last executing test programs: 29.199937191s ago: executing program 1 (id=407): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) socket$netlink(0x10, 0x3, 0x10) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, &(0x7f00000029c0), &(0x7f0000002a00)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) close_range(r0, 0xffffffffffffffff, 0x0) 29.029403606s ago: executing program 1 (id=411): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0xf4, 0x1, 0xffff, 0x4, 0x7, 0xff44, 0x7c2, 0x0, 0x3, 0x1000, 0x9, 0x401, 0x8, 0x1, 0x6]}, &(0x7f00000002c0)=0x100) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={r2, 0x8001}, 0x8) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_GET_CHILD_SUBREAPER(0xe) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x18, &(0x7f0000004240)=0x7fff, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = socket(0x40000000015, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[], 0x148}}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r6, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x7, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x10841}, 0x20000000) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x90}) 28.968875199s ago: executing program 1 (id=412): setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x2, [{}, {}]}, 0x48) r0 = syz_open_dev$rtc(&(0x7f0000000080), 0x3, 0x200) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000000c0)) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f00000001c0)={0xff, 0x48, '\x00', 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000200)={0x0, 0x1f, "c087b66065d5015f2c870e94e10b0facf1a45ebbb8c060d6c6c804fa5c5acf"}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000280)=@attr_other={0x0, 0x95, 0x100000001, &(0x7f0000000240)}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1c4, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb2}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x80}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff9}, {0x8, 0x13, 0x7ff}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x87}, {0x8, 0x13, 0x4}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc8e20000}, {0x6}, {0x8, 0x13, 0xfffffffc}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x1000}, {0x8, 0x13, 0xc}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x8}, {0x5}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40000}, 0x40008c0) socket$qrtr(0x2a, 0x2, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000580)={0xa, 0x4e23, 0x2, @private1, 0x4}, 0x1c) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000005c0), 0x60400, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000640)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000006c0)={r5}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x800000, 0x10, r6, 0x30f3000) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000780)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000740)=0x8000}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000007c0)) setsockopt$inet6_int(r3, 0x29, 0x17, &(0x7f0000000840)=0x6, 0x4) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000880)=@arm64={0xfb, 0x6, 0x8, '\x00', 0x3}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000008c0), 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f0000000900)={0x5, 0x5, 0x7, 0xb99d, '\x00', '\x00', '\x00', 0x3, 0x8, 0x400, 0x4, "6e94c4b0aa3454023a7721ad94024b77"}) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r6, 0x40184150, &(0x7f0000000a80)={0x0, &(0x7f0000000a40)="118526db6f10c056d72c5d322302f6a101a36362e9b64df892f85c4665708fbac6b25f3c30fea2b07586235f83774a50afa0a6bbdf8c0e14e830", 0x3a}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000b00), r2) sendmsg$GTP_CMD_ECHOREQ(r7, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, r8, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}]}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x4008805) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r6, 0x4068aea3, &(0x7f0000000c40)={0x9f, 0x0, 0x1}) connect$vsock_stream(r6, &(0x7f0000000cc0)={0x28, 0x0, 0x2711}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) 28.968425315s ago: executing program 1 (id=414): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x44000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x22211020) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 28.89986949s ago: executing program 1 (id=415): r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000b80)={'tunl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x7, 0x9, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x64, 0x0, 0x3, 0x2f, 0x0, @loopback, @private=0xa010100}}}}) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xb}]}, 0x28}, 0x1, 0x0, 0x0, 0x200c0004}, 0x24000005) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1fb, 0x28a003) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000140)={0x2, 0x1}) sendmsg$tipc(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000800)="7102b87fd4a29eb711d3d8dd9d30af2321e6f6e273aa268bf88d9b6b401a48d9897f02e252e0882cc55d14a5949d95b3fa8e0fdefbdb9d5f2b2402455bb8ea9669c041e99a804b3a84e5be4329c6ac5ccfd26d65bf13d7dc9ce767be3e7d49acf525dca7123b6bc44d49b40ce43b8cb32004f23c12750711d0858c8d0d41dc8700148a722a3cbc6abb644537cc9988c84675409be1b18298b0ec383bda34bfbcca2d71d63e2f097fc59fe25c27c8dd1d893dd361b0fee1c66b8b31c07fb4b2a8ddfecf480d68ed284feb7ce103ef4b9f86e7731d0d21aed50dd887bd2217bc31b1ee7e1f8928c40d1b6fffdbf1eef39151466bd33eefce34a00f5932b41cd3e8eae6b2e2cfec5a968270f4a34e8ea5cc115189aff201dd0e4547d39e63aaf67f4e8ad5d3adf9ce876356cc36fcfd9aee0268f3e9f2eb07", 0x137}, {&(0x7f0000001c80)="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", 0x472}], 0x2}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bc00d08e36655c00"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) 28.689389592s ago: executing program 1 (id=416): ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000001000)={0x30, 0x10, &(0x7f0000000000)="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", {0x10000, 0x8000, 0xb5315241, 0x4, 0x543, 0x7, 0x3, 0x77}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x20, r1, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x3a}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x400c040}, 0x20000010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000011c0), 0xffffffffffffffff) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001200)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001240)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000001340)={&(0x7f0000001180), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x4c, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000811) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000001580)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001400)={0x138, r6, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0xf8, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd49dc1f}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1524db23}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdbe3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x211e07c4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d18}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3fb5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaafb}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6bca}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9aa9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38e8c38a}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb1f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf7ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7aac91f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b5a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1877}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x586d496d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f386842}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3679e50c}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb8b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5207}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x904f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2fba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cbb6c4b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcfef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95b6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc50e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd5e5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67d7dba}]}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x20044000}, 0x44000000) (async) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20902}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x74, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_SE_APDU={0x5e, 0x19, "33a06d8a9580bd5b06c0d6ae97eeacf2acca2f0d10cd4736308bd9a1516f24f16724c39ad14817e9e5c7bbbe60ff0355eddf812dca4ccb414e55a8bcc1163bc984548aa8cbb0c19e11847eb943b96cd0d66fb1361d30209eac2b"}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) (async) r7 = syz_io_uring_setup(0x463b, &(0x7f0000001700)={0x0, 0x1297, 0x2000, 0x3, 0x170}, &(0x7f0000001780), &(0x7f00000017c0)) io_uring_enter(r7, 0x31cb, 0xe976, 0x40, &(0x7f0000001800)={[0x6]}, 0x8) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000001ac0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001a80)={&(0x7f00000018c0)={0x194, r8, 0x16, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x9}}}}, [@NL80211_ATTR_CQM={0x60, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x9, 0x0, 0x0, 0x6, 0x10000, 0xfffffff8, 0x77d9, 0x1, 0x2, 0x2]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd82}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1000}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x39}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x20}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2e3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x4, 0x4, 0xb]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x91a3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x505}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x451}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x40}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x56}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xdc}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6ce}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x200}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x41d}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x214}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x80000000]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffff801}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}]}, @NL80211_ATTR_CQM={0x4}]}, 0x194}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async, rerun: 64) r9 = syz_open_dev$radio(&(0x7f0000001b00), 0x2, 0x2) (rerun: 64) ioctl$VIDIOC_ENUMSTD(r9, 0xc0485619, &(0x7f0000001b40)={0x0, 0xb700, "295183093bf28a751080f6355d01b8fa04be53fb29c9b93d", {0xffffff24, 0x9}, 0x2}) r10 = syz_open_pts(r9, 0x400000) close(r10) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001c00), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001c40)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000001d40)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x5c, r11, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000010) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001dc0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001ec0)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x54, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x3, 0x4d}}}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x4c}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x1}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x8000}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xffff}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x4801) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x20, r11, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4008000) (async, rerun: 64) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x44, r11, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x81}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x20040080) (async, rerun: 64) openat$nci(0xffffffffffffff9c, &(0x7f0000002140), 0x2, 0x0) open(&(0x7f0000002180)='./file0\x00', 0x40, 0x130) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000023c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002380)={&(0x7f0000002200)={0x168, r11, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_KEY={0x144, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "574d7e6ace3d88873bf8359db368905d725165e37c29eb99cdc6cef4f2b8ea5f"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0bdc6391ebbc0c276054a15e40468899"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d11f458f0563c4b4d17847633dccfbf9"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2bc326868e209415dff5ec5fab658ff8"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c170ffd1735468009d428dea0dfae48223887983ec1c3cf680387fd981ce0e9f"}, @NL802154_KEY_ATTR_ID={0x90, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "cf76e4d7d9ebd5af88cf032b17c16dfadbdce16958e06c54c0e5a64d8eb1d478"}]}]}, 0x168}}, 0x4015) 28.648064024s ago: executing program 32 (id=416): ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000001000)={0x30, 0x10, &(0x7f0000000000)="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", {0x10000, 0x8000, 0xb5315241, 0x4, 0x543, 0x7, 0x3, 0x77}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x20, r1, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x3a}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x400c040}, 0x20000010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000011c0), 0xffffffffffffffff) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001200)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001240)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000001340)={&(0x7f0000001180), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x4c, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000811) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000001580)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001400)={0x138, r6, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0xf8, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd49dc1f}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1524db23}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdbe3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x211e07c4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d18}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3fb5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaafb}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6bca}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9aa9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38e8c38a}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb1f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf7ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7aac91f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b5a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1877}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x586d496d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f386842}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3679e50c}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb8b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5207}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x904f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2fba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cbb6c4b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcfef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95b6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc50e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd5e5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67d7dba}]}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x20044000}, 0x44000000) (async) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20902}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x74, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_SE_APDU={0x5e, 0x19, "33a06d8a9580bd5b06c0d6ae97eeacf2acca2f0d10cd4736308bd9a1516f24f16724c39ad14817e9e5c7bbbe60ff0355eddf812dca4ccb414e55a8bcc1163bc984548aa8cbb0c19e11847eb943b96cd0d66fb1361d30209eac2b"}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) (async) r7 = syz_io_uring_setup(0x463b, &(0x7f0000001700)={0x0, 0x1297, 0x2000, 0x3, 0x170}, &(0x7f0000001780), &(0x7f00000017c0)) io_uring_enter(r7, 0x31cb, 0xe976, 0x40, &(0x7f0000001800)={[0x6]}, 0x8) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000001ac0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001a80)={&(0x7f00000018c0)={0x194, r8, 0x16, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x9}}}}, [@NL80211_ATTR_CQM={0x60, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x9, 0x0, 0x0, 0x6, 0x10000, 0xfffffff8, 0x77d9, 0x1, 0x2, 0x2]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd82}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1000}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x39}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x20}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2e3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x4, 0x4, 0xb]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x91a3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x505}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x451}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x40}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x56}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xdc}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6ce}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x200}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x41d}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x214}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x80000000]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffff801}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}]}, @NL80211_ATTR_CQM={0x4}]}, 0x194}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async, rerun: 64) r9 = syz_open_dev$radio(&(0x7f0000001b00), 0x2, 0x2) (rerun: 64) ioctl$VIDIOC_ENUMSTD(r9, 0xc0485619, &(0x7f0000001b40)={0x0, 0xb700, "295183093bf28a751080f6355d01b8fa04be53fb29c9b93d", {0xffffff24, 0x9}, 0x2}) r10 = syz_open_pts(r9, 0x400000) close(r10) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001c00), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001c40)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000001d40)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x5c, r11, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000010) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001dc0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001ec0)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x54, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x3, 0x4d}}}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x4c}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x1}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x8000}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xffff}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x4801) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x20, r11, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4008000) (async, rerun: 64) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x44, r11, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x81}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x20040080) (async, rerun: 64) openat$nci(0xffffffffffffff9c, &(0x7f0000002140), 0x2, 0x0) open(&(0x7f0000002180)='./file0\x00', 0x40, 0x130) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000023c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002380)={&(0x7f0000002200)={0x168, r11, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_KEY={0x144, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "574d7e6ace3d88873bf8359db368905d725165e37c29eb99cdc6cef4f2b8ea5f"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0bdc6391ebbc0c276054a15e40468899"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d11f458f0563c4b4d17847633dccfbf9"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2bc326868e209415dff5ec5fab658ff8"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c170ffd1735468009d428dea0dfae48223887983ec1c3cf680387fd981ce0e9f"}, @NL802154_KEY_ATTR_ID={0x90, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "cf76e4d7d9ebd5af88cf032b17c16dfadbdce16958e06c54c0e5a64d8eb1d478"}]}]}, 0x168}}, 0x4015) 2.799737811s ago: executing program 3 (id=610): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TIOCGPTPEER(r1, 0x400c0930, 0x8) 2.729508004s ago: executing program 4 (id=613): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) (async) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000240)={0x11, @multicast1, 0x4e1f, 0x0, 'lblc\x00', 0x0, 0x0, 0x4}, 0x2c) keyctl$setperm(0x5, r2, 0x0) (async) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x4401c1, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) (async) ioctl$SNAPSHOT_S2RAM(r5, 0x330b) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) (async, rerun: 32) r7 = socket$inet(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x400}]}}]}, 0x98}}, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) syz_emit_ethernet(0x3a, &(0x7f00000004c0)=ANY=[@ANYBLOB="a579bbcb1e8e00000000000008004503002c0000000000049078000000e0e00000010000000000188b780400"/58], 0x0) r10 = dup3(r6, r1, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000a00)='blkio.throttle.io_serviced\x00', 0x0, 0x0) preadv2(r12, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000440)) ioctl$vim2m_VIDIOC_DQBUF(r10, 0xc0585611, &(0x7f0000000100)=@fd={0x80, 0x2, 0x4, 0x2000, 0x2, {}, {0x4, 0xc, 0x0, 0x2, 0x8, 0x4, "c79eeb13"}, 0x10001, 0x4, {}, 0x2}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15842313260608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b000000", 0x18}, {&(0x7f00000000c0)="bc588bb49cff7d081d465efc09c57bbfb7b83fa6366c", 0x16}], 0x2}, 0x0) 1.978325899s ago: executing program 4 (id=630): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x3) ioctl$VT_ACTIVATE(r4, 0x5606, 0x4) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000180)={0x9, 0x0, 0x3, 0x7fff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r8, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r9, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VT_ACTIVATE(r4, 0x5606, 0x1000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@bridge_dellink={0x34, 0x13, 0x1, 0x70bd27, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48011}, 0x20000000) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f000000a540), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f000000a780)={0x0, 0x0, &(0x7f000000a740)={&(0x7f000000a600)={0x44, r11, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20042841}, 0x4880) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000200)={0xc, 0x31324d59, 0x2, @discrete={0x3, 0xd6}}) 1.978078084s ago: executing program 3 (id=631): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) r8 = userfaultfd(0x80001) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000015000100000000000000ff00fe8800000000000000000000800000010000000000000000000000000000000000040000000000000000b10000000000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0x68}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000047c49b6ddabe4530a6e1d727bf9ff27b151c1bc09d3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x4, 0x1, 0x80000000, 0x10001, 0x40, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r14, &(0x7f0000000340)={0x2020}, 0xcb0a) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x85}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x101}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}]}, &(0x7f00000000c0)='syzkaller\x00', 0x14, 0x7f, &(0x7f0000000100)=""/127, 0x41000, 0x10, '\x00', r12, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[r11, r8, r11, 0x1, r11, r11, r13, r14], &(0x7f00000003c0)=[{0x3, 0x3, 0x0, 0x1}, {0x3, 0x4, 0xa, 0xb}, {0x3, 0x4, 0x2, 0x1}, {0x3, 0x5, 0xd, 0x1}], 0x10, 0xfffffff7}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r9, r11, 0x4, 0x0, @void}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 1.849855882s ago: executing program 3 (id=633): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="0f00970300bad10466b813d2d1a366ef83ee21baf80c66efbafc0c66ed66b95f03000066b80050000066ba000000000bc22e0fc7320f8f04000f01c58529823400", 0x41}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.493206091s ago: executing program 2 (id=638): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) 1.339954653s ago: executing program 2 (id=639): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = semget$private(0x0, 0x4000000009, 0x208) semop(r1, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1) semop(r1, &(0x7f0000000000)=[{0x0, 0xfffb}, {0x1, 0x0, 0x800}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000040)=[0x9, 0x7]) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x26) fcntl$notify(r4, 0x402, 0x3f) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x7fff, 0x1c1901) ioctl$BLKDISCARD(r5, 0x80041284, &(0x7f0000000080)=0x800) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x60, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x1000000, 0x0, 0x4004810}, 0x24040840) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0xa042, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="110100bd7000000000000900000030000380080000020000000014000200776c616e31000000000000000000000008000100010000000500081063000000df0ace95d521400dace01ce578"], 0x44}}, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hpfs\x00', 0x204001, 0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r9, 0x0, 0x0) sendmsg$802154_raw(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x841}, 0x4000041) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x14) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r10, &(0x7f0000000040), 0x2) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x8, &(0x7f0000000040)=[{0x8000, 0x80, 0x4, 0x9}, {0x3, 0x2, 0x1, 0x4}, {0x7, 0x4, 0xd, 0xcb7}, {0x2, 0x4, 0x2}, {0x6, 0xfc, 0x38, 0x7}, {0xf, 0x3, 0x5}, {0x4, 0x6, 0x8, 0x4}, {0x200, 0x8, 0x5, 0xaa6}]}) 1.079342128s ago: executing program 4 (id=640): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x1) ioctl$TIOCGPTPEER(r2, 0x400c0930, 0x8) 1.078308615s ago: executing program 0 (id=642): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006400000002509"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="050000"], 0x1c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x48, r5, 0x5, 0x70bd25, 0x25dfdc01, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a96adf35abc9cd482f773f9080406cd19968bd03597e7c51"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x48}, 0x1, 0x0, 0x0, 0x40048}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x2c, r7, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfd, {0x60, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff1, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x80000000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006400000002509"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="050000"], 0x1c}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x48, r5, 0x5, 0x70bd25, 0x25dfdc01, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a96adf35abc9cd482f773f9080406cd19968bd03597e7c51"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x48}, 0x1, 0x0, 0x0, 0x40048}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x2c, r7, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfd, {0x60, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff1, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x80000000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) (async) 1.010038516s ago: executing program 0 (id=643): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) 938.522597ms ago: executing program 3 (id=644): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000001c0)) (async) read$dsp(r0, &(0x7f00000000c0)=""/108, 0x6c) (async) syz_emit_vhci(&(0x7f0000000800)=ANY=[@ANYBLOB="05000000000000000000"], 0xa) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000000206010200000000000000000000fdff140007800800134001a576ea08000640000000010500010006000000050005000a00000005000400000000000900020073797a310000000016000300686173683a6e6574"], 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) r3 = fcntl$getown(r1, 0x9) (async) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r5 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x8000, 0x0, 0x0, 0x4, 0x65f40}) (async) bind$nfc_llcp(r4, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async) sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000) (async) sched_setaffinity(r3, 0xfe4c, 0x0) (async) getpgid(r3) (async) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x74000000) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0x3759b526, @mcast1, 0x2}, @in6={0xa, 0x4e22, 0x80, @mcast2, 0x1ff}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e20, 0x9ea, @dev={0xfe, 0x80, '\x00', 0xc}}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e20, @multicast2}], 0xc4) eventfd(0x1000) (async) write$dsp(r1, &(0x7f0000002000)='`', 0x88020) 936.2125ms ago: executing program 3 (id=645): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9ab", 0x6b}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077", 0xc4}, {&(0x7f0000000180)="0c1928a7397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfdbf169e77257f308b400000000227094d569a4456954e58ea185000000000000", 0x38}, {&(0x7f0000000b80)="b97edc68d716252c8449bee174f6e06d864889b733fe11a2cd1b83edf4ee89f557882a6e115f6f313802bf3c797417d7b969c918", 0x34}], 0x4}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68c02bb40b6b870bde5700d368744361ae9fce3a4ff", 0x29}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b", 0xdf}, {&(0x7f0000000740)="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", 0x1fc}, {&(0x7f0000000d80)="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", 0x104}], 0x4}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="1713d50800000024ec24681aa099852c4bfae5a0bbdc62896430c2821b43171cca8728132db611681bb875ce88d2f192d5d5e70a6447b32c8bbd6ca61e1888ccee8a9a05c07cdab36ab953eb5d4845932c98", 0x52, 0x10008095, 0x0, 0x0) 889.944269ms ago: executing program 0 (id=646): r0 = socket(0x40000000015, 0x5, 0x0) (async, rerun: 64) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) (async, rerun: 64) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) (async) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000180)={0x4000, r1}, 0x0) (async) landlock_restrict_self(r2, 0x2) (async) landlock_restrict_self(r2, 0x0) (async) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000780)={r0}) (async, rerun: 64) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) (async) r3 = socket$inet(0x2, 0x1, 0x100) listen(r3, 0x9) (async) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) (async) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x4804, 0x2}, 0x18, 0x1) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) (async) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x408c5) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) (async) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r7}, 0x14) syz_emit_ethernet(0x42, &(0x7f0000000500)={@local, @empty, @val, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @multicast1}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000080)={0x4000, r3}, 0x0) 889.806956ms ago: executing program 0 (id=647): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000000000)={'erspan0\x00', @ifru_ivalue=0x4}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) (async) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000080)={0x18, 0x8, 0xe, 0x3, 0x8000003, 0x101, 0x5, 0x2e}) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x32, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3008000000300003802c00038014000100626f6e643000000000000000000000001400010076657468305f746f5f7465616d00"], 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 789.881323ms ago: executing program 0 (id=648): rt_sigaction(0x19, &(0x7f0000000400)={&(0x7f0000000000)="676466f087bc76ded361b62e26c07fff00c4a3a1cea37b07f38af90000d3a41039000000f344aa643e3ef08504dc8319b4fe00c4011d1da1956ce08f080895dd638f4818ee16e6c442e13ae4470f69a342cb0000", 0x1c000000, 0x0}, 0x0, 0x8, &(0x7f0000000440)) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x410, 0x130, 0x218, 0xc, 0x328, 0x410, 0x328, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff013000"}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xa2) (async) r0 = memfd_create(&(0x7f0000000480)='\x00\xac=\x9d\x00\x00\"0\xc5\xe1\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xef\x04;s\xe1\xc4\xcf\xaa\xa0\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbc*A\xdcq\xb7\xc1\xba&\xd1\xff\xffs\xf1\xc3G,](\x1dA\x8a\x97\xb1\xdb\xe4?\x81\x84\xb8\x92P\x99YO\xb8V\xd5p\x90X\xaaf\x00\x00\x00\xe6_\xc9n\x19\x12\xb0m\x06\a\x00\x00\x00\x00\x00\x00', 0x5) fallocate(r0, 0x0, 0x400000000000000, 0x7) rt_sigtimedwait(&(0x7f0000000540)={[0x4c89]}, &(0x7f0000000600), &(0x7f0000000580)={0x0, 0x989680}, 0x8) (async, rerun: 32) r1 = socket$rds(0x15, 0x5, 0x0) (async, rerun: 32) signalfd4(r0, &(0x7f0000000680)={[0x5]}, 0x8, 0x80800) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='coredump_filter\x00') write$cgroup_pid(r3, &(0x7f0000000140), 0x12) (async) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000080)=0x80, 0x4) (async, rerun: 64) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000005c0)={{0x10000}}, 0x10) (rerun: 64) 789.421362ms ago: executing program 0 (id=649): prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl2\x00', r4, 0x4, 0x5, 0x8, 0x8, 0x29, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @loopback, 0x10, 0x40, 0x1}}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@delqdisc={0x60, 0x25, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xf, 0x6}, {0x3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xd}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_RATE={0x6, 0x5, {0xd, 0xc}}, @TCA_RATE={0x6, 0x5, {0x1, 0x3}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x81}, @qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0x7f}}]}, 0x60}}, 0x400c4) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x2, 0x1, &(0x7f0000000180)=""/88, &(0x7f0000000280)=""/245, &(0x7f0000000380)=""/209, 0xeeee0000}) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x800) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r6, 0x8, r7) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs$pagemap(r8, &(0x7f0000000100)) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010003020000402505a1a440000102030109025c0002010820"], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800703afffe8000000000000000000000000000bbff02000000000000000000000000000186009078ff0000000000000000000000030aa78ce54006598080a8030037004023493b87aafaffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18020001ffffffffff60000000000000"], 0x0) 429.837678ms ago: executing program 2 (id=650): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"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", 0x1029}}, 0xfff7) r3 = dup(0xffffffffffffffff) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r6, 0x28, 0x1, &(0x7f00000012c0)=""/4096, &(0x7f0000000000)=0x1000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) poll(&(0x7f0000000180)=[{r0, 0x8010}, {r1, 0x2000}, {0xffffffffffffffff, 0x2a}, {r2, 0x300}, {0xffffffffffffffff, 0x21}, {r3, 0x1020}, {r4, 0x400}, {r5, 0xa}, {r6, 0x220}, {r7, 0x64}], 0xa, 0xa7c) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x2, 0x0, 0x8eb7}]}) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f0000000040)={0x0, 0x0}) 289.464737ms ago: executing program 2 (id=651): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc1100001200010200"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010007c01c000a"], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x160e) 286.49497ms ago: executing program 2 (id=652): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x7000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x0, 0x0, {0x29}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x29, 0x80, 0x5, 0x2, 0x4b, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x8, 0x3, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x7, 0x1, 0x22, @loopback, @mcast2, 0x7800, 0x10, 0x406e, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x81, 0x30, 0x1a, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x7800, 0x40, 0x2, 0xfffffffa}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x1ac, r7, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0xf, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0xe0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xda, 0x5, "a287dd8757ad73cadeb393d14b58ba068edd638007b5ee9ed837adef3888fe4156992ec6fb58b8d21e8a6b65a18831908f7e010afb78dfbe9f7dfed90238f55272e8bcad1e1c0eaa41b7cc4924f29ffe62a833eeee231e615db1a5a7dd43504c9f2c81595f70219d59c5efeb18ec86de80f49a6dc72cd2a701809589ddc1e570c0504c66f26b99a69c0df39376d492a21153b9802eef9a1d2ab1ab6ad66db6fef5b39fef9ec9581bf4a0c0b23be271f2fc1719ab5e6c1c0155b1ef8e5d7bf82a77b489fd6c5b530f3fe8c740dcc0f0c6f25707ae1423"}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x84) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r12 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r13 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r12, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r14, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r13, 0xc06864ce, &(0x7f0000000100)={r15, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x4], [0x0, 0x0, 0x0, 0x40000], [0x0, 0x1ff, 0x1]}) ioctl$DRM_IOCTL_MODE_GETFB2(r12, 0xc06864ce, &(0x7f0000000300)={r15, 0x0, 0x0, 0x0, 0x0, [], [], [], [0x0, 0x6]}) ioctl$DRM_IOCTL_GEM_FLINK(r12, 0xc008640a, &(0x7f00000002c0)={r16}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r11, 0xc00c642e, 0x0) close_range(r11, 0xffffffffffffffff, 0x0) fcntl$setpipe(r5, 0x407, 0x100000) r17 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r17}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 217.028355ms ago: executing program 4 (id=653): r0 = fsopen(&(0x7f0000000040)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000180)='iocharset', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, 0x0, &(0x7f00000005c0)='GPL\x00'}, 0x94) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, 0x0, 0x0) 216.892808ms ago: executing program 4 (id=654): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r1, 0xc058565d, 0x0) 89.345393ms ago: executing program 4 (id=655): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd700000000048c8163aa38ec25100", @ANYRES32=r1, @ANYBLOB="26003300b0980300ffffffffffff08021100000050505050505057f99eb3c401010005005c02000004008700"], 0x48}, 0x1, 0x0, 0x0, 0x24044080}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x4, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 89.121749ms ago: executing program 3 (id=656): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x200000, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x80000001}]}, 0x3c}}, 0x8006) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="140000002b000b93de09a427b36c690000fff005", 0x14}, {&(0x7f0000000100)="77dc91a5fe33da12374fa90081741d63b8b2d3a868e184ce0b6180981d501efc90f31b45cf47998de2098c9cec92452c1e71effe648cff33495bd3bd9f0d8856604a7f13f3e9d7ba7e29de5421f5fe01f8a4b344191147f541ea96705d3cf6a56811bfd36a6956d62792c6349e098d828c8da10ca2bc56540a393cf51cd5ff0289c3512d4df4aae58693023e502216304f176eb766d08cf2bd8734a6d896ad3853fd64b3ff88e23b326ce591fe8de882e3f1c6bd87f9369610d909271159b8072405865a5ca5a15eefa38cf0be64030e0072", 0xd2}, {&(0x7f0000000340)="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", 0xfc}, {&(0x7f0000000200)="8e86b5ab60809ad5bcb4aeb15a40aea480b3af18fcd0cb100675", 0x1a}], 0x4}, 0x488c0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000100)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9436d20f"}, 0x0, 0x2, {0x0}}) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000100)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9436d20f"}, 0x0, 0x2, {0x0}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x0, &(0x7f0000000080)}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x0, &(0x7f0000000080)}) 0s ago: executing program 2 (id=657): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket(0x2b, 0x1, 0x1) (async) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x3}, 0x18) accept4$packet(r1, 0x0, 0x0, 0x80000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@ipv6_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, [@RTA_MULTIPATH={0xc, 0x9, {0x6d64, 0x1, 0x3}}]}, 0x28}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x7d, &(0x7f0000000000)={r8, 0xffff0006}, 0x8) msgget$private(0x0, 0x0) (async) msgget$private(0x0, 0x0) close_range(r0, r0, 0x0) (async) close_range(r0, r0, 0x0) kernel console output (not intermixed with test programs): [ 38.164213][ T40] audit: type=1400 audit(1751072944.354:60): avc: denied { rlimitinh } for pid=5840 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.172634][ T40] audit: type=1400 audit(1751072944.354:61): avc: denied { siginh } for pid=5840 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:21039' (ED25519) to the list of known hosts. [ 39.177771][ T40] audit: type=1400 audit(1751072945.384:62): avc: denied { name_bind } for pid=5847 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.195325][ T40] audit: type=1400 audit(1751072945.394:63): avc: denied { write } for pid=5848 comm="sh" path="pipe:[6258]" dev="pipefs" ino=6258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.208708][ T40] audit: type=1400 audit(1751072945.414:64): avc: denied { execute } for pid=5848 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.216330][ T40] audit: type=1400 audit(1751072945.414:65): avc: denied { execute_no_trans } for pid=5848 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.254926][ T40] audit: type=1400 audit(1751072947.454:66): avc: denied { mounton } for pid=5848 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.259742][ T5848] cgroup: Unknown subsys name 'net' [ 41.388920][ T5848] cgroup: Unknown subsys name 'cpuset' [ 41.393471][ T5848] cgroup: Unknown subsys name 'rlimit' [ 41.578489][ T5877] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.253592][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.176120][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 45.176132][ T40] audit: type=1400 audit(1751072951.384:80): avc: denied { execmem } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.390797][ T40] audit: type=1400 audit(1751072951.594:81): avc: denied { create } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.397721][ T40] audit: type=1400 audit(1751072951.594:82): avc: denied { read write } for pid=5932 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.405069][ T40] audit: type=1400 audit(1751072951.594:83): avc: denied { open } for pid=5932 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.413869][ T40] audit: type=1400 audit(1751072951.604:84): avc: denied { ioctl } for pid=5932 comm="syz-executor" path="socket:[6297]" dev="sockfs" ino=6297 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.425880][ T5940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.426644][ T5935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.431516][ T5935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.434408][ T5940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.437188][ T5940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.439502][ T5943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.440100][ T5940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.440752][ T5942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.440988][ T5942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.441217][ T5947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.442958][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.443246][ T5943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.443588][ T5943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.443872][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.444045][ T5942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.446080][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.450766][ T40] audit: type=1400 audit(1751072951.654:85): avc: denied { read } for pid=5932 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.452961][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.459830][ T40] audit: type=1400 audit(1751072951.664:86): avc: denied { open } for pid=5932 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.462637][ T5940] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.463997][ T40] audit: type=1400 audit(1751072951.664:87): avc: denied { mounton } for pid=5932 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.470880][ T5940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.475472][ T5296] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.663308][ T40] audit: type=1400 audit(1751072951.864:88): avc: denied { module_request } for pid=5932 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.702862][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 45.797923][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 45.841467][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 45.883822][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 45.894394][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.897956][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.900351][ T5932] bridge_slave_0: entered allmulticast mode [ 45.902953][ T5932] bridge_slave_0: entered promiscuous mode [ 45.906778][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.909018][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.911260][ T5932] bridge_slave_1: entered allmulticast mode [ 45.913870][ T5932] bridge_slave_1: entered promiscuous mode [ 46.057157][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.060229][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.062484][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.064913][ T5933] bridge_slave_0: entered allmulticast mode [ 46.067800][ T5933] bridge_slave_0: entered promiscuous mode [ 46.090276][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.105894][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.108123][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.110399][ T5933] bridge_slave_1: entered allmulticast mode [ 46.113022][ T5933] bridge_slave_1: entered promiscuous mode [ 46.185954][ T5932] team0: Port device team_slave_0 added [ 46.200963][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.203393][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.205868][ T5938] bridge_slave_0: entered allmulticast mode [ 46.208448][ T5938] bridge_slave_0: entered promiscuous mode [ 46.211270][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.213525][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.216123][ T5945] bridge_slave_0: entered allmulticast mode [ 46.218997][ T5945] bridge_slave_0: entered promiscuous mode [ 46.222098][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.224367][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.227715][ T5945] bridge_slave_1: entered allmulticast mode [ 46.230406][ T5945] bridge_slave_1: entered promiscuous mode [ 46.234070][ T5932] team0: Port device team_slave_1 added [ 46.274395][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.276837][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.279164][ T5938] bridge_slave_1: entered allmulticast mode [ 46.281872][ T5938] bridge_slave_1: entered promiscuous mode [ 46.323987][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.326318][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.334192][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.341774][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.360370][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.364427][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.367341][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.375391][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.381092][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.386388][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.390492][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.411788][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.486065][ T5938] team0: Port device team_slave_0 added [ 46.489635][ T5945] team0: Port device team_slave_0 added [ 46.493961][ T5933] team0: Port device team_slave_0 added [ 46.514241][ T5938] team0: Port device team_slave_1 added [ 46.518190][ T5945] team0: Port device team_slave_1 added [ 46.523179][ T5933] team0: Port device team_slave_1 added [ 46.623033][ T5932] hsr_slave_0: entered promiscuous mode [ 46.625996][ T5932] hsr_slave_1: entered promiscuous mode [ 46.660322][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.662551][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.671190][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.675651][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.677852][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.686004][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.689908][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.692158][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.700117][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.716943][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.719229][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.727456][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.749292][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.751613][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.760013][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.763858][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.766240][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.774268][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.874764][ T5933] hsr_slave_0: entered promiscuous mode [ 46.877949][ T5933] hsr_slave_1: entered promiscuous mode [ 46.880082][ T5933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.882597][ T5933] Cannot create hsr debugfs directory [ 46.924001][ T5938] hsr_slave_0: entered promiscuous mode [ 46.926367][ T5938] hsr_slave_1: entered promiscuous mode [ 46.928391][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.930756][ T5938] Cannot create hsr debugfs directory [ 46.935051][ T5945] hsr_slave_0: entered promiscuous mode [ 46.937623][ T5945] hsr_slave_1: entered promiscuous mode [ 46.939673][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.941797][ T5945] Cannot create hsr debugfs directory [ 47.210259][ T5932] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.220036][ T5932] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.224740][ T5932] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.233620][ T5932] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.256810][ T5945] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.262081][ T5945] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.265978][ T5945] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.272598][ T5945] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.318317][ T5933] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.323883][ T5933] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.328949][ T5933] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.332997][ T5933] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.394501][ T5938] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.402256][ T5938] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.406833][ T5938] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.411748][ T5938] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.448003][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.456027][ T5296] Bluetooth: hci0: command tx timeout [ 47.457854][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.488511][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.497498][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.499815][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.512210][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.518909][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.523645][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.526469][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.530858][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.533088][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.535794][ T5296] Bluetooth: hci3: command tx timeout [ 47.536528][ T5939] Bluetooth: hci1: command tx timeout [ 47.537600][ T5935] Bluetooth: hci2: command tx timeout [ 47.550780][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.553854][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.563727][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.571491][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.574832][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.577052][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.589423][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.591683][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.609404][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.619988][ T5932] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.630209][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.632458][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.656782][ T5945] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.660061][ T5945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.663036][ T40] audit: type=1400 audit(1751072953.864:89): avc: denied { sys_module } for pid=5932 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.668277][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.672130][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.711496][ T5938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.730707][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.763798][ T5932] veth0_vlan: entered promiscuous mode [ 47.770316][ T5932] veth1_vlan: entered promiscuous mode [ 47.789857][ T5932] veth0_macvtap: entered promiscuous mode [ 47.796113][ T5932] veth1_macvtap: entered promiscuous mode [ 47.803603][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.818977][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.829630][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.841540][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.846835][ T5932] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.849743][ T5932] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.852509][ T5932] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.856592][ T5932] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.869998][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.921062][ T5945] veth0_vlan: entered promiscuous mode [ 47.928213][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.931621][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.933156][ T5938] veth0_vlan: entered promiscuous mode [ 47.944753][ T5945] veth1_vlan: entered promiscuous mode [ 47.958739][ T5933] veth0_vlan: entered promiscuous mode [ 47.966868][ T5938] veth1_vlan: entered promiscuous mode [ 47.970361][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.972875][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.986787][ T5933] veth1_vlan: entered promiscuous mode [ 47.998248][ T5945] veth0_macvtap: entered promiscuous mode [ 48.004953][ T5945] veth1_macvtap: entered promiscuous mode [ 48.006372][ T5932] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.023235][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.028321][ T5938] veth0_macvtap: entered promiscuous mode [ 48.033290][ T5938] veth1_macvtap: entered promiscuous mode [ 48.041963][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.057405][ T5933] veth0_macvtap: entered promiscuous mode [ 48.060184][ T5945] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.062974][ T5945] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.067735][ T5945] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.070786][ T5945] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.077572][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.082980][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.086835][ T5933] veth1_macvtap: entered promiscuous mode [ 48.091687][ T5938] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.094640][ T5938] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.098679][ T5938] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.101767][ T5938] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.123689][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.141307][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.157630][ T216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.160124][ T216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.164002][ T5933] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.167089][ T5933] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.169880][ T5933] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.172676][ T5933] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.190324][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.193632][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.213654][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.216578][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.230138][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.237770][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.262142][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.271722][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.296639][ T6027] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 48.299019][ T6027] IPv6: NLM_F_CREATE should be set when creating new route [ 48.304597][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.309796][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.367867][ T6029] Zero length message leads to an empty skb [ 48.370362][ T6029] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.376804][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.380961][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.435599][ T6025] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 48.765181][ T6000] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 48.917066][ T6000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.920493][ T6000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.923608][ T6000] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 48.928484][ T6000] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 48.931330][ T6000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.936236][ T6000] usb 5-1: config 0 descriptor?? [ 49.073451][ T6052] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 49.168870][ T6056] Dead loop on virtual device ip6_vti0, fix it urgently! [ 49.171506][ T6056] Dead loop on virtual device ip6_vti0, fix it urgently! [ 49.174465][ T6056] Dead loop on virtual device ip6_vti0, fix it urgently! [ 49.177309][ T6056] Dead loop on virtual device ip6_vti0, fix it urgently! [ 49.179630][ T6056] Dead loop on virtual device ip6_vti0, fix it urgently! [ 49.181995][ T6056] Dead loop on virtual device ip6_vti0, fix it urgently! [ 49.218214][ T6058] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 49.220624][ T6058] IPv6: NLM_F_CREATE should be set when creating new route [ 49.258754][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.262172][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.352982][ T6000] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 49.535424][ T5935] Bluetooth: hci0: command tx timeout [ 49.615896][ T5935] Bluetooth: hci3: command tx timeout [ 49.625380][ T5935] Bluetooth: hci1: command tx timeout [ 49.625404][ T5939] Bluetooth: hci2: command tx timeout [ 49.745280][ T6021] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 49.896271][ T6021] usb 6-1: Using ep0 maxpacket: 32 [ 49.899800][ T6021] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 49.902430][ T6021] usb 6-1: config 0 has no interface number 0 [ 49.904370][ T6021] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 49.907606][ T6021] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 49.910744][ T6021] usb 6-1: config 0 interface 126 has no altsetting 0 [ 49.915991][ T6021] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=d4.1c [ 49.918821][ T6021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.921340][ T6021] usb 6-1: Product: syz [ 49.922696][ T6021] usb 6-1: Manufacturer: syz [ 49.926193][ T6021] usb 6-1: SerialNumber: syz [ 49.931844][ T6021] usb 6-1: config 0 descriptor?? [ 49.936901][ T6076] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 49.939439][ T6076] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 49.950433][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 49.955128][ T6081] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 50.329447][ T6021] ir_usb 6-1:0.126: IR Dongle converter detected [ 50.332216][ T6021] usb 6-1: IRDA class descriptor not found, device not bound [ 50.340440][ T6021] usb 6-1: USB disconnect, device number 2 [ 50.393896][ T40] kauditd_printk_skb: 77 callbacks suppressed [ 50.393906][ T40] audit: type=1400 audit(1751072956.594:167): avc: denied { create } for pid=6088 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 50.402101][ T40] audit: type=1400 audit(1751072956.594:168): avc: denied { read } for pid=6088 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 50.457301][ T40] audit: type=1400 audit(1751072956.664:169): avc: denied { create } for pid=6088 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 50.463651][ T40] audit: type=1400 audit(1751072956.664:170): avc: denied { create } for pid=6088 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 50.469558][ T40] audit: type=1400 audit(1751072956.664:171): avc: denied { ioctl } for pid=6088 comm="syz.2.22" path="socket:[9759]" dev="sockfs" ino=9759 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 50.477165][ T40] audit: type=1400 audit(1751072956.664:172): avc: denied { ioctl } for pid=6088 comm="syz.2.22" path="socket:[8757]" dev="sockfs" ino=8757 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 50.485240][ T40] audit: type=1400 audit(1751072956.664:173): avc: denied { create } for pid=6088 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 50.491627][ T40] audit: type=1400 audit(1751072956.684:174): avc: denied { setopt } for pid=6088 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.887626][ T6092] netlink: 'syz.1.23': attribute type 1 has an invalid length. [ 50.890404][ T6092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 51.028335][ T40] audit: type=1400 audit(1751072957.234:175): avc: denied { read } for pid=6094 comm="syz.1.24" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.037763][ T40] audit: type=1400 audit(1751072957.234:176): avc: denied { open } for pid=6094 comm="syz.1.24" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.213829][ T79] Bluetooth: hci5: Frame reassembly failed (-84) [ 51.235343][ T6106] netlink: 'syz.0.28': attribute type 23 has an invalid length. [ 51.335255][ T6109] fuse: Bad value for 'rootmode' [ 51.350715][ T6021] usb 5-1: USB disconnect, device number 2 [ 51.361310][ T6111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 51.397988][ T6116] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 51.400418][ T6116] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 51.403370][ T6116] vhci_hcd vhci_hcd.0: Device attached [ 51.408934][ T6117] vhci_hcd: unknown pdu 2 [ 51.411402][ T1143] vhci_hcd: stop threads [ 51.412973][ T1143] vhci_hcd: release socket [ 51.414421][ T1143] vhci_hcd: disconnect device [ 51.501779][ T6121] binder: 6119:6121 ioctl c0306201 200000000640 returned -22 [ 51.615201][ T5296] Bluetooth: hci0: command tx timeout [ 51.695417][ T5296] Bluetooth: hci2: command tx timeout [ 51.705252][ T5296] Bluetooth: hci1: command tx timeout [ 51.705459][ T5940] Bluetooth: hci3: command tx timeout [ 52.015912][ T5939] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 52.016211][ T5940] Bluetooth: hci4: command 0xfc11 tx timeout [ 52.103718][ T6131] ======================================================= [ 52.103718][ T6131] WARNING: The mand mount option has been deprecated and [ 52.103718][ T6131] and is ignored by this kernel. Remove the mand [ 52.103718][ T6131] option from the mount to silence this warning. [ 52.103718][ T6131] ======================================================= [ 52.239977][ T6133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7168 sclass=netlink_route_socket pid=6133 comm=syz.2.38 [ 52.250236][ T6139] io-wq is not configured for unbound workers [ 52.316794][ T6142] fuse: Bad value for 'rootmode' [ 52.371128][ T6148] netlink: 248 bytes leftover after parsing attributes in process `syz.0.41'. [ 52.436608][ T6154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.44'. [ 52.440102][ T6154] netlink: 'syz.0.44': attribute type 7 has an invalid length. [ 52.443473][ T6154] netlink: 'syz.0.44': attribute type 8 has an invalid length. [ 52.446951][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.44'. [ 52.489516][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.45'. [ 52.521668][ T6164] netlink: 'syz.2.46': attribute type 39 has an invalid length. [ 52.652530][ T6172] fuse: Unknown parameter 'use00000000000000000000' [ 52.687752][ T6174] syz.0.50: attempt to access beyond end of device [ 52.687752][ T6174] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 52.691918][ T6174] XFS (nbd0): SB validate failed with error -5. [ 52.734434][ T6181] bridge0: entered allmulticast mode [ 52.740014][ T6181] pim6reg: entered allmulticast mode [ 52.769526][ T6181] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 52.784203][ T6186] macvlan2: entered promiscuous mode [ 52.789287][ T6186] macvlan2: entered allmulticast mode [ 53.003254][ T6203] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.006626][ T6203] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.061841][ T6210] netlink: 'syz.0.61': attribute type 3 has an invalid length. [ 53.065937][ T6210] netlink: 'syz.0.61': attribute type 3 has an invalid length. [ 53.195568][ T6217] kvm: MWAIT instruction emulated as NOP! [ 53.215758][ T5935] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 53.347697][ T53] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 53.350826][ T6233] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.354217][ T6233] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.469492][ T6248] capability: warning: `syz.0.75' uses deprecated v2 capabilities in a way that may be insecure [ 53.498606][ T53] usb 8-1: Using ep0 maxpacket: 16 [ 53.502603][ T53] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 53.507130][ T53] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 53.521765][ T53] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.524605][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.527177][ T53] usb 8-1: Product: М [ 53.528528][ T53] usb 8-1: Manufacturer: ӿ [ 53.530353][ T53] usb 8-1: SerialNumber: syz [ 53.625185][ T54] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 53.638021][ T6254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.74'. [ 53.705256][ T5935] Bluetooth: hci0: command tx timeout [ 53.742607][ T6257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.746695][ T6257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.753669][ T53] cdc_ncm 8-1:1.0: bind() failure [ 53.757553][ T53] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 53.759722][ T53] cdc_ncm 8-1:1.1: bind() failure [ 53.763552][ T53] usb 8-1: USB disconnect, device number 2 [ 53.785194][ T5935] Bluetooth: hci1: command tx timeout [ 53.785480][ T5940] Bluetooth: hci3: command tx timeout [ 53.785515][ T5939] Bluetooth: hci2: command tx timeout [ 53.790748][ T54] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 53.794199][ T54] usb 6-1: config 0 has no interfaces? [ 53.796860][ T54] usb 6-1: config 0 has no interfaces? [ 53.799918][ T54] usb 6-1: config 0 has no interfaces? [ 53.802491][ T54] usb 6-1: config 0 has no interfaces? [ 53.804994][ T54] usb 6-1: config 0 has no interfaces? [ 53.807499][ T54] usb 6-1: config 0 has no interfaces? [ 53.809963][ T54] usb 6-1: config 0 has no interfaces? [ 53.812387][ T54] usb 6-1: config 0 has no interfaces? [ 53.816597][ T54] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.819500][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.822120][ T54] usb 6-1: Product: syz [ 53.823621][ T54] usb 6-1: Manufacturer: syz [ 53.825584][ T54] usb 6-1: SerialNumber: syz [ 53.828952][ T54] usb 6-1: config 0 descriptor?? [ 54.035681][ T53] usb 6-1: USB disconnect, device number 3 [ 54.322718][ T6261] netlink: 'syz.3.78': attribute type 10 has an invalid length. [ 54.328728][ T6261] bond0: (slave bond_slave_0): Releasing backup interface [ 54.589118][ T53] hid (null): invalid report_count 45679 [ 54.593583][ T53] hid-generic 0007:000F:1000.0003: unexpected long global item [ 54.597454][ T53] hid-generic 0007:000F:1000.0003: probe with driver hid-generic failed with error -22 [ 54.640195][ T6291] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.88'. [ 54.685272][ T34] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 54.691425][ T6295] netlink: 'syz.2.87': attribute type 2 has an invalid length. [ 54.694444][ T6295] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.87'. [ 54.710524][ T6292] 9pnet_fd: Insufficient options for proto=fd [ 54.738907][ T6300] process 'syz.3.90' launched '/dev/fd/3' with NULL argv: empty string added [ 54.757153][ T6292] vivid-000: ================= START STATUS ================= [ 54.759849][ T6292] vivid-000: Test Pattern: 75% Colorbar [ 54.762184][ T6292] vivid-000: Fill Percentage of Frame: 100 [ 54.764595][ T6292] vivid-000: Horizontal Movement: No Movement [ 54.767928][ T6292] vivid-000: Vertical Movement: No Movement [ 54.770385][ T6292] vivid-000: OSD Text Mode: All [ 54.772039][ T6292] vivid-000: Show Border: false [ 54.773715][ T6292] vivid-000: Show Square: false [ 54.775785][ T6292] vivid-000: Sensor Flipped Horizontally: false [ 54.778077][ T6292] vivid-000: Sensor Flipped Vertically: false [ 54.780815][ T6292] vivid-000: Insert SAV Code in Image: false [ 54.783378][ T6292] vivid-000: Insert EAV Code in Image: false [ 54.786119][ T6292] vivid-000: Insert Video Guard Band: false [ 54.788010][ T6292] vivid-000: Reduced Framerate: false [ 54.789814][ T6292] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 54.792256][ T6292] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 54.794729][ T6292] vivid-000: Enable Capture Cropping: true [ 54.796843][ T6292] vivid-000: Enable Capture Composing: true [ 54.798848][ T6292] vivid-000: Enable Capture Scaler: true [ 54.800652][ T6292] vivid-000: Timestamp Source: End of Frame [ 54.802515][ T6292] vivid-000: Colorspace: sRGB [ 54.803997][ T6292] vivid-000: Transfer Function: Default [ 54.805843][ T6292] vivid-000: Y'CbCr Encoding: Default [ 54.807530][ T6292] vivid-000: HSV Encoding: Hue 0-179 [ 54.809198][ T6292] vivid-000: Quantization: Default [ 54.810928][ T6292] vivid-000: Apply Alpha To Red Only: false [ 54.812849][ T6292] vivid-000: Standard Aspect Ratio: 4x3 [ 54.814682][ T6292] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 54.817270][ T6292] vivid-000: DV Timings: 640x480p59 inactive [ 54.819226][ T6292] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 54.821647][ T6292] vivid-000: Maximum EDID Blocks: 2 [ 54.823326][ T6292] vivid-000: Limited RGB Range (16-235): false [ 54.825415][ T6292] vivid-000: Rx RGB Quantization Range: Automatic [ 54.827501][ T6292] vivid-000: Power Present: 0x00000001 [ 54.829303][ T6292] tpg source WxH: 320x240 (Y'CbCr) [ 54.830959][ T6292] tpg field: 1 [ 54.832084][ T6292] tpg crop: (0,0)/320x240 [ 54.833501][ T6292] tpg compose: (0,0)/320x240 [ 54.835053][ T6292] tpg colorspace: 8 [ 54.836379][ T6292] tpg transfer function: 0/0 [ 54.837886][ T6292] tpg Y'CbCr encoding: 0/0 [ 54.839344][ T6292] tpg quantization: 0/0 [ 54.840753][ T6292] tpg RGB range: 0/2 [ 54.842050][ T6292] vivid-000: ================== END STATUS ================== [ 54.845178][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 54.849744][ T34] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 54.855461][ T34] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 54.858357][ T34] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 54.860904][ T34] usb 6-1: Product: syz [ 54.862256][ T34] usb 6-1: Manufacturer: syz [ 54.863834][ T34] usb 6-1: SerialNumber: syz [ 54.866898][ T34] usb 6-1: config 0 descriptor?? [ 54.868982][ T6240] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 55.139620][ T6322] netlink: 'syz.3.97': attribute type 39 has an invalid length. [ 55.235263][ T34] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 55.276380][ T835] usb 6-1: USB disconnect, device number 4 [ 55.386855][ T34] usb 7-1: not running at top speed; connect to a high speed hub [ 55.393558][ T34] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.398604][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.400613][ T40] kauditd_printk_skb: 95 callbacks suppressed [ 55.400626][ T40] audit: type=1400 audit(1751072961.604:272): avc: denied { read } for pid=6324 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.402098][ T6325] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 55.414580][ T34] usb 7-1: Product: ףꙏ䏞졍濇㾡徘˩┽콆施쀛ᓑⷋ㯠L脖跋ꀭછᮄ껀㊭贈왴ڜ㊎暰䀇˚뛿ӝ犧肉፥㯳篌喭㗜즑ヤ齶ⴵ۶渙ഥ㺬㆕瑝隋␁⤰٩쾁滄웑곶霕빪킑휋俜픎靯䬂㜄 [ 55.421715][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.98'. [ 55.423740][ T34] usb 7-1: Manufacturer: Ф [ 55.429087][ T34] usb 7-1: SerialNumber: 왐Ῡ瓅ꏭ赭鴃஘賫섖휌劂㻊虼⏶韨⑻㓙 [ 55.510113][ T6332] kvm: emulating exchange as write [ 55.513574][ T40] audit: type=1400 audit(1751072961.714:273): avc: denied { write } for pid=6329 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.571605][ T6336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.101'. [ 55.577776][ T6330] cdrom: dropping to single frame dma [ 55.578225][ T6336] xfrm1: entered promiscuous mode [ 55.582043][ T6336] xfrm1: entered allmulticast mode [ 55.645288][ T34] cdc_ncm 7-1:1.0: bind() failure [ 55.651486][ T34] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 55.654162][ T34] cdc_ncm 7-1:1.1: bind() failure [ 55.660175][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.103'. [ 55.663975][ T34] usb 7-1: USB disconnect, device number 2 [ 55.674705][ T40] audit: type=1400 audit(1751072961.874:274): avc: denied { write } for pid=6343 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 55.743646][ T6356] binder: 6355:6356 ioctl c0306201 200000000080 returned -14 [ 55.845188][ T40] audit: type=1400 audit(1751072962.044:275): avc: denied { listen } for pid=6362 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.911773][ T40] audit: type=1400 audit(1751072962.114:276): avc: denied { map } for pid=6371 comm="syz.0.113" path="socket:[12444]" dev="sockfs" ino=12444 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.919044][ T40] audit: type=1400 audit(1751072962.114:277): avc: denied { read accept } for pid=6371 comm="syz.0.113" path="socket:[12444]" dev="sockfs" ino=12444 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.926697][ T40] audit: type=1400 audit(1751072962.114:278): avc: denied { bind } for pid=6371 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.933086][ T40] audit: type=1400 audit(1751072962.114:279): avc: denied { name_bind } for pid=6371 comm="syz.0.113" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 55.944687][ T40] audit: type=1400 audit(1751072962.114:280): avc: denied { node_bind } for pid=6371 comm="syz.0.113" saddr=255.255.255.255 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 56.020603][ T6387] fuse: Bad value for 'fd' [ 56.023315][ T40] audit: type=1400 audit(1751072962.224:281): avc: denied { create } for pid=6379 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 56.075529][ T6394] netlink: 'syz.0.119': attribute type 5 has an invalid length. [ 56.224757][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 56.271384][ T6423] Invalid source name [ 56.272814][ T6423] UBIFS error (pid: 6423): cannot open "/dev/sg0", error -22 [ 56.279368][ T6423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30224 sclass=netlink_route_socket pid=6423 comm=syz.0.128 [ 56.311905][ T6426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'. [ 56.322091][ T6426] bridge0: entered promiscuous mode [ 56.324102][ T6426] macsec1: entered promiscuous mode [ 56.327211][ T6426] bridge0: port 3(macsec1) entered blocking state [ 56.329364][ T6426] bridge0: port 3(macsec1) entered disabled state [ 56.331493][ T6426] macsec1: entered allmulticast mode [ 56.333150][ T6426] bridge0: entered allmulticast mode [ 56.337042][ T6426] macsec1: left allmulticast mode [ 56.338661][ T6426] bridge0: left allmulticast mode [ 56.342047][ T6426] bridge0: left promiscuous mode [ 56.553892][ T6438] openvswitch: netlink: Flow actions attr not present in new flow. [ 56.566653][ T1336] libceph: connect (1)[b::]:6789 error -101 [ 56.568886][ T1336] libceph: mon0 (1)[b::]:6789 connect error [ 56.619487][ T6443] ntfs3(sr0): Primary boot signature is not NTFS. [ 56.622286][ T6443] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 56.726105][ T6447] syz.3.136: attempt to access beyond end of device [ 56.726105][ T6447] nbd3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 56.730067][ T6447] EXT4-fs (nbd3): unable to read superblock [ 56.826475][ T1336] libceph: connect (1)[b::]:6789 error -101 [ 56.828573][ T1336] libceph: mon0 (1)[b::]:6789 connect error [ 56.874333][ T6459] netlink: 'syz.3.139': attribute type 2 has an invalid length. [ 56.878298][ T6459] program syz.3.139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.096833][ T6470] syz.2.141 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 57.106908][ T6470] netlink: 60 bytes leftover after parsing attributes in process `syz.2.141'. [ 57.339791][ T1336] libceph: connect (1)[b::]:6789 error -101 [ 57.342493][ T1336] libceph: mon0 (1)[b::]:6789 connect error [ 57.384629][ T6438] ceph: No mds server is up or the cluster is laggy [ 57.455317][ T5980] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 57.566327][ T6495] fuse: Unknown parameter 'user_id00000000000000000000' [ 57.599724][ T6497] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 57.602930][ T6497] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 57.606028][ T5980] usb 7-1: Using ep0 maxpacket: 32 [ 57.609685][ T5980] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 57.612127][ T5980] usb 7-1: config 0 has no interface number 0 [ 57.615898][ T5980] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 57.618703][ T5980] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.621161][ T5980] usb 7-1: Product: syz [ 57.622434][ T5980] usb 7-1: Manufacturer: syz [ 57.624115][ T5980] usb 7-1: SerialNumber: syz [ 57.628226][ T5980] usb 7-1: config 0 descriptor?? [ 57.631500][ T5980] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 57.634222][ T5980] usb 7-1: selecting invalid altsetting 1 [ 57.636194][ T5980] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 57.640808][ T5980] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 57.644089][ T5980] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 57.647061][ T5980] usb 7-1: media controller created [ 57.655671][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 57.659579][ T5980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 57.687248][ T6506] netlink: 'syz.1.154': attribute type 1 has an invalid length. [ 57.690980][ T6506] netlink: 244 bytes leftover after parsing attributes in process `syz.1.154'. [ 57.791730][ T6520] fuse: Unknown parameter 'user_id00000000000000000000' [ 58.047875][ T6544] serio: Serial port ptm0 [ 58.374406][ T6554] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 58.416985][ T6556] fuse: Bad value for 'fd' [ 58.443862][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.171'. [ 58.446944][ T6558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.171'. [ 58.499842][ T5940] Bluetooth: Wrong link type (-22) [ 58.720188][ T6566] warning: `syz.3.174' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 58.736751][ T5980] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 58.741214][ T5980] zl10353_read_register: readreg error (reg=127, ret==-110) [ 58.756585][ T6472] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 58.767584][ T5980] usb 7-1: USB disconnect, device number 3 [ 58.908323][ T6580] fuse: Bad value for 'fd' [ 59.123991][ T6598] Bluetooth: MGMT ver 1.23 [ 59.197979][ T6607] ata3.00: invalid multi_count 1 ignored [ 59.288462][ T6619] fuse: Bad value for 'fd' [ 59.319641][ T6626] xt_hashlimit: overflow, rate too high: 0 [ 59.371530][ T6630] team_slave_1: entered promiscuous mode [ 59.481567][ T6647] fuse: Unknown parameter '0x0000000000000003' [ 59.675612][ T53] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 59.835273][ T53] usb 8-1: Using ep0 maxpacket: 8 [ 59.838405][ T53] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 59.841098][ T53] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 59.844157][ T53] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 59.847591][ T53] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 59.851117][ T53] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.855787][ T53] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 59.858619][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.064211][ T53] usb 8-1: usb_control_msg returned -32 [ 60.067341][ T53] usbtmc 8-1:16.0: can't read capabilities [ 60.080802][ T53] usb 8-1: USB disconnect, device number 3 [ 60.560102][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 60.560119][ T40] audit: type=1400 audit(1751072966.764:328): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 60.592381][ T6681] fuse: Unknown parameter '0x0000000000000003' [ 60.597003][ T40] audit: type=1400 audit(1751072966.804:329): avc: denied { append } for pid=6682 comm="syz.3.212" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 60.597419][ T6683] random: crng reseeded on system resumption [ 60.605207][ T40] audit: type=1400 audit(1751072966.804:330): avc: denied { open } for pid=6682 comm="syz.3.212" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 60.624628][ T40] audit: type=1400 audit(1751072966.824:331): avc: denied { ioctl } for pid=6682 comm="syz.3.212" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 60.658183][ T6685] syzkaller0: entered promiscuous mode [ 60.659898][ T6685] syzkaller0: entered allmulticast mode [ 60.666738][ T40] audit: type=1400 audit(1751072966.874:332): avc: denied { relabelfrom } for pid=6684 comm="syz.0.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 60.673222][ T40] audit: type=1400 audit(1751072966.874:333): avc: denied { relabelto } for pid=6684 comm="syz.0.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 60.837886][ T40] audit: type=1400 audit(1751072967.044:334): avc: denied { create } for pid=6687 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 60.844267][ T40] audit: type=1400 audit(1751072967.044:335): avc: denied { write } for pid=6687 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 60.852228][ T40] audit: type=1400 audit(1751072967.044:336): avc: denied { shutdown } for pid=6687 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 60.935523][ T6690] i2c i2c-1: Invalid block write size 34 [ 60.976765][ T40] audit: type=1400 audit(1751072967.184:337): avc: denied { unmount } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 61.089809][ T6710] Bluetooth: MGMT ver 1.23 [ 61.100275][ T6710] omfs: Invalid superblock (0) [ 61.180927][ T6715] fuse: Unknown parameter '0x0000000000000003' [ 61.210162][ T6717] __nla_validate_parse: 2 callbacks suppressed [ 61.210173][ T6717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.222'. [ 61.210521][ T6719] netlink: 20 bytes leftover after parsing attributes in process `syz.3.222'. [ 61.549405][ T6729] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 61.586279][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 61.594384][ T6734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.226'. [ 61.597833][ T6734] netlink: 'syz.3.226': attribute type 20 has an invalid length. [ 61.619401][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.227'. [ 61.633221][ T6741] 9pnet_fd: Insufficient options for proto=fd [ 61.657772][ T6744] netlink: 48 bytes leftover after parsing attributes in process `syz.0.229'. [ 61.689068][ T6749] fuse: Unknown parameter '0x0000000000000003' [ 61.760857][ T6764] bpf: Bad value for 'mode' [ 61.849465][ T6772] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=53017 sclass=netlink_xfrm_socket pid=6772 comm=syz.3.237 [ 61.938475][ T6780] fuse: Unknown parameter '0x0000000000000003' [ 61.980485][ T6786] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 61.992752][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 62.038201][ T6791] No source specified [ 62.144513][ T6803] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 62.171369][ T6805] overlayfs: conflicting options: userxattr,redirect_dir=on [ 62.179418][ T6805] overlayfs: conflicting options: userxattr,redirect_dir=on [ 62.193878][ T6808] fuse: Unknown parameter '0x0000000000000003' [ 62.335468][ T6820] XFS (nullb0): Invalid superblock magic number [ 62.507224][ T6845] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 62.523289][ T6845] kvm: pic: non byte read [ 62.528409][ T6845] kvm: pic: level sensitive irq not supported [ 62.528721][ T6845] kvm: pic: non byte read [ 62.533830][ T6845] kvm: pic: level sensitive irq not supported [ 62.534128][ T6845] kvm: pic: non byte read [ 62.538850][ T6845] kvm: pic: level sensitive irq not supported [ 62.539129][ T6845] kvm: pic: non byte read [ 62.644250][ T6850] netlink: 'syz.3.261': attribute type 5 has an invalid length. [ 62.647593][ T6850] netlink: 'syz.3.261': attribute type 5 has an invalid length. [ 62.674299][ T6852] fuse: Unknown parameter 'fd0x0000000000000003' [ 62.785317][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 62.924381][ T6856] binder: 6855:6856 ioctl 4018f514 200000000000 returned -22 [ 62.927040][ T6856] binder: 6855:6856 unknown command 0 [ 62.928793][ T6856] binder: 6855:6856 ioctl c0306201 200000000480 returned -22 [ 62.936575][ T10] usb 6-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 1024 [ 62.939622][ T10] usb 6-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 1023 [ 62.942762][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 62.952709][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 62.955609][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.958218][ T10] usb 6-1: Manufacturer: 撮皌⚰⁓ꨯ뢇銦埞ᑮ缌ฌﺍᓛ뼿⦞鹆鶝ꯁ㧾㈊袥1ͩ뽘덕ᦀꖎ咢䛏둧᱕釃ʋ㏘翮㘠畼Რ䇃쑈㐜鰣过㛲炜嶘쾂笙ὅ蔍뒆ጛ⟨ু秉碈귓ៈ포㏵寕⾇옛孊땰৔⊇Ӳ맡ཱᜮ㕀刢同ማ鐭쮏﷓渘其棖煲㯉볺戮锾㟔⿭紮﹍戎肺됻쪋 [ 62.974333][ T10] usb 6-1: SerialNumber: Й [ 62.978496][ T6845] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 62.980735][ T6845] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 63.189042][ T10] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 6 proto 2 vid 0x0525 pid 0xA4A8 [ 63.194858][ T10] usb 6-1: USB disconnect, device number 5 [ 63.198844][ T10] usblp0: removed [ 63.231527][ T6878] fuse: Unknown parameter 'fd0x0000000000000003' [ 63.320442][ T6889] No source specified [ 63.322002][ T6889] No source specified [ 63.323464][ T6889] No source specified [ 63.325028][ T6889] No source specified [ 63.326775][ T6889] No source specified [ 63.328173][ T6889] No source specified [ 63.329572][ T6889] No source specified [ 63.330928][ T6889] No source specified [ 63.332280][ T6889] No source specified [ 63.333615][ T6889] No source specified [ 63.334969][ T6889] No source specified [ 63.338036][ T6889] No source specified [ 63.339513][ T6889] No source specified [ 63.341382][ T6889] No source specified [ 63.342832][ T6889] No source specified [ 63.344199][ T6889] No source specified [ 63.346084][ T6889] No source specified [ 63.347477][ T6889] No source specified [ 63.348915][ T6889] No source specified [ 63.350432][ T6889] No source specified [ 63.351865][ T6889] No source specified [ 63.353200][ T6889] No source specified [ 63.354608][ T6889] No source specified [ 63.356211][ T6889] No source specified [ 63.357706][ T6889] No source specified [ 63.359308][ T6889] No source specified [ 63.361171][ T6889] No source specified [ 63.362633][ T6889] No source specified [ 63.364013][ T6889] No source specified [ 63.365506][ T6889] No source specified [ 63.366881][ T6889] No source specified [ 63.368223][ T6889] No source specified [ 63.369669][ T6889] No source specified [ 63.371112][ T6889] No source specified [ 63.372513][ T6889] No source specified [ 63.373891][ T6889] No source specified [ 63.375342][ T6889] No source specified [ 63.376679][ T6889] No source specified [ 63.378294][ T6889] No source specified [ 63.379728][ T6889] No source specified [ 63.381574][ T6889] No source specified [ 63.383005][ T6889] No source specified [ 63.384354][ T6889] No source specified [ 63.386457][ T6889] No source specified [ 63.387916][ T6889] No source specified [ 63.389340][ T6889] No source specified [ 63.390775][ T6889] No source specified [ 63.392117][ T6889] No source specified [ 63.393473][ T6889] No source specified [ 63.394863][ T6889] No source specified [ 63.396585][ T6889] No source specified [ 63.397971][ T6889] No source specified [ 63.399343][ T6889] No source specified [ 63.400930][ T6889] No source specified [ 63.402294][ T6889] No source specified [ 63.403767][ T6889] No source specified [ 63.405202][ T6889] No source specified [ 63.405758][ T6892] syz.3.276 uses obsolete (PF_INET,SOCK_PACKET) [ 63.406858][ T6889] No source specified [ 63.409703][ T6889] No source specified [ 63.411055][ T6889] No source specified [ 63.412386][ T6889] No source specified [ 63.412661][ T6892] netlink: 'syz.3.276': attribute type 10 has an invalid length. [ 63.413710][ T6889] No source specified [ 63.417373][ T6889] No source specified [ 63.418709][ T6889] No source specified [ 63.419576][ T6892] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 63.420053][ T6889] No source specified [ 63.424106][ T6892] netlink: 168 bytes leftover after parsing attributes in process `syz.3.276'. [ 63.427631][ T6892] netlink: 168 bytes leftover after parsing attributes in process `syz.3.276'. [ 63.489124][ T6901] fuse: Unknown parameter 'fd0x0000000000000003' [ 63.491172][ T6898] netlink: 32 bytes leftover after parsing attributes in process `syz.0.279'. [ 63.507102][ T6898] bridge_slave_0: left allmulticast mode [ 63.510400][ T6898] bridge_slave_0: left promiscuous mode [ 63.512808][ T6898] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.519665][ T6898] bridge_slave_1: left allmulticast mode [ 63.521541][ T6898] bridge_slave_1: left promiscuous mode [ 63.523353][ T6898] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.529962][ T6898] bond0: (slave bond_slave_0): Releasing backup interface [ 63.534618][ T6898] bond0: (slave bond_slave_1): Releasing backup interface [ 63.546856][ T6898] team0: Port device team_slave_0 removed [ 63.549429][ T6898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.551796][ T6898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.558137][ T6898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.560619][ T6898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.674548][ T6914] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 63.982103][ T6937] gtp0: entered promiscuous mode [ 64.524217][ T6951] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 64.526493][ T6951] IPv6: NLM_F_CREATE should be set when creating new route [ 64.729852][ T6968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 65.536953][ T7031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 65.663119][ T40] kauditd_printk_skb: 48 callbacks suppressed [ 65.663129][ T40] audit: type=1400 audit(1751072971.864:386): avc: denied { write } for pid=7042 comm="syz.3.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 65.706895][ T7050] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 65.710949][ T7050] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 65.778883][ T7061] netlink: 'syz.2.329': attribute type 1 has an invalid length. [ 65.792168][ T7061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.828991][ T7064] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.849822][ T40] audit: type=1400 audit(1751072972.054:387): avc: denied { wake_alarm } for pid=7059 comm="syz.2.329" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 65.860555][ T7068] x_tables: ip_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 65.904129][ T7073] gretap1: entered promiscuous mode [ 65.908164][ T40] audit: type=1400 audit(1751072972.124:388): avc: denied { create } for pid=7074 comm="syz.3.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 65.914025][ T40] audit: type=1400 audit(1751072972.124:389): avc: denied { write } for pid=7074 comm="syz.3.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 65.936808][ T34] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 66.106594][ T34] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 66.110051][ T34] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 66.112986][ T34] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 66.115741][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.120527][ T7048] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 66.125011][ T34] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 66.330296][ T34] usb 6-1: USB disconnect, device number 6 [ 66.659088][ T7083] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 66.664069][ T7083] __nla_validate_parse: 10 callbacks suppressed [ 66.664079][ T7083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.337'. [ 66.712280][ T7083] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7083 comm=syz.2.337 [ 66.834767][ T7093] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 66.898408][ T29] IPVS: starting estimator thread 0... [ 66.935892][ T40] audit: type=1400 audit(1751072973.134:390): avc: denied { setopt } for pid=7107 comm="syz.1.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.960283][ T7108] bond1: entered promiscuous mode [ 66.961935][ T7108] bond1: entered allmulticast mode [ 66.963701][ T7108] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.976341][ T7115] netlink: 32 bytes leftover after parsing attributes in process `syz.3.347'. [ 66.994774][ T40] audit: type=1400 audit(1751072973.194:391): avc: denied { setopt } for pid=7117 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.995304][ T7103] IPVS: using max 45 ests per chain, 108000 per kthread [ 67.375250][ T5935] Bluetooth: hci3: command 0x0406 tx timeout [ 67.860129][ T7146] evm: overlay not supported [ 67.882494][ T7147] xt_hashlimit: size too large, truncated to 1048576 [ 67.940959][ T7146] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 67.945986][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 67.967301][ T40] audit: type=1400 audit(1751072974.174:392): avc: denied { search } for pid=7149 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.975354][ T40] audit: type=1400 audit(1751072974.174:393): avc: denied { search } for pid=7149 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1898 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.984156][ T40] audit: type=1400 audit(1751072974.174:394): avc: denied { search } for pid=7149 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.992772][ T40] audit: type=1400 audit(1751072974.174:395): avc: denied { search } for pid=7149 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1903 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.013219][ T7157] overlayfs: cannot append lower layer [ 68.018179][ T7157] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(18) [ 68.020239][ T7157] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 68.023248][ T7157] vhci_hcd vhci_hcd.0: Device attached [ 68.027953][ T7157] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(20) [ 68.030006][ T7157] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 68.032353][ T7157] vhci_hcd vhci_hcd.0: Device attached [ 68.035274][ T7157] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(22) [ 68.037289][ T7157] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 68.040389][ T7157] vhci_hcd vhci_hcd.0: Device attached [ 68.042609][ T7157] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 68.046802][ T7157] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(26) [ 68.048805][ T7157] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 68.051178][ T7157] vhci_hcd vhci_hcd.0: Device attached [ 68.053775][ T7157] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(28) [ 68.055820][ T7157] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 68.059222][ T7157] vhci_hcd vhci_hcd.0: Device attached [ 68.061358][ T7157] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 68.064663][ T7166] vhci_hcd: connection closed [ 68.065672][ T7164] vhci_hcd: connection closed [ 68.067487][ T7160] vhci_hcd: connection closed [ 68.075349][ T7169] vhci_hcd: connection closed [ 68.077339][ T7162] vhci_hcd: connection closed [ 68.077345][ T46] vhci_hcd: stop threads [ 68.084949][ T46] vhci_hcd: release socket [ 68.086576][ T46] vhci_hcd: disconnect device [ 68.089907][ T46] vhci_hcd: stop threads [ 68.091367][ T46] vhci_hcd: release socket [ 68.092855][ T46] vhci_hcd: disconnect device [ 68.095678][ T46] vhci_hcd: stop threads [ 68.096860][ T7172] input: syz0 as /devices/virtual/input/input6 [ 68.097232][ T46] vhci_hcd: release socket [ 68.103808][ T46] vhci_hcd: disconnect device [ 68.107877][ T7172] syz.0.363: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 68.108192][ T46] vhci_hcd: stop threads [ 68.113347][ T7172] CPU: 3 UID: 0 PID: 7172 Comm: syz.0.363 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 68.113364][ T7172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.113371][ T7172] Call Trace: [ 68.113375][ T7172] [ 68.113380][ T7172] dump_stack_lvl+0x16c/0x1f0 [ 68.113430][ T7172] warn_alloc+0x248/0x3a0 [ 68.113447][ T7172] ? __pfx_warn_alloc+0x10/0x10 [ 68.113461][ T7172] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 68.113483][ T7172] ? stack_depot_save_flags+0x3e0/0xa40 [ 68.113508][ T7172] ? kasan_save_stack+0x42/0x60 [ 68.113521][ T7172] ? kasan_save_stack+0x33/0x60 [ 68.113533][ T7172] ? kasan_save_track+0x14/0x30 [ 68.113546][ T7172] ? xskq_create+0x52/0x1d0 [ 68.113559][ T7172] ? xsk_setsockopt+0x640/0x840 [ 68.113570][ T7172] ? do_sock_setsockopt+0x224/0x470 [ 68.113583][ T7172] ? xskq_create+0xfb/0x1d0 [ 68.113597][ T7172] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 68.113614][ T7172] ? xskq_create+0xfb/0x1d0 [ 68.113631][ T7172] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 68.113647][ T7172] ? xskq_create+0xfb/0x1d0 [ 68.113660][ T7172] vmalloc_user_noprof+0x9e/0xe0 [ 68.113671][ T7172] ? xskq_create+0xfb/0x1d0 [ 68.113685][ T7172] xskq_create+0xfb/0x1d0 [ 68.113699][ T7172] xsk_setsockopt+0x640/0x840 [ 68.113712][ T7172] ? __pfx_xsk_setsockopt+0x10/0x10 [ 68.113724][ T7172] ? __lock_acquire+0x622/0x1c90 [ 68.113751][ T7172] ? selinux_socket_setsockopt+0x6a/0x80 [ 68.113766][ T7172] ? __pfx_xsk_setsockopt+0x10/0x10 [ 68.113778][ T7172] do_sock_setsockopt+0x224/0x470 [ 68.113788][ T7172] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 68.113807][ T7172] __sys_setsockopt+0x1a0/0x230 [ 68.113823][ T7172] __x64_sys_setsockopt+0xbd/0x160 [ 68.113837][ T7172] ? do_syscall_64+0x91/0x4c0 [ 68.113852][ T7172] ? lockdep_hardirqs_on+0x7c/0x110 [ 68.113873][ T7172] do_syscall_64+0xcd/0x4c0 [ 68.113892][ T7172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.113903][ T7172] RIP: 0033:0x7f84d4d8e929 [ 68.113913][ T7172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.113923][ T7172] RSP: 002b:00007f84d5b85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 68.113933][ T7172] RAX: ffffffffffffffda RBX: 00007f84d4fb5fa0 RCX: 00007f84d4d8e929 [ 68.113940][ T7172] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 68.113946][ T7172] RBP: 00007f84d4e10b39 R08: 0000000000000004 R09: 0000000000000000 [ 68.113966][ T7172] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.113973][ T7172] R13: 0000000000000000 R14: 00007f84d4fb5fa0 R15: 00007ffdc01f0568 [ 68.113986][ T7172] [ 68.113990][ T7172] Mem-Info: [ 68.114281][ T46] vhci_hcd: release socket [ 68.122972][ T7172] active_anon:8702 inactive_anon:0 isolated_anon:0 [ 68.122972][ T7172] active_file:12555 inactive_file:41018 isolated_file:0 [ 68.122972][ T7172] unevictable:1768 dirty:32 writeback:0 [ 68.122972][ T7172] slab_reclaimable:11599 slab_unreclaimable:70068 [ 68.122972][ T7172] mapped:24914 shmem:2398 pagetables:1259 [ 68.122972][ T7172] sec_pagetables:298 bounce:0 [ 68.122972][ T7172] kernel_misc_reclaimable:0 [ 68.122972][ T7172] free:450405 free_pcp:22927 free_cma:0 [ 68.123924][ T46] vhci_hcd: disconnect device [ 68.126180][ T7172] Node 0 active_anon:34808kB inactive_anon:0kB active_file:50220kB inactive_file:163872kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:99656kB dirty:128kB writeback:0kB shmem:6056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12752kB pagetables:4820kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB [ 68.139323][ T46] vhci_hcd: stop threads [ 68.141857][ T7172] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:144kB pagetables:216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 68.143484][ T46] vhci_hcd: release socket [ 68.144999][ T7172] Node 0 [ 68.147814][ T46] vhci_hcd: disconnect device [ 68.148120][ T7176] netlink: 256 bytes leftover after parsing attributes in process `syz.2.364'. [ 68.148153][ T7176] ksmbd: Unknown IPC event: 0, ignore. [ 68.150728][ T7172] DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 68.258695][ T7172] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 68.260567][ T7172] Node 0 DMA32 free:176556kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35180kB inactive_anon:0kB active_file:50220kB inactive_file:163872kB unevictable:3536kB writepending:128kB present:2080628kB managed:1264684kB mlocked:0kB bounce:0kB free_pcp:73496kB local_pcp:17144kB free_cma:0kB [ 68.270471][ T7172] lowmem_reserve[]: 0 0 0 0 0 [ 68.272407][ T7172] Node 1 Normal free:1609072kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:18460kB local_pcp:7392kB free_cma:0kB [ 68.281988][ T7172] lowmem_reserve[]: 0 0 0 0 0 [ 68.283566][ T7172] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 68.287639][ T7172] Node 0 DMA32: 864*4kB (M) 476*8kB (M) 657*16kB (UME) 612*32kB (UME) 187*64kB (UME) 40*128kB (UME) 38*256kB (UME) 23*512kB (UME) 22*1024kB (UME) 10*2048kB (UME) 14*4096kB (UM) = 176304kB [ 68.294300][ T7172] Node 1 Normal: 6*4kB (UME) 11*8kB (UME) 18*16kB (UME) 31*32kB (UME) 16*64kB (UME) 10*128kB (UME) 3*256kB (UE) 4*512kB (ME) 1*1024kB (E) 2*2048kB (UM) 390*4096kB (M) = 1609072kB [ 68.299981][ T7172] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 68.303038][ T7172] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 68.305982][ T7172] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 68.308939][ T7172] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 68.311877][ T7172] 55967 total pagecache pages [ 68.313379][ T7172] 0 pages in swap cache [ 68.314723][ T7172] Free swap = 124996kB [ 68.316111][ T7172] Total swap = 124996kB [ 68.317449][ T7172] 1048443 pages RAM [ 68.318716][ T7172] 0 pages HighMem/MovableOnly [ 68.320214][ T7172] 282943 pages reserved [ 68.321561][ T7172] 0 pages cma reserved [ 71.138491][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.140809][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.401795][ T7207] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 78.402478][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'. [ 78.404381][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 78.404391][ T40] audit: type=1400 audit(1751072984.604:410): avc: denied { mount } for pid=7206 comm="syz.2.368" name="/" dev="hugetlbfs" ino=14960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 78.418396][ T40] audit: type=1400 audit(1751072984.604:411): avc: denied { map } for pid=7205 comm="syz.1.367" path="socket:[13303]" dev="sockfs" ino=13303 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.426240][ T7204] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 78.459773][ T7216] bond1: left promiscuous mode [ 78.467222][ T7216] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 78.470890][ T7216] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 78.476437][ T7216] netlink: 'syz.1.370': attribute type 10 has an invalid length. [ 78.481977][ T7216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.485461][ T7216] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 78.489420][ T7216] netlink: 'syz.1.370': attribute type 10 has an invalid length. [ 78.491843][ T7216] netlink: 40 bytes leftover after parsing attributes in process `syz.1.370'. [ 78.494816][ T7216] batadv0: entered promiscuous mode [ 78.496590][ T7216] batadv0: entered allmulticast mode [ 78.499293][ T7216] bond0: (slave batadv0): Releasing backup interface [ 78.503487][ T7216] bridge0: port 3(batadv0) entered blocking state [ 78.507061][ T7216] bridge0: port 3(batadv0) entered disabled state [ 78.530533][ T7216] block device autoloading is deprecated and will be removed. [ 78.531554][ T7228] kernel profiling enabled (shift: 7) [ 78.552460][ T40] audit: type=1400 audit(1751072984.754:412): avc: denied { append } for pid=7227 comm="syz.3.374" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 78.552605][ T7228] program syz.3.374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.573954][ T7230] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 78.574539][ T40] audit: type=1400 audit(1751072984.774:413): avc: denied { ioctl } for pid=7206 comm="syz.2.368" path="socket:[14958]" dev="sockfs" ino=14958 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 78.577808][ T7230] macsec1: entered allmulticast mode [ 78.584590][ T40] audit: type=1400 audit(1751072984.784:414): avc: denied { write } for pid=7206 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 78.587452][ T7230] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 78.597350][ T7230] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 78.599759][ T7230] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 78.602164][ T40] audit: type=1400 audit(1751072984.804:415): avc: denied { mount } for pid=7233 comm="syz.3.376" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 78.609039][ T40] audit: type=1400 audit(1751072984.804:416): avc: denied { mounton } for pid=7233 comm="syz.3.376" path="/104/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 78.639751][ T40] audit: type=1400 audit(1751072984.844:417): avc: denied { unmount } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 78.697877][ T40] audit: type=1400 audit(1751072984.904:418): avc: denied { create } for pid=7240 comm="syz.1.378" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.704373][ T40] audit: type=1400 audit(1751072984.904:419): avc: denied { module_request } for pid=7240 comm="syz.1.378" kmod="crypto-morus1280-avx2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 78.801780][ T7244] capability: warning: `syz.3.377' uses 32-bit capabilities (legacy support in use) [ 78.889071][ T7249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.892010][ T7249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.902579][ T7253] devpts: Bad value for 'max' [ 79.015796][ T46] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 79.018912][ T46] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 79.050712][ T7265] exFAT-fs (nullb0): invalid boot record signature [ 79.052866][ T7265] exFAT-fs (nullb0): failed to read boot sector [ 79.055833][ T7265] exFAT-fs (nullb0): failed to recognize exfat type [ 79.059278][ T7265] exFAT-fs (nullb0): invalid boot record signature [ 79.061378][ T7265] exFAT-fs (nullb0): failed to read boot sector [ 79.063341][ T7265] exFAT-fs (nullb0): failed to recognize exfat type [ 79.096703][ T7268] netlink: 68 bytes leftover after parsing attributes in process `syz.1.386'. [ 79.233209][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.389'. [ 79.233592][ T7284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.389'. [ 79.283676][ T7289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.392'. [ 79.337440][ T5940] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 79.413427][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'. [ 79.421553][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'. [ 79.457059][ T7311] loop4: detected capacity change from 0 to 7 [ 79.462150][ T7311] Dev loop4: unable to read RDB block 7 [ 79.464333][ T7311] loop4: AHDI p1 p2 [ 79.465984][ T7311] loop4: partition table partially beyond EOD, truncated [ 79.469401][ T7311] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 79.517553][ T7221] udevd[7221]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 79.701577][ T7319] xt_hashlimit: size too large, truncated to 1048576 [ 79.764189][ T7321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12126 sclass=netlink_route_socket pid=7321 comm=syz.3.401 [ 79.839760][ T7329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7329 comm=syz.3.403 [ 79.844414][ T7329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7329 comm=syz.3.403 [ 79.878912][ T7332] tipc: Started in network mode [ 79.880763][ T7332] tipc: Node identity ac1414aa, cluster identity 4711 [ 79.883477][ T7332] tipc: Enabled bearer , priority 10 [ 79.888153][ T7333] binder_alloc: 7331: binder_alloc_buf, no vma [ 79.891916][ T7332] tipc: Enabled bearer , priority 0 [ 80.605324][ T29] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 80.756408][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.760137][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.763219][ T29] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 80.767761][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.776466][ T29] usb 7-1: config 0 descriptor?? [ 80.782421][ T7366] tipc: Resetting bearer [ 80.835689][ T5935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.845348][ T5935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.848501][ T5935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.852644][ T5935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.858014][ T5935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.896565][ T835] tipc: Node number set to 2886997162 [ 81.084657][ T7369] chnl_net:caif_netlink_parms(): no params data found [ 81.218320][ T7369] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.220568][ T7369] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.222833][ T7369] bridge_slave_0: entered allmulticast mode [ 81.229283][ T7369] bridge_slave_0: entered promiscuous mode [ 81.232474][ T7369] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.234751][ T7369] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.238358][ T7369] bridge_slave_1: entered allmulticast mode [ 81.240973][ T7369] bridge_slave_1: entered promiscuous mode [ 81.332249][ T7369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.336813][ T7369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.373365][ T7369] team0: Port device team_slave_0 added [ 81.376705][ T9] cfg80211: failed to load regulatory.db [ 81.377378][ T7369] team0: Port device team_slave_1 added [ 81.412155][ T7369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.414324][ T7369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.422060][ T7369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.426240][ T7369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.428395][ T7369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.436694][ T7369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.473062][ T7369] hsr_slave_0: entered promiscuous mode [ 81.475353][ T7369] hsr_slave_1: entered promiscuous mode [ 81.477443][ T7369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.479962][ T7369] Cannot create hsr debugfs directory [ 81.612494][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'. [ 81.614198][ T7369] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.619645][ T7369] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.624209][ T7369] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.630707][ T7369] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.646180][ T7369] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.648566][ T7369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.650994][ T7369] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.653199][ T7369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.684041][ T7369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.697377][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.700707][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.712377][ T7369] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.718569][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.720915][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.727445][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.729731][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.838103][ T7419] random: crng reseeded on system resumption [ 81.844708][ T7369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.966467][ T7369] veth0_vlan: entered promiscuous mode [ 81.971482][ T7369] veth1_vlan: entered promiscuous mode [ 81.991753][ T7369] veth0_macvtap: entered promiscuous mode [ 81.995612][ T7369] veth1_macvtap: entered promiscuous mode [ 82.003828][ T7369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.009861][ T7369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.014734][ T7369] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.018843][ T7369] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.021556][ T7369] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.024293][ T7369] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.059701][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.062241][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.081079][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.083611][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.171416][ T7433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.432'. [ 82.585315][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 82.736900][ T9] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 82.740369][ T9] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 82.744295][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 82.747923][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 82.752225][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 82.758041][ T9] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 82.761558][ T9] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 82.764652][ T9] usb 8-1: Product: syz [ 82.766446][ T9] usb 8-1: Manufacturer: syz [ 82.772330][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 82.774449][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 82.778016][ T9] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 82.780363][ T9] cdc_wdm 8-1:1.0: Unknown control protocol [ 82.895385][ T5940] Bluetooth: hci0: command tx timeout [ 83.313636][ T29] usbhid 7-1:0.0: can't add hid device: -71 [ 83.315623][ T29] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 83.320201][ T29] usb 7-1: USB disconnect, device number 5 [ 83.378528][ T7462] netlink: 'syz.4.442': attribute type 10 has an invalid length. [ 83.381151][ T7462] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 83.384455][ T7462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.390436][ T5940] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 83.393162][ T5940] Bluetooth: hci1: Injecting HCI hardware error event [ 83.397690][ T5940] Bluetooth: hci1: hardware error 0x00 [ 83.425714][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 83.425725][ T40] audit: type=1400 audit(1751072989.634:454): avc: denied { getopt } for pid=7467 comm="syz.4.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.467919][ T40] audit: type=1400 audit(1751072989.674:455): avc: denied { ioctl } for pid=7474 comm="syz.4.445" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 83.479781][ T7475] bond0: entered promiscuous mode [ 83.481471][ T7475] bond_slave_0: entered promiscuous mode [ 83.483324][ T7475] bond_slave_1: entered promiscuous mode [ 83.486434][ T7475] batadv0: entered promiscuous mode [ 83.488921][ T7475] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 83.490935][ T40] audit: type=1400 audit(1751072989.694:456): avc: denied { setopt } for pid=7477 comm="syz.0.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.498771][ T7475] bond0: left promiscuous mode [ 83.500344][ T7475] bond_slave_0: left promiscuous mode [ 83.502123][ T7475] bond_slave_1: left promiscuous mode [ 83.522569][ T7475] batadv0: left promiscuous mode [ 83.583743][ T40] audit: type=1400 audit(1751072989.784:457): avc: denied { execute } for pid=7479 comm="syz.0.448" path="/dev/nullb0" dev="devtmpfs" ino=2893 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 83.615767][ T40] audit: type=1400 audit(1751072989.824:458): avc: denied { bind } for pid=7482 comm="syz.0.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.621712][ T40] audit: type=1400 audit(1751072989.824:459): avc: denied { listen } for pid=7482 comm="syz.0.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.628251][ T40] audit: type=1400 audit(1751072989.824:460): avc: denied { ioctl } for pid=7484 comm="syz.4.450" path="/dev/usbmon7" dev="devtmpfs" ino=759 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 83.674600][ T40] audit: type=1400 audit(1751072989.874:461): avc: denied { getopt } for pid=7482 comm="syz.0.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.756446][ T7487] usb usb1: usbfs: process 7487 (syz.0.449) did not claim interface 0 before use [ 84.368537][ T7499] __nla_validate_parse: 3 callbacks suppressed [ 84.368547][ T7499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.454'. [ 84.489373][ T7503] Process accounting resumed [ 84.500025][ T40] audit: type=1400 audit(1751072990.704:462): avc: denied { ioctl } for pid=7505 comm="syz.4.457" path="socket:[19624]" dev="sockfs" ino=19624 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 84.510462][ T40] audit: type=1400 audit(1751072990.704:463): avc: denied { ioctl } for pid=7505 comm="syz.4.457" path="socket:[19625]" dev="sockfs" ino=19625 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 84.571992][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.463'. [ 84.574852][ T7522] bond_slave_1: entered promiscuous mode [ 84.578154][ T7522] bond_slave_1: entered allmulticast mode [ 84.617023][ T7525] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 84.676180][ T7532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.462'. [ 84.753532][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'. [ 84.757801][ T7537] [U]  [ 84.785738][ T836] e1000 0000:00:06.0 eth0: Reset adapter [ 84.918530][ T7551] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 84.975224][ T5935] Bluetooth: hci0: command tx timeout [ 85.360957][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 85.361055][ T835] usb 8-1: USB disconnect, device number 4 [ 85.363146][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 85.366781][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 85.455310][ T5940] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 86.978361][ T9] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 87.055454][ T5940] Bluetooth: hci0: command tx timeout [ 89.135341][ T5940] Bluetooth: hci0: command tx timeout [ 98.704989][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 98.704999][ T40] audit: type=1400 audit(1751073004.904:469): avc: denied { override_creds } for pid=7597 comm="syz.0.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 98.714168][ T40] audit: type=1400 audit(1751073004.914:470): avc: denied { accept } for pid=7597 comm="iou-wrk-7605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 98.716606][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'. [ 98.721592][ T40] audit: type=1400 audit(1751073004.914:471): avc: denied { nlmsg_read } for pid=7609 comm="syz.2.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.922889][ T40] audit: type=1400 audit(1751073005.124:472): avc: denied { execute } for pid=7628 comm="syz.3.484" dev="hugetlbfs" ino=18782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 98.931635][ T40] audit: type=1400 audit(1751073005.124:473): avc: denied { execute_no_trans } for pid=7628 comm="syz.3.484" path=2F6D656D66643A5B0BC62F8BDD12A4DE6116C1DB58AE5B1AA9FDFAADD16D64E7854858A9250C1A65E015202864656C6574656429 dev="hugetlbfs" ino=18782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 99.077396][ T7635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.486'. [ 99.795638][ T7670] 9pnet: Could not find request transport: v [ 99.824265][ T7673] random: crng reseeded on system resumption [ 99.834049][ T7673] Restarting kernel threads ... [ 99.837166][ T7673] Done restarting kernel threads. [ 99.867915][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.495'. [ 99.870799][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.495'. [ 99.873795][ T7675] netlink: 'syz.4.495': attribute type 19 has an invalid length. [ 99.945634][ T7681] 9pnet_virtio: no channels available for device syz [ 99.951168][ T7683] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 99.952949][ T40] audit: type=1400 audit(1751073006.154:474): avc: denied { getattr } for pid=7678 comm="syz.2.497" name="/" dev="9p" ino=35913874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 99.972162][ T40] audit: type=1400 audit(1751073006.174:475): avc: denied { map } for pid=7680 comm="syz.4.498" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.977200][ T7681] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 99.982614][ T40] audit: type=1400 audit(1751073006.174:476): avc: denied { execute } for pid=7680 comm="syz.4.498" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.993123][ T40] audit: type=1400 audit(1751073006.204:477): avc: denied { read } for pid=7678 comm="syz.2.497" name="file0" dev="9p" ino=35913876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.000827][ T40] audit: type=1400 audit(1751073006.204:478): avc: denied { read write } for pid=7678 comm="syz.2.497" name="file0" dev="overlay" ino=35913876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.114764][ T5940] Bluetooth: hci3: ACL packet for unknown connection handle 2 [ 100.149855][ T7694] openvswitch: netlink: Key type 10246 is out of range max 32 [ 100.208758][ T7702] netlink: 76 bytes leftover after parsing attributes in process `syz.4.505'. [ 100.296665][ T7706] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20004 [ 100.331925][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.506'. [ 100.334772][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.506'. [ 100.365452][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.510'. [ 100.371655][ T7715] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 100.376095][ T7715] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 100.379626][ T7715] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 100.382356][ T7715] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 100.385954][ T7715] geneve2: entered promiscuous mode [ 100.387667][ T7715] geneve2: entered allmulticast mode [ 100.457933][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.513'. [ 100.461015][ T7725] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 100.463708][ T7725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.510588][ T7730] /dev/sg0: Can't lookup blockdev [ 100.513686][ T7730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.516'. [ 100.562309][ T7740] program syz.4.521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.565276][ T7740] ata1.00: invalid service action 31 [ 100.620576][ T7750] netlink: 'syz.3.525': attribute type 39 has an invalid length. [ 100.765472][ T7761] SELinux: policydb version 1402900228 does not match my version range 15-34 [ 100.769643][ T7761] SELinux: failed to load policy [ 100.839865][ T7765] ucma_write: process 407 (syz.3.532) changed security contexts after opening file descriptor, this is not allowed. [ 101.272771][ T7773] netlink: 'syz.3.534': attribute type 5 has an invalid length. [ 101.488516][ T9] IPVS: starting estimator thread 0... [ 101.575195][ T7791] IPVS: using max 44 ests per chain, 105600 per kthread [ 101.725266][ T1023] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 101.855330][ T1023] usb 9-1: device descriptor read/64, error -71 [ 102.095226][ T1023] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 102.225222][ T1023] usb 9-1: device descriptor read/64, error -71 [ 102.335412][ T1023] usb usb9-port1: attempt power cycle [ 102.420211][ T7807] 9pnet: Found fid 0 not clunked [ 102.712670][ T1023] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 102.746578][ T1023] usb 9-1: device descriptor read/8, error -71 [ 102.815304][ T7834] tmpfs: Unknown parameter '' [ 102.910013][ T7842] wireguard0: entered promiscuous mode [ 102.911764][ T7842] wireguard0: entered allmulticast mode [ 102.995278][ T1023] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 103.025614][ T1023] usb 9-1: device descriptor read/8, error -71 [ 103.145518][ T1023] usb usb9-port1: unable to enumerate USB device [ 103.276458][ T6000] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 103.415183][ T6000] usb 9-1: device descriptor read/64, error -71 [ 103.657283][ T6000] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 103.795186][ T6000] usb 9-1: device descriptor read/64, error -71 [ 103.906194][ T6000] usb usb9-port1: attempt power cycle [ 103.929321][ T7854] netlink: 'syz.0.560': attribute type 3 has an invalid length. [ 103.932438][ T7854] netlink: 'syz.0.560': attribute type 1 has an invalid length. [ 103.935628][ T7854] __nla_validate_parse: 5 callbacks suppressed [ 103.935639][ T7854] netlink: 192 bytes leftover after parsing attributes in process `syz.0.560'. [ 103.941069][ T7854] NCSI netlink: No device for ifindex 0 [ 104.130337][ T7867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.181341][ T7867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.235997][ T7867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.255321][ T6000] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 104.275692][ T6000] usb 9-1: device descriptor read/8, error -71 [ 104.515369][ T6000] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 104.725715][ T6000] usb 9-1: device not accepting address 9, error -71 [ 104.731066][ T6000] usb usb9-port1: unable to enumerate USB device [ 104.830816][ T7882] mkiss: ax0: crc mode is auto. [ 104.924606][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 104.924621][ T40] audit: type=1400 audit(1751073011.124:498): avc: denied { connect } for pid=7891 comm="syz.4.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.931316][ T7897] overlayfs: failed to resolve './bus': -2 [ 104.934703][ T40] audit: type=1400 audit(1751073011.134:499): avc: denied { create } for pid=7894 comm="syz.0.574" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.936543][ T7898] sock: sock_set_timeout: `syz.0.574' (pid 7898) tries to set negative timeout [ 104.948739][ T40] audit: type=1400 audit(1751073011.134:500): avc: denied { link } for pid=7894 comm="syz.0.574" name="file1" dev="tmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.970447][ T40] audit: type=1400 audit(1751073011.174:501): avc: denied { unlink } for pid=5938 comm="syz-executor" name="file0" dev="tmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.992974][ T7908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7908 comm=syz.4.578 [ 105.001105][ T40] audit: type=1400 audit(1751073011.204:502): avc: denied { read } for pid=7906 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 105.008916][ T40] audit: type=1400 audit(1751073011.214:503): avc: denied { getopt } for pid=7906 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 105.053140][ T7914] input: syz0 as /devices/virtual/input/input8 [ 105.089152][ T7907] 9pnet: Found fid 0 not clunked [ 105.140561][ T40] audit: type=1400 audit(1751073011.344:504): avc: denied { associate } for pid=7929 comm="syz.4.584" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 105.151554][ T40] audit: type=1400 audit(1751073011.354:505): avc: denied { append } for pid=7929 comm="syz.4.584" name="file0" dev="9p" ino=35913876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.159989][ T40] audit: type=1400 audit(1751073011.354:506): avc: denied { lock } for pid=7929 comm="syz.4.584" path="/50/file0/file0" dev="9p" ino=35913876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.197977][ T7937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.586'. [ 105.228789][ T40] audit: type=1400 audit(1751073011.434:507): avc: denied { accept } for pid=7940 comm="syz.2.587" path="socket:[21015]" dev="sockfs" ino=21015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 105.500730][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.596'. [ 105.505608][ T7977] netlink: 168 bytes leftover after parsing attributes in process `syz.3.596'. [ 105.508454][ T7977] netlink: 168 bytes leftover after parsing attributes in process `syz.3.596'. [ 106.098149][ T7987] netlink: 80 bytes leftover after parsing attributes in process `syz.2.600'. [ 106.106394][ T7988] MINIX-fs: blocksize too small for device [ 106.349107][ T7999] dns_resolver: Unsupported server list version (0) [ 106.352770][ T7999] trusted_key: encrypted_key: master key parameter ' ߥWcijUn+sxe.d"E:!vZ)0 v4jx*ɤHe ' is invalid [ 106.514452][ T8007] usb usb1: usbfs: process 8007 (syz.0.608) did not claim interface 0 before use [ 106.620467][ T6000] IPVS: starting estimator thread 0... [ 106.649396][ T8028] binder: 8027:8028 ioctl c0585611 200000000100 returned -22 [ 106.652707][ T8030] netlink: 14 bytes leftover after parsing attributes in process `syz.4.613'. [ 106.725541][ T8031] IPVS: using max 44 ests per chain, 105600 per kthread [ 106.839745][ T8049] o2cb: This node has not been configured. [ 106.841761][ T8049] o2cb: Cluster check failed. Fix errors before retrying. [ 106.843985][ T8049] (syz.2.620,8049,1):user_dlm_register:674 ERROR: status = -22 [ 106.847741][ T8049] (syz.2.620,8049,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 107.135755][ T835] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 107.276744][ T8067] fuse: Bad value for 'fd' [ 107.279958][ T8067] netlink: 'syz.2.626': attribute type 1 has an invalid length. [ 107.282464][ T8067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.626'. [ 107.285394][ T835] usb 5-1: Using ep0 maxpacket: 8 [ 107.288348][ T835] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 107.290860][ T835] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.293804][ T835] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 107.296930][ T835] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.299948][ T835] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.303866][ T835] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 107.307829][ T835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.385900][ T8076] netlink: 16 bytes leftover after parsing attributes in process `syz.2.629'. [ 107.388804][ T8076] netlink: 20 bytes leftover after parsing attributes in process `syz.2.629'. [ 107.515980][ T835] usb 5-1: GET_CAPABILITIES returned 0 [ 107.518082][ T835] usbtmc 5-1:16.0: can't read capabilities [ 108.141104][ T8107] /dev/nullb0: Can't lookup blockdev [ 108.229325][ T7060] usb 5-1: USB disconnect, device number 3 [ 108.484215][ T8135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.491011][ T8135] bond0: (slave rose0): Enslaving as an active interface with an up link [ 108.835254][ T7060] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 108.999551][ T7060] usb 5-1: unable to get BOS descriptor or descriptor too short [ 109.002708][ T7060] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 109.005159][ T7060] usb 5-1: can't read configurations, error -71 [ 109.433968][ T8186] [ 109.435029][ T8186] ====================================================== [ 109.437965][ T8186] WARNING: possible circular locking dependency detected SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 109.440741][ T8186] 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 Not tainted [ 109.444177][ T8186] ------------------------------------------------------ [ 109.447895][ T8186] syz.2.657/8186 is trying to acquire lock: [ 109.450429][ T8186] ffff888056c22058 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4d0/0xcc0 [ 109.454987][ T8186] [ 109.454987][ T8186] but task is already holding lock: [ 109.457905][ T8186] ffff888056c20258 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x378/0x5f0 [ 109.461498][ T8186] [ 109.461498][ T8186] which lock already depends on the new lock. [ 109.461498][ T8186] [ 109.465731][ T8186] [ 109.465731][ T8186] the existing dependency chain (in reverse order) is: [ 109.469351][ T8186] [ 109.469351][ T8186] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 109.472112][ T8186] lock_sock_nested+0x41/0xf0 [ 109.473770][ T8186] smc_listen_out+0x202/0x4a0 [ 109.475415][ T8186] smc_listen_work+0x5a3/0x50e0 [ 109.477106][ T8186] process_one_work+0x9cc/0x1b70 [ 109.478803][ T8186] worker_thread+0x6c8/0xf10 [ 109.480425][ T8186] kthread+0x3c2/0x780 [ 109.482024][ T8186] ret_from_fork+0x5d4/0x6f0 [ 109.483768][ T8186] ret_from_fork_asm+0x1a/0x30 [ 109.485427][ T8186] [ 109.485427][ T8186] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 109.488546][ T8186] __lock_acquire+0x126f/0x1c90 [ 109.490239][ T8186] lock_acquire+0x179/0x350 [ 109.491848][ T8186] __flush_work+0x4e4/0xcc0 [ 109.493411][ T8186] __cancel_work_sync+0x10c/0x130 [ 109.495139][ T8186] smc_clcsock_release+0x5f/0xe0 [ 109.497021][ T8186] __smc_release+0x5c2/0x880 [ 109.498609][ T8186] smc_close_non_accepted+0xda/0x200 [ 109.500440][ T8186] smc_close_active+0xc3c/0x1070 [ 109.502141][ T8186] __smc_release+0x634/0x880 [ 109.503754][ T8186] smc_release+0x1fc/0x5f0 [ 109.505333][ T8186] __sock_release+0xb3/0x270 [ 109.506934][ T8186] sock_close+0x1c/0x30 [ 109.508415][ T8186] __fput+0x3ff/0xb70 [ 109.509851][ T8186] task_work_run+0x150/0x240 [ 109.511442][ T8186] exit_to_user_mode_loop+0xeb/0x110 [ 109.513859][ T8186] do_syscall_64+0x3f6/0x4c0 [ 109.515993][ T8186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.518163][ T8186] [ 109.518163][ T8186] other info that might help us debug this: [ 109.518163][ T8186] [ 109.521303][ T8186] Possible unsafe locking scenario: [ 109.521303][ T8186] [ 109.523597][ T8186] CPU0 CPU1 [ 109.525277][ T8186] ---- ---- [ 109.526934][ T8186] lock(sk_lock-AF_SMC/1); [ 109.528401][ T8186] lock((work_completion)(&new_smc->smc_listen_work)); [ 109.531292][ T8186] lock(sk_lock-AF_SMC/1); [ 109.533456][ T8186] lock((work_completion)(&new_smc->smc_listen_work)); [ 109.535607][ T8186] [ 109.535607][ T8186] *** DEADLOCK *** [ 109.535607][ T8186] [ 109.538118][ T8186] 3 locks held by syz.2.657/8186: [ 109.539705][ T8186] #0: ffff888057a43208 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 109.542948][ T8186] #1: ffff888056c20258 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x378/0x5f0 [ 109.545860][ T8186] #2: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfb/0xcc0 [ 109.548716][ T8186] [ 109.548716][ T8186] stack backtrace: [ 109.550552][ T8186] CPU: 0 UID: 0 PID: 8186 Comm: syz.2.657 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 109.550566][ T8186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.550573][ T8186] Call Trace: [ 109.550578][ T8186] [ 109.550583][ T8186] dump_stack_lvl+0x116/0x1f0 [ 109.550600][ T8186] print_circular_bug+0x275/0x350 [ 109.550617][ T8186] check_noncircular+0x14c/0x170 [ 109.550633][ T8186] __lock_acquire+0x126f/0x1c90 [ 109.550651][ T8186] lock_acquire+0x179/0x350 [ 109.550667][ T8186] ? __flush_work+0x4d0/0xcc0 [ 109.550678][ T8186] ? mark_held_locks+0x49/0x80 [ 109.550693][ T8186] ? __flush_work+0x4d0/0xcc0 [ 109.550704][ T8186] __flush_work+0x4e4/0xcc0 [ 109.550715][ T8186] ? __flush_work+0x4d0/0xcc0 [ 109.550727][ T8186] ? __pfx___flush_work+0x10/0x10 [ 109.550738][ T8186] ? __pfx_wq_barrier_func+0x10/0x10 [ 109.550754][ T8186] ? do_raw_spin_lock+0x12c/0x2b0 [ 109.550765][ T8186] ? __pfx___might_resched+0x10/0x10 [ 109.550779][ T8186] __cancel_work_sync+0x10c/0x130 [ 109.550791][ T8186] smc_clcsock_release+0x5f/0xe0 [ 109.550805][ T8186] __smc_release+0x5c2/0x880 [ 109.550818][ T8186] ? __pfx_sock_def_readable+0x10/0x10 [ 109.550831][ T8186] smc_close_non_accepted+0xda/0x200 [ 109.550844][ T8186] smc_close_active+0xc3c/0x1070 [ 109.550858][ T8186] __smc_release+0x634/0x880 [ 109.550870][ T8186] smc_release+0x1fc/0x5f0 [ 109.550881][ T8186] __sock_release+0xb3/0x270 [ 109.550897][ T8186] ? __pfx_sock_close+0x10/0x10 [ 109.550911][ T8186] sock_close+0x1c/0x30 [ 109.550925][ T8186] __fput+0x3ff/0xb70 [ 109.550935][ T8186] ? _raw_spin_unlock_irq+0x23/0x50 [ 109.550949][ T8186] task_work_run+0x150/0x240 [ 109.550960][ T8186] ? __pfx_task_work_run+0x10/0x10 [ 109.550970][ T8186] ? __pfx___do_sys_close_range+0x10/0x10 [ 109.550987][ T8186] exit_to_user_mode_loop+0xeb/0x110 [ 109.551003][ T8186] do_syscall_64+0x3f6/0x4c0 [ 109.551019][ T8186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.551030][ T8186] RIP: 0033:0x7fafdf18e929 [ 109.551039][ T8186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.551050][ T8186] RSP: 002b:00007fafdff63038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 109.551059][ T8186] RAX: 0000000000000000 RBX: 00007fafdf3b6080 RCX: 00007fafdf18e929 [ 109.551066][ T8186] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 109.551072][ T8186] RBP: 00007fafdf210b39 R08: 0000000000000000 R09: 0000000000000000 [ 109.551078][ T8186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.551084][ T8186] R13: 0000000000000000 R14: 00007fafdf3b6080 R15: 00007fff7b12a1c8 [ 109.551093][ T8186] [ 109.634421][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.742391][ C2] ata1: illegal qc_active transition (00000000->40000000) [ 109.762291][ T7649] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.838867][ T7649] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.938209][ T7649] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.017712][ T7649] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.070214][ T1110] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 110.073788][ T1110] ata1.00: configured for UDMA/100 [ 110.102630][ T7649] bridge_slave_1: left allmulticast mode [ 110.104445][ T7649] bridge_slave_1: left promiscuous mode [ 110.106584][ T7649] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.109649][ T7649] bridge_slave_0: left allmulticast mode [ 110.111442][ T7649] bridge_slave_0: left promiscuous mode [ 110.113264][ T7649] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.298781][ T7649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.302511][ T7649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.306473][ T7649] bond0 (unregistering): Released all slaves [ 110.572120][ T7649] hsr_slave_0: left promiscuous mode [ 110.574223][ T7649] hsr_slave_1: left promiscuous mode [ 110.577244][ T7649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.579666][ T7649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.582230][ T7649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.584647][ T7649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.589245][ T7649] veth1_macvtap: left promiscuous mode [ 110.591037][ T7649] veth0_macvtap: left promiscuous mode [ 110.592899][ T7649] veth1_vlan: left promiscuous mode [ 110.594613][ T7649] veth0_vlan: left promiscuous mode [ 110.751039][ T7649] team0 (unregistering): Port device team_slave_1 removed [ 110.787322][ T7649] team0 (unregistering): Port device team_slave_0 removed [ 111.218047][ T7649] IPVS: stop unused estimator thread 0... [ 111.260410][ T7649] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.337933][ T7649] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.409540][ T7649] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.482378][ T7649] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.573335][ T7649] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.576980][ T7649] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 111.669264][ T7649] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.672489][ T7649] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 111.738218][ T7649] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.741489][ T7649] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 111.809634][ T7649] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.812895][ T7649] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 111.915825][ T7649] bridge_slave_1: left allmulticast mode [ 111.917658][ T7649] bridge_slave_1: left promiscuous mode [ 111.919524][ T7649] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.922552][ T7649] bridge_slave_0: left allmulticast mode [ 111.924308][ T7649] bridge_slave_0: left promiscuous mode [ 111.926421][ T7649] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.089697][ T7649] bond0 (unregistering): Released all slaves [ 112.120753][ T7649] bridge0 (unregistering): left allmulticast mode [ 112.161971][ T7649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.165476][ T7649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.169155][ T7649] bond0 (unregistering): Released all slaves [ 112.219655][ T7649] bond1 (unregistering): Released all slaves [ 112.601135][ T7649] hsr_slave_0: left promiscuous mode [ 112.603099][ T7649] hsr_slave_1: left promiscuous mode [ 112.606495][ T7649] hsr_slave_0: left promiscuous mode [ 112.608545][ T7649] hsr_slave_1: left promiscuous mode [ 112.610398][ T7649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.612698][ T7649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.615360][ T7649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.617738][ T7649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.623793][ T7649] veth1_macvtap: left promiscuous mode [ 112.626857][ T7649] veth0_macvtap: left promiscuous mode [ 112.629245][ T7649] veth1_vlan: left promiscuous mode [ 112.630893][ T7649] veth0_vlan: left promiscuous mode [ 112.632984][ T7649] veth1_macvtap: left promiscuous mode [ 112.634734][ T7649] veth0_macvtap: left promiscuous mode [ 112.636583][ T7649] veth1_vlan: left promiscuous mode [ 112.638662][ T7649] veth0_vlan: left promiscuous mode [ 112.783810][ T7649] team0 (unregistering): Port device team_slave_1 removed [ 113.020396][ T7649] pim6reg (unregistering): left allmulticast mode [ 113.137716][ T7649] team0 (unregistering): Port device team_slave_1 removed [ 113.165999][ T7649] team0 (unregistering): Port device team_slave_0 removed [ 113.930594][ T7649] IPVS: stop unused estimator thread 0... VM DIAGNOSIS: 01:10:15 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bfed5 RDI=ffffffff9b088320 RBP=ffffffff9b0882e0 RSP=ffffc9002342f3b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e36312e36 R12=0000000000000000 R13=0000000000000061 R14=ffffffff9b0882e0 R15=ffffffff855bfe70 RIP=ffffffff855bfeff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fafdff636c0 ffffffff 00c00000 GS =0000 ffff8880d6752000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fafdff62f98 CR3=000000006591b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=3a810b1eb6134bdc DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff7b12a550 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fafdf211b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fafdf211b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fafdf211b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fafdf211b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fafdf211bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fafdf211c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff9136822e RBX=ffffffff90b4ec04 RCX=dffffc0000000000 RDX=0000000000000010 RSI=0000000000000021 RDI=ffffffff90b4ebc4 RBP=ffffffff90b4ebc4 RSP=ffffc9000e1bf8e8 R8 =ffffffff913682fa R9 =0000000000000000 R10=ffffc9000e1bf998 R11=0000000000000001 R12=ffffffff90b4ec48 R13=ffffffff8100012f R14=ffffffff90b4ebc4 R15=ffffffff90b4ebc4 RIP=ffffffff816abd45 RFL=00000203 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555560f70500 ffffffff 00c00000 GS =0000 ffff8880d6852000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f25239b66c0 CR3=0000000061a39000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffefff0 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf5beb840 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2523a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2523a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2523a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2523a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2523a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2523a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0b004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a442060 RCX=ffffffff81b001cd RDX=ffff88802335a440 RSI=ffffffff81b001a9 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc9000331f518 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000007c78 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed100d48840d R15=ffff88806a63b580 RIP=ffffffff81b001af RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6952000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f184bce7d60 CR3=0000000033b8a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f184b1846a3 00007f184b1846a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea2dcb980 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555631e391b 00005555631e3870 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555631f12f6 00005555631f11b0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e01ffffffffffff fffffb0800030100 00080806020105b6 01e0100000100001 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100001080001 0000000806060103 f600040000080000 0401c71000080148 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ce00020007002e01 ffffffffffffffff fb08000301000008 0806020105b601e0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000001000010000 060806060807b000 1000001000001000 0c10000100000608 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 060a0106cc000200 0700100007800404 0607b40073666d61 7201ffffffffffff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffc9000e107228 RBX=ffffc9000e1071b8 RCX=ffffc9000e108001 RDX=1ffff92001c20e37 RSI=ffffffff8233c5fb RDI=ffffc9000e1071c4 RBP=000000000000000e RSP=ffffc9000e1070d8 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc9000e1070f8 R11=00000000000139bd R12=ffffffff81a78010 R13=ffffc9000e1071b8 R14=0000000000000000 R15=ffff888034c9a440 RIP=ffffffff81a780ce RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f25247746c0 ffffffff 00c00000 GS =0000 ffff8880d6a52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2524773f98 CR3=0000000061a39000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2523a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2523a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2523a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2523a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2523a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2523a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2523b84488 00007f2523b84480 00007f2523b84478 00007f2523b84450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25246ed100 00007f2523b84440 00007f2523b84458 00007f2523b844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2523b84498 00007f2523b84490 00007f2523b84488 00007f2523b84480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000