last executing test programs: 19.341808044s ago: executing program 0 (id=102): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) pread64(0xffffffffffffffff, &(0x7f0000000240)=""/182, 0xb6, 0x7fc9) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x2000) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x12) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/10], 0xa) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x2cc, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x166}]}]}, @TIPC_NLA_NODE={0xcc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "960914b8dde01f29fe3d1551184250587455a1283891b6e7"}}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "1eb534fdad18aba43a4d76e3ca2a02027024d07fcb37f878e6d2455522714a"}}, @TIPC_NLA_NODE_ID={0x1e, 0x3, "e0f0f03e2958c222429d3b47452d9e18dfc89e733751a93b7362"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "c91174b20e9bf3a924d53dc97b22f88eb276c8b170ebcb66dba2ecf69634d616ee68a7"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "0e43a65ec980ef6dc71529d9535975f1518f3f9f17cf8464"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5b6e}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "cb1f46d5336969c3931626a5538bf4cfed0263316acf956d"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x80}, 0x80) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @link_local}]}) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) ioctl$CDROMEJECT(r4, 0x5309) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) fremovexattr(r5, &(0x7f0000000140)=@known='security.apparmor\x00') r6 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x4e21, 0x2, 0x4e20, 0x4, 0x2, 0x80, 0xa0, 0xff, 0x0, r6}, {0x8, 0x9, 0x8000000000000000, 0x2, 0x6, 0x80000000, 0x6, 0xb3}, {0x8000000000000000, 0x1, 0xffffffffffffffff, 0x5}, 0x0, 0x6e6bbe, 0x3, 0x1, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d2, 0x32}, 0xae07187dc71be152, @in=@empty, 0x3501, 0x4, 0x0, 0xf, 0x3, 0x55646d97, 0x4}}, 0xe8) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000100)=0x4) 19.28304194s ago: executing program 0 (id=104): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000200fdffffff8100000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802f7ffff000000060066008e88000024003300"], 0x54}}, 0x0) 19.279100954s ago: executing program 0 (id=107): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000000000000000020000000000000000010c000c8008005080ff2eeacd0222030021000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000180)=0x6, 0x12) r5 = socket$kcm(0x2, 0xa, 0x2) socket(0x1, 0x800, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x300}, {}]}}) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRES8=r5, @ANYRES16=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRESDEC=r2], 0x15) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="54010000100013070000000000000015ac1414bb00000000000009000000000000000001000000000000000000000000000000090000fffe0a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1e0001000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000003000000000000000200000000000000ff7f000000000000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004000300000000000000e000000100"/268], 0x154}}, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=&(0x7f0000000040)}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r8) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="01326265cef516002bbd7000ffdbdf2504000000"], 0x14}}, 0x44810) r10 = dup(r2) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) mq_getsetattr(r0, &(0x7f0000000080)={0x8, 0x5, 0xfffffffffffffff9, 0xffffffff}, &(0x7f0000000140)) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r12 = socket(0x10, 0x3, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0xc7c, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r13, {0x4, 0x9}, {}, {0x1fff2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc50, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_pedit={0x30, 0x13, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_BPF_POLICE={0xc10, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x400000, 0x9, 0x40, 0xe, 0x7f, 0x7, 0x2, 0x0, 0x40, 0x4, 0x1, 0x1, 0x8, 0x121b, 0xffffffff, 0x8, 0x2d85, 0x8000, 0x1, 0x7, 0x0, 0x8000, 0x2, 0x0, 0x8183, 0x7, 0xc7, 0x5, 0x3, 0x50, 0x1, 0x2, 0x1ff, 0x3, 0xfffffbff, 0x5, 0x0, 0xff, 0x4, 0x6, 0x4, 0x1, 0x9, 0x7, 0x400, 0x7f, 0x4, 0x4, 0x1, 0xd1e, 0xd, 0x8, 0x2, 0x5, 0x5, 0x90f1, 0x6, 0xfffffffc, 0x2, 0x139b, 0xfffffffa, 0x2, 0x10000, 0x3, 0xad44, 0x6, 0x2dd1, 0x800000, 0x800, 0x40000, 0x1, 0xfffffff7, 0xfffffffa, 0xff, 0xffff9a10, 0xff, 0x49b3, 0x8, 0x1, 0x8, 0x10000, 0x5, 0x0, 0x800, 0x572e, 0x5, 0x101, 0x3, 0x80000001, 0x3ff, 0x2, 0xe33c, 0x5cc0, 0x2, 0x3, 0x1000, 0x8e5, 0x8, 0x9, 0x5, 0x200, 0x74, 0x9, 0x4, 0x0, 0x1, 0xd03, 0x6, 0x200, 0x8001, 0x7, 0x5, 0x800, 0x3, 0xfffffffa, 0x8, 0x1, 0x7fffffff, 0xfffffff8, 0xb, 0x3, 0x5, 0x7, 0x9, 0x2, 0x800, 0x7d18a6b7, 0x8, 0x0, 0x1, 0xffff, 0x10001, 0x0, 0x8000, 0x10000, 0x5, 0x0, 0x2, 0x800, 0x7, 0x7, 0x5, 0xc9b2, 0x1, 0xa, 0x7, 0x0, 0x6, 0x0, 0xe, 0x6, 0xc5, 0x800, 0x10000, 0x7, 0x3, 0x5, 0xffff7fff, 0x6, 0x3, 0x80000000, 0xfffffff9, 0x0, 0x1, 0xff, 0x1860, 0x2, 0x1ff, 0xa, 0xd, 0x7ff, 0x2, 0xfffffffb, 0x7, 0x4a2, 0x5, 0x3b, 0x7fffffff, 0x5, 0x7, 0x7f, 0xffffffff, 0x5, 0xc5, 0x5, 0x10001, 0xe3de, 0x6, 0x6, 0x3, 0x10000, 0x2, 0x8, 0x5, 0x100, 0x7, 0x2, 0xb, 0xffff, 0x6, 0x7, 0xffff0001, 0x2, 0x4, 0x8, 0x81, 0xb, 0xa, 0x10000, 0x1, 0x10001, 0x4, 0x9, 0x1, 0x8, 0xae5a, 0x0, 0x8, 0x8, 0x1, 0x40, 0x4, 0x5b4cd5c1, 0x4, 0x3, 0x7, 0xb, 0x14, 0x1, 0xfffffff2, 0x3, 0x4, 0x33, 0x7, 0x8, 0x40, 0xffffffff, 0x100, 0x1, 0x4, 0xf, 0xba0, 0x1, 0x93, 0x9e, 0xc0000, 0x6, 0x9, 0xffffffff, 0x71cf, 0x5, 0xaed, 0x6, 0x0, 0xf11, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0xd, 0x10, 0x2, 0x0, 0x3ff, 0x2, 0x4, 0x7d, 0x4, 0xa00, 0x1, 0xa, 0x2, 0x7fffffff, 0xff, 0xfffff800, 0x9, 0xb, 0xf, 0x400, 0x5, 0x0, 0xcd7, 0x6, 0x1, 0x800, 0x7fffffff, 0x7, 0x8, 0x2, 0x6, 0x1, 0xc887, 0x0, 0x10000000, 0xf3cb, 0x7, 0x0, 0x9, 0xfffffbff, 0x2, 0x2, 0xffc00, 0x5, 0x1, 0x5, 0x3, 0xe9fd, 0x2, 0x0, 0x3, 0xfffffffc, 0x6, 0x9, 0x4, 0x9, 0x6, 0x6, 0xa, 0x5, 0x9, 0x4, 0x3, 0x688, 0xd1, 0xffffffff, 0xda, 0x6, 0xfffffa32, 0x7, 0x1, 0x6, 0x6, 0x5, 0xd, 0x81, 0x3, 0x4, 0x101, 0x80, 0x10000, 0x7, 0x2, 0x8, 0x0, 0x4, 0x7, 0x4, 0x8, 0x79, 0x401, 0x0, 0x7, 0x9, 0x0, 0x20000004, 0x2, 0xb, 0x4, 0x72, 0x1000, 0x80000001, 0x3, 0x8, 0x2, 0x8, 0x2, 0xe, 0xf68, 0x5, 0x80000000, 0x0, 0x1, 0xffffff7f, 0x6, 0xd75, 0x5, 0x3, 0x4, 0x7, 0x1b, 0x7, 0x0, 0x5, 0xe8, 0x7, 0x1, 0x9, 0x7, 0xff, 0x0, 0x9, 0xfffffff7, 0x17, 0x1, 0x81, 0x1, 0xfa, 0x10000, 0x2, 0x8, 0x8cd, 0x8, 0x6, 0x800, 0x9, 0x8001, 0x4, 0x3d, 0x21e9, 0x9, 0x0, 0x800, 0x3, 0x5, 0xb1e, 0xffffff01, 0xfffffffa, 0x8, 0x6, 0x5, 0x3, 0x8, 0x5, 0x3, 0xd6f4, 0x96b1, 0xa9, 0x4, 0x363, 0x10, 0xfffffffb, 0xf0c, 0x51, 0x9, 0xb, 0x7, 0x2, 0x7, 0x6, 0x2, 0x8, 0x9, 0x1000000, 0x8, 0x7, 0x289, 0x8, 0x2, 0x7, 0x420, 0x3ff, 0x0, 0x0, 0x6, 0x3ff, 0xe45f, 0x2, 0x10001, 0x0, 0x3ff, 0x3, 0x2, 0x1, 0x5c7, 0x2, 0x9, 0xd4a3, 0x8001, 0x5, 0x9, 0x7fffffff, 0x1, 0x8, 0x401, 0x4, 0xffffffff, 0x100, 0xbc1, 0xee, 0x0, 0x5, 0x0, 0x8, 0x7, 0x2, 0xfffffff7, 0x6000, 0x101, 0x7, 0x400, 0xfffff000, 0x2e, 0xe, 0x9, 0x0, 0x1, 0x8, 0x9, 0xb, 0x40000000, 0xfffffffb, 0x1, 0xe, 0x5, 0x101, 0xfffffff7, 0x3, 0x0, 0x80, 0x8, 0x1, 0x200, 0x282, 0x11b, 0xffff8000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x272, 0xdc8, 0x7, 0x9, 0x0, 0x2, 0x200, 0xff, 0x9, 0x3ff, 0x8001, 0x1, 0x0, 0x2, 0x5, 0x400, 0x10, 0x0, 0x2, 0x1, 0x3, 0xffffff80, 0x6, 0x6, 0x5, 0xfff, 0x1000, 0x9, 0x0, 0x4, 0x9, 0x9, 0x3, 0x4, 0x5, 0x8, 0x1000, 0xff, 0x1, 0x6, 0x2, 0x401, 0x8001, 0x7568, 0x81, 0x7, 0x9b8, 0x7, 0x7fffffff, 0x80000000, 0x7, 0x10001, 0x4, 0x4, 0x4, 0x4, 0x6, 0x8, 0xf, 0x3, 0x8, 0x3, 0x4, 0x6, 0x3d2, 0x3, 0x0, 0x7, 0xafd, 0x0, 0x7, 0xd7, 0x2, 0x5, 0x1, 0x36b, 0x800, 0x8, 0x4, 0x9b1, 0x80, 0xa0f, 0x42c6, 0xe8a3, 0x6, 0xffffffec, 0x0, 0xfffffff7, 0x10000, 0x3, 0x1, 0x40, 0x5, 0xeba, 0xfffffffe, 0xffffffff, 0x6, 0x1, 0x1, 0x7, 0x8, 0x7fd, 0x6, 0x60550ac8, 0xff, 0x7, 0x800, 0x7, 0x1, 0x81, 0x2, 0x8, 0x4, 0x4, 0x5, 0xffffffff, 0x7, 0x2, 0xfd6, 0x50d7d05d, 0x2, 0x1ff, 0x6, 0x442f259f, 0x0, 0x4800000, 0xa34c, 0x1, 0xf, 0x103, 0x7, 0x401, 0x3, 0x2, 0x6, 0x6, 0xcf7f, 0xffffff94, 0x8ee, 0x5, 0x79, 0x4, 0x1, 0x4, 0x1, 0xfffffff7, 0x4, 0xffffffeb, 0xafd2, 0x3, 0xfffffffd, 0xfffff001, 0x3, 0x0, 0xc, 0x4, 0xfffff001, 0x40ad550b, 0x6, 0xc32, 0xc1e, 0x5, 0x7, 0xfffffff9, 0x4, 0x200, 0x680e16da, 0x2, 0x5, 0x6, 0x7f, 0x400, 0x400, 0x0, 0x0, 0x3, 0x10000, 0xcbcf, 0x1, 0x80, 0x8, 0xc, 0x2, 0x1, 0x2, 0x0, 0x2, 0x8, 0x4, 0xff, 0x80, 0xffff, 0x3ff, 0x6, 0x0, 0x1000, 0x7fff, 0x6, 0x638, 0x9c, 0x2, 0x1000, 0x6, 0x5, 0x5, 0x0, 0x4, 0x1000, 0x2, 0x1ff, 0xfffffffe, 0xfffffffa, 0xffffffff, 0x6, 0xf, 0x3, 0x80000001, 0xfff, 0x10b, 0x8, 0xc5, 0xfffffffe, 0x19, 0x101, 0x5, 0xffffb7f7, 0x9, 0x9, 0xc45, 0x0, 0x8, 0x2, 0x9, 0x7, 0x1ff, 0xfffffffe, 0x80000001, 0xfffffffc, 0x9, 0x5, 0x1, 0x24, 0x5, 0x9, 0x10001, 0xac1, 0xebeae8b, 0x7, 0x8000, 0x1, 0x3, 0xbb, 0xf, 0xfa9, 0x5]}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}]}}]}, 0xc7c}, 0x1, 0x0, 0x0, 0x804}, 0x48c0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0xfe}, @raw32}], 0x1c) 19.167025372s ago: executing program 0 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001000000000000000003000085"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a010100000000000000000200ffffffff0200730b00000000000000000440000000000900010073797a30000000000800034000000008140000001100010000000000000000000000000a"], 0x64}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='afs_volume\x00', r0, 0x0, 0x8000000000000}, 0x18) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7577, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={0x0, r3}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a0102000000000000000001000000090001"], 0xd8}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000101f0000001a40ba1c768a63684d58bbaaa7d20000ac05a330d49d9647a6bdc05629f8a26a004144676cdff9cdbabe34610fba229b6b8cd1832187b514a6c4cc1d4691ac371e48f2d69f43ffe547ec4b651e8e56c65c6be4d1"]) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x402ec2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) r7 = getpid() syz_pidfd_open(r7, 0x0) 19.063618011s ago: executing program 0 (id=109): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000090000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 18.845429529s ago: executing program 0 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x62881, 0x19d) write(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000000)="36f2f00fb074000f22c164f0fe8c984d66b9800000c00f326635000400000f300f79aec6960f01c4ea4c006c00ba4300b0ceee2626f087bafaff36660f388008", 0x40}], 0x1, 0x34, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x2021, 0x0, 0x1}, 0x18, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0xb094, 0x40}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) landlock_restrict_self(0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001080), 0x88000, 0x0) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f00000011c0)={0x4, 0x1, &(0x7f00000010c0)=[0xf54f], &(0x7f0000001100), &(0x7f0000001140), &(0x7f0000001180)}) landlock_restrict_self(0xffffffffffffffff, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYRES8=r5, @ANYRESHEX=r2, @ANYBLOB="0829b2d6aee83858f7eb86fc0ccab6000a", @ANYBLOB="00000000000000002400128009000100697069700000000014000280060010000000000008000100d6d3dc662440f28646ef4cf963e9f45bdb8a2559949585ebc2bf01b85fe226054124b8d42bcfd2f9b82de0bf2192c3e6f3ca3f85d89c4efdd73ab5044b2b6efd6bd5e22eaeb00425d61b", @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4008010}, 0x40) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x9c6b369adb4891b9}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x4c, 0xa, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 18.82748114s ago: executing program 32 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x62881, 0x19d) write(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000000)="36f2f00fb074000f22c164f0fe8c984d66b9800000c00f326635000400000f300f79aec6960f01c4ea4c006c00ba4300b0ceee2626f087bafaff36660f388008", 0x40}], 0x1, 0x34, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x2021, 0x0, 0x1}, 0x18, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0xb094, 0x40}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) landlock_restrict_self(0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001080), 0x88000, 0x0) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f00000011c0)={0x4, 0x1, &(0x7f00000010c0)=[0xf54f], &(0x7f0000001100), &(0x7f0000001140), &(0x7f0000001180)}) landlock_restrict_self(0xffffffffffffffff, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYRES8=r5, @ANYRESHEX=r2, @ANYBLOB="0829b2d6aee83858f7eb86fc0ccab6000a", @ANYBLOB="00000000000000002400128009000100697069700000000014000280060010000000000008000100d6d3dc662440f28646ef4cf963e9f45bdb8a2559949585ebc2bf01b85fe226054124b8d42bcfd2f9b82de0bf2192c3e6f3ca3f85d89c4efdd73ab5044b2b6efd6bd5e22eaeb00425d61b", @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4008010}, 0x40) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x9c6b369adb4891b9}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x4c, 0xa, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 16.364526128s ago: executing program 1 (id=135): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018010000", @ANYRES32, @ANYBLOB="00000000000b0000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 16.364033203s ago: executing program 1 (id=136): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$ethtool(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x1c, r4, 0xaaa81db43af9b3db, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000200fdffffff8100000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802f7ffff000000060066008e88000024003300"], 0x54}}, 0x0) 16.266589442s ago: executing program 1 (id=139): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) r2 = socket(0x2, 0x80805, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='generic_add_lease\x00', r3}, 0x18) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0xe8) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='hpfs\x00', 0x11, 0x0) (async) dup2(r4, r0) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@dellink={0x28, 0x11, 0x101, 0x70bd25, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x1ff}]}, 0x28}}, 0x0) (async) sendmmsg$inet(r2, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x17, &(0x7f0000000200)=@sack_info={r1}, 0xc) (async) syz_emit_ethernet(0xf3, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x2f, 0x4, 0x1, 0x7, 0xe5, 0x67, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @broadcast, {[@cipso={0x86, 0x40, 0xffffffffffffffff, [{0x6, 0xc, "0fc724444304d1d0ce91"}, {0x2, 0x9, "92e843c117f443"}, {0x6, 0x3, "dd"}, {0x1, 0x3, "a5"}, {0x5, 0x12, "50be5438a6540000600000000006e511"}, {0x5, 0xd, "3fd41bbc0bacd028fd7a04"}]}, @rr={0x7, 0xf, 0x21, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @local]}, @noop, @timestamp={0x44, 0x24, 0xfd, 0x0, 0x5, [0x35, 0x2, 0x401, 0x0, 0x2, 0x10001, 0x8, 0xd1]}, @timestamp_prespec={0x44, 0x2c, 0xc1, 0x3, 0xd, [{@private=0xa010101, 0x4}, {@private=0xa010100, 0x101}, {@multicast1, 0x8000}, {@multicast2, 0x8e3c}, {@rand_addr=0x64010100, 0x1}]}, @lsrr={0x83, 0x7, 0x47, [@broadcast]}, @end]}}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x5, "7733e22c7ffdc6f1f2f5e04a5caae84993d39fa97d43ee5ee9a89ca9539ddb2c0c"}}}}}, 0x0) 16.26614746s ago: executing program 1 (id=140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5400f0ff", @ANYRES16=r1, @ANYBLOB="010000000200fdffffff8100000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802f7ffff000000060066008e88000024003300"], 0x54}}, 0x0) 16.197981142s ago: executing program 1 (id=142): r0 = io_uring_setup(0x67bb, &(0x7f0000000040)={0x0, 0x1, 0x2, 0x2, 0x30d}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x3ff, 0xfa64}) (async) io_uring_enter(r0, 0x800000, 0x2, 0xf, &(0x7f0000000000)={[0x2]}, 0x18) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000280)={0x1f, @fixed}, 0x8) (async) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000040), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r7, 0x3, r2, 0x200}) 16.197748437s ago: executing program 1 (id=143): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000180)="580000001500192340834b8004098c560211820fffff5bab4e210000000058006f54ca0e67512df1e98b3bc2941f640094f96a0325010ebc000000000014008000f0fffeffe809004000fff5dd0000000400020008000391", 0x58}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='coredump_filter\x00') r3 = socket$inet6_dccp(0xa, 0x6, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x143000) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) write$binfmt_script(r5, 0x0, 0x0) close_range(r4, r5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x128, 0xc8, 0x8, 0x0, 0x5803, 0x260, 0x2e8, 0x2e8, 0x260, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {0xff}, {}, 0x0, 0x0, 0x5, 0x2a}, 0x0, 0x108, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@owner={{0x38}, {0x0, 0x0, 0xee00, 0x0, 0x4, 0x7}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xff, 0x2, "df4368ef17832f9bd6f7779d5e7a00c9bbd450da15695726c4b4ea4cd2aa"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000400)=""/216, 0xd8}, {&(0x7f0000000500)=""/221, 0xdd}, {&(0x7f0000000080)=""/126, 0x7e}, {&(0x7f0000000600)=""/230, 0xe6}, {&(0x7f0000000700)=""/184, 0xb8}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x7, 0xfffffffd, 0x1) 1.285836802s ago: executing program 33 (id=143): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000180)="580000001500192340834b8004098c560211820fffff5bab4e210000000058006f54ca0e67512df1e98b3bc2941f640094f96a0325010ebc000000000014008000f0fffeffe809004000fff5dd0000000400020008000391", 0x58}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='coredump_filter\x00') r3 = socket$inet6_dccp(0xa, 0x6, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x143000) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) write$binfmt_script(r5, 0x0, 0x0) close_range(r4, r5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x128, 0xc8, 0x8, 0x0, 0x5803, 0x260, 0x2e8, 0x2e8, 0x260, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {0xff}, {}, 0x0, 0x0, 0x5, 0x2a}, 0x0, 0x108, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@owner={{0x38}, {0x0, 0x0, 0xee00, 0x0, 0x4, 0x7}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xff, 0x2, "df4368ef17832f9bd6f7779d5e7a00c9bbd450da15695726c4b4ea4cd2aa"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000400)=""/216, 0xd8}, {&(0x7f0000000500)=""/221, 0xdd}, {&(0x7f0000000080)=""/126, 0x7e}, {&(0x7f0000000600)=""/230, 0xe6}, {&(0x7f0000000700)=""/184, 0xb8}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x7, 0xfffffffd, 0x1) 1.032381187s ago: executing program 3 (id=332): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='logfs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000cc0)={0x2020}, 0x2020) 1.031528694s ago: executing program 3 (id=334): syz_open_dev$vim2m(&(0x7f0000000080), 0x20001, 0x2) syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x89}], 0x1, 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x56185c2d, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0xffffffff, 0x0, 0x54}, 0x9c) socketpair(0x15, 0x80000, 0x3, &(0x7f0000000140)={0xffffffffffffffff}) socket$vsock_stream(0x28, 0x1, 0x0) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r5 = memfd_secret(0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r7) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r8, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040090) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)={0x300, r6, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}], @NL80211_ATTR_FRAME={0x28e, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2}, @device_b, @device_b, @from_mac=@device_b, {0x0, 0x1}}, @void, @void, @void, @void, @void, [{0xdd, 0x45, "072d2424ec0cf6b04d0635b89d6e579b975b64331515cd53ab03d4dfa0bc4a6e802275e0f2c84859423b57659a760bba44b4575fa12db4b4c937055b1bd168f0bcaaf23bf1"}, {0xdd, 0xad, "c57ca53e712696dbd3ee1be0af5f5883ab8ee7a4a50c71591866d7ade06391486438eacfbf3ec07b2daa4adc7e1c237b18ecedb610a3f26ce43ee01377a027d5b33f9cf2ecc51c567b0baa4ce028863571d92c78c8c8db312f8f536091031fce9889f791e791e448616b20a7f71ae97e87fc56953c3cab3737edfc4b7a2b2a452c0f551df70a115133f1fcdd9666edf1ff1a9f1c80007f3d291d3c27e84cb5781ba2d539c7d27a43cba2d183d3"}, {0xdd, 0x18, "664909a4411ebfc41858321f6bb99f5fb98bd421a935827b"}, {0xdd, 0x87, "ff15b268288d4e182c3a61a87443eb5080bcf28eeb8f185883f9c61b575eda3309def8c7fc52804567c79493cff0f576aa13f188b8e517a1df014ef0492288dcf146a3326f8cd640012ba07b927fa63cf58d321a6f6b109e740c9279c657727f73b4d6b73b833f44f179d85b4c4cbdc411ecd1cfb09e99c51749f2329aa0e89a4a295f4d3d6e24"}, {0xdd, 0xd7, "9a50cf74c1d7c7e1e01397b883e2239296cca83b56f2e04845f8c84e383018d2d5b9adca6f12d3834010884e49305c9651d873f9759c5e004579edf7e6ce942284e50ff1a63f9e4c7a4c28d3dde0fcb6c04e8668bea5c8023fcebb4feeb5ec458686dbc3cddc3912f5e731531b72182c664d8b0d26be40477466f412a2175aec3a8a658356f3314221fd2e0d4c60529f0d34202da7c51b5ef7289289518af8fb3536b8e868ea32cadf404351881f97486465f77ff64c0f3a41e1c3029557bd03ab75f87746adc8fd3d547f75c28fdd70823c13ede3da52"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0x9]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x300}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)={0x300, r6, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}], @NL80211_ATTR_FRAME={0x28e, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2}, @device_b, @device_b, @from_mac=@device_b, {0x0, 0x1}}, @void, @void, @void, @void, @void, [{0xdd, 0x45, "072d2424ec0cf6b04d0635b89d6e579b975b64331515cd53ab03d4dfa0bc4a6e802275e0f2c84859423b57659a760bba44b4575fa12db4b4c937055b1bd168f0bcaaf23bf1"}, {0xdd, 0xad, "c57ca53e712696dbd3ee1be0af5f5883ab8ee7a4a50c71591866d7ade06391486438eacfbf3ec07b2daa4adc7e1c237b18ecedb610a3f26ce43ee01377a027d5b33f9cf2ecc51c567b0baa4ce028863571d92c78c8c8db312f8f536091031fce9889f791e791e448616b20a7f71ae97e87fc56953c3cab3737edfc4b7a2b2a452c0f551df70a115133f1fcdd9666edf1ff1a9f1c80007f3d291d3c27e84cb5781ba2d539c7d27a43cba2d183d3"}, {0xdd, 0x18, "664909a4411ebfc41858321f6bb99f5fb98bd421a935827b"}, {0xdd, 0x87, "ff15b268288d4e182c3a61a87443eb5080bcf28eeb8f185883f9c61b575eda3309def8c7fc52804567c79493cff0f576aa13f188b8e517a1df014ef0492288dcf146a3326f8cd640012ba07b927fa63cf58d321a6f6b109e740c9279c657727f73b4d6b73b833f44f179d85b4c4cbdc411ecd1cfb09e99c51749f2329aa0e89a4a295f4d3d6e24"}, {0xdd, 0xd7, "9a50cf74c1d7c7e1e01397b883e2239296cca83b56f2e04845f8c84e383018d2d5b9adca6f12d3834010884e49305c9651d873f9759c5e004579edf7e6ce942284e50ff1a63f9e4c7a4c28d3dde0fcb6c04e8668bea5c8023fcebb4feeb5ec458686dbc3cddc3912f5e731531b72182c664d8b0d26be40477466f412a2175aec3a8a658356f3314221fd2e0d4c60529f0d34202da7c51b5ef7289289518af8fb3536b8e868ea32cadf404351881f97486465f77ff64c0f3a41e1c3029557bd03ab75f87746adc8fd3d547f75c28fdd70823c13ede3da52"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0x9]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x300}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000000000)) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000000000)) getpeername$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r10}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) r11 = socket(0x29, 0x1, 0x4000) sendto$inet6(r11, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100006000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 864.888626ms ago: executing program 3 (id=339): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x22100, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x1000, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176673d72656c61746901653a38302d3919"]) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "e4a18560d99f00", 0x800000}) write$sndseq(r3, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000200), &(0x7f0000000240)={'enc=', 'oaep', ' hash=', {'tgr128\x00'}}, 0x0, 0x0) r5 = dup(r2) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@broadcast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local, @private=0xa010100, @random="57330377ba25", @dev={0xac, 0x14, 0x14, 0xff}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'veth0_macvtap\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}}) truncate(&(0x7f0000000000)='./file0\x00', 0x8001) r7 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r7, &(0x7f0000000000)=""/42, 0x2a) getdents64(r7, &(0x7f0000001ec0)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000004c0)={0x400, 0x300, 0x300, 0x0, 0xffffffff, 0x0, 0x0, 0x2000000, {}, {}, {0xffffffff, 0xc}, {0x0, 0x0, 0x8}, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x4, 0x20, 0x0, 0x0, 0x3c, 0x1, 0x0, 0xc}) 783.763392ms ago: executing program 3 (id=342): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r1, 0x0, 0x1, 0x0, 0x8, 0x845ab, 0x124246}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000200)={0x100, r3}, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000280)={0x100, r4}, 0x0) landlock_restrict_self(r2, 0x0) 726.346063ms ago: executing program 3 (id=343): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r0 = io_uring_setup(0x2ffc, &(0x7f0000000340)={0x0, 0x9ac1, 0x4, 0x1, 0x1aa}) syz_io_uring_setup(0x6276, &(0x7f00000003c0)={0x0, 0x315, 0x8000, 0x1, 0x1b9, 0x0, r0}, &(0x7f0000000440), &(0x7f0000000480)) r1 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='timer_start\x00', r3}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34000000c11cc6fe1f933b5e1700e5dabfa926d884c29fad8c18430d3c8514fefd8dd143a398deea4ae8f4c5ebb35f81871b43f82277b574fe9995d4cae5a2f6455c5ed68f", @ANYRES16=r5, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r6, @ANYBLOB="08006b000180000005003400c4000000080026006c090000"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x4080) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000080)=0x3da1) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x7, 0xffffffff, 0x35314142, 0x9, 0x81, 0x6, 0x5, 0xf9a, 0x0, 0x8, 0x0, 0x2}}) clock_adjtime(0x0, &(0x7f0000000000)={0x2, 0x8000000000000001, 0x0, 0xc, 0x100000000000080, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x20000000000000, 0x8, 0xffffbffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x0, 0x0, 0x1, 0x2000, 0xffffffffffffff2e}) syz_open_dev$dmmidi(&(0x7f0000000000), 0x3, 0x111000) syz_open_dev$tty1(0xc, 0x4, 0x1) dup(0xffffffffffffffff) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002340)={0xc, {"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", 0x1000}}, 0x1006) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000100)) syz_clone(0xc3000911, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) readv(r9, &(0x7f0000000000)=[{&(0x7f0000000200)=""/215, 0x7ffff000}], 0x6) 725.229194ms ago: executing program 4 (id=344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000ff", @ANYRES16=r1, @ANYBLOB="010000000200fdffffff8100000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802f7ffff000000060066008e88000024003300"], 0x54}}, 0x0) 687.876201ms ago: executing program 4 (id=346): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$sock(r1, &(0x7f0000000340)={&(0x7f0000000140)=@rc={0x1f, @any, 0x1}, 0x80, &(0x7f0000000300)}, 0x8004) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@filename='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)={0x6, 0x9, 0x2, 0x6ced, 0x3, 0xef, 0x4, 0x5, 0xe}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYRES32=r0]) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 687.578656ms ago: executing program 3 (id=347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf25440000000c00098008000100657468000e2827573a13e9120d2dba9c97ef9fd131963eb62869aad51faf0055bcaa6e8ed6307ce95c70c703e5b89a517c43fc7ccac4450653333bd5b45caac4262aeeaf6f6f70806a9825e0"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80) memfd_create(&(0x7f0000000000)='{#\')!\x00', 0x20000006) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=@newsa={0xf0, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @local}}, {@in=@empty, 0x0, 0x6c}, @in6=@local, {0x0, 0x1}, {0x0, 0x2000000000003}, {}, 0x8000000, 0x0, 0x2}}, 0xf0}}, 0x4040804) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregset(0x4205, r3, 0x204, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getpeername(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vlan0\x00'}) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{0x0}, {&(0x7f00000008c0)=""/224, 0xe0}], 0x2) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0281, 0x0) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r8, 0x0) mincore(&(0x7f0000ff4000/0xc000)=nil, 0xc000, &(0x7f00000007c0)=""/232) write$dsp(r7, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched_retired(r6, 0x0, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r9, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0x8}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff0}, {0x7, 0x0, 0x8, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r10}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000000000002f0095006efa40680000"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 606.189221ms ago: executing program 4 (id=348): write$tun(0xffffffffffffffff, &(0x7f0000000ec0)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x4, 0x20d, 0x66, 0x0, 0x1f, 0x2f, 0x0, @private=0xa010101, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0xfffffffe, {{0x6, 0x1, 0x3, 0x0, 0x1, 0x1, 0x6, 0x4}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x4, {{0x5, 0x2, 0x1, 0x0, 0x0, 0x2, 0x6, 0x6}, 0x2, {0x7, 0x4, 0x3, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "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"}}}}}, 0x21b) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="5800000010001fff000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="0918000000000000300012800b000100697036746e6c000020000280050009000400000014000200fe8000000000000000000000000000bb0800040000"], 0x58}, 0x1, 0x300, 0x0, 0x4004040}, 0x0) 605.964114ms ago: executing program 2 (id=349): r0 = fanotify_init(0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xffff, 0x0, @private1, 0x200000}, 0x1c) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000040)=0x4, 0x4) sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x1, @private2}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000600)=@assoc_value={0x0, 0x1bc}, 0x8) r3 = io_uring_setup(0x7fc5, &(0x7f0000001240)={0x0, 0xfffffffd, 0x0, 0x2, 0x4}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$rds(r6, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/30, 0x1e}], 0x2, 0x0, 0x0, 0x20040045}, 0x40) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fanotify_mark(r0, 0x1, 0x2, r7, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r8, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 537.935231ms ago: executing program 2 (id=350): r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) setresuid(0x0, 0xffffffffffffffff, 0xee00) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_delrule={0x1c, 0x21, 0x300, 0x70bd27, 0x25dfdbfc, {0x2, 0x90, 0x14, 0x7, 0x1, 0x0, 0x0, 0x1, 0x10004}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) setreuid(0x0, r2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x250, 0x268, 0x300, 0x250, 0x268, 0x360, 0x460, 0x460, 0x360, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x24, 0x0, 0x0, 0x5, 0x9, 0x0, 0x18}}}, @common=@frag={{0x30}, {[0x2, 0x4], 0x8, 0x30, 0x4}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x2}}}, {{@ipv6={@private2, @mcast2, [], [], 'vlan0\x00', 'ipvlan0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1a, 0x0, 0x20000000, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000680)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000640)="4b43c641506e109f23cb9174e71330f52e9805ae", 0x14, r7}, 0x68) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000000300)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl1\x00', r8, 0x29, 0x0, 0xfe, 0x2, 0x40, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x97, 0x1, 0x0, 0x4d}}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r10, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x736}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x9fddfdb7ca9bbe72) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', r9, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @mcast2, 0x0, 0x0, 0xfffffffc, 0x5}}) 537.526293ms ago: executing program 4 (id=351): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$vga_arbiter(r2, &(0x7f00000000c0)=@other={'unlock', ' ', 'none'}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x45}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x3c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc8}}, 0x2000000) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000480), 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x10, @private=0xa0100fd}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@mask_cswp={0x58, 0x114, 0x9, {{0x6, 0x2}, &(0x7f00000002c0)=0xfffffffffffffffd, 0x0, 0x4, 0x7fff, 0x3, 0xf, 0x31, 0x2}}], 0x58}, 0x0) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) r6 = socket(0x2a, 0x2, 0x0) accept4$inet6(r6, 0x0, 0x0, 0x80000) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) fcntl$setstatus(r9, 0x4, 0x2c00) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, r8, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xb, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x9}, [@cb_func={0x18, 0x9}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x4}, @alu={0x7, 0x1, 0xd, 0x2, 0x3, 0xc, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @alu={0x4, 0x0, 0xb, 0x6, 0x5, 0x0, 0xfffffffffffffff0}, @ldst={0x1, 0x3, 0x0, 0x0, 0xb, 0xffffffffffffffc0, 0xfffffffffffffffc}]}, &(0x7f0000000300)='GPL\x00', 0x1, 0xbe, &(0x7f00000003c0)=""/190, 0x41100, 0x66, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[r0, r0, r0, r0, r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdd8, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x7fff, 0x62, &(0x7f0000000180)=""/98, 0x41000, 0x1b, '\x00', r4, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x1, 0xfffff000, 0x40}, 0x10, r10, r11, 0x3, &(0x7f00000004c0)=[r0, r0], &(0x7f00000006c0)=[{0x3, 0x2, 0xf, 0xc}, {0x2, 0x1, 0x6, 0x9}, {0x5, 0x3, 0xe, 0x3}], 0x10, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x3}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 468.256634ms ago: executing program 2 (id=352): io_uring_setup(0x3055, &(0x7f00000001c0)={0x0, 0xbaf, 0x846, 0x10000000, 0x1de}) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x50500, 0x0) write$cgroup_subtree(r0, 0x0, 0x9) 468.027567ms ago: executing program 2 (id=353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe0c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 61.898129ms ago: executing program 2 (id=354): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000200fdffffff8100000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802f7ffff000000060066008e88000024003300"], 0x54}}, 0x0) 59.64565ms ago: executing program 4 (id=355): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000001fc0)=ANY=[@ANYBLOB="42000000030000000000000000000000000000000000000021"], 0x42) mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x400008, &(0x7f0000000080)=ANY=[@ANYBLOB='mo']) 124.294µs ago: executing program 2 (id=356): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32) r2 = socket(0x11, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1000, 0x1}) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x800000010d, 0x2, &(0x7f0000000000)="c94e2f1099", 0x1e) (async, rerun: 32) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000000000e1ffff5300000008000300", @ANYRES32=r3], 0x1c}}, 0x0) (async, rerun: 32) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) 0s ago: executing program 4 (id=357): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xec, &(0x7f0000000080)={[{0xe5, 0x4e00, "e692d5307fb533d36c7e3dd4094b6699fa2328e8ea98106145c498eca3a423aa6986c1b19c207bd655625fe3368f49d6ccd45a18ea1b7b2648f6ff45ebe730d260fe784fe53890d43216116bec2db0a9a20b7c359d4bc769d490e71bd460f54b831b375dd06045ebf04ab51025fc74ad027e2fd42a765176ab3b30b827bcb6f5fd86333665027bcf5763ebb133d6fa3e90f2cabda9b089fe8ef11b3773dbb361d3db7bd3307410201be47343533ad62142c8f3bed904daf40798fbba7c1e76b60ebb29452021e05124e67f1f31ce1bdd676b4b0b1bf6c096c57052b354ba82eb968de50672"}]}) kernel console output (not intermixed with test programs): [ 37.996730][ T39] audit: type=1400 audit(1740319728.482:80): avc: denied { write } for pid=5884 comm="sh" path="pipe:[6064]" dev="pipefs" ino=6064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.007181][ T39] audit: type=1400 audit(1740319728.482:81): avc: denied { rlimitinh } for pid=5884 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.013781][ T39] audit: type=1400 audit(1740319728.482:82): avc: denied { siginh } for pid=5884 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.570778][ T39] audit: type=1400 audit(1740319729.062:83): avc: denied { read } for pid=5336 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.577102][ T39] audit: type=1400 audit(1740319729.062:84): avc: denied { append } for pid=5336 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.583616][ T39] audit: type=1400 audit(1740319729.072:85): avc: denied { open } for pid=5336 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.589969][ T39] audit: type=1400 audit(1740319729.072:86): avc: denied { getattr } for pid=5336 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:19278' (ED25519) to the list of known hosts. [ 39.774802][ T39] audit: type=1400 audit(1740319730.272:87): avc: denied { name_bind } for pid=5920 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.647542][ T5923] cgroup: Unknown subsys name 'net' [ 41.814796][ T5923] cgroup: Unknown subsys name 'cpuset' [ 41.818030][ T5923] cgroup: Unknown subsys name 'rlimit' [ 41.971248][ T5931] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.638375][ T5923] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.018651][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 45.018664][ T39] audit: type=1400 audit(1740319735.512:105): avc: denied { execmem } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.212566][ T39] audit: type=1400 audit(1740319735.712:106): avc: denied { create } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.218178][ T39] audit: type=1400 audit(1740319735.712:107): avc: denied { read write } for pid=5937 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.226636][ T39] audit: type=1400 audit(1740319735.712:108): avc: denied { open } for pid=5937 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.237422][ T39] audit: type=1400 audit(1740319735.712:109): avc: denied { ioctl } for pid=5937 comm="syz-executor" path="socket:[2752]" dev="sockfs" ino=2752 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.276608][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.281628][ T5951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.284787][ T5951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.288154][ T5951] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.291313][ T5951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.293109][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.294650][ T5951] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.298123][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.300029][ T5951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.303931][ T5954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.304546][ T5951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.308013][ T5954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.308947][ T5951] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 45.310605][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.311507][ T5954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.311747][ T5952] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 45.311956][ T5952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.314013][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.320231][ T39] audit: type=1400 audit(1740319735.812:110): avc: denied { read } for pid=5940 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.320796][ T5953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.323246][ T67] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 45.324517][ T39] audit: type=1400 audit(1740319735.812:111): avc: denied { open } for pid=5940 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.325089][ T5953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.325911][ T5953] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 45.326019][ T5953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.331023][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.332652][ T39] audit: type=1400 audit(1740319735.812:112): avc: denied { mounton } for pid=5940 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.459787][ T39] audit: type=1400 audit(1740319735.952:113): avc: denied { module_request } for pid=5945 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.513301][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 45.548153][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 45.568104][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 45.615497][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 45.629911][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.632471][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.634644][ T5945] bridge_slave_0: entered allmulticast mode [ 45.636963][ T5945] bridge_slave_0: entered promiscuous mode [ 45.651821][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.654095][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.656217][ T5945] bridge_slave_1: entered allmulticast mode [ 45.658380][ T5945] bridge_slave_1: entered promiscuous mode [ 45.730610][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.733509][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.735637][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.737754][ T5949] bridge_slave_0: entered allmulticast mode [ 45.740020][ T5949] bridge_slave_0: entered promiscuous mode [ 45.744942][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.747094][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.749123][ T5949] bridge_slave_1: entered allmulticast mode [ 45.751585][ T5949] bridge_slave_1: entered promiscuous mode [ 45.767923][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.769970][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.772184][ T5937] bridge_slave_0: entered allmulticast mode [ 45.774426][ T5937] bridge_slave_0: entered promiscuous mode [ 45.778814][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.811409][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.814063][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.816799][ T5937] bridge_slave_1: entered allmulticast mode [ 45.819822][ T5937] bridge_slave_1: entered promiscuous mode [ 45.883036][ T5945] team0: Port device team_slave_0 added [ 45.886470][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.899342][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.902365][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.904451][ T5940] bridge_slave_0: entered allmulticast mode [ 45.906599][ T5940] bridge_slave_0: entered promiscuous mode [ 45.909974][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.913773][ T5945] team0: Port device team_slave_1 added [ 45.917018][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.920186][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.923292][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.925398][ T5940] bridge_slave_1: entered allmulticast mode [ 45.928308][ T5940] bridge_slave_1: entered promiscuous mode [ 45.940465][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.000003][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.002516][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.009944][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.015562][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.018249][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.028528][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.034710][ T5949] team0: Port device team_slave_0 added [ 46.037663][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.041804][ T5937] team0: Port device team_slave_0 added [ 46.047633][ T5937] team0: Port device team_slave_1 added [ 46.050194][ T5949] team0: Port device team_slave_1 added [ 46.054492][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.134468][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.136778][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.145185][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.152741][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.154812][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.162254][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.167641][ T5945] hsr_slave_0: entered promiscuous mode [ 46.169734][ T5945] hsr_slave_1: entered promiscuous mode [ 46.174243][ T5940] team0: Port device team_slave_0 added [ 46.176378][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.178373][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.185902][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.189442][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.191597][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.198768][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.212884][ T5940] team0: Port device team_slave_1 added [ 46.264595][ T5949] hsr_slave_0: entered promiscuous mode [ 46.267506][ T5949] hsr_slave_1: entered promiscuous mode [ 46.269532][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.272179][ T5949] Cannot create hsr debugfs directory [ 46.275129][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.277926][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.287543][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.293705][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.295755][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.303719][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.362950][ T5937] hsr_slave_0: entered promiscuous mode [ 46.365711][ T5937] hsr_slave_1: entered promiscuous mode [ 46.368292][ T5937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.371859][ T5937] Cannot create hsr debugfs directory [ 46.403764][ T5940] hsr_slave_0: entered promiscuous mode [ 46.405693][ T5940] hsr_slave_1: entered promiscuous mode [ 46.407533][ T5940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.409643][ T5940] Cannot create hsr debugfs directory [ 46.578553][ T5945] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.584236][ T5945] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.591300][ T5945] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.596732][ T5945] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.609522][ T5940] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.615254][ T5940] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.619426][ T5940] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.624272][ T5940] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.656791][ T5949] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.661383][ T5949] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.671850][ T5949] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.675476][ T5949] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.694630][ T5937] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.698593][ T5937] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.702507][ T5937] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.707381][ T5937] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.757180][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.777421][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.781244][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.793227][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.795698][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.804665][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.811796][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.813920][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.824372][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.832948][ T3610] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.835103][ T3610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.843366][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.847295][ T3610] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.849398][ T3610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.860125][ T3610] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.862442][ T3610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.867536][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.876918][ T3610] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.879039][ T3610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.899133][ T5940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.910341][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.924555][ T39] audit: type=1400 audit(1740319737.422:114): avc: denied { sys_module } for pid=5940 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 46.925083][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.932776][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.936142][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.938257][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.983303][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.994302][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.036461][ T5945] veth0_vlan: entered promiscuous mode [ 47.044805][ T5940] veth0_vlan: entered promiscuous mode [ 47.052467][ T5945] veth1_vlan: entered promiscuous mode [ 47.056609][ T5940] veth1_vlan: entered promiscuous mode [ 47.064182][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.068985][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.078893][ T5945] veth0_macvtap: entered promiscuous mode [ 47.083270][ T5945] veth1_macvtap: entered promiscuous mode [ 47.107224][ T5940] veth0_macvtap: entered promiscuous mode [ 47.113066][ T5949] veth0_vlan: entered promiscuous mode [ 47.117535][ T5940] veth1_macvtap: entered promiscuous mode [ 47.120842][ T5937] veth0_vlan: entered promiscuous mode [ 47.127811][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.130777][ T5949] veth1_vlan: entered promiscuous mode [ 47.134759][ T5937] veth1_vlan: entered promiscuous mode [ 47.140334][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.145946][ T5945] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.148668][ T5945] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.151687][ T5945] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.154259][ T5945] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.163253][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.166498][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.169990][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.177606][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.182091][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.187265][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.190671][ T5940] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.193498][ T5940] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.196088][ T5940] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.198650][ T5940] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.218373][ T5949] veth0_macvtap: entered promiscuous mode [ 47.231577][ T5949] veth1_macvtap: entered promiscuous mode [ 47.238109][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.242248][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.245174][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.248245][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.252355][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.258289][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.261921][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.264879][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.267996][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.271520][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.275630][ T5937] veth0_macvtap: entered promiscuous mode [ 47.287167][ T5949] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.289980][ T5949] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.293015][ T5949] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.295607][ T5949] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.311678][ T5937] veth1_macvtap: entered promiscuous mode [ 47.318364][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.320817][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.321516][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.324147][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.338570][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.341925][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.345774][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.348990][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.352383][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.355518][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.360253][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.377797][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.378152][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.380136][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.386610][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.389646][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.392662][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.395473][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.398454][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.401656][ T5941] Bluetooth: hci2: command tx timeout [ 47.401661][ T5293] Bluetooth: hci3: command tx timeout [ 47.405202][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.406245][ T67] Bluetooth: hci1: command tx timeout [ 47.411399][ T67] Bluetooth: hci0: command tx timeout [ 47.421678][ T5937] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.425182][ T5937] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.428740][ T5937] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.432881][ T5937] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.438591][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.442228][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.446170][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.448523][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.469938][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.473541][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.503361][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.506675][ T5940] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.507970][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.523737][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.526075][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.587860][ T6010] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 47.736588][ T6022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=6022 comm=syz.1.7 [ 47.744874][ T6022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 47.829973][ T6032] fuse: Bad value for 'user_id' [ 47.831497][ T6032] fuse: Bad value for 'user_id' [ 47.832025][ T6031] fuse: Bad value for 'user_id' [ 47.834425][ T6031] fuse: Bad value for 'user_id' [ 47.838386][ T6032] tipc: Can't bind to reserved service type 2 [ 47.881741][ T6000] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 47.882752][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.940456][ T5944] udevd[5944]: setting mode of /dev/rfcomm68 to 020660 failed: No such file or directory [ 47.943754][ T5944] udevd[5944]: setting owner of /dev/rfcomm68 to uid=0, gid=18 failed: No such file or directory [ 48.056766][ T6000] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 48.059505][ T6000] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.061945][ T6000] usb 8-1: Product: syz [ 48.063267][ T6000] usb 8-1: Manufacturer: syz [ 48.064832][ T6000] usb 8-1: SerialNumber: syz [ 48.068208][ T6000] usb 8-1: config 0 descriptor?? [ 48.277267][ T25] usb 8-1: USB disconnect, device number 2 [ 49.481394][ T5293] Bluetooth: hci3: command tx timeout [ 49.481544][ T5941] Bluetooth: hci2: command tx timeout [ 49.482392][ T67] Bluetooth: hci0: command tx timeout [ 49.881855][ T5941] Bluetooth: hci1: command tx timeout [ 51.561095][ T5941] Bluetooth: hci2: command tx timeout [ 51.561122][ T5293] Bluetooth: hci0: command tx timeout [ 51.571073][ T5293] Bluetooth: hci3: command tx timeout [ 51.962047][ T5293] Bluetooth: hci1: command tx timeout [ 53.641234][ T5293] Bluetooth: hci3: command tx timeout [ 53.641349][ T5941] Bluetooth: hci0: command tx timeout [ 53.641807][ T67] Bluetooth: hci2: command tx timeout [ 61.576890][ T6045] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.583970][ T39] kauditd_printk_skb: 71 callbacks suppressed [ 61.583986][ T39] audit: type=1400 audit(1740319752.082:186): avc: denied { ioctl } for pid=6044 comm="syz.2.17" path="socket:[6952]" dev="sockfs" ino=6952 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.593972][ T6047] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.595342][ T39] audit: type=1400 audit(1740319752.082:187): avc: denied { setopt } for pid=6048 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.595986][ T6050] netlink: 72 bytes leftover after parsing attributes in process `syz.0.15'. [ 61.612465][ T39] audit: type=1400 audit(1740319752.082:188): avc: denied { create } for pid=6049 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.619540][ T39] audit: type=1400 audit(1740319752.082:189): avc: denied { ioctl } for pid=6049 comm="syz.0.15" path="socket:[6955]" dev="sockfs" ino=6955 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.628898][ T39] audit: type=1400 audit(1740319752.092:190): avc: denied { write } for pid=6049 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.636398][ T39] audit: type=1400 audit(1740319752.092:191): avc: denied { nlmsg_write } for pid=6049 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.643932][ T39] audit: type=1400 audit(1740319752.092:192): avc: denied { bind } for pid=6048 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.650672][ T39] audit: type=1400 audit(1740319752.092:193): avc: denied { name_bind } for pid=6048 comm="syz.3.18" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 61.659012][ T39] audit: type=1400 audit(1740319752.092:194): avc: denied { node_bind } for pid=6048 comm="syz.3.18" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 61.673754][ T39] audit: type=1400 audit(1740319752.162:195): avc: denied { map_create } for pid=6048 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 61.738237][ T6047] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16'. [ 61.827605][ T6074] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 61.975156][ T6099] netlink: 'syz.1.30': attribute type 1 has an invalid length. [ 62.085527][ T6110] syz.3.35: attempt to access beyond end of device [ 62.085527][ T6110] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 62.090207][ T6110] XFS (nbd3): SB validate failed with error -5. [ 62.119054][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 62.149740][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 62.151412][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 62.155754][ T6131] netlink: 188 bytes leftover after parsing attributes in process `syz.0.40'. [ 62.158407][ T6131] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 62.321236][ T5981] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 62.376993][ T6143] SELinux: failed to load policy [ 62.390997][ T834] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 62.482912][ T5981] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 62.489793][ T5981] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 62.496506][ T5981] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 62.499794][ T5981] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 62.503992][ T5981] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 62.506714][ T5981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.510972][ T5981] usb 7-1: config 0 descriptor?? [ 62.513138][ T6125] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 62.569269][ T834] usb 8-1: Using ep0 maxpacket: 8 [ 62.575055][ T834] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 62.578884][ T834] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 62.582732][ T834] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 62.586590][ T834] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.593416][ T834] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 62.596931][ T834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.802547][ T834] usb 8-1: GET_CAPABILITIES returned 0 [ 62.804510][ T834] usbtmc 8-1:16.0: can't read capabilities [ 62.914420][ T5981] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.916683][ T5981] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.919762][ T5981] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.922559][ T5981] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.925155][ T5981] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.927283][ T5981] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.930414][ T5981] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.932607][ T5981] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.934666][ T5981] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.936822][ T5981] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.939292][ T5981] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.941974][ T5981] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.944212][ T5981] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.946315][ T5981] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.948978][ T5981] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.951722][ T5981] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 62.961327][ T5981] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 62.975041][ T834] IPVS: starting estimator thread 0... [ 62.998893][ T6110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.002479][ T6110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.011384][ T6110] usbtmc 8-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 63.064043][ T6189] IPVS: using max 35 ests per chain, 84000 per kthread [ 63.112053][ T6125] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=6125 comm=syz.2.39 [ 63.128617][ T834] usb 7-1: USB disconnect, device number 2 [ 63.138741][ T6192] bond1: entered promiscuous mode [ 63.140698][ T6192] bond1: entered allmulticast mode [ 63.143673][ T6192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.209474][ T6043] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.308552][ T6204] netlink: 'syz.1.65': attribute type 1 has an invalid length. [ 63.310791][ T6204] netlink: 'syz.1.65': attribute type 3 has an invalid length. [ 63.313553][ T6204] netlink: 224 bytes leftover after parsing attributes in process `syz.1.65'. [ 63.317036][ T6204] NCSI netlink: No device for ifindex 0 [ 63.369934][ T6043] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.373584][ T6043] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.377892][ T6043] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.383167][ T6043] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.387141][ T6043] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.391956][ T6043] usb 5-1: config 0 descriptor?? [ 63.631407][ T6223] delete_channel: no stack [ 63.689830][ T6043] usbhid 5-1:0.0: can't add hid device: -71 [ 63.691647][ T6043] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 63.694652][ T6043] usb 5-1: USB disconnect, device number 2 [ 63.761080][ T6223] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 63.786599][ T6234] fuse: blksize only supported for fuseblk [ 63.828100][ T6237] netlink: 36 bytes leftover after parsing attributes in process `syz.2.76'. [ 63.897378][ T6239] netlink: 28 bytes leftover after parsing attributes in process `syz.2.77'. [ 63.900453][ T6239] netlink: 28 bytes leftover after parsing attributes in process `syz.2.77'. [ 63.925765][ T6239] kvm: emulating exchange as write [ 64.214967][ T6254] overlay: ./file1 is not a directory [ 64.479941][ T6272] kAFS: No cell specified [ 64.602627][ T6282] IPv4: Oversized IP packet from 127.202.26.0 [ 64.706822][ T6290] capability: warning: `syz.0.96' uses deprecated v2 capabilities in a way that may be insecure [ 64.740532][ T6297] netlink: 'syz.0.98': attribute type 4 has an invalid length. [ 64.745704][ T6297] QAT: failed to copy from user cfg_data. [ 64.748486][ T6299] tmpfs: Bad value for 'mpol' [ 64.750574][ T6299] tmpfs: Bad value for 'mpol' [ 64.752605][ T6299] tmpfs: Bad value for 'mpol' [ 64.755722][ T6299] tmpfs: Bad value for 'mpol' [ 64.757318][ T6299] tmpfs: Bad value for 'mpol' [ 64.758859][ T6299] tmpfs: Bad value for 'mpol' [ 64.760460][ T6299] tmpfs: Bad value for 'mpol' [ 64.762052][ T6299] tmpfs: Bad value for 'mpol' [ 64.765753][ T6299] tmpfs: Bad value for 'mpol' [ 64.767744][ T6299] tmpfs: Bad value for 'mpol' [ 64.769445][ T6299] tmpfs: Bad value for 'mpol' [ 64.771276][ T6299] tmpfs: Bad value for 'mpol' [ 64.773598][ T6299] tmpfs: Bad value for 'mpol' [ 64.775571][ T6299] tmpfs: Bad value for 'mpol' [ 64.777270][ T6299] tmpfs: Bad value for 'mpol' [ 64.778808][ T6299] tmpfs: Bad value for 'mpol' [ 64.780396][ T6299] tmpfs: Bad value for 'mpol' [ 64.782013][ T6299] tmpfs: Bad value for 'mpol' [ 64.783722][ T6299] tmpfs: Bad value for 'mpol' [ 64.785342][ T6299] tmpfs: Bad value for 'mpol' [ 64.786956][ T6299] tmpfs: Bad value for 'mpol' [ 64.788505][ T6299] tmpfs: Bad value for 'mpol' [ 64.790106][ T6299] tmpfs: Bad value for 'mpol' [ 64.792212][ T6299] tmpfs: Bad value for 'mpol' [ 64.794816][ T6299] tmpfs: Bad value for 'mpol' [ 64.796381][ T6299] tmpfs: Bad value for 'mpol' [ 64.797952][ T6299] tmpfs: Bad value for 'mpol' [ 64.799973][ T6299] tmpfs: Bad value for 'mpol' [ 64.801561][ T6299] tmpfs: Bad value for 'mpol' [ 64.803342][ T6299] tmpfs: Bad value for 'mpol' [ 64.804962][ T6299] tmpfs: Bad value for 'mpol' [ 64.806738][ T6299] tmpfs: Bad value for 'mpol' [ 64.808895][ T6299] tmpfs: Bad value for 'mpol' [ 64.811072][ T6299] tmpfs: Bad value for 'mpol' [ 64.813329][ T6299] tmpfs: Bad value for 'mpol' [ 64.815499][ T6299] tmpfs: Bad value for 'mpol' [ 64.817668][ T6299] tmpfs: Bad value for 'mpol' [ 64.819807][ T6299] tmpfs: Bad value for 'mpol' [ 64.821910][ T6299] tmpfs: Bad value for 'mpol' [ 64.824177][ T6299] tmpfs: Bad value for 'mpol' [ 64.826355][ T6299] tmpfs: Bad value for 'mpol' [ 64.828519][ T6299] tmpfs: Bad value for 'mpol' [ 64.830715][ T6299] tmpfs: Bad value for 'mpol' [ 64.833010][ T6299] tmpfs: Bad value for 'mpol' [ 64.835361][ T6299] tmpfs: Bad value for 'mpol' [ 64.837514][ T6299] tmpfs: Bad value for 'mpol' [ 64.839678][ T6299] tmpfs: Bad value for 'mpol' [ 64.841857][ T6299] tmpfs: Bad value for 'mpol' [ 64.844037][ T6299] tmpfs: Bad value for 'mpol' [ 64.846204][ T6299] tmpfs: Bad value for 'mpol' [ 64.848336][ T6299] tmpfs: Bad value for 'mpol' [ 64.850477][ T6299] tmpfs: Bad value for 'mpol' [ 64.852939][ T6299] tmpfs: Bad value for 'mpol' [ 64.855167][ T6299] tmpfs: Bad value for 'mpol' [ 64.857239][ T6299] tmpfs: Bad value for 'mpol' [ 64.858801][ T6299] tmpfs: Bad value for 'mpol' [ 64.860381][ T6299] tmpfs: Bad value for 'mpol' [ 64.862057][ T6299] tmpfs: Bad value for 'mpol' [ 64.863851][ T6299] tmpfs: Bad value for 'mpol' [ 64.865401][ T6299] tmpfs: Bad value for 'mpol' [ 64.867188][ T6299] tmpfs: Bad value for 'mpol' [ 64.868731][ T6299] tmpfs: Bad value for 'mpol' [ 64.870345][ T6299] tmpfs: Bad value for 'mpol' [ 64.872007][ T6299] tmpfs: Bad value for 'mpol' [ 64.873665][ T6299] tmpfs: Bad value for 'mpol' [ 64.958425][ T65] usb 8-1: USB disconnect, device number 3 [ 65.098901][ T6327] program syz.0.108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.102786][ T6327] ======================================================= [ 65.102786][ T6327] WARNING: The mand mount option has been deprecated and [ 65.102786][ T6327] and is ignored by this kernel. Remove the mand [ 65.102786][ T6327] option from the mount to silence this warning. [ 65.102786][ T6327] ======================================================= [ 65.211420][ T834] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 65.337958][ T834] usb 7-1: device descriptor read/64, error -71 [ 65.405580][ T3610] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.458715][ T3610] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.553468][ T3610] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.556300][ T5293] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.560536][ T5293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.563241][ T5293] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.566725][ T5293] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.569625][ T5293] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.574894][ T5293] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.592288][ T834] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 65.613272][ T3610] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.658755][ T6330] chnl_net:caif_netlink_parms(): no params data found [ 65.714174][ T6330] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.716378][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.718860][ T6330] bridge_slave_0: entered allmulticast mode [ 65.721788][ T6330] bridge_slave_0: entered promiscuous mode [ 65.724482][ T6330] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.726567][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.727902][ T834] usb 7-1: device descriptor read/64, error -71 [ 65.728802][ T6330] bridge_slave_1: entered allmulticast mode [ 65.732792][ T6330] bridge_slave_1: entered promiscuous mode [ 65.775420][ T3610] bridge_slave_1: left allmulticast mode [ 65.777360][ T3610] bridge_slave_1: left promiscuous mode [ 65.779885][ T3610] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.788373][ T3610] bridge_slave_0: left allmulticast mode [ 65.790398][ T3610] bridge_slave_0: left promiscuous mode [ 65.792846][ T3610] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.812489][ T6341] netlink: 'syz.1.113': attribute type 10 has an invalid length. [ 65.835282][ T834] usb usb7-port1: attempt power cycle [ 66.022343][ T3610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.028282][ T3610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.032832][ T3610] bond0 (unregistering): Released all slaves [ 66.039303][ T6330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.043499][ T6330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.059484][ T6043] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 66.100514][ T6330] team0: Port device team_slave_0 added [ 66.103112][ T6330] team0: Port device team_slave_1 added [ 66.166928][ T834] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 66.171423][ T6330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.173286][ T6330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.182421][ T6330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.186690][ T834] usb 7-1: device descriptor read/8, error -71 [ 66.188331][ T6330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.191262][ T6330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.200509][ T6330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.233272][ T6043] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 66.235695][ T6043] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.237793][ T6043] usb 8-1: Product: syz [ 66.239052][ T6043] usb 8-1: Manufacturer: syz [ 66.240721][ T6043] usb 8-1: SerialNumber: syz [ 66.259956][ T6043] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 66.283991][ T57] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 66.317392][ T6330] hsr_slave_0: entered promiscuous mode [ 66.319680][ T6330] hsr_slave_1: entered promiscuous mode [ 66.321677][ T6330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.324449][ T6330] Cannot create hsr debugfs directory [ 66.413385][ T3610] hsr_slave_0: left promiscuous mode [ 66.416021][ T3610] hsr_slave_1: left promiscuous mode [ 66.417834][ T3610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.420035][ T3610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.420333][ T834] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 66.427829][ T3610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.431334][ T3610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.442179][ T834] usb 7-1: device descriptor read/8, error -71 [ 66.448160][ T3610] veth1_macvtap: left promiscuous mode [ 66.450225][ T3610] veth0_macvtap: left promiscuous mode [ 66.451897][ T3610] veth1_vlan: left promiscuous mode [ 66.453519][ T3610] veth0_vlan: left promiscuous mode [ 66.489510][ T39] kauditd_printk_skb: 159 callbacks suppressed [ 66.489522][ T39] audit: type=1400 audit(1740319757.101:355): avc: denied { read } for pid=6342 comm="syz.3.114" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 66.494777][ T6043] usb 8-1: USB disconnect, device number 4 [ 66.497984][ T39] audit: type=1400 audit(1740319757.101:356): avc: denied { open } for pid=6342 comm="syz.3.114" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 66.557024][ T834] usb usb7-port1: unable to enumerate USB device [ 66.918554][ T3610] team0 (unregistering): Port device team_slave_1 removed [ 66.973474][ T3610] team0 (unregistering): Port device team_slave_0 removed [ 67.357341][ T57] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 67.359880][ T57] ath9k_htc: Failed to initialize the device [ 67.362582][ T6043] usb 8-1: ath9k_htc: USB layer deinitialized [ 67.475825][ T6330] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.479956][ T6330] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.493198][ T6330] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.503437][ T6330] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.508564][ T39] audit: type=1400 audit(1740319758.135:357): avc: denied { read write } for pid=6387 comm="syz.1.127" name="virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.520199][ T39] audit: type=1400 audit(1740319758.135:358): avc: denied { open } for pid=6387 comm="syz.1.127" path="/dev/virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.559611][ T6388] veth1_macvtap: left promiscuous mode [ 67.561464][ T6388] macsec0: entered allmulticast mode [ 67.567087][ T6388] veth1_macvtap: entered promiscuous mode [ 67.568810][ T6388] veth1_macvtap: entered allmulticast mode [ 67.570622][ T6388] macsec0: left allmulticast mode [ 67.572110][ T6388] veth1_macvtap: left allmulticast mode [ 67.582436][ T5941] Bluetooth: hci2: command tx timeout [ 67.617689][ T6330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.627017][ T6330] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.631996][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.634152][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.640369][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.642448][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.649775][ T6406] Zero length message leads to an empty skb [ 67.668748][ T6330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.729209][ T39] audit: type=1400 audit(1740319758.370:359): avc: denied { name_bind } for pid=6417 comm="syz.1.132" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 67.746646][ T6330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.764755][ T39] audit: type=1400 audit(1740319758.401:360): avc: denied { write } for pid=6417 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 67.850541][ T39] audit: type=1400 audit(1740319758.493:361): avc: denied { mount } for pid=6432 comm="syz.1.134" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.909353][ T6330] veth0_vlan: entered promiscuous mode [ 67.923589][ T6330] veth1_vlan: entered promiscuous mode [ 67.939097][ T6443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 67.942472][ T6443] IPv6: NLM_F_CREATE should be set when creating new route [ 67.952636][ T6330] veth0_macvtap: entered promiscuous mode [ 67.966612][ T6330] veth1_macvtap: entered promiscuous mode [ 67.979566][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.990134][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.993743][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.997349][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.000750][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.004790][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.008940][ T6330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.022079][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.032212][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.035588][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.038752][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.044988][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.048631][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.050138][ T39] audit: type=1400 audit(1740319758.687:362): avc: denied { sqpoll } for pid=6459 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 68.054728][ T6330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.059867][ T39] audit: type=1326 audit(1740319758.698:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.1.142" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6ff8d169 code=0x7fc00000 [ 68.061183][ T6458] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 68.064324][ T6330] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.064370][ T6330] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.064385][ T6330] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.064408][ T6330] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.129187][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.133466][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.160183][ T6471] SELinux: Context system_u:object_r:anacron_exec_t:s0 is not valid (left unmapped). [ 68.163515][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.165579][ T39] audit: type=1400 audit(1740319758.810:364): avc: denied { relabelto } for pid=6470 comm="syz.2.145" name="file0" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:anacron_exec_t:s0" [ 68.168508][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.222904][ T6471] process 'syz.2.145' launched './file0' with NULL argv: empty string added [ 68.275733][ T6480] __nla_validate_parse: 1 callbacks suppressed [ 68.275746][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.111'. [ 68.350794][ T6485] overlayfs: missing 'workdir' [ 68.350846][ T6486] overlayfs: missing 'workdir' [ 68.407182][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'. [ 68.582052][ T6515] netlink: 'syz.4.154': attribute type 2 has an invalid length. [ 68.584366][ T6515] netlink: 'syz.4.154': attribute type 11 has an invalid length. [ 68.586607][ T6515] netlink: 132 bytes leftover after parsing attributes in process `syz.4.154'. [ 68.801890][ T6543] netlink: 68 bytes leftover after parsing attributes in process `syz.4.160'. [ 68.804728][ T6543] netlink: 68 bytes leftover after parsing attributes in process `syz.4.160'. [ 68.807588][ T6543] netlink: 68 bytes leftover after parsing attributes in process `syz.4.160'. [ 68.810162][ T6543] netlink: 68 bytes leftover after parsing attributes in process `syz.4.160'. [ 68.812787][ T6543] netlink: 68 bytes leftover after parsing attributes in process `syz.4.160'. [ 68.816276][ T6543] netlink: 68 bytes leftover after parsing attributes in process `syz.4.160'. [ 68.819698][ T6543] netlink: 68 bytes leftover after parsing attributes in process `syz.4.160'. [ 68.846668][ T6538] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 69.068015][ T6561] 9pnet: Found fid 0 not clunked [ 69.341415][ T6596] sctp: failed to load transform for md5: -4 [ 69.365682][ T25] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 69.380614][ T6606] cgroup: fork rejected by pids controller in /syz3 [ 69.542168][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 69.545000][ T25] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 69.548027][ T25] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 69.551443][ T25] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 69.554497][ T25] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.558507][ T25] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 69.561452][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.591298][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.618389][ T5941] Bluetooth: hci2: command tx timeout [ 69.659804][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.742575][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.749098][ T5293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.756486][ T5293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.760020][ T5293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.775549][ T5293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.780480][ T5293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.783344][ T5293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.786273][ T25] usb 7-1: usb_control_msg returned -71 [ 69.788494][ T25] usbtmc 7-1:16.0: can't read capabilities [ 69.798285][ T25] usb 7-1: USB disconnect, device number 7 [ 69.825540][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.883190][ T6725] netlink: 'syz.2.177': attribute type 10 has an invalid length. [ 69.886575][ T6725] bridge_slave_1: left allmulticast mode [ 69.888251][ T6725] bridge_slave_1: left promiscuous mode [ 69.889947][ T6725] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.896404][ T6725] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 69.951609][ T6719] chnl_net:caif_netlink_parms(): no params data found [ 70.006257][ T11] bridge_slave_1: left allmulticast mode [ 70.007966][ T11] bridge_slave_1: left promiscuous mode [ 70.009705][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.030136][ T11] bridge_slave_0: left allmulticast mode [ 70.032146][ T11] bridge_slave_0: left promiscuous mode [ 70.033836][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.075482][ T6736] ip6t_srh: unknown srh match flags B153 [ 70.079731][ T6736] ip6t_srh: unknown srh match flags B153 [ 70.082075][ T6736] ip6t_srh: unknown srh match flags B153 [ 70.097169][ T6736] ip6t_srh: unknown srh match flags B153 [ 70.100032][ T6736] ip6t_srh: unknown srh match flags B153 [ 70.101777][ T6736] ip6t_srh: unknown srh match flags B153 [ 70.103517][ T6736] ip6t_srh: unknown srh match flags B153 [ 70.105225][ T6736] ip6t_srh: unknown srh match flags B153 [ 70.118889][ T6736] ip6t_srh: unknown srh match flags B153 [ 70.120918][ T6736] ip6t_srh: unknown srh match flags B153 [ 70.446674][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.454926][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.460157][ T11] bond0 (unregistering): Released all slaves [ 70.542024][ T6719] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.545329][ T6719] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.547599][ T6719] bridge_slave_0: entered allmulticast mode [ 70.551762][ T6719] bridge_slave_0: entered promiscuous mode [ 70.587492][ T6719] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.595839][ T6719] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.598096][ T6719] bridge_slave_1: entered allmulticast mode [ 70.609610][ T6719] bridge_slave_1: entered promiscuous mode [ 70.629965][ T6719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.633776][ T6719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.721351][ T6719] team0: Port device team_slave_0 added [ 70.733258][ T6719] team0: Port device team_slave_1 added [ 70.761457][ T6719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.763581][ T6719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.774748][ T6719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.791721][ T6719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.793798][ T6719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.801994][ T6719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.826695][ T11] hsr_slave_0: left promiscuous mode [ 70.835049][ T11] hsr_slave_1: left promiscuous mode [ 70.837037][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.839225][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.846916][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.849501][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.885082][ T11] veth1_macvtap: left promiscuous mode [ 70.886854][ T11] veth0_macvtap: left promiscuous mode [ 70.888518][ T11] veth1_vlan: left promiscuous mode [ 70.890222][ T11] veth0_vlan: left promiscuous mode [ 71.192619][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.196284][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.407505][ T11] team0 (unregistering): Port device team_slave_1 removed [ 71.462983][ T11] team0 (unregistering): Port device team_slave_0 removed [ 71.660709][ T5941] Bluetooth: hci2: command tx timeout [ 71.819637][ T5941] Bluetooth: hci0: command tx timeout [ 71.894383][ T6719] hsr_slave_0: entered promiscuous mode [ 71.896736][ T6719] hsr_slave_1: entered promiscuous mode [ 71.959881][ T6772] netlink: 'syz.4.184': attribute type 12 has an invalid length. [ 71.973384][ T6772] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6772 comm=syz.4.184 [ 71.977574][ T39] kauditd_printk_skb: 33 callbacks suppressed [ 71.977583][ T39] audit: type=1400 audit(1740319762.695:398): avc: denied { read } for pid=6771 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 71.987042][ T6772] netlink: 'syz.4.184': attribute type 11 has an invalid length. [ 72.078146][ T39] audit: type=1400 audit(1740319762.797:399): avc: denied { read } for pid=6781 comm="syz.4.186" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 72.090686][ T39] audit: type=1400 audit(1740319762.797:400): avc: denied { open } for pid=6781 comm="syz.4.186" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 72.119530][ T6787] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 72.121556][ T6787] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 72.132233][ T6787] vhci_hcd vhci_hcd.0: Device attached [ 72.276364][ T39] audit: type=1400 audit(1740319763.000:401): avc: denied { search } for pid=5336 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.387231][ T25] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 72.392022][ T834] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 72.444124][ T6719] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.447681][ T6719] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.450937][ T6719] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.453997][ T6719] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.490018][ T6719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.497569][ T6719] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.501568][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.503653][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.509401][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.511541][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.530209][ T6719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.533273][ T6719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.535308][ T834] usb 9-1: Using ep0 maxpacket: 16 [ 72.545941][ T834] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 72.549153][ T834] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.552140][ T834] usb 9-1: Product: syz [ 72.553445][ T834] usb 9-1: Manufacturer: syz [ 72.555224][ T834] usb 9-1: SerialNumber: syz [ 72.558504][ T834] usb 9-1: config 0 descriptor?? [ 72.569228][ T834] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 72.573032][ T834] usb 9-1: Detected FT232H [ 72.638468][ T6719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.658128][ T6719] veth0_vlan: entered promiscuous mode [ 72.662110][ T6719] veth1_vlan: entered promiscuous mode [ 72.677385][ T6719] veth0_macvtap: entered promiscuous mode [ 72.682175][ T6719] veth1_macvtap: entered promiscuous mode [ 72.691031][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.694220][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.697099][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.699955][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.703073][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.706141][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.709758][ T6719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.716412][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.719645][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.723174][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.726170][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.728956][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.732289][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.735723][ T6719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.740629][ T6719] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.743974][ T6719] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.746738][ T6719] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.749291][ T6719] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.766601][ T6787] mmap: syz.4.187 (6787) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 72.798516][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.805091][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.816039][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.818867][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.823679][ T834] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 72.827847][ T6788] vhci_hcd: connection reset by peer [ 72.831677][ T83] vhci_hcd: stop threads [ 72.831918][ T834] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 72.833588][ T83] vhci_hcd: release socket [ 72.835870][ T834] ftdi_sio 9-1:0.0: GPIO initialisation failed: -71 [ 72.837706][ T83] vhci_hcd: disconnect device [ 72.841549][ T834] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 72.845452][ T834] usb 9-1: USB disconnect, device number 2 [ 72.851327][ T834] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 72.854246][ T834] ftdi_sio 9-1:0.0: device disconnected [ 73.053385][ T6843] overlayfs: missing 'lowerdir' [ 73.114081][ T39] audit: type=1400 audit(1740319763.854:402): avc: denied { setopt } for pid=6847 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.167295][ T39] audit: type=1400 audit(1740319763.905:403): avc: denied { bind } for pid=6847 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.173011][ T39] audit: type=1400 audit(1740319763.905:404): avc: denied { write } for pid=6847 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.205665][ T39] audit: type=1400 audit(1740319763.945:405): avc: denied { setrlimit } for pid=6851 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 73.588117][ T5946] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 73.708728][ T5941] Bluetooth: hci2: command tx timeout [ 73.738427][ T5946] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 73.741591][ T5946] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 73.744998][ T5946] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 73.749149][ T5946] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 73.752380][ T5946] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 73.766378][ T5946] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 73.769023][ T5946] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 73.771335][ T5946] usb 9-1: Product: syz [ 73.772567][ T5946] usb 9-1: Manufacturer: syz [ 73.776597][ T5946] cdc_wdm 9-1:1.0: skipping garbage [ 73.778171][ T5946] cdc_wdm 9-1:1.0: skipping garbage [ 73.781920][ T5946] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 73.783711][ T5946] cdc_wdm 9-1:1.0: Unknown control protocol [ 73.873562][ T5941] Bluetooth: hci0: command tx timeout [ 73.939957][ T6856] netlink: 'syz.2.195': attribute type 32 has an invalid length. [ 73.942312][ T6856] __nla_validate_parse: 63 callbacks suppressed [ 73.942319][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 73.947295][ T6856] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 73.983361][ T39] audit: type=1400 audit(1740319764.737:406): avc: denied { watch watch_reads } for pid=6858 comm="syz.2.196" path="/51" dev="tmpfs" ino=280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.990246][ T39] audit: type=1400 audit(1740319764.737:407): avc: denied { remount } for pid=6858 comm="syz.2.196" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.240431][ T6878] overlay: Unknown parameter ':' [ 74.308846][ T8] IPVS: starting estimator thread 0... [ 74.396296][ T6882] IPVS: using max 35 ests per chain, 84000 per kthread [ 75.852750][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.213'. [ 75.924289][ T5941] Bluetooth: hci0: command tx timeout [ 76.094434][ T6926] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.217'. [ 76.224974][ T6931] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 76.307756][ T8] usb 9-1: USB disconnect, device number 3 [ 76.524965][ T6940] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 76.534304][ T6940] CPU: 0 UID: 0 PID: 6940 Comm: syz.4.223 Not tainted 6.14.0-rc3-syzkaller-00295-g27102b38b8ca #0 [ 76.534328][ T6940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.534339][ T6940] Call Trace: [ 76.534367][ T6940] [ 76.534375][ T6940] dump_stack_lvl+0x16c/0x1f0 [ 76.534554][ T6940] sysfs_warn_dup+0x7f/0xa0 [ 76.534643][ T6940] sysfs_create_dir_ns+0x24d/0x2b0 [ 76.534667][ T6940] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 76.534691][ T6940] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 76.534763][ T6940] ? kobject_add_internal+0x12d/0x990 [ 76.534784][ T6940] ? class_dir_child_ns_type+0xd/0x60 [ 76.534863][ T6940] kobject_add_internal+0x2c8/0x990 [ 76.534890][ T6940] kobject_add+0x16f/0x240 [ 76.534911][ T6940] ? __pfx_kobject_add+0x10/0x10 [ 76.534938][ T6940] ? lock_acquire+0x2f/0xb0 [ 76.534959][ T6940] ? get_device_parent+0x11f/0x4e0 [ 76.534977][ T6940] ? kobject_put+0xab/0x5a0 [ 76.535001][ T6940] ? device_add+0xc02/0x1a70 [ 76.535022][ T6940] device_add+0x289/0x1a70 [ 76.535038][ T6940] ? __pfx_device_add+0x10/0x10 [ 76.535052][ T6940] ? __init_waitqueue_head+0xca/0x150 [ 76.535067][ T6940] tty_register_device_attr+0x38f/0x7c0 [ 76.535120][ T6940] ? __pfx_tty_register_device_attr+0x10/0x10 [ 76.535131][ T6940] ? lockdep_init_map_type+0x16d/0x7d0 [ 76.535149][ T6940] ? tty_port_init+0x156/0x1c0 [ 76.535178][ T6940] gsm_activate_mux+0x157/0x2e0 [ 76.535193][ T6940] gsmld_ioctl+0xc9a/0x1550 [ 76.535208][ T6940] ? trace_lock_acquire+0x14e/0x1f0 [ 76.535220][ T6940] ? tty_ldisc_ref_wait+0x24/0x80 [ 76.535231][ T6940] ? __pfx_gsmld_ioctl+0x10/0x10 [ 76.535247][ T6940] ? __ldsem_down_read_nested+0xf4/0x920 [ 76.535264][ T6940] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 76.535283][ T6940] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 76.535314][ T6940] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 76.535332][ T6940] ? __pfx_gsmld_ioctl+0x10/0x10 [ 76.535346][ T6940] tty_ioctl+0x6ee/0x15d0 [ 76.535358][ T6940] ? __pfx_tty_ioctl+0x10/0x10 [ 76.535370][ T6940] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 76.535417][ T6940] ? __pfx_lock_release+0x10/0x10 [ 76.535436][ T6940] ? selinux_file_ioctl+0x180/0x270 [ 76.535451][ T6940] ? selinux_file_ioctl+0xb4/0x270 [ 76.535467][ T6940] ? __pfx_tty_ioctl+0x10/0x10 [ 76.535480][ T6940] __x64_sys_ioctl+0x190/0x200 [ 76.535520][ T6940] do_syscall_64+0xcd/0x250 [ 76.535534][ T6940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.535551][ T6940] RIP: 0033:0x7ff87138d169 [ 76.535561][ T6940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.535570][ T6940] RSP: 002b:00007ff872139038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.535595][ T6940] RAX: ffffffffffffffda RBX: 00007ff8715a5fa0 RCX: 00007ff87138d169 [ 76.535601][ T6940] RDX: 0000400000000040 RSI: 0000000040204706 RDI: 0000000000000004 [ 76.535608][ T6940] RBP: 00007ff87140e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 76.535614][ T6940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.535619][ T6940] R13: 0000000000000000 R14: 00007ff8715a5fa0 R15: 00007ffdda99ef48 [ 76.535631][ T6940] [ 76.535643][ T6940] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 77.016729][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 77.016742][ T39] audit: type=1400 audit(1740319767.809:420): avc: denied { read } for pid=6951 comm="syz.4.224" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.026854][ T39] audit: type=1400 audit(1740319767.809:421): avc: denied { open } for pid=6951 comm="syz.4.224" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.038236][ T39] audit: type=1400 audit(1740319767.819:422): avc: denied { ioctl } for pid=6951 comm="syz.4.224" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.080682][ T6954] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 77.084754][ T6954] xt_hashlimit: size too large, truncated to 1048576 [ 77.179556][ T39] audit: type=1400 audit(1740319767.981:423): avc: denied { write } for pid=6967 comm="syz.3.228" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 77.191569][ T39] audit: type=1400 audit(1740319767.981:424): avc: denied { ioctl } for pid=6967 comm="syz.3.228" path="/dev/ptp1" dev="devtmpfs" ino=1288 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 77.225184][ T39] audit: type=1400 audit(1740319768.022:425): avc: denied { create } for pid=6969 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.233117][ T39] audit: type=1400 audit(1740319768.022:426): avc: denied { bind } for pid=6969 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.354117][ T39] audit: type=1400 audit(1740319768.153:427): avc: denied { ioctl } for pid=6973 comm="syz.3.231" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 77.354264][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 77.368816][ T6975] netlink: 24 bytes leftover after parsing attributes in process `syz.3.231'. [ 77.429246][ T39] audit: type=1400 audit(1740319768.234:428): avc: denied { append } for pid=6976 comm="syz.3.232" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 77.558659][ T39] audit: type=1400 audit(1740319768.356:429): avc: denied { ioctl } for pid=6978 comm="syz.3.233" path="socket:[13114]" dev="sockfs" ino=13114 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.568192][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.233'. [ 77.629628][ T6979] team0: Port device team_slave_1 removed [ 77.902321][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 77.979088][ T5941] Bluetooth: hci0: command tx timeout [ 78.158602][ T7028] x_tables: duplicate underflow at hook 2 [ 78.161158][ T7028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.250'. [ 78.226979][ T7035] i2c i2c-1: Invalid block write size 34 [ 78.256858][ T7041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 78.485831][ T7058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.259'. [ 78.557377][ T7070] Bluetooth: MGMT ver 1.23 [ 78.563382][ T7070] syzkaller0: entered allmulticast mode [ 78.653059][ T7072] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 78.656066][ T7072] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 79.055930][ T7092] netlink: 132 bytes leftover after parsing attributes in process `syz.4.270'. [ 79.250326][ T7119] CIFS: iocharset name too long [ 79.312796][ T7126] warning: `syz.3.281' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.343700][ T6000] Process accounting resumed [ 79.392933][ T7124] Process accounting resumed [ 79.634338][ T7153] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 79.690494][ T7155] syz.3.289: attempt to access beyond end of device [ 79.690494][ T7155] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 79.695665][ T7155] syz.3.289: attempt to access beyond end of device [ 79.695665][ T7155] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 79.732160][ T7159] netlink: 'syz.2.291': attribute type 4 has an invalid length. [ 80.238882][ T7192] vxcan1: tx address claim with different name [ 80.284150][ T7194] netlink: 44 bytes leftover after parsing attributes in process `syz.4.301'. [ 80.322904][ T7196] fuse: Unknown parameter '0x0000000000000004Ê ÁÙšõ2ImOó£U„Û°´«¦š¸Çéb³|°u–äbÁ' [ 80.511784][ T7212] netem: change failed [ 81.306381][ T35] cfg80211: failed to load regulatory.db [ 81.359474][ T7230] netlink: 'syz.4.311': attribute type 2 has an invalid length. [ 81.591442][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.312'. [ 81.765568][ T7243] virtio-fs: tag <(null)> not found [ 81.823453][ T7247] overlay: ./file0 is not a directory [ 81.991222][ T39] kauditd_printk_skb: 29 callbacks suppressed [ 81.991235][ T39] audit: type=1400 audit(1740319772.842:459): avc: denied { execute } for pid=7259 comm="syz.2.323" path="/dev/audio1" dev="devtmpfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 82.117053][ T5980] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 82.277282][ T5980] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 82.280140][ T5980] usb 9-1: config 0 interface 0 has no altsetting 0 [ 82.283729][ T5980] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 82.287288][ T5980] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.289605][ T5980] usb 9-1: Product: syz [ 82.290846][ T5980] usb 9-1: Manufacturer: syz [ 82.292200][ T5980] usb 9-1: SerialNumber: syz [ 82.295107][ T5980] usb 9-1: config 0 descriptor?? [ 82.300859][ T5980] usb 9-1: selecting invalid altsetting 0 [ 82.505154][ T39] audit: type=1400 audit(1740319773.356:460): avc: denied { create } for pid=7250 comm="syz.4.320" name="blkio.bfq.io_service_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 82.511704][ T39] audit: type=1400 audit(1740319773.356:461): avc: denied { read append open } for pid=7250 comm="syz.4.320" path="/67/file0/blkio.bfq.io_service_bytes" dev="9p" ino=36186468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.512683][ T7251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.519081][ T39] audit: type=1400 audit(1740319773.356:462): avc: denied { lock } for pid=7250 comm="syz.4.320" path="/67/file0/blkio.bfq.io_service_bytes" dev="9p" ino=36186468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.532016][ T7251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.538226][ T3556] usb 9-1: USB disconnect, device number 4 [ 82.995846][ T39] audit: type=1400 audit(1740319773.851:463): avc: denied { execute } for pid=7268 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 83.002625][ T39] audit: type=1400 audit(1740319773.851:464): avc: denied { execute_no_trans } for pid=7268 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 83.122583][ T5293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.126459][ T5293] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.129682][ T5293] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.134197][ T5293] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.137903][ T5293] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.142556][ T5293] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.150934][ T7276] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 83.180908][ T39] audit: type=1400 audit(1740319774.042:465): avc: denied { read } for pid=7277 comm="syz.2.329" name="btrfs-control" dev="devtmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 83.190142][ T7284] netlink: 24 bytes leftover after parsing attributes in process `syz.3.330'. [ 83.190310][ T39] audit: type=1400 audit(1740319774.042:466): avc: denied { open } for pid=7277 comm="syz.2.329" path="/dev/btrfs-control" dev="devtmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 83.239449][ T39] audit: type=1400 audit(1740319774.103:467): avc: denied { rename } for pid=7286 comm="syz.2.331" name="file0" dev="9p" ino=36186364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.247551][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.333'. [ 83.248983][ T7271] chnl_net:caif_netlink_parms(): no params data found [ 83.255392][ T7288] sctp: [Deprecated]: syz.2.331 (pid 7288) Use of struct sctp_assoc_value in delayed_ack socket option. [ 83.255392][ T7288] Use struct sctp_sack_info instead [ 83.260630][ T7288] xt_ecn: cannot match TCP bits for non-tcp packets [ 83.314352][ T7271] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.316577][ T7271] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.320816][ T7271] bridge_slave_0: entered allmulticast mode [ 83.324252][ T7271] bridge_slave_0: entered promiscuous mode [ 83.342116][ T1140] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.367151][ T7271] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.369258][ T7271] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.371433][ T7271] bridge_slave_1: entered allmulticast mode [ 83.377193][ T7271] bridge_slave_1: entered promiscuous mode [ 83.382910][ T39] audit: type=1400 audit(1740319774.244:468): avc: denied { mount } for pid=7313 comm="syz.4.338" name="/" dev="ramfs" ino=14025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 83.384624][ T7316] tmpfs: Bad value for 'mpol' [ 83.395119][ T7316] xt_TCPMSS: Only works on TCP SYN packets [ 83.419434][ T7271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.435602][ T1140] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.442411][ T7271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.468492][ T7271] team0: Port device team_slave_0 added [ 83.475997][ T7271] team0: Port device team_slave_1 added [ 83.500590][ T7271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.502735][ T7271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.512771][ T7271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.516998][ T7271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.519090][ T7271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.526871][ T7271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.543538][ T1140] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.580787][ T7333] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 7333 comm: syz.2.345) [ 83.597911][ T7271] hsr_slave_0: entered promiscuous mode [ 83.600086][ T7271] hsr_slave_1: entered promiscuous mode [ 83.602104][ T7271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.603568][ T7333] block device autoloading is deprecated and will be removed. [ 83.604867][ T7271] Cannot create hsr debugfs directory [ 83.610339][ T7333] syz.2.345: attempt to access beyond end of device [ 83.610339][ T7333] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 83.625415][ T1140] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.679563][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'. [ 83.767266][ T1140] bridge_slave_1: left allmulticast mode [ 83.769612][ T1140] bridge_slave_1: left promiscuous mode [ 83.771935][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.776954][ T1140] bridge_slave_0: left allmulticast mode [ 83.779221][ T1140] bridge_slave_0: left promiscuous mode [ 83.781532][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.815256][ T7357] atomic_op ffff8880500c3998 conn xmit_atomic 0000000000000000 [ 84.047282][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.051301][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.055139][ T1140] bond0 (unregistering): Released all slaves [ 84.117276][ T1140] bond1 (unregistering): Released all slaves [ 84.124695][ T7356] tipc: Started in network mode [ 84.126677][ T7356] tipc: Node identity ac14140f, cluster identity 4711 [ 84.130718][ T7356] tipc: New replicast peer: 255.255.255.255 [ 84.134850][ T7356] tipc: Enabled bearer , priority 10 [ 84.170261][ T7271] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.182027][ T7271] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.194381][ T7271] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.211689][ T7271] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.291527][ T7271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.299422][ T7271] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.304908][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.307622][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.327072][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.329453][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.419969][ T1140] ------------[ cut here ]------------ [ 84.421919][ T1140] Have pending ack frames! [ 84.422323][ T7271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.423745][ T1140] WARNING: CPU: 2 PID: 1140 at net/mac80211/main.c:1713 ieee80211_free_ack_frame+0x5a/0x60 [ 84.429091][ T1140] Modules linked in: [ 84.430475][ T1140] CPU: 2 UID: 0 PID: 1140 Comm: kworker/u32:6 Not tainted 6.14.0-rc3-syzkaller-00295-g27102b38b8ca #0 [ 84.435796][ T1140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 84.440207][ T1140] Workqueue: netns cleanup_net [ 84.442353][ T1140] RIP: 0010:ieee80211_free_ack_frame+0x5a/0x60 [ 84.444943][ T1140] Code: 31 ff e8 29 01 67 fe 31 c0 5b 5d c3 cc cc cc cc e8 db 98 f3 f6 c6 05 ce a9 84 05 01 90 48 c7 c7 40 af c1 8c e8 67 c9 b3 f6 90 <0f> 0b 90 90 eb c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 84.452338][ T1140] RSP: 0018:ffffc90005fa7950 EFLAGS: 00010286 [ 84.454689][ T1140] RAX: 0000000000000000 RBX: ffff8880271d9180 RCX: ffffffff817a1229 [ 84.457855][ T1140] RDX: ffff88802717a440 RSI: ffffffff817a1236 RDI: 0000000000000001 [ 84.460971][ T1140] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 84.464066][ T1140] R10: 0000000000000001 R11: 0000000000000006 R12: dffffc0000000000 [ 84.466467][ T1140] R13: ffffffff8ac646d0 R14: 0000000080000000 R15: 0000000000000000 [ 84.469082][ T1140] FS: 0000000000000000(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000 [ 84.471670][ T1140] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.473622][ T1140] CR2: 00007f20205f7440 CR3: 00000000325e0000 CR4: 0000000000352ef0 [ 84.476153][ T1140] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.478476][ T1140] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 84.480756][ T1140] Call Trace: [ 84.481905][ T1140] [ 84.482811][ T1140] ? __warn+0xea/0x3c0 [ 84.484091][ T1140] ? ieee80211_free_ack_frame+0x5a/0x60 [ 84.485712][ T1140] ? report_bug+0x3c0/0x580 [ 84.487128][ T1140] ? handle_bug+0x54/0xa0 [ 84.488412][ T1140] ? exc_invalid_op+0x17/0x50 [ 84.489801][ T1140] ? asm_exc_invalid_op+0x1a/0x20 [ 84.491331][ T1140] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 84.493111][ T1140] ? __warn_printk+0x199/0x350 [ 84.494553][ T1140] ? __warn_printk+0x1a6/0x350 [ 84.495971][ T1140] ? ieee80211_free_ack_frame+0x5a/0x60 [ 84.496990][ T7370] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 84.497652][ T1140] idr_for_each+0x141/0x270 [ 84.499702][ T7370] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 84.500997][ T1140] ? __pfx_idr_for_each+0x10/0x10 [ 84.504723][ T1140] ? kfree+0x2c4/0x4d0 [ 84.506102][ T1140] ? kfree+0x2c4/0x4d0 [ 84.507440][ T1140] ? kfree_const+0x55/0x60 [ 84.508842][ T1140] ieee80211_free_hw+0x9b/0x2d0 [ 84.510283][ T1140] ? kobject_put+0x210/0x5a0 [ 84.511667][ T1140] hwsim_exit_net+0x3fe/0x7d0 [ 84.513121][ T1140] ? __pfx_hwsim_exit_net+0x10/0x10 [ 84.514817][ T1140] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 84.516452][ T1140] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 84.518381][ T1140] ? __pfx_hwsim_exit_net+0x10/0x10 [ 84.519943][ T1140] ops_exit_list+0xb0/0x180 [ 84.521293][ T1140] cleanup_net+0x5c6/0xb30 [ 84.522637][ T1140] ? __pfx_cleanup_net+0x10/0x10 [ 84.524181][ T1140] ? lock_acquire+0x2f/0xb0 [ 84.525538][ T1140] ? process_one_work+0x921/0x1ba0 [ 84.527238][ T1140] process_one_work+0x9c5/0x1ba0 [ 84.528742][ T1140] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 84.530401][ T1140] ? __pfx_process_one_work+0x10/0x10 [ 84.531990][ T1140] ? assign_work+0x1a0/0x250 [ 84.533367][ T1140] worker_thread+0x6c8/0xf00 [ 84.535123][ T1140] ? __pfx_worker_thread+0x10/0x10 [ 84.537108][ T1140] kthread+0x3af/0x750 [ 84.538350][ T1140] ? __pfx_kthread+0x10/0x10 [ 84.539710][ T1140] ? lock_acquire+0x2f/0xb0 [ 84.541058][ T1140] ? __pfx_kthread+0x10/0x10 [ 84.542424][ T1140] ret_from_fork+0x45/0x80 [ 84.543794][ T1140] ? __pfx_kthread+0x10/0x10 [ 84.545193][ T1140] ret_from_fork_asm+0x1a/0x30 [ 84.546752][ T1140] [ 84.547681][ T1140] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 84.549789][ T1140] CPU: 2 UID: 0 PID: 1140 Comm: kworker/u32:6 Not tainted 6.14.0-rc3-syzkaller-00295-g27102b38b8ca #0 [ 84.552931][ T1140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.556232][ T1140] Workqueue: netns cleanup_net [ 84.557673][ T1140] Call Trace: [ 84.558673][ T1140] [ 84.559558][ T1140] dump_stack_lvl+0x3d/0x1f0 [ 84.560917][ T1140] panic+0x71d/0x800 [ 84.562069][ T1140] ? __pfx_panic+0x10/0x10 [ 84.563402][ T1140] ? show_trace_log_lvl+0x29d/0x3d0 [ 84.565033][ T1140] ? check_panic_on_warn+0x1f/0xb0 [ 84.566563][ T1140] ? ieee80211_free_ack_frame+0x5a/0x60 [ 84.568191][ T1140] check_panic_on_warn+0xab/0xb0 [ 84.569637][ T1140] __warn+0xf6/0x3c0 [ 84.570810][ T1140] ? ieee80211_free_ack_frame+0x5a/0x60 [ 84.572422][ T1140] report_bug+0x3c0/0x580 [ 84.573731][ T1140] handle_bug+0x54/0xa0 [ 84.575181][ T1140] exc_invalid_op+0x17/0x50 [ 84.576540][ T1140] asm_exc_invalid_op+0x1a/0x20 [ 84.578111][ T1140] RIP: 0010:ieee80211_free_ack_frame+0x5a/0x60 [ 84.579916][ T1140] Code: 31 ff e8 29 01 67 fe 31 c0 5b 5d c3 cc cc cc cc e8 db 98 f3 f6 c6 05 ce a9 84 05 01 90 48 c7 c7 40 af c1 8c e8 67 c9 b3 f6 90 <0f> 0b 90 90 eb c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 84.585662][ T1140] RSP: 0018:ffffc90005fa7950 EFLAGS: 00010286 [ 84.587430][ T1140] RAX: 0000000000000000 RBX: ffff8880271d9180 RCX: ffffffff817a1229 [ 84.589719][ T1140] RDX: ffff88802717a440 RSI: ffffffff817a1236 RDI: 0000000000000001 [ 84.592038][ T1140] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 84.594508][ T1140] R10: 0000000000000001 R11: 0000000000000006 R12: dffffc0000000000 [ 84.596837][ T1140] R13: ffffffff8ac646d0 R14: 0000000080000000 R15: 0000000000000000 [ 84.599141][ T1140] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 84.600920][ T1140] ? __warn_printk+0x199/0x350 [ 84.602338][ T1140] ? __warn_printk+0x1a6/0x350 [ 84.603783][ T1140] idr_for_each+0x141/0x270 [ 84.605170][ T1140] ? __pfx_idr_for_each+0x10/0x10 [ 84.606709][ T1140] ? kfree+0x2c4/0x4d0 [ 84.607923][ T1140] ? kfree+0x2c4/0x4d0 [ 84.609133][ T1140] ? kfree_const+0x55/0x60 [ 84.610448][ T1140] ieee80211_free_hw+0x9b/0x2d0 [ 84.611895][ T1140] ? kobject_put+0x210/0x5a0 [ 84.613258][ T1140] hwsim_exit_net+0x3fe/0x7d0 [ 84.614851][ T1140] ? __pfx_hwsim_exit_net+0x10/0x10 [ 84.616394][ T1140] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 84.617969][ T1140] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 84.619647][ T1140] ? __pfx_hwsim_exit_net+0x10/0x10 [ 84.621473][ T1140] ops_exit_list+0xb0/0x180 [ 84.622848][ T1140] cleanup_net+0x5c6/0xb30 [ 84.624307][ T1140] ? __pfx_cleanup_net+0x10/0x10 [ 84.625852][ T1140] ? lock_acquire+0x2f/0xb0 [ 84.627211][ T1140] ? process_one_work+0x921/0x1ba0 [ 84.628715][ T1140] process_one_work+0x9c5/0x1ba0 [ 84.630211][ T1140] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 84.631873][ T1140] ? __pfx_process_one_work+0x10/0x10 [ 84.633448][ T1140] ? assign_work+0x1a0/0x250 [ 84.635227][ T1140] worker_thread+0x6c8/0xf00 [ 84.637134][ T1140] ? __pfx_worker_thread+0x10/0x10 [ 84.639215][ T1140] kthread+0x3af/0x750 [ 84.640860][ T1140] ? __pfx_kthread+0x10/0x10 [ 84.642758][ T1140] ? lock_acquire+0x2f/0xb0 [ 84.644595][ T1140] ? __pfx_kthread+0x10/0x10 [ 84.646488][ T1140] ret_from_fork+0x45/0x80 [ 84.648299][ T1140] ? __pfx_kthread+0x10/0x10 [ 84.650172][ T1140] ret_from_fork_asm+0x1a/0x30 [ 84.652117][ T1140] [ 84.654074][ T1140] Kernel Offset: disabled [ 84.655934][ T1140] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:09:35 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffea0000376a80 RCX=ffffffff820a08b2 RDX=ffff8880265f0000 RSI=00000000000000f4 RDI=0000000000000005 RBP=ffffea0000376a80 RSP=ffffc9000350f990 R8 =0000000000000005 R9 =00000000000000f4 R10=0000000000000000 R11=0000000000000005 R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=ffffea0000376a98 RIP=ffffffff81b9d972 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7d30f8f500 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7d311dc000 CR3=0000000031fe0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000010008000 Opmask01=0000000000081111 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 01010100ffffffff ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 682d6e75722d6463 706368642f646370 6368642f62696c2f 0068732f6e69622f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffc90004bb76f8 RCX=0000000000000000 RDX=0000000000000060 RSI=0000000000000000 RDI=ffffc90004bb7668 RBP=ffff88804fc9a440 RSP=ffffc90004bb7610 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc90004bb7668 R11=0000000000000001 R12=0000000000000000 R13=ffffc90004bb7728 R14=ffffc90004bb7668 R15=ffffc90004bb7690 RIP=ffffffff8b5757c6 RFL=00000247 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f371db7a270 CR3=000000004a47e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000050 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85407335 RDI=ffffffff9ab80780 RBP=ffffffff9ab80740 RSP=ffffc90005fa72d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000007 R12=0000000000000000 R13=0000000000000050 R14=ffffffff9ab80740 R15=0000000000000000 RIP=ffffffff8540735f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f20205f7440 CR3=00000000325e0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000040 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffbd14cef0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7ebe0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7ebe0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7ebe0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7ebe0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7ebe0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7ebe0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000063193 RBX=0000000000000003 RCX=ffffffff8b574469 RDX=0000000000000000 RSI=ffffffff8b6ced20 RDI=ffffffff8bd35700 RBP=ffffed1003ad9488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d526f85 R10=ffff88806a937c2b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d6ca440 R14=ffffffff90625610 R15=0000000000000000 RIP=ffffffff8b57584f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7d30fe20f0 CR3=0000000023a36000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000040 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd964a7ec0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92b460f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92b460f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92b460f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92b460f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92b460f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92b460f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000