.652358][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.654730][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.657199][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.659594][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.661910][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.664263][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.666810][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.669291][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.672142][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.674600][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.678073][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.680512][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.682919][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.685310][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.687795][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.690233][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.692643][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.695058][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.698676][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.701101][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.703490][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.705914][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.708489][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.711145][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.713557][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.715980][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.718591][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.721051][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.723504][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.725917][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.730228][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.733512][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.736945][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.740193][ T837] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.750452][ T837] hid-generic 0000:007F:FFFFFFFE.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 86.788000][ T7765] fido_id[7765]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 86.798577][ T7772] net_ratelimit: 215 callbacks suppressed [ 86.798588][ T7772] netlink: zone id is out of range [ 86.806945][ T7772] netlink: zone id is out of range [ 86.808993][ T7772] netlink: zone id is out of range [ 86.810888][ T7772] netlink: zone id is out of range [ 86.812678][ T7772] netlink: zone id is out of range [ 86.814421][ T7772] netlink: zone id is out of range [ 86.816224][ T7772] netlink: zone id is out of range [ 86.820291][ T7772] netlink: zone id is out of range [ 86.822656][ T7772] netlink: zone id is out of range [ 86.824894][ T7772] netlink: zone id is out of range [ 86.857205][ T7777] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 86.861433][ T7777] Error validating options; rc = [-22] [ 87.026297][ T7792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=7792 comm=syz.1.540 [ 87.309779][ T7821] tmpfs: Bad value for 'mpol' [ 87.329765][ T7821] IPv6: NLM_F_CREATE should be specified when creating new route [ 87.339393][ T7821] random: crng reseeded on system resumption [ 87.376963][ T7825] bridge0: port 3(syz_tun) entered blocking state [ 87.377968][ T7827] overlayfs: missing 'lowerdir' [ 87.379093][ T7825] bridge0: port 3(syz_tun) entered disabled state [ 87.383206][ T7825] syz_tun: entered allmulticast mode [ 87.391239][ T7825] syz_tun: entered promiscuous mode [ 87.393423][ T7825] bridge0: port 3(syz_tun) entered blocking state [ 87.396156][ T7825] bridge0: port 3(syz_tun) entered forwarding state [ 87.440091][ T5937] Bluetooth: hci3: unexpected event for opcode 0x0402 [ 87.453433][ T7825] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 87.553708][ T7857] ubi31: attaching mtd0 [ 87.556324][ T7857] ubi31: scanning is finished [ 87.557653][ T7857] ubi31: empty MTD device detected [ 87.567517][ T7854] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 87.682597][ T7857] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 87.832967][ T7881] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=7881 comm=syz.2.563 [ 87.833110][ T7879] qrtr: Invalid version 0 [ 87.896065][ T7879] batadv_slave_1: entered promiscuous mode [ 87.896808][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 87.896822][ T40] audit: type=1400 audit(1750511118.637:622): avc: denied { getopt } for pid=7878 comm="syz.3.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.969696][ T7879] team0 (unregistering): Port device team_slave_0 removed [ 87.974898][ T7879] team0 (unregistering): Port device team_slave_1 removed [ 88.200704][ T7878] batadv_slave_1: left promiscuous mode [ 88.239335][ T7905] @: renamed from vlan0 (while UP) [ 88.570919][ T40] audit: type=1400 audit(1750511119.308:623): avc: denied { setopt } for pid=7921 comm="syz.1.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 88.583681][ T40] audit: type=1400 audit(1750511119.308:624): avc: denied { getopt } for pid=7921 comm="syz.1.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 88.591671][ T40] audit: type=1400 audit(1750511119.308:625): avc: denied { ioctl } for pid=7921 comm="syz.1.572" path="socket:[21888]" dev="sockfs" ino=21888 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 88.601336][ T40] audit: type=1400 audit(1750511119.318:626): avc: denied { getopt } for pid=7921 comm="syz.1.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.628487][ T7926] ceph: Path missing in source [ 88.632217][ T40] audit: type=1400 audit(1750511119.368:627): avc: denied { append } for pid=7927 comm="syz.1.574" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 88.638906][ T7929] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 89.249541][ T7966] netlink: 'syz.3.581': attribute type 10 has an invalid length. [ 89.269423][ T7966] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 89.278966][ T7966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.281799][ T7966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.320091][ T7966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.323000][ T7966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.582080][ T40] audit: type=1400 audit(1750511120.318:628): avc: denied { connect } for pid=7967 comm="syz.3.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.776368][ T7978] bridge0: port 2(syz_tun) entered blocking state [ 89.779012][ T7978] bridge0: port 2(syz_tun) entered disabled state [ 89.781685][ T7978] syz_tun: entered allmulticast mode [ 89.789763][ T7978] syz_tun: entered promiscuous mode [ 89.793978][ T7978] bridge0: port 2(syz_tun) entered blocking state [ 89.796780][ T7978] bridge0: port 2(syz_tun) entered forwarding state [ 89.822027][ T5941] Bluetooth: hci2: unexpected event for opcode 0x0809 [ 89.824957][ T40] audit: type=1400 audit(1750511120.558:629): avc: denied { read } for pid=7977 comm="syz.2.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 89.832679][ T7983] binder: 7982:7983 ioctl c0306201 200000000640 returned -22 [ 89.837008][ T7983] binder: 7982:7983 ioctl c0502100 200000000200 returned -22 [ 90.241892][ T7999] overlayfs: upper fs does not support file handles, falling back to index=off. [ 90.353258][ T40] audit: type=1400 audit(1750511121.089:630): avc: denied { accept } for pid=8001 comm="syz.3.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.525990][ T8010] ================================================================== [ 90.528613][ T8010] BUG: KASAN: slab-out-of-bounds in _raw_spin_lock+0x2e/0x40 [ 90.530859][ T8010] Read of size 1 at addr ffff88805ed7ae60 by task syz.3.594/8010 [ 90.536311][ T8010] [ 90.537305][ T8010] CPU: 1 UID: 0 PID: 8010 Comm: syz.3.594 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 90.537329][ T8010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.537341][ T8010] Call Trace: [ 90.537348][ T8010] [ 90.537355][ T8010] dump_stack_lvl+0x116/0x1f0 [ 90.537383][ T8010] print_report+0xcd/0x680 [ 90.537406][ T8010] ? __virt_addr_valid+0x81/0x610 [ 90.537426][ T8010] ? __phys_addr+0xe8/0x180 [ 90.537445][ T8010] ? _raw_spin_lock+0x2e/0x40 [ 90.537465][ T8010] kasan_report+0xe0/0x110 [ 90.537489][ T8010] ? _raw_spin_lock+0x2e/0x40 [ 90.537512][ T8010] ? _raw_spin_lock+0x2e/0x40 [ 90.537532][ T8010] __kasan_check_byte+0x36/0x50 [ 90.537555][ T8010] lock_acquire+0xfc/0x350 [ 90.537581][ T8010] ? __pfx___mutex_lock+0x10/0x10 [ 90.537608][ T8010] _raw_spin_lock+0x2e/0x40 [ 90.537628][ T8010] ? __futex_pivot_hash+0x1dd/0x540 [ 90.537650][ T8010] __futex_pivot_hash+0x1dd/0x540 [ 90.537676][ T8010] futex_hash_allocate+0xad1/0xf00 [ 90.537700][ T8010] ? __pfx_futex_hash_allocate+0x10/0x10 [ 90.537723][ T8010] ? __pfx_var_wake_function+0x10/0x10 [ 90.537747][ T8010] ? cap_task_prctl+0x2af/0xa80 [ 90.537776][ T8010] ? static_key_count+0x5a/0x70 [ 90.537795][ T8010] futex_hash_prctl+0x1f4/0x650 [ 90.537821][ T8010] __do_sys_prctl+0x171f/0x24c0 [ 90.537838][ T8010] ? __pfx___do_sys_prctl+0x10/0x10 [ 90.537859][ T8010] do_syscall_64+0xcd/0x4c0 [ 90.537885][ T8010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.537903][ T8010] RIP: 0033:0x7f65acf8e929 [ 90.537917][ T8010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.537934][ T8010] RSP: 002b:00007f65aadd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 90.537950][ T8010] RAX: ffffffffffffffda RBX: 00007f65ad1b6080 RCX: 00007f65acf8e929 [ 90.537962][ T8010] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 90.537972][ T8010] RBP: 00007f65ad010b39 R08: 0000000000000000 R09: 0000000000000000 [ 90.537983][ T8010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.537993][ T8010] R13: 0000000000000001 R14: 00007f65ad1b6080 R15: 00007ffc618a31d8 [ 90.538010][ T8010] [ 90.538016][ T8010] [ 90.618102][ T8010] Allocated by task 8009: [ 90.619406][ T8010] kasan_save_stack+0x33/0x60 [ 90.620830][ T8010] kasan_save_track+0x14/0x30 [ 90.622255][ T8010] __kasan_kmalloc+0xaa/0xb0 [ 90.623669][ T8010] __kvmalloc_node_noprof+0x27b/0x620 [ 90.625314][ T8010] futex_hash_allocate+0x49d/0xf00 [ 90.626869][ T8010] futex_hash_prctl+0x1f4/0x650 [ 90.628422][ T8010] __do_sys_prctl+0x171f/0x24c0 [ 90.629904][ T8010] do_syscall_64+0xcd/0x4c0 [ 90.631400][ T8010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.633172][ T8010] [ 90.633928][ T8010] The buggy address belongs to the object at ffff88805ed7ae00 [ 90.633928][ T8010] which belongs to the cache kmalloc-cg-64 of size 64 [ 90.638120][ T8010] The buggy address is located 32 bytes to the right of [ 90.638120][ T8010] allocated 64-byte region [ffff88805ed7ae00, ffff88805ed7ae40) [ 90.642375][ T8010] [ 90.643168][ T8010] The buggy address belongs to the physical page: [ 90.645082][ T8010] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5ed7a [ 90.647736][ T8010] memcg:ffff88803b76d201 [ 90.649064][ T8010] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 90.651334][ T8010] page_type: f5(slab) [ 90.652542][ T8010] raw: 00fff00000000000 ffff88801b849a40 ffffea00014d9dc0 0000000000000005 [ 90.655167][ T8010] raw: 0000000000000000 0000000080200020 00000000f5000000 ffff88803b76d201 [ 90.657731][ T8010] page dumped because: kasan: bad access detected [ 90.659733][ T8010] page_owner tracks the page as allocated [ 90.661504][ T8010] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7772, tgid 7771 (syz.1.533), ts 86834203444, free_ts 86649698161 [ 90.667157][ T8010] post_alloc_hook+0x1c0/0x230 [ 90.668534][ T8010] get_page_from_freelist+0x1321/0x3890 [ 90.670271][ T8010] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 90.672094][ T8010] alloc_pages_mpol+0x1fb/0x550 [ 90.673619][ T8010] new_slab+0x23b/0x330 [ 90.674924][ T8010] ___slab_alloc+0xd9c/0x1940 [ 90.676391][ T8010] __slab_alloc.constprop.0+0x56/0xb0 [ 90.678092][ T8010] __kmalloc_cache_noprof+0xfb/0x3e0 [ 90.679807][ T8010] ovs_ct_limit_cmd_set+0x30a/0xa90 [ 90.681478][ T8010] genl_family_rcv_msg_doit+0x209/0x2f0 [ 90.683169][ T8010] genl_rcv_msg+0x55c/0x800 [ 90.684550][ T8010] netlink_rcv_skb+0x158/0x420 [ 90.686039][ T8010] genl_rcv+0x28/0x40 [ 90.687268][ T8010] netlink_unicast+0x53a/0x7f0 [ 90.688783][ T8010] netlink_sendmsg+0x8d1/0xdd0 [ 90.690293][ T8010] ____sys_sendmsg+0xa95/0xc70 [ 90.691786][ T8010] page last free pid 7758 tgid 7757 stack trace: [ 90.693710][ T8010] __free_frozen_pages+0x7fe/0x1180 [ 90.695322][ T8010] vfree+0x1fd/0xb50 [ 90.696525][ T8010] hash_ip6_destroy+0x90/0x2f0 [ 90.698045][ T8010] ip_set_create+0xe46/0x14d0 [ 90.699609][ T8010] nfnetlink_rcv_msg+0x9fc/0x1200 [ 90.701162][ T8010] netlink_rcv_skb+0x158/0x420 [ 90.702645][ T8010] nfnetlink_rcv+0x1b3/0x430 [ 90.704096][ T8010] netlink_unicast+0x53a/0x7f0 [ 90.705585][ T8010] netlink_sendmsg+0x8d1/0xdd0 [ 90.707082][ T8010] ____sys_sendmsg+0xa95/0xc70 [ 90.708621][ T8010] ___sys_sendmsg+0x134/0x1d0 [ 90.710093][ T8010] __sys_sendmsg+0x16d/0x220 [ 90.711504][ T8010] do_syscall_64+0xcd/0x4c0 [ 90.712891][ T8010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.714648][ T8010] [ 90.715396][ T8010] Memory state around the buggy address: [ 90.717046][ T8010] ffff88805ed7ad00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 90.719425][ T8010] ffff88805ed7ad80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 90.721746][ T8010] >ffff88805ed7ae00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 90.724107][ T8010] ^ [ 90.726221][ T8010] ffff88805ed7ae80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 90.728564][ T8010] ffff88805ed7af00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 90.731009][ T8010] ================================================================== [ 90.733932][ T8010] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 90.736102][ T8010] CPU: 1 UID: 0 PID: 8010 Comm: syz.3.594 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 90.739619][ T8010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.742777][ T8010] Call Trace: [ 90.743851][ T8010] [ 90.744755][ T8010] dump_stack_lvl+0x3d/0x1f0 [ 90.746208][ T8010] panic+0x71c/0x800 [ 90.747426][ T8010] ? __pfx_panic+0x10/0x10 [ 90.748853][ T8010] ? irqentry_exit+0x3b/0x90 [ 90.750266][ T8010] ? lockdep_hardirqs_on+0x7c/0x110 [ 90.751808][ T8010] ? _raw_spin_lock+0x2e/0x40 [ 90.753279][ T8010] ? check_panic_on_warn+0x1f/0xb0 [ 90.754859][ T8010] ? _raw_spin_lock+0x2e/0x40 [ 90.756253][ T8010] check_panic_on_warn+0xab/0xb0 [ 90.757707][ T8010] end_report+0x107/0x170 [ 90.759050][ T8010] kasan_report+0xee/0x110 [ 90.760394][ T8010] ? _raw_spin_lock+0x2e/0x40 [ 90.761809][ T8010] ? _raw_spin_lock+0x2e/0x40 [ 90.763359][ T8010] __kasan_check_byte+0x36/0x50 [ 90.764839][ T8010] lock_acquire+0xfc/0x350 [ 90.766168][ T8010] ? __pfx___mutex_lock+0x10/0x10 [ 90.767706][ T8010] _raw_spin_lock+0x2e/0x40 [ 90.769107][ T8010] ? __futex_pivot_hash+0x1dd/0x540 [ 90.770681][ T8010] __futex_pivot_hash+0x1dd/0x540 [ 90.772214][ T8010] futex_hash_allocate+0xad1/0xf00 [ 90.773803][ T8010] ? __pfx_futex_hash_allocate+0x10/0x10 [ 90.775641][ T8010] ? __pfx_var_wake_function+0x10/0x10 [ 90.777447][ T8010] ? cap_task_prctl+0x2af/0xa80 [ 90.779016][ T8010] ? static_key_count+0x5a/0x70 [ 90.780521][ T8010] futex_hash_prctl+0x1f4/0x650 [ 90.782066][ T8010] __do_sys_prctl+0x171f/0x24c0 [ 90.783538][ T8010] ? __pfx___do_sys_prctl+0x10/0x10 [ 90.785134][ T8010] do_syscall_64+0xcd/0x4c0 [ 90.786531][ T8010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.788385][ T8010] RIP: 0033:0x7f65acf8e929 [ 90.789755][ T8010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.796193][ T8010] RSP: 002b:00007f65aadd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 90.799030][ T8010] RAX: ffffffffffffffda RBX: 00007f65ad1b6080 RCX: 00007f65acf8e929 [ 90.801433][ T8010] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 90.803718][ T8010] RBP: 00007f65ad010b39 R08: 0000000000000000 R09: 0000000000000000 [ 90.806049][ T8010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.808547][ T8010] R13: 0000000000000001 R14: 00007f65ad1b6080 R15: 00007ffc618a31d8 [ 90.811081][ T8010] [ 90.812474][ T8010] Kernel Offset: disabled [ 90.813768][ T8010] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:05:21 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88805ee5a440 RCX=ffffc9000e1d651c RDX=0000000000000000 RSI=ffffffff8ddf4f5b RDI=ffff88805ee5a888 RBP=ffff88805ee5a440 RSP=ffffc9000e1d6528 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=00000000000156fc R12=ffff88805ee5a440 R13=ffffc9000e1d65c8 R14=ffffc9000e1d7d18 R15=ffffc9000e1d65fc RIP=ffffffff81a22c47 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6753000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f65aadd5d58 CR3=000000005edaf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ad011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ad011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ad011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ad011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ad011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ad011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ad184488 00007f65ad184480 00007f65ad184478 00007f65ad184450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65adced100 00007f65ad184440 00007f65ad180004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ad184498 00007f65ad184490 00007f65ad184488 00007f65ad184480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b8b95 RDI=ffffffff9b087320 RBP=ffffffff9b0872e0 RSP=ffffc9000e5076a8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000061 R14=ffffffff9b0872e0 R15=ffffffff855b8b30 RIP=ffffffff855b8bbf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f65aadd56c0 ffffffff 00c00000 GS =0000 ffff8880d6853000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f65aadd4f98 CR3=0000000033c70000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ad011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ad011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ad011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ad011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ad011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ad011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ad184488 00007f65ad184480 00007f65ad184478 00007f65ad184450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65adced100 00007f65ad184440 00007f65ad184458 00007f65ad1844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65ad184498 00007f65ad184490 00007f65ad184488 00007f65ad184480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a542060 RCX=ffffffff81b0005d RDX=ffff8880223aa440 RSI=ffffffff81b00039 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc90004345b08 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed100d4a840d R15=ffff88806a63b580 RIP=ffffffff81b0003b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6953000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2e91eff8 CR3=00000000296e1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001000800000005 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15c3a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15c3a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15c3a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15c3a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15c3a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15c3a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15c3b84488 00007f15c3b84480 00007f15c3b84478 00007f15c3b84450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15c46ed100 00007f15c3b84440 00007f15c3b80004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15c3b84498 00007f15c3b84490 00007f15c3b84488 00007f15c3b84480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88810c9c13d0 RCX=ffffffff8219788d RDX=ffff88801eeac880 RSI=000000000000007a RDI=00000000000001ff RBP=ffffea0004327040 RSP=ffffc900045259e0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=000000000000007a R13=dffffc0000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81bc1778 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000005ed61000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc710e11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc710e11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc710e11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc710e11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc710e11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc710e11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000031647261632f 6972642f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000012475142400c 4a51470c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000