last executing test programs: 16.029100033s ago: executing program 3 (id=31): r0 = socket$inet(0x2, 0x3, 0xfffffff8) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 15.980078712s ago: executing program 3 (id=32): r0 = socket(0x22, 0x2, 0x24) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) (async, rerun: 32) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x5, 0x1, 0x1, "7e0efe3287fdaced3d4fd6e8c46a2ca55aab2500000000b482b200", 0x3031334d}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x20, 0x5a, 0xc6b747b6bf1c6f95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@x86={0xe4, 0x8, 0x9, 0x0, 0x5, 0x3, 0xdf, 0x5, 0x7, 0x8, 0x6, 0x3, 0x0, 0x0, 0x9, 0x1, 0x3, 0x4, 0x1, '\x00', 0x4, 0x100000000}) (async) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000080)={0x1e0003, 0x0, [0x81, 0x6, 0xff, 0x3e00000000000000, 0x3d9ae88f, 0x9, 0x4000000000009, 0xa]}) (async) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r7 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3}], 0x1, 0x40800) (async, rerun: 64) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') (rerun: 64) pread64(r8, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x3, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_MARK_MASK={0x8}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000001) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="62138d58", 0x4) 15.871794496s ago: executing program 3 (id=33): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000060000001400000008000300", @ANYRES32=r3, @ANYBLOB="050029"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r6) sendmsg$IEEE802154_ASSOCIATE_RESP(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r7, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8018}, 0x10) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000c80)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x260, 0x0, 0x0, 0x1c8, 0x130, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2d}, @multicast2, 0xffffff00, 0xffffffff, 'vlan0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x6c, 0x0, 0x2d}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0xf4}}}, {{@ip={@rand_addr, @private, 0x0, 0xff000000, 'macvtap0\x00', 'bridge_slave_0\x00', {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010100, 0xff000000, 0xff, 'ip6gretap0\x00', 'ip6erspan0\x00', {}, {0x75816b9d8404136c}, 0x0, 0x3, 0x18}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x41011000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={0x428, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x400, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_b, @device_a, @initial, {0x2, 0x6c3}}, 0x9, @random, 0x4050, @void, @val={0x1, 0x4, [{0x60}, {0x1}, {0x30}, {0x2, 0x1}]}, @val={0x3, 0x1, 0xb8}, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x2, 0xab, 0x7}}, @val={0x2d, 0x1a, {0x1, 0x0, 0x1, 0x0, {0x4, 0x1ff4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x1000, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x9, 0x20}}, @void, [{0xdd, 0x1b, "2057059b6754429d760ed9fe06b6d8a8392c9e9fc67fc9b76b89b3"}, {0xdd, 0x8b, "49a9e317569e57ca39fc400099707ea8dc0b44eb61a2f08b2012220af2fee65c7353a1275591a35323ebd2712abb02d38ae2279b512a9634c1e65a91679714540310e2359e67f338178ac7c75f5f752c53a6c6c9c81f8a76b3274af6906dd6c7d2bdd2c992558e86810d3445287cb4afbc05e1956101052edfe5c865cf21f8152b51ef540e1f439b16d1cc"}, {0xdd, 0x63, "85f098517188af3c262e95235cb57cd63ca5b0b5f4b5f23d65566b8d19083c4e1842f674f61828d1ad3724037690b8947dfedfc3e3ba7c3666cb2139d3617d9fb1276574278a3ac4155243f3e5a6d649d19767e038134108004b8238940e154ac59f89"}, {0xdd, 0x5e, "14c1f697a93c1a928bfd86e538bf224fcfe07047a77debc376fcb78a27122da1b21baf5ee9772b3ddec6722c77f6445402f8db23f0b20843f4ec40b5346a62f58eda9d61cd74ebd38ec9c11a404e6864fd1d02f8813a738f81249ee2b92c"}, {0xdd, 0x48, "7d86103ab3160ff855484a4a0ad26f00e10f97478c43bc9df11ebde9eb2472d964a5aee95654af8a2f4f9f7851f93839066f498561d572503ae34d83787d8fb60ad9d210ceaa13b7"}, {0xdd, 0x86, "bc9ad7e0cf59c38bdd29a1220e237aa161cff36c4b02fd6b82c892dbd718b91bbceeeaf3914c0201ca74a9cb08fc0029a7c9bc23dd727d5d1012a34da453eb98a948fcf93a7e7d0bfb35bcbabd409923bec50fbb485b629d5581ad09fe94891ead8407fdcfb43b5c1115da6305ef9e1a167fb83ad976bc7d4f6474b308172108919aaa3b3c20"}, {0xdd, 0x57, "31131c24d7727b9325b867baed2acd4b45c22a9c1cce9ed654c26890f62fdffe4482c5d1947f9ac2797a0704c49cccb0edc427b4f232e78c9c4348d63847bf0c7bb3af7f77fd24568ff53411f06d30a9699635bb844e91"}, {0xdd, 0xfc, "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"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1326}]}, 0x428}, 0x1, 0x0, 0x0, 0x40008001}, 0x4000000) 15.871477712s ago: executing program 3 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x4}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr, 0x1}}, @sadb_lifetime={0x4, 0x4, 0xc84a}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x60000003}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}]}, 0xb0}}, 0x84) mount$cgroup2(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x141010, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80200, 0xc2) 15.768694899s ago: executing program 3 (id=36): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x5, &(0x7f00000010c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) futex(0x0, 0x8d, 0x2, 0x0, 0x0, 0x0) 14.021506564s ago: executing program 3 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setreuid(0xee01, 0xee01) r0 = getpid() setpriority(0x0, r0, 0x80000000) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x810000, &(0x7f0000000580)=ANY=[@ANYBLOB="67727071756f7461bd042bc549af1ebb6172646c696d69743d38652c00"]) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) write$binfmt_format(0xffffffffffffffff, &(0x7f00000005c0)='1\x00', 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='blkio.bfq.io_serviced\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f0000000040)={[{@size={'size', 0x3d, [0x32]}}]}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x20040, &(0x7f0000000180)={[{@nr_inodes={'nr_inodes', 0x3d, [0x67, 0x28, 0x74, 0x6d, 0x6b, 0x33, 0x32, 0x39, 0x70, 0x2d]}}, {@grpquota}, {@huge_always}, {@huge_advise}, {@inode64}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x8, 0x8000, 0x9, 0x0, {{0x23, 0x4, 0x0, 0x5, 0x8c, 0x66, 0x0, 0x1, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@rr={0x7, 0x1f, 0x68, [@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @loopback, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x24, 0xf4, 0x1, 0x9, [{@broadcast, 0x2}, {@local, 0x2}, {@private=0xa010101, 0x1}, {@rand_addr=0x64010102, 0xa}]}, @timestamp_addr={0x44, 0x24, 0x65, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x42}, 0xffffffff}, {@rand_addr=0x64010101, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}, {@remote, 0x7}]}, @ssrr={0x89, 0xf, 0x46, [@local, @rand_addr=0x64010102, @loopback]}]}}}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r3, @ANYBLOB="fd00000000000000300012800b00010065727370616e00002000028004001200050016000200000006001800"], 0x50}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x4000004) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000001c0)={'team_slave_1\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x2, [0xfffffffffffffffb, 0xc]}}) 13.98843009s ago: executing program 32 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setreuid(0xee01, 0xee01) r0 = getpid() setpriority(0x0, r0, 0x80000000) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x810000, &(0x7f0000000580)=ANY=[@ANYBLOB="67727071756f7461bd042bc549af1ebb6172646c696d69743d38652c00"]) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) write$binfmt_format(0xffffffffffffffff, &(0x7f00000005c0)='1\x00', 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='blkio.bfq.io_serviced\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f0000000040)={[{@size={'size', 0x3d, [0x32]}}]}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x20040, &(0x7f0000000180)={[{@nr_inodes={'nr_inodes', 0x3d, [0x67, 0x28, 0x74, 0x6d, 0x6b, 0x33, 0x32, 0x39, 0x70, 0x2d]}}, {@grpquota}, {@huge_always}, {@huge_advise}, {@inode64}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x8, 0x8000, 0x9, 0x0, {{0x23, 0x4, 0x0, 0x5, 0x8c, 0x66, 0x0, 0x1, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@rr={0x7, 0x1f, 0x68, [@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @loopback, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x24, 0xf4, 0x1, 0x9, [{@broadcast, 0x2}, {@local, 0x2}, {@private=0xa010101, 0x1}, {@rand_addr=0x64010102, 0xa}]}, @timestamp_addr={0x44, 0x24, 0x65, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x42}, 0xffffffff}, {@rand_addr=0x64010101, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}, {@remote, 0x7}]}, @ssrr={0x89, 0xf, 0x46, [@local, @rand_addr=0x64010102, @loopback]}]}}}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r3, @ANYBLOB="fd00000000000000300012800b00010065727370616e00002000028004001200050016000200000006001800"], 0x50}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x4000004) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000001c0)={'team_slave_1\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x2, [0xfffffffffffffffb, 0xc]}}) 2.169532172s ago: executing program 1 (id=293): ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000000)={0x0, {0xe0, 0xfffff001}}) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0xdffffffb, 0x4) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x4, 0x1, @none, 0xb, 0x8, 0xe3, 0xff, 0x9a, 0x2, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}]}}}}, 0x1d) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000280)={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x5, &(0x7f00000010c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x81, 0x6, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x951359358feea086, 0xc, '\x00', @value=0x47e}}) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) futex(0x0, 0x8d, 0x2, 0x0, 0x0, 0x0) 2.111353927s ago: executing program 1 (id=294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1, 0x7, 0x401, 0x0, 0x0, {0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000880}, 0x4000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x79, 0x11, 0x30}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@mcast1}, {@in6=@private0, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x70bd26, 0x0, 0x2, 0x2, 0x0, 0x6a}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.108630396s ago: executing program 1 (id=295): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x8000000000000003}, 0x18) sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08a6da57751e27c6a5c0f6482bc93e002bbd7000fcdbdf254a000001007300000007ffeb000612d3af", @ANYRES32=0x0, @ANYBLOB="0c009900070000004b000000"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x41) ppoll(&(0x7f0000000180)=[{r4, 0x502}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, r1, 0xb97534d5fe9700cf, 0x70bd2c, 0x25dfdbff, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x45}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x2000000, @local, 0x8}, 0x1c) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x1, {0x1, 0x0, 0x1}, 0x1}, 0x18) 1.450320792s ago: executing program 0 (id=306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x3c, r1, 0xb97534d5fe9700cf, 0x70bd2c, 0x25dfdbff, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x45}, 0x700) 1.450069754s ago: executing program 0 (id=307): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace_dev_match', 0x800, 0x6) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r1, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3e37}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffff8000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x24004051) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="0008000200ac1414bb08000400"/39], 0x44}, 0x1, 0x2}, 0x40010) 1.391402146s ago: executing program 0 (id=308): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = socket(0x28, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x12, 0x0, 0x45, 0x5, 0x8fc3, 0x200, 0x20000, 0x0, 0xb}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[], 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, 0x0, 0x0}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r4, 0x5452, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="44f9b1", 0x3, 0x1, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0xc, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x200401, 0x6, 0x3, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120001, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x9, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x1, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e7, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x6, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x4, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x3, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x1, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xffffffff, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x1, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7fc, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r5, &(0x7f00000004c0)=[{&(0x7f0000000140)="26eba9fdb4cbab48929e1af151000000000000000000000000000100", 0x1c}], 0x1) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000001f0000001a"]) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff00000000000000000000019078ac1e0001ac1414aa22c0907803240000450000000000000000fa1e09e0c600080000866ca7a11d0c010000ac1414aaac141400867100000000000ce256b28c59881681fb520009020007650442eb050e7434954373561de584b703c80009e706d30bd224f80007cfa11cab1a02108475be675de6a70a05a0dc91e5c6000a6580a500461595c5b76f0cc7cccaf29204000004000000bc2300ad9d19a30000000000000000000cc8f46976e79e56c7a95e860c0000000000067f36"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x44}, @broadcast, 0x1, "f3aa811609ff38e3e739570a91f70b8944b7a71040e98de33006f1d568da5230", 0x3ff, 0x10001, 0x6, 0x3000000}, 0x3c) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {r3}}, './file0\x00'}) 1.179750874s ago: executing program 0 (id=312): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x8, 0x0, 0x0, @tick=0x8000000, {0x8}, {}, @note={0x8, 0x8, 0x8, 0xd, 0x5}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x1, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @raw8={"fabb191b2b6f3217a1a86970"}}, {0x0, 0xff, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.177936884s ago: executing program 4 (id=313): socket$inet_sctp(0x2, 0x5, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001b80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="8400000005000000aaf4200003000000"], 0x18, 0x4}], 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000c401000000000088067ff5ffffffffff"]) getuid() (async) getuid() socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={[{'noacl'}]}) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) socket(0x400000000010, 0x3, 0x0) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000001440)={'macsec0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8, 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa6bd}}) (async) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000001440)={'macsec0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8, 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa6bd}}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x5}, {0x7}}}, 0x24}}, 0x0) socket(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$inet6_MCAST_JOIN_GROUP(r10, 0x29, 0x2a, &(0x7f0000000000)={0xc, {{0xa, 0x4e24, 0x7, @mcast2, 0x4}}}, 0x88) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680080001"], 0x30}}, 0x0) write$selinux_create(0xffffffffffffffff, &(0x7f0000000300)=@objname={'system_u:object_r:ping_exec_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x6, 0x20, './file0\x00'}, 0x4d) sendmmsg$alg(r9, &(0x7f0000000140), 0x4924b68, 0x0) 1.078652534s ago: executing program 0 (id=314): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c) r1 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x4, 0x700000000000000}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc}) io_uring_enter(r1, 0x47bc, 0x0, 0x44, 0x0, 0x0) 1.076677026s ago: executing program 0 (id=315): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a86200000904000002ca744d07090503020000ff99090805848f"], &(0x7f00000007c0)={0x1a, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async, rerun: 32) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (async) syz_emit_ethernet(0x22, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0x2, 0x21, 0x0, @rand_addr=0x64010100, @broadcast}}}}}, 0x0) 1.059408746s ago: executing program 1 (id=316): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x3c, r1, 0xb97534d5fe9700cf, 0x70bd2c, 0x25dfdbff, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x45}, 0x7000000) 1.001325497s ago: executing program 1 (id=317): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x400080, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x772d42}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000dc0)={&(0x7f00000007c0)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x101, 0x800, 0x5, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02"], 0x4, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x79, 0x1}, 0x7) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)) 1.001126074s ago: executing program 4 (id=318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="cf002cbd7000ffdbdf251200000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008021100000100001400810005000200030000000500010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x45}, 0x0) 995.05106ms ago: executing program 4 (id=319): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYRESOCT=r0, @ANYRES8, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x4f72271c}, 0x18) socket$kcm(0x10, 0x2, 0x4) (async) socket$kcm(0x10, 0x2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, 0x7}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 870.236052ms ago: executing program 4 (id=320): r0 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0x286f, 0x800, 0x2, 0x3bb}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x26) fcntl$notify(r2, 0x402, 0x3f) r3 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001400)=ANY=[], 0x1c}}, 0x20048044) (async) sendmsg$nl_route_sched(r3, &(0x7f00000013c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001380)={&(0x7f0000000300)=@deltclass={0x2c, 0x29, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x1, 0xfff3}, {0x3, 0x1}, {0xc, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xf4, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2000a840) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000100)={0x3}) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) timer_create(0x5, &(0x7f0000000200)={0x0, 0x30, 0x1, @thr={&(0x7f0000000380)="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", &(0x7f0000000140)="45fb38017132202dd462a6f8846a6590042f25a44f1b322093ef8f0f8c911be8837e31f19a812a7e06abb0e4b04b950fb5bedd693e601711d45bd200cb63f0834f2f14b1595e97ca715397847223a4db9b8e5868a052c250ea521c65b096a0b3d0fc764356b529b3e7f04422a777679c072fa80e61046db2f20df4a078a10e031a7b5816216787f6c1df9644e47d293a8c16a397c17625f9de04cc2dbe469c90427919db65c8bd5035a49557f3a0f362908a2c63431ad97b93d47950"}}, &(0x7f0000000240)) 862.29412ms ago: executing program 4 (id=321): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x169043, 0x0) r1 = openat$ttynull(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) (async) ioctl$TCFLSH(r1, 0x40085500, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setpriority(0x1, 0x0, 0x4) (async) close_range(r0, 0xffffffffffffffff, 0x0) 810.875867ms ago: executing program 4 (id=322): mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000bb3000/0x1000)=nil) syz_emit_ethernet(0x76, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x40, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r0 = syz_usbip_server_init(0x1) r1 = io_uring_setup(0x669, &(0x7f00000002c0)={0x0, 0x0, 0x20000}) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0135014010ff"}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r5 = gettid() r6 = getpid() rt_tgsigqueueinfo(r6, r5, 0x7, &(0x7f0000000000)={0x28, 0x1, 0x5}) r7 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r7, &(0x7f0000000740)=""/384, 0x200008c0) write$6lowpan_enable(r7, &(0x7f0000000100)='0', 0x1) write$usbip_server(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000003000000010000000000000001000000000010000000000028"], 0x31) 558.870436ms ago: executing program 2 (id=327): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4138ae84, &(0x7f0000000c40)=@x86={0xa9, 0xd, 0x18, 0x0, 0x100, 0x9, 0x9, 0x0, 0x40, 0x3, 0xc, 0xfd, 0x0, 0x1, 0xa, 0x8a, 0x7, 0x13, 0x33, '\x00', 0x8, 0x4}) syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r9], 0x1c}}, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) r11 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r11, 0x6b, 0x3, &(0x7f0000000240), &(0x7f00000002c0)=0x4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10001}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x60, r10, 0x300, 0x4b6, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4080) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x3c, r1, 0xb97534d5fe9700cf, 0x70bd2c, 0x25dfdbff, {{0x12}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x45}, 0x0) 421.718318ms ago: executing program 2 (id=328): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000140)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x34, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x20050800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000014d564b00000000af00"]) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x10004, 0x7, 0x3000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0) getuid() read(r1, &(0x7f00000008c0)=""/4096, 0x1000) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004500005c0000000000019078ac1e0001ac1414aa05009078e00000e0400000000000000000210002ac1414aaac1414aa442c7301001a0000000000970a010100000004010a010101fffffff76401010100000000e0000002000000068cd1e2367e2ca7da1c3a56f76f466ad7c9b25c0fa4712b06f65df3935fbe86f383c6665da4e84ebcf00ca36b285db74925595994158aad2d2ce6e857d60860b5395f234e26"], 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x59) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 369.947951ms ago: executing program 2 (id=329): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0xb, @sliced={0x6, [0x4, 0x10, 0x7, 0x6, 0x0, 0x2, 0x6, 0x5f88, 0x9, 0x5, 0x200, 0x1000, 0x6, 0x101, 0xf67b, 0xe3, 0x100, 0x2971, 0x7fff, 0xa2f, 0x8, 0x0, 0x80, 0x0, 0x7d5, 0xe0, 0x1, 0x2, 0x8, 0xf000, 0x8, 0x4, 0x0, 0x4e0a, 0x3, 0x9, 0x1, 0x6, 0x1, 0x2, 0x744, 0xe, 0x5, 0x7, 0x1000, 0x8, 0x800, 0x5], 0x8}}) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x4, 0x0) add_key$keyring(&(0x7f000000fa80), 0x0, 0x0, 0x0, 0xffffffffffffffff) setresgid(0x0, 0xee01, 0xffffffffffffffff) ioctl$VIDIOC_S_STD(r1, 0xc0405627, &(0x7f0000000480)=0x1) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x6, @sdr={0x32314d54, 0xb1a000}}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0xb, @sliced={0x6, [0x4, 0x10, 0x7, 0x6, 0x0, 0x2, 0x6, 0x5f88, 0x9, 0x5, 0x200, 0x1000, 0x6, 0x101, 0xf67b, 0xe3, 0x100, 0x2971, 0x7fff, 0xa2f, 0x8, 0x0, 0x80, 0x0, 0x7d5, 0xe0, 0x1, 0x2, 0x8, 0xf000, 0x8, 0x4, 0x0, 0x4e0a, 0x3, 0x9, 0x1, 0x6, 0x1, 0x2, 0x744, 0xe, 0x5, 0x7, 0x1000, 0x8, 0x800, 0x5], 0x8}}) (async) syz_open_dev$video4linux(&(0x7f0000000000), 0x4, 0x0) (async) add_key$keyring(&(0x7f000000fa80), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) setresgid(0x0, 0xee01, 0xffffffffffffffff) (async) ioctl$VIDIOC_S_STD(r1, 0xc0405627, &(0x7f0000000480)=0x1) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x6, @sdr={0x32314d54, 0xb1a000}}) (async) 318.979083ms ago: executing program 2 (id=330): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @loopback}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xff000000}]}}]}, 0x44}}, 0x0) (rerun: 32) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x33, 0x1, 0x70bd2b, 0x25dbdbfe, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x5, 0x0, 0x0, @uid}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) (async) setreuid(0x0, r6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@report={0x10a0, 0x20, 0x300, 0x70bd27, 0x25dfdbfc, {0xc3, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private=0xa010102, 0x4e24, 0x0, 0x4e22, 0x8, 0x2, 0x80, 0xa0, 0x0, r5, r6}}, [@mark={0xc, 0x15, {0x35075a, 0x80000001}}, @algo_comp={0x1048, 0x3, {{'lzjh\x00'}, 0x8000, "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"}}]}, 0x10a0}}, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="043e061244"], 0x9) (rerun: 64) getresuid(0x0, 0x0, 0x0) (async, rerun: 32) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x54, 0x5e, 0xd, 0x20, 0x499, 0x6bb7, 0x682f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x97, 0x0, 0x1, 0xff, 0x70, 0x79, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x8, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) (async, rerun: 32) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r8) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000780)=ANY=[], 0x0) (async) ioctl$EVIOCRMFF(r8, 0xc0085508, &(0x7f0000000500)=0x18) (async, rerun: 32) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (rerun: 32) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000040000008500000029000000180100002020602500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async, rerun: 64) ioctl$KVM_RUN(r9, 0xae80, 0x0) (rerun: 64) 119.19184ms ago: executing program 1 (id=331): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000002c0)='enc=', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) ioctl$FIOCLEX(r0, 0x5451) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x38, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000080), &(0x7f0000000340)=r5}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x1140) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) 321.493µs ago: executing program 2 (id=332): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0xff, 0x4, 0x4}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x5, &(0x7f00000010c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) futex(0x0, 0x8d, 0x2, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=333): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c) r1 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc}) io_uring_enter(r1, 0x47bc, 0x0, 0x44, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 38.226792][ T40] audit: type=1400 audit(1744338036.688:82): avc: denied { siginh } for pid=5865 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.552554][ T40] audit: type=1400 audit(1744338037.038:83): avc: denied { read } for pid=5336 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.558420][ T40] audit: type=1400 audit(1744338037.038:84): avc: denied { append } for pid=5336 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.564911][ T40] audit: type=1400 audit(1744338037.038:85): avc: denied { open } for pid=5336 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.570895][ T40] audit: type=1400 audit(1744338037.038:86): avc: denied { getattr } for pid=5336 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:40149' (ED25519) to the list of known hosts. [ 40.139649][ T40] audit: type=1400 audit(1744338038.618:87): avc: denied { name_bind } for pid=5913 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 42.027164][ T5915] cgroup: Unknown subsys name 'net' [ 42.207050][ T5915] cgroup: Unknown subsys name 'cpuset' [ 42.213195][ T5915] cgroup: Unknown subsys name 'rlimit' [ 42.420535][ T5929] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.040480][ T5915] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.868779][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 45.868795][ T40] audit: type=1400 audit(1744338044.348:105): avc: denied { execmem } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.091868][ T40] audit: type=1400 audit(1744338044.568:106): avc: denied { create } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.099252][ T40] audit: type=1400 audit(1744338044.568:107): avc: denied { read write } for pid=5937 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.105941][ T40] audit: type=1400 audit(1744338044.568:108): avc: denied { open } for pid=5937 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.112458][ T40] audit: type=1400 audit(1744338044.578:109): avc: denied { ioctl } for pid=5937 comm="syz-executor" path="socket:[2826]" dev="sockfs" ino=2826 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.131822][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.134752][ T5941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.136947][ T5941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.139666][ T5941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.141728][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.144868][ T5941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.146815][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.146903][ T5941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.151973][ T40] audit: type=1400 audit(1744338044.628:110): avc: denied { read } for pid=5939 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.157828][ T40] audit: type=1400 audit(1744338044.628:111): avc: denied { open } for pid=5939 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.160044][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.163303][ T5950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.164055][ T40] audit: type=1400 audit(1744338044.638:112): avc: denied { mounton } for pid=5939 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.166658][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.168209][ T5950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.168356][ T5949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.169002][ T5949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.169384][ T5949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.169627][ T5949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.174332][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.176222][ T5950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.178336][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.193127][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.347792][ T40] audit: type=1400 audit(1744338044.828:113): avc: denied { module_request } for pid=5939 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.418405][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 46.482680][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 46.531941][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 46.641088][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.644032][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.646310][ T5939] bridge_slave_0: entered allmulticast mode [ 46.648948][ T5939] bridge_slave_0: entered promiscuous mode [ 46.657964][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 46.681720][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.683863][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.685910][ T5939] bridge_slave_1: entered allmulticast mode [ 46.688307][ T5939] bridge_slave_1: entered promiscuous mode [ 46.781556][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.783713][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.785886][ T5937] bridge_slave_0: entered allmulticast mode [ 46.788190][ T5937] bridge_slave_0: entered promiscuous mode [ 46.791137][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.793442][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.795551][ T5937] bridge_slave_1: entered allmulticast mode [ 46.797953][ T5937] bridge_slave_1: entered promiscuous mode [ 46.802290][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.804891][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.806959][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.808885][ T5951] bridge_slave_0: entered allmulticast mode [ 46.811245][ T5951] bridge_slave_0: entered promiscuous mode [ 46.859311][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.861981][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.864390][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.866464][ T5951] bridge_slave_1: entered allmulticast mode [ 46.868959][ T5951] bridge_slave_1: entered promiscuous mode [ 46.879230][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.950405][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.954569][ T5939] team0: Port device team_slave_0 added [ 46.974530][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.976535][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.978562][ T5946] bridge_slave_0: entered allmulticast mode [ 46.981024][ T5946] bridge_slave_0: entered promiscuous mode [ 46.998412][ T5939] team0: Port device team_slave_1 added [ 47.001461][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.005771][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.007838][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.009892][ T5946] bridge_slave_1: entered allmulticast mode [ 47.012335][ T5946] bridge_slave_1: entered promiscuous mode [ 47.040850][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.057887][ T5937] team0: Port device team_slave_0 added [ 47.121228][ T5937] team0: Port device team_slave_1 added [ 47.123619][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.125805][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.135282][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.140650][ T5951] team0: Port device team_slave_0 added [ 47.144223][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.161330][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.163383][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.170364][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.174653][ T5951] team0: Port device team_slave_1 added [ 47.177640][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.195289][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.197201][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.204089][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.246502][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.248446][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.255629][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.275402][ T5946] team0: Port device team_slave_0 added [ 47.281073][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.283032][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.289773][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.323470][ T5939] hsr_slave_0: entered promiscuous mode [ 47.326040][ T5939] hsr_slave_1: entered promiscuous mode [ 47.329235][ T5946] team0: Port device team_slave_1 added [ 47.331314][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.333321][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.340470][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.433285][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.435809][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.444486][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.487657][ T5951] hsr_slave_0: entered promiscuous mode [ 47.490311][ T5951] hsr_slave_1: entered promiscuous mode [ 47.492162][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.495001][ T5951] Cannot create hsr debugfs directory [ 47.499152][ T5937] hsr_slave_0: entered promiscuous mode [ 47.501131][ T5937] hsr_slave_1: entered promiscuous mode [ 47.503246][ T5937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.505899][ T5937] Cannot create hsr debugfs directory [ 47.507772][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.509722][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.516883][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.656668][ T5946] hsr_slave_0: entered promiscuous mode [ 47.658969][ T5946] hsr_slave_1: entered promiscuous mode [ 47.661036][ T5946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.663409][ T5946] Cannot create hsr debugfs directory [ 47.854747][ T5939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.860449][ T5939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.864519][ T5939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.868259][ T5939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.894545][ T5946] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.899143][ T5946] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.902816][ T5946] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.909305][ T5946] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.940003][ T5937] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.945832][ T5937] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.949777][ T5937] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.955759][ T5937] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.005541][ T5951] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.010958][ T5951] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.015546][ T5951] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.019696][ T5951] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.036333][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.060769][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.077970][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.080061][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.083568][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.085453][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.095964][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.119553][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.127347][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.137208][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.139146][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.154393][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.156513][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.168891][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.173053][ T5941] Bluetooth: hci0: command tx timeout [ 48.173060][ T67] Bluetooth: hci1: command tx timeout [ 48.197589][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.199618][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.201831][ T40] audit: type=1400 audit(1744338046.678:114): avc: denied { sys_module } for pid=5939 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.210828][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.212911][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.220659][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.242129][ T5946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.249546][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.252689][ T67] Bluetooth: hci3: command tx timeout [ 48.254320][ T67] Bluetooth: hci2: command tx timeout [ 48.261564][ T5937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.270269][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.272361][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.282552][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.285109][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.298029][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.348661][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.351850][ T5939] veth0_vlan: entered promiscuous mode [ 48.357030][ T5939] veth1_vlan: entered promiscuous mode [ 48.384705][ T5946] veth0_vlan: entered promiscuous mode [ 48.388236][ T5939] veth0_macvtap: entered promiscuous mode [ 48.393473][ T5939] veth1_macvtap: entered promiscuous mode [ 48.398316][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.404733][ T5946] veth1_vlan: entered promiscuous mode [ 48.415279][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.423507][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.430644][ T5939] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.433563][ T5939] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.436102][ T5939] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.438430][ T5939] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.456948][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.479924][ T5946] veth0_macvtap: entered promiscuous mode [ 48.484811][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.485407][ T5937] veth0_vlan: entered promiscuous mode [ 48.487042][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.489050][ T5946] veth1_macvtap: entered promiscuous mode [ 48.509689][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.512933][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.516418][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.529465][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.532436][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.535774][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.539733][ T5951] veth0_vlan: entered promiscuous mode [ 48.539944][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.541639][ T5937] veth1_vlan: entered promiscuous mode [ 48.543941][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.548898][ T5946] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.551327][ T5946] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.553868][ T5946] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.556023][ T5946] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.570075][ T5951] veth1_vlan: entered promiscuous mode [ 48.589389][ T5937] veth0_macvtap: entered promiscuous mode [ 48.601032][ T5937] veth1_macvtap: entered promiscuous mode [ 48.611019][ T5939] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.612747][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.617759][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.643231][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.643561][ T5951] veth0_macvtap: entered promiscuous mode [ 48.645331][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.652447][ T5951] veth1_macvtap: entered promiscuous mode [ 48.654715][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.657567][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.660168][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.663428][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.666960][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.675650][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.678395][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.680933][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.684315][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.688444][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.694642][ T5937] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.697084][ T5937] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.699474][ T5937] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.701830][ T5937] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.706971][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.709791][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.712760][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.715655][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.718300][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.721125][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.725815][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.733792][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.736542][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.739527][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.743953][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.746617][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.749418][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.753448][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.763824][ T5951] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.766153][ T5951] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.768481][ T5951] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.770774][ T5951] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.811676][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.816067][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.841654][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.848160][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.848656][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'. [ 48.858933][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.861044][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.888108][ T6022] capability: warning: `syz.1.8' uses 32-bit capabilities (legacy support in use) [ 48.899695][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.901862][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.925559][ T6029] trusted_key: encrypted_key: insufficient parameters specified [ 48.929598][ T6033] trusted_key: encrypted_key: insufficient parameters specified [ 48.933834][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 48.947017][ T6029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 48.994900][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 48.997859][ T6049] ======================================================= [ 48.997859][ T6049] WARNING: The mand mount option has been deprecated and [ 48.997859][ T6049] and is ignored by this kernel. Remove the mand [ 48.997859][ T6049] option from the mount to silence this warning. [ 48.997859][ T6049] ======================================================= [ 49.017379][ T6049] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 49.055804][ T6051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 49.058960][ T6056] Zero length message leads to an empty skb [ 49.137499][ T6071] Cannot find del_set index 2 as target [ 49.206443][ T6086] netlink: 16 bytes leftover after parsing attributes in process `syz.3.27'. [ 49.240651][ T6100] process 'syz.3.29' launched '/dev/fd/3/./file1' with NULL argv: empty string added [ 49.306001][ T6114] delete_channel: no stack [ 49.307499][ T6114] delete_channel: no stack [ 49.312388][ T6114] delete_channel: no stack [ 49.314057][ T6114] delete_channel: no stack [ 49.318632][ T6114] delete_channel: no stack [ 49.322559][ T6114] delete_channel: no stack [ 49.323912][ T6114] delete_channel: no stack [ 49.325248][ T6114] delete_channel: no stack [ 49.326769][ T6114] delete_channel: no stack [ 49.328098][ T6114] delete_channel: no stack [ 49.329420][ T6114] delete_channel: no stack [ 49.330782][ T6114] delete_channel: no stack [ 49.332116][ T6114] delete_channel: no stack [ 49.333701][ T6114] delete_channel: no stack [ 49.335273][ T6114] delete_channel: no stack [ 49.336630][ T6114] delete_channel: no stack [ 49.337987][ T6114] delete_channel: no stack [ 49.339303][ T6114] delete_channel: no stack [ 49.340641][ T6114] delete_channel: no stack [ 49.341979][ T6114] delete_channel: no stack [ 49.343581][ T6114] delete_channel: no stack [ 49.344917][ T6114] delete_channel: no stack [ 49.346430][ T6114] delete_channel: no stack [ 49.347766][ T6114] delete_channel: no stack [ 49.349076][ T6114] delete_channel: no stack [ 49.350397][ T6114] delete_channel: no stack [ 49.351746][ T6114] delete_channel: no stack [ 49.353297][ T6114] delete_channel: no stack [ 49.368941][ T6116] delete_channel: no stack [ 49.370731][ T6116] delete_channel: no stack [ 49.372106][ T6116] delete_channel: no stack [ 49.373776][ T6116] delete_channel: no stack [ 49.375151][ T6116] delete_channel: no stack [ 49.391562][ T6139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.33'. [ 49.392833][ T6141] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 49.397371][ T6141] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 49.552637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 50.124942][ T6207] syz.0.51 uses obsolete (PF_INET,SOCK_PACKET) [ 50.135633][ T6207] mkiss: ax0: crc mode is auto. [ 50.252865][ T5941] Bluetooth: hci1: command tx timeout [ 50.253945][ T67] Bluetooth: hci0: command tx timeout [ 50.332331][ T67] Bluetooth: hci2: command tx timeout [ 50.556386][ T6209] rtc_cmos 00:05: Alarms can be up to one day in the future [ 50.594618][ T6213] SET target dimension over the limit! [ 50.703588][ T6217] tipc: Started in network mode [ 50.705392][ T6217] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 50.709622][ T6217] tipc: Enabled bearer , priority 10 [ 50.784888][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'. [ 50.788726][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'. [ 50.795118][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'. [ 50.877240][ T40] kauditd_printk_skb: 137 callbacks suppressed [ 50.877251][ T40] audit: type=1400 audit(1744338049.409:252): avc: denied { read } for pid=6227 comm="syz.1.59" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 50.888211][ T40] audit: type=1400 audit(1744338049.409:253): avc: denied { open } for pid=6227 comm="syz.1.59" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 50.897033][ T40] audit: type=1400 audit(1744338049.409:254): avc: denied { ioctl } for pid=6227 comm="syz.1.59" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 50.978954][ T6234] /dev/sg0: Can't lookup blockdev [ 51.027033][ T40] audit: type=1400 audit(1744338049.559:255): avc: denied { write } for pid=6240 comm="syz.1.64" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.258011][ T6131] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.272371][ T34] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.303712][ T5977] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 51.425920][ T5941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.428995][ T5941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.431747][ T5941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.432294][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 51.436867][ T5941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.439505][ T5941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.441782][ T34] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 51.444404][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 51.446568][ T40] audit: type=1400 audit(1744338049.979:256): avc: denied { mounton } for pid=6245 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.447091][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 51.447105][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 51.447116][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 51.463235][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 51.465801][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.466012][ T5977] usb 7-1: Using ep0 maxpacket: 8 [ 51.471382][ T5977] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 51.474376][ T5977] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 51.477231][ T5977] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 51.480721][ T5977] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 51.484225][ T5977] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 51.487883][ T5977] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 51.490363][ T5977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.539230][ T6245] chnl_net:caif_netlink_parms(): no params data found [ 51.617737][ T6245] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.619750][ T6245] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.621726][ T6245] bridge_slave_0: entered allmulticast mode [ 51.624436][ T6245] bridge_slave_0: entered promiscuous mode [ 51.627684][ T6245] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.630221][ T6245] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.632948][ T6245] bridge_slave_1: entered allmulticast mode [ 51.635758][ T6245] bridge_slave_1: entered promiscuous mode [ 51.672381][ T34] usb 6-1: usb_control_msg returned -32 [ 51.674217][ T34] usbtmc 6-1:16.0: can't read capabilities [ 51.675064][ T6245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.680223][ T6245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.696288][ T5977] usb 7-1: usb_control_msg returned -32 [ 51.697903][ T5977] usbtmc 7-1:16.0: can't read capabilities [ 51.703127][ T5947] tipc: Node number set to 4269801488 [ 51.733214][ T6245] team0: Port device team_slave_0 added [ 51.736752][ T6245] team0: Port device team_slave_1 added [ 51.765804][ T6245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.768407][ T6245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.775435][ T6245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.779427][ T6245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.781290][ T6245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.788736][ T6245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.823491][ T6245] hsr_slave_0: entered promiscuous mode [ 51.826107][ T6245] hsr_slave_1: entered promiscuous mode [ 51.828158][ T6245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.830667][ T6245] Cannot create hsr debugfs directory [ 51.937768][ T6245] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 51.941463][ T6245] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 51.946572][ T6245] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 51.950083][ T6245] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 51.962579][ T6245] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.964616][ T6245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.967105][ T6245] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.969067][ T6245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.017162][ T6245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.023949][ T40] audit: type=1400 audit(1744338050.559:257): avc: denied { write } for pid=6240 comm="syz.1.64" name="usbtmc0" dev="devtmpfs" ino=2782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 52.028501][ T6245] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.033608][ T40] audit: type=1400 audit(1744338050.559:258): avc: denied { bind } for pid=6240 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.041407][ T40] audit: type=1400 audit(1744338050.559:259): avc: denied { name_bind } for pid=6240 comm="syz.1.64" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 52.043308][ T6135] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.051308][ T40] audit: type=1400 audit(1744338050.559:260): avc: denied { node_bind } for pid=6240 comm="syz.1.64" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 52.060238][ T6135] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.084625][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.086694][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.091530][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.093596][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.141595][ T40] audit: type=1400 audit(1744338050.669:261): avc: denied { sys_module } for pid=6245 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 52.191313][ T6245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.193752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.284918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.328612][ T6245] veth0_vlan: entered promiscuous mode [ 52.333724][ T5941] Bluetooth: hci0: command tx timeout [ 52.334503][ T67] Bluetooth: hci1: command tx timeout [ 52.336519][ T6245] veth1_vlan: entered promiscuous mode [ 52.352159][ T6245] veth0_macvtap: entered promiscuous mode [ 52.358419][ T6245] veth1_macvtap: entered promiscuous mode [ 52.367346][ T6272] xt_hashlimit: size too large, truncated to 1048576 [ 52.369190][ T6245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.375413][ T6245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.379193][ T6245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.383572][ T6245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.387268][ T6245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.390692][ T6245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.394075][ T6245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.397112][ T6245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.401853][ T6245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.403728][ T6274] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 52.412424][ T67] Bluetooth: hci2: command tx timeout [ 52.422622][ T57] usb 6-1: USB disconnect, device number 2 [ 52.426648][ T6245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.430689][ T6245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.434611][ T6245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.438553][ T6245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.438724][ T9] usb 7-1: USB disconnect, device number 2 [ 52.442136][ T6245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.448297][ T6245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.451877][ T6245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.456682][ T6245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.460474][ T6245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.469377][ T6245] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.471789][ T6245] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.475831][ T6245] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.478163][ T6245] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.508917][ T6131] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.553175][ T6135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.555365][ T6135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.576803][ T6131] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.589932][ T6087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.592127][ T6087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.691171][ T6131] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.769087][ T6301] xt_hashlimit: size too large, truncated to 1048576 [ 52.811569][ T6131] bridge_slave_1: left allmulticast mode [ 52.815192][ T6131] bridge_slave_1: left promiscuous mode [ 52.817496][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.834278][ T6131] bridge_slave_0: left allmulticast mode [ 52.836435][ T6131] bridge_slave_0: left promiscuous mode [ 52.838619][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.070303][ T6131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.074587][ T6131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.078477][ T6131] bond0 (unregistering): Released all slaves [ 53.079553][ T6326] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 53.093033][ T6326] kvm: pic: level sensitive irq not supported [ 53.093423][ T6326] kvm: pic: non byte read [ 53.124135][ T6334] 9pnet_virtio: no channels available for device ./file0/file0 [ 53.142365][ T64] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 53.154534][ T6338] xt_hashlimit: size too large, truncated to 1048576 [ 53.255062][ T6347] syz.0.90 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 53.293946][ T64] usb 7-1: Using ep0 maxpacket: 16 [ 53.302569][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.305595][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.308406][ T64] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 53.316796][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.324519][ T64] usb 7-1: config 0 descriptor?? [ 53.336148][ T6354] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 53.444046][ T6131] hsr_slave_0: left promiscuous mode [ 53.447307][ T6131] hsr_slave_1: left promiscuous mode [ 53.449340][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.451334][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.453189][ T67] Bluetooth: hci3: command tx timeout [ 53.456108][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.458097][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.472688][ T6131] veth1_macvtap: left promiscuous mode [ 53.474404][ T6131] veth0_macvtap: left promiscuous mode [ 53.476001][ T6131] veth1_vlan: left promiscuous mode [ 53.477518][ T6131] veth0_vlan: left promiscuous mode [ 53.672276][ C3] hrtimer: interrupt took 90497 ns [ 53.735264][ T6312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.742838][ T6312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.770367][ T64] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 53.776599][ T64] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 53.779420][ T64] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 53.782168][ T64] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 53.784436][ T64] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 53.789978][ T64] appleir 0003:05AC:8241.0002: No inputs registered, leaving [ 53.843380][ T64] appleir 0003:05AC:8241.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 54.003405][ T6366] FAULT_INJECTION: forcing a failure. [ 54.003405][ T6366] name failslab, interval 1, probability 0, space 0, times 1 [ 54.008147][ T6366] CPU: 0 UID: 0 PID: 6366 Comm: syz.4.93 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 54.008168][ T6366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.008178][ T6366] Call Trace: [ 54.008184][ T6366] [ 54.008190][ T6366] dump_stack_lvl+0x16c/0x1f0 [ 54.008234][ T6366] should_fail_ex+0x512/0x640 [ 54.008255][ T6366] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 54.008280][ T6366] should_failslab+0xc2/0x120 [ 54.008297][ T6366] __kmalloc_cache_noprof+0x6a/0x3e0 [ 54.008318][ T6366] ? __pfx__kstrtoull+0x10/0x10 [ 54.008337][ T6366] ? refill_pi_state_cache+0x89/0x250 [ 54.008363][ T6366] refill_pi_state_cache+0x89/0x250 [ 54.008386][ T6366] futex_lock_pi+0x228/0x7b0 [ 54.008406][ T6366] ? __lock_acquire+0x5ca/0x1ba0 [ 54.008425][ T6366] ? __pfx_futex_lock_pi+0x10/0x10 [ 54.008449][ T6366] ? find_held_lock+0x2b/0x80 [ 54.008477][ T6366] ? proc_fail_nth_write+0x9f/0x250 [ 54.008510][ T6366] ? __pfx_futex_wake_mark+0x10/0x10 [ 54.008531][ T6366] ? ksys_write+0x190/0x240 [ 54.008549][ T6366] do_futex+0x11a/0x350 [ 54.008571][ T6366] ? __pfx_do_futex+0x10/0x10 [ 54.008599][ T6366] __x64_sys_futex+0x1e0/0x4c0 [ 54.008625][ T6366] ? __pfx___x64_sys_futex+0x10/0x10 [ 54.008647][ T6366] ? rcu_is_watching+0x12/0xc0 [ 54.008674][ T6366] do_syscall_64+0xcd/0x260 [ 54.008698][ T6366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.008714][ T6366] RIP: 0033:0x7fbbbc38d169 [ 54.008727][ T6366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.008754][ T6366] RSP: 002b:00007fbbba1f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 54.008770][ T6366] RAX: ffffffffffffffda RBX: 00007fbbbc5a5fa0 RCX: 00007fbbbc38d169 [ 54.008780][ T6366] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000000000000000 [ 54.008789][ T6366] RBP: 00007fbbba1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 54.008798][ T6366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.008807][ T6366] R13: 0000000000000000 R14: 00007fbbbc5a5fa0 R15: 00007fff18ca9e98 [ 54.008828][ T6366] [ 54.035130][ T64] usb 7-1: USB disconnect, device number 3 [ 54.035557][ C0] vkms_vblank_simulate: vblank timer overrun [ 54.095006][ C0] vkms_vblank_simulate: vblank timer overrun [ 54.182318][ C0] vkms_vblank_simulate: vblank timer overrun [ 54.187860][ T6131] team0 (unregistering): Port device team_slave_1 removed [ 54.240666][ T6131] team0 (unregistering): Port device team_slave_0 removed [ 54.411679][ T6379] xt_hashlimit: size too large, truncated to 1048576 [ 54.414503][ T67] Bluetooth: hci1: command tx timeout [ 54.422567][ T67] Bluetooth: hci0: command tx timeout [ 54.502469][ T67] Bluetooth: hci2: command tx timeout [ 54.857519][ T6419] xt_hashlimit: size too large, truncated to 1048576 [ 54.859423][ T6420] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 54.928190][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 54.930783][ T6420] __nla_validate_parse: 67 callbacks suppressed [ 54.930791][ T6420] netlink: 532 bytes leftover after parsing attributes in process `syz.2.106'. [ 54.936388][ T6420] syz.2.106: attempt to access beyond end of device [ 54.936388][ T6420] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 54.940258][ T6420] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 54.945936][ T6424] batadv0: entered allmulticast mode [ 54.955177][ T6432] xt_hashlimit: size too large, truncated to 1048576 [ 55.171823][ T6466] overlay: filesystem on ./bus not supported as upperdir [ 55.210764][ T6470] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 55.276805][ T6479] xt_hashlimit: size too large, truncated to 1048576 [ 55.332629][ T6487] FAULT_INJECTION: forcing a failure. [ 55.332629][ T6487] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 55.338675][ T6487] CPU: 3 UID: 0 PID: 6487 Comm: syz.0.119 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 55.338691][ T6487] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.338697][ T6487] Call Trace: [ 55.338701][ T6487] [ 55.338704][ T6487] dump_stack_lvl+0x16c/0x1f0 [ 55.338722][ T6487] should_fail_ex+0x512/0x640 [ 55.338735][ T6487] _copy_from_iter+0x2a4/0x15b0 [ 55.338749][ T6487] ? alloc_pages_mpol+0x25a/0x550 [ 55.338761][ T6487] ? __pfx__copy_from_iter+0x10/0x10 [ 55.338772][ T6487] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 55.338788][ T6487] copy_page_from_iter+0xa5/0x120 [ 55.338801][ T6487] tun_build_skb.constprop.0+0x292/0x1480 [ 55.338819][ T6487] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 55.338841][ T6487] ? __pfx__kstrtoull+0x10/0x10 [ 55.338858][ T6487] tun_get_user+0x165f/0x3b10 [ 55.338876][ T6487] ? __pfx_tun_get_user+0x10/0x10 [ 55.338888][ T6487] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 55.338904][ T6487] ? find_held_lock+0x2b/0x80 [ 55.338918][ T6487] ? tun_get+0x191/0x370 [ 55.338933][ T6487] tun_chr_write_iter+0xdc/0x210 [ 55.338947][ T6487] vfs_write+0x5ba/0x1180 [ 55.338956][ T6487] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 55.338971][ T6487] ? __pfx_vfs_write+0x10/0x10 [ 55.338989][ T6487] ? find_held_lock+0x2b/0x80 [ 55.339012][ T6487] ksys_write+0x12a/0x240 [ 55.339021][ T6487] ? __pfx_ksys_write+0x10/0x10 [ 55.339033][ T6487] do_syscall_64+0xcd/0x260 [ 55.339048][ T6487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.339058][ T6487] RIP: 0033:0x7f9233f8bc1f [ 55.339067][ T6487] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 55.339077][ T6487] RSP: 002b:00007f9234db1000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 55.339087][ T6487] RAX: ffffffffffffffda RBX: 00007f92341a6080 RCX: 00007f9233f8bc1f [ 55.339093][ T6487] RDX: 000000000000005e RSI: 0000200000000000 RDI: 00000000000000c8 [ 55.339098][ T6487] RBP: 00007f9234db1090 R08: 0000000000000000 R09: 0000000000000000 [ 55.339104][ T6487] R10: 000000000000005e R11: 0000000000000293 R12: 0000000000000001 [ 55.339109][ T6487] R13: 0000000000000001 R14: 00007f92341a6080 R15: 00007ffeaf69cad8 [ 55.339122][ T6487] [ 55.503386][ T6501] overlayfs: statfs failed on './file0' [ 55.526976][ T6501] usb usb9: usbfs: process 6501 (syz.1.125) did not claim interface 0 before use [ 55.543764][ T67] Bluetooth: hci3: command tx timeout [ 55.547879][ T6500] syz.4.124 (6500) used greatest stack depth: 20280 bytes left [ 55.604935][ T6508] xt_hashlimit: size too large, truncated to 1048576 [ 55.679390][ T6513] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 55.703977][ T6513] evm: overlay not supported [ 55.762815][ T6529] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.814935][ T6537] xt_hashlimit: size too large, truncated to 1048576 [ 55.833161][ T6540] netlink: 'syz.0.136': attribute type 64 has an invalid length. [ 55.835342][ T6540] netlink: 'syz.0.136': attribute type 4 has an invalid length. [ 55.837566][ T6540] netlink: 152 bytes leftover after parsing attributes in process `syz.0.136'. [ 55.844683][ T6540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.136'. [ 55.847262][ T6540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.136'. [ 55.864454][ T6540] erspan0: entered promiscuous mode [ 55.867597][ T6540] gretap0: entered promiscuous mode [ 55.928394][ T6552] xt_hashlimit: size too large, truncated to 1048576 [ 55.931852][ T40] kauditd_printk_skb: 89 callbacks suppressed [ 55.931861][ T40] audit: type=1400 audit(1744338054.459:351): avc: denied { getopt } for pid=6550 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.977022][ T40] audit: type=1400 audit(1744338054.509:352): avc: denied { append } for pid=6558 comm="syz.1.138" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 55.994427][ T40] audit: type=1400 audit(1744338054.509:353): avc: denied { getopt } for pid=6558 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.004408][ T40] audit: type=1400 audit(1744338054.539:354): avc: denied { rename } for pid=5336 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.010472][ T40] audit: type=1400 audit(1744338054.539:355): avc: denied { unlink } for pid=5336 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.018400][ T6572] tipc: Started in network mode [ 56.019740][ T6572] tipc: Node identity fe1682acf6b8, cluster identity 4711 [ 56.021757][ T6572] tipc: Enabled bearer , priority 0 [ 56.034368][ T6572] syzkaller0: MTU too low for tipc bearer [ 56.034577][ T40] audit: type=1400 audit(1744338054.539:356): avc: denied { create } for pid=5336 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.035920][ T6572] tipc: Disabling bearer [ 56.043303][ T40] audit: type=1400 audit(1744338054.569:357): avc: denied { read } for pid=6573 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.191685][ T40] audit: type=1400 audit(1744338054.719:358): avc: denied { getopt } for pid=6584 comm="syz.4.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 56.198123][ T6585] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.216869][ T40] audit: type=1400 audit(1744338054.749:359): avc: denied { create } for pid=6584 comm="syz.4.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 56.229576][ T40] audit: type=1400 audit(1744338054.749:360): avc: denied { connect } for pid=6584 comm="syz.4.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 56.278593][ T6593] FAULT_INJECTION: forcing a failure. [ 56.278593][ T6593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.283598][ T6593] CPU: 3 UID: 0 PID: 6593 Comm: syz.1.149 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 56.283617][ T6593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.283625][ T6593] Call Trace: [ 56.283636][ T6593] [ 56.283640][ T6593] dump_stack_lvl+0x16c/0x1f0 [ 56.283675][ T6593] should_fail_ex+0x512/0x640 [ 56.283698][ T6593] _copy_to_user+0x32/0xd0 [ 56.283716][ T6593] simple_read_from_buffer+0xcb/0x170 [ 56.283739][ T6593] proc_fail_nth_read+0x197/0x270 [ 56.283760][ T6593] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 56.283781][ T6593] ? rw_verify_area+0xcf/0x680 [ 56.283799][ T6593] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 56.283819][ T6593] vfs_read+0x1de/0xc70 [ 56.283842][ T6593] ? __pfx___mutex_lock+0x10/0x10 [ 56.283860][ T6593] ? __pfx_vfs_read+0x10/0x10 [ 56.283885][ T6593] ? __fget_files+0x20e/0x3c0 [ 56.283903][ T6593] ksys_read+0x12a/0x240 [ 56.283914][ T6593] ? __pfx_ksys_read+0x10/0x10 [ 56.283932][ T6593] do_syscall_64+0xcd/0x260 [ 56.283951][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.283965][ T6593] RIP: 0033:0x7eff6658bb7c [ 56.283975][ T6593] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 56.283988][ T6593] RSP: 002b:00007eff6733f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.284002][ T6593] RAX: ffffffffffffffda RBX: 00007eff667a6080 RCX: 00007eff6658bb7c [ 56.284011][ T6593] RDX: 000000000000000f RSI: 00007eff6733f0a0 RDI: 0000000000000004 [ 56.284019][ T6593] RBP: 00007eff6733f090 R08: 0000000000000000 R09: 0000000000000000 [ 56.284027][ T6593] R10: 000000000000005e R11: 0000000000000246 R12: 0000000000000001 [ 56.284035][ T6593] R13: 0000000000000001 R14: 00007eff667a6080 R15: 00007fff4492e7e8 [ 56.284053][ T6593] [ 56.349015][ T6595] netlink: 'syz.4.150': attribute type 9 has an invalid length. [ 56.437185][ T6604] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6604 comm=syz.1.153 [ 56.548564][ T6619] netlink: 'syz.1.158': attribute type 1 has an invalid length. [ 56.595460][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.160'. [ 56.663353][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'. [ 56.666206][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'. [ 56.669008][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'. [ 56.671601][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'. [ 56.698947][ T6636] syz.4.164: attempt to access beyond end of device [ 56.698947][ T6636] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 56.703901][ T6636] (syz.4.164,6636,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 56.706793][ T6636] (syz.4.164,6636,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 56.709649][ T6636] (syz.4.164,6636,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 56.713419][ T6636] (syz.4.164,6636,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 56.717726][ T6636] syz.4.164: attempt to access beyond end of device [ 56.717726][ T6636] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 56.722503][ T6636] (syz.4.164,6636,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 56.724481][ T6636] (syz.4.164,6636,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 56.726458][ T6636] (syz.4.164,6636,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 56.728767][ T6636] (syz.4.164,6636,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 56.735404][ T6636] syz.4.164: attempt to access beyond end of device [ 56.735404][ T6636] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 56.739637][ T6636] (syz.4.164,6636,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 56.741675][ T6636] (syz.4.164,6636,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 56.748476][ T6636] (syz.4.164,6636,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 56.750779][ T6636] (syz.4.164,6636,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 56.884906][ T6646] dlm: no locking on control device [ 56.969679][ T6648] x_tables: duplicate underflow at hook 1 [ 57.153822][ T6688] netlink: 'syz.0.177': attribute type 1 has an invalid length. [ 57.161797][ T6685] tty tty20: ldisc open failed (-12), clearing slot 19 [ 57.246754][ T6696] netlink: 'syz.1.180': attribute type 23 has an invalid length. [ 57.252531][ T1327] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 57.311351][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'. [ 57.330508][ T6705] 9pnet_fd: Insufficient options for proto=fd [ 57.347243][ T6705] tmpfs: Invalid gid '0x00000000ffffffff' [ 57.403557][ T1327] usb 9-1: Using ep0 maxpacket: 16 [ 57.411278][ T6713] xt_recent: Unsupported userspace flags (00000042) [ 57.414232][ T1327] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 57.417220][ T1327] usb 9-1: config 0 has no interface number 0 [ 57.419540][ T1327] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 57.423821][ T1327] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 57.428636][ T1327] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 57.432628][ T1327] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 57.436608][ T1327] usb 9-1: Product: syz [ 57.442330][ T1327] usb 9-1: SerialNumber: syz [ 57.446416][ T1327] usb 9-1: config 0 descriptor?? [ 57.462686][ T1327] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 57.465528][ T1327] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input5 [ 57.518997][ T6725] hashlimit_mt_check_common: 7 callbacks suppressed [ 57.519007][ T6725] xt_hashlimit: size too large, truncated to 1048576 [ 57.555957][ T6722] netlink: 'syz.2.187': attribute type 3 has an invalid length. [ 57.558071][ T6719] netlink: 'syz.2.187': attribute type 3 has an invalid length. [ 57.612531][ T67] Bluetooth: hci3: command tx timeout [ 57.651056][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 57.666788][ T1327] usb 9-1: USB disconnect, device number 2 [ 57.677537][ T1327] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 57.747012][ T6755] kvm: user requested TSC rate below hardware speed [ 57.944942][ T6778] loop0: detected capacity change from 0 to 7 [ 57.948713][ T6778] Dev loop0: unable to read RDB block 7 [ 57.950341][ T6778] loop0: unable to read partition table [ 57.951963][ T6778] loop0: partition table beyond EOD, truncated [ 57.954258][ T6778] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 57.954258][ T6778] ) failed (rc=-5) [ 58.150062][ T6793] block device autoloading is deprecated and will be removed. [ 58.236013][ T6800] netlink: 'syz.1.214': attribute type 10 has an invalid length. [ 58.248926][ T6800] veth0_vlan: left promiscuous mode [ 58.255472][ T6800] veth0_vlan: entered promiscuous mode [ 58.260712][ T6800] team0: Device veth0_vlan failed to register rx_handler [ 58.263207][ T6804] netlink: 'syz.2.216': attribute type 11 has an invalid length. [ 58.266270][ T6804] netlink: 'syz.2.216': attribute type 11 has an invalid length. [ 58.284354][ T6802] openvswitch: netlink: Missing key (keys=40, expected=80) [ 58.286619][ T6802] netlink: 'syz.0.215': attribute type 1 has an invalid length. [ 58.313549][ T6800] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 58.390055][ T6805] QAT: Device 7 not found [ 58.411391][ T6817] FAULT_INJECTION: forcing a failure. [ 58.411391][ T6817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.415660][ T6817] CPU: 0 UID: 0 PID: 6817 Comm: syz.1.219 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 58.415674][ T6817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.415681][ T6817] Call Trace: [ 58.415684][ T6817] [ 58.415688][ T6817] dump_stack_lvl+0x16c/0x1f0 [ 58.415705][ T6817] should_fail_ex+0x512/0x640 [ 58.415718][ T6817] _copy_from_user+0x2e/0xd0 [ 58.415730][ T6817] copy_msghdr_from_user+0x98/0x160 [ 58.415743][ T6817] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 58.415761][ T6817] ___sys_sendmsg+0xfe/0x1d0 [ 58.415773][ T6817] ? __pfx____sys_sendmsg+0x10/0x10 [ 58.415800][ T6817] __sys_sendmsg+0x16d/0x220 [ 58.415812][ T6817] ? __pfx___sys_sendmsg+0x10/0x10 [ 58.415832][ T6817] do_syscall_64+0xcd/0x260 [ 58.415847][ T6817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.415857][ T6817] RIP: 0033:0x7eff6658d169 [ 58.415866][ T6817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.415875][ T6817] RSP: 002b:00007eff67360038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.415884][ T6817] RAX: ffffffffffffffda RBX: 00007eff667a5fa0 RCX: 00007eff6658d169 [ 58.415891][ T6817] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000003 [ 58.415896][ T6817] RBP: 00007eff67360090 R08: 0000000000000000 R09: 0000000000000000 [ 58.415902][ T6817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.415907][ T6817] R13: 0000000000000000 R14: 00007eff667a5fa0 R15: 00007fff4492e7e8 [ 58.415919][ T6817] [ 58.556576][ T6827] netdevsim netdevsim1: Direct firmware load for . [ 58.556576][ T6827] failed with error -2 [ 58.560766][ T6827] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 58.560766][ T6827] [ 58.575395][ T6814] gre0: entered promiscuous mode [ 58.636762][ T6832] xt_hashlimit: size too large, truncated to 1048576 [ 58.815976][ T6846] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6846 comm=syz.4.229 [ 58.977488][ T6866] Cannot find add_set index 0 as target [ 59.370008][ T6880] gretap0: refused to change device tx_queue_len [ 59.372511][ T6880] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 59.515833][ T6896] @: renamed from vlan0 (while UP) [ 59.605411][ T6903] xt_hashlimit: size too large, truncated to 1048576 [ 59.692521][ T67] Bluetooth: hci3: command tx timeout [ 59.961503][ T6909] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 59.963587][ T6909] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 59.969228][ T6909] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 59.977907][ T6909] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 59.978305][ T6915] tipc: Enabling not permitted [ 59.980028][ T6909] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 59.981388][ T6915] tipc: Enabling of bearer rejected, failed to enable media [ 59.987859][ T6909] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 59.990980][ T6909] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 59.993704][ T6909] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 59.997128][ T6909] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 60.001155][ T6909] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 60.003583][ T6909] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 60.007741][ T6909] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 60.010423][ T6915] vlan2: entered allmulticast mode [ 60.011910][ T6915] bond0: entered allmulticast mode [ 60.014685][ T6915] bond_slave_0: entered allmulticast mode [ 60.016475][ T6915] bond_slave_1: entered allmulticast mode [ 60.284166][ T5998] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 60.317233][ T6931] loop5: detected capacity change from 0 to 9487 [ 60.319315][ T6931] loop5: detected capacity change from 9487 to 9855 [ 60.326855][ T5938] Buffer I/O error on dev loop5, logical block 1231, async page read [ 60.362498][ T6933] FAULT_INJECTION: forcing a failure. [ 60.362498][ T6933] name failslab, interval 1, probability 0, space 0, times 0 [ 60.365977][ T6933] CPU: 1 UID: 0 PID: 6933 Comm: syz.2.255 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 60.365991][ T6933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.365997][ T6933] Call Trace: [ 60.366001][ T6933] [ 60.366005][ T6933] dump_stack_lvl+0x16c/0x1f0 [ 60.366035][ T6933] should_fail_ex+0x512/0x640 [ 60.366052][ T6933] should_failslab+0xc2/0x120 [ 60.366064][ T6933] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 60.366076][ T6933] ? skb_clone+0x190/0x3f0 [ 60.366090][ T6933] skb_clone+0x190/0x3f0 [ 60.366103][ T6933] netlink_deliver_tap+0xabd/0xd30 [ 60.366119][ T6933] netlink_unicast+0x5df/0x7f0 [ 60.366137][ T6933] ? __pfx_netlink_unicast+0x10/0x10 [ 60.366154][ T6933] netlink_sendmsg+0x8d1/0xdd0 [ 60.366174][ T6933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.366193][ T6933] ____sys_sendmsg+0xa95/0xc70 [ 60.366209][ T6933] ? copy_msghdr_from_user+0x10a/0x160 [ 60.366221][ T6933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 60.366242][ T6933] ___sys_sendmsg+0x134/0x1d0 [ 60.366255][ T6933] ? __pfx____sys_sendmsg+0x10/0x10 [ 60.366282][ T6933] __sys_sendmsg+0x16d/0x220 [ 60.366294][ T6933] ? __pfx___sys_sendmsg+0x10/0x10 [ 60.366315][ T6933] do_syscall_64+0xcd/0x260 [ 60.366330][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.366340][ T6933] RIP: 0033:0x7f8366b8d169 [ 60.366348][ T6933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.366357][ T6933] RSP: 002b:00007f8367a56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.366367][ T6933] RAX: ffffffffffffffda RBX: 00007f8366da5fa0 RCX: 00007f8366b8d169 [ 60.366373][ T6933] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000003 [ 60.366379][ T6933] RBP: 00007f8367a56090 R08: 0000000000000000 R09: 0000000000000000 [ 60.366384][ T6933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.366390][ T6933] R13: 0000000000000000 R14: 00007f8366da5fa0 R15: 00007ffd68576848 [ 60.366402][ T6933] [ 60.448516][ T5938] Buffer I/O error on dev loop5, logical block 1231, async page read [ 60.464270][ T5998] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.468315][ T5998] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.476973][ T5998] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 60.480197][ T5998] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.493241][ T5998] usb 9-1: config 0 descriptor?? [ 60.705447][ T6917] __nla_validate_parse: 7 callbacks suppressed [ 60.705483][ T6917] netlink: 200 bytes leftover after parsing attributes in process `syz.4.250'. [ 60.728353][ T5998] usbhid 9-1:0.0: can't add hid device: -71 [ 60.730118][ T5998] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 60.733633][ T5998] usb 9-1: USB disconnect, device number 3 [ 60.980645][ T6989] ./file0: Can't lookup blockdev [ 60.983639][ T40] kauditd_printk_skb: 71 callbacks suppressed [ 60.983652][ T40] audit: type=1326 audit(1744338059.519:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.1.262" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff6658d169 code=0x0 [ 61.079750][ T40] audit: type=1404 audit(1744338059.609:433): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 61.091059][ T40] audit: type=1404 audit(1744338059.619:434): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 61.104486][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'. [ 61.236637][ T40] audit: type=1400 audit(1744338059.769:435): avc: denied { read write } for pid=6245 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.243594][ T40] audit: type=1400 audit(1744338059.769:436): avc: denied { open } for pid=6245 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.250112][ T40] audit: type=1400 audit(1744338059.769:437): avc: denied { ioctl } for pid=6245 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.257512][ T40] audit: type=1400 audit(1744338059.779:438): avc: denied { create } for pid=6993 comm="syz.4.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.263541][ T40] audit: type=1400 audit(1744338059.779:439): avc: denied { allowed } for pid=6993 comm="syz.4.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.268753][ T40] audit: type=1400 audit(1744338059.789:440): avc: denied { create } for pid=6993 comm="syz.4.263" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 61.275583][ T40] audit: type=1400 audit(1744338059.789:441): avc: denied { map } for pid=6993 comm="syz.4.263" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13979 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 61.294206][ T6996] FAULT_INJECTION: forcing a failure. [ 61.294206][ T6996] name failslab, interval 1, probability 0, space 0, times 0 [ 61.297873][ T6996] CPU: 2 UID: 0 PID: 6996 Comm: syz.4.264 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 61.297892][ T6996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.297901][ T6996] Call Trace: [ 61.297907][ T6996] [ 61.297913][ T6996] dump_stack_lvl+0x16c/0x1f0 [ 61.297936][ T6996] should_fail_ex+0x512/0x640 [ 61.297952][ T6996] ? __kmalloc_noprof+0xbf/0x510 [ 61.297969][ T6996] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 61.297991][ T6996] should_failslab+0xc2/0x120 [ 61.298006][ T6996] __kmalloc_noprof+0xd2/0x510 [ 61.298023][ T6996] ? avc_has_perm_noaudit+0x149/0x3b0 [ 61.298040][ T6996] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 61.298068][ T6996] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 61.298093][ T6996] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 61.298118][ T6996] ? bpf_lsm_capable+0x9/0x10 [ 61.298131][ T6996] ? security_capable+0x7e/0x260 [ 61.298149][ T6996] ? ns_capable+0xd7/0x110 [ 61.298170][ T6996] genl_rcv_msg+0x55c/0x800 [ 61.298192][ T6996] ? __pfx_genl_rcv_msg+0x10/0x10 [ 61.298207][ T6996] ? __pfx___dev_queue_xmit+0x10/0x10 [ 61.298217][ T6996] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 61.298230][ T6996] ? __pfx_nl80211_set_station+0x10/0x10 [ 61.298244][ T6996] ? __pfx_nl80211_post_doit+0x10/0x10 [ 61.298258][ T6996] ? __lock_acquire+0xaa4/0x1ba0 [ 61.298271][ T6996] netlink_rcv_skb+0x16a/0x440 [ 61.298284][ T6996] ? __pfx_genl_rcv_msg+0x10/0x10 [ 61.298300][ T6996] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 61.298320][ T6996] ? __pfx_down_read+0x10/0x10 [ 61.298336][ T6996] ? netlink_deliver_tap+0x1ae/0xd30 [ 61.298351][ T6996] genl_rcv+0x28/0x40 [ 61.298365][ T6996] netlink_unicast+0x53a/0x7f0 [ 61.298380][ T6996] ? __pfx_netlink_unicast+0x10/0x10 [ 61.298397][ T6996] netlink_sendmsg+0x8d1/0xdd0 [ 61.298413][ T6996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.298432][ T6996] ____sys_sendmsg+0xa95/0xc70 [ 61.298452][ T6996] ? copy_msghdr_from_user+0x10a/0x160 [ 61.298464][ T6996] ? __pfx_____sys_sendmsg+0x10/0x10 [ 61.298485][ T6996] ___sys_sendmsg+0x134/0x1d0 [ 61.298498][ T6996] ? __pfx____sys_sendmsg+0x10/0x10 [ 61.298526][ T6996] __sys_sendmsg+0x16d/0x220 [ 61.298538][ T6996] ? __pfx___sys_sendmsg+0x10/0x10 [ 61.298553][ T6996] ? rcu_is_watching+0x12/0xc0 [ 61.298570][ T6996] do_syscall_64+0xcd/0x260 [ 61.298585][ T6996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.298595][ T6996] RIP: 0033:0x7fbbbc38d169 [ 61.298604][ T6996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.298613][ T6996] RSP: 002b:00007fbbba1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.298623][ T6996] RAX: ffffffffffffffda RBX: 00007fbbbc5a5fa0 RCX: 00007fbbbc38d169 [ 61.298629][ T6996] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000003 [ 61.298634][ T6996] RBP: 00007fbbba1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 61.298640][ T6996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.298645][ T6996] R13: 0000000000000000 R14: 00007fbbbc5a5fa0 R15: 00007fff18ca9e98 [ 61.298657][ T6996] [ 61.388480][ C2] vkms_vblank_simulate: vblank timer overrun [ 61.428556][ T6999] SELinux: policydb magic number 0x6f72702f does not match expected magic number 0xf97cff8c [ 61.431499][ T6999] SELinux: failed to load policy [ 61.461857][ T7004] validate_nla: 2 callbacks suppressed [ 61.461867][ T7004] netlink: 'syz.4.267': attribute type 1 has an invalid length. [ 61.518822][ T7008] netlink: 28 bytes leftover after parsing attributes in process `syz.4.267'. [ 61.528993][ T7010] Bluetooth: MGMT ver 1.23 [ 61.537177][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'. [ 61.552678][ T7010] xt_hashlimit: size too large, truncated to 1048576 [ 61.558089][ T7012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.270'. [ 61.608745][ T7015] kernel profiling enabled (shift: 0) [ 61.781931][ T7015] syz.4.271: vmalloc error: size 702033920, failed to allocated page array size 1371160, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 61.787133][ T7015] CPU: 0 UID: 0 PID: 7015 Comm: syz.4.271 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 61.787149][ T7015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.787156][ T7015] Call Trace: [ 61.787160][ T7015] [ 61.787163][ T7015] dump_stack_lvl+0x16c/0x1f0 [ 61.787186][ T7015] warn_alloc+0x248/0x3a0 [ 61.787198][ T7015] ? __pfx_warn_alloc+0x10/0x10 [ 61.787213][ T7015] ? __get_vm_area_node+0x1b9/0x300 [ 61.787227][ T7015] ? __get_vm_area_node+0x1e5/0x300 [ 61.787244][ T7015] __vmalloc_node_range_noprof+0x1110/0x1540 [ 61.787264][ T7015] ? profile_init+0xd5/0x130 [ 61.787278][ T7015] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 61.787293][ T7015] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 61.787304][ T7015] ? rcu_is_watching+0x12/0xc0 [ 61.787318][ T7015] ? rcu_is_watching+0x12/0xc0 [ 61.787331][ T7015] ? profile_init+0xd5/0x130 [ 61.787340][ T7015] ? __pfx_profiling_store+0x10/0x10 [ 61.787351][ T7015] vzalloc_noprof+0x6b/0x90 [ 61.787365][ T7015] ? profile_init+0xd5/0x130 [ 61.787375][ T7015] profile_init+0xd5/0x130 [ 61.787385][ T7015] profiling_store+0x73/0xf0 [ 61.787395][ T7015] kobj_attr_store+0x55/0x80 [ 61.787409][ T7015] ? __pfx_kobj_attr_store+0x10/0x10 [ 61.787422][ T7015] sysfs_kf_write+0xef/0x150 [ 61.787442][ T7015] kernfs_fop_write_iter+0x351/0x510 [ 61.787456][ T7015] ? __pfx_sysfs_kf_write+0x10/0x10 [ 61.787473][ T7015] iter_file_splice_write+0x91c/0x1150 [ 61.787491][ T7015] ? __pfx_iter_file_splice_write+0x10/0x10 [ 61.787504][ T7015] ? __pfx_copy_splice_read+0x10/0x10 [ 61.787527][ T7015] ? __pfx_iter_file_splice_write+0x10/0x10 [ 61.787537][ T7015] direct_splice_actor+0x18f/0x6c0 [ 61.787555][ T7015] splice_direct_to_actor+0x342/0xa30 [ 61.787571][ T7015] ? __pfx_direct_splice_actor+0x10/0x10 [ 61.787590][ T7015] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 61.787607][ T7015] ? __pfx___might_resched+0x10/0x10 [ 61.787623][ T7015] do_splice_direct+0x174/0x240 [ 61.787639][ T7015] ? __pfx_do_splice_direct+0x10/0x10 [ 61.787655][ T7015] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 61.787673][ T7015] ? rw_verify_area+0xcf/0x680 [ 61.787689][ T7015] do_sendfile+0xafd/0xe50 [ 61.787706][ T7015] ? __pfx_do_sendfile+0x10/0x10 [ 61.787724][ T7015] ? __x64_sys_futex+0x1e0/0x4c0 [ 61.787738][ T7015] ? __x64_sys_futex+0x1e9/0x4c0 [ 61.787753][ T7015] __x64_sys_sendfile64+0x1d8/0x220 [ 61.787766][ T7015] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 61.787776][ T7015] ? rcu_is_watching+0x12/0xc0 [ 61.787792][ T7015] do_syscall_64+0xcd/0x260 [ 61.787812][ T7015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.787827][ T7015] RIP: 0033:0x7fbbbc38d169 [ 61.787841][ T7015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.787855][ T7015] RSP: 002b:00007fbbba1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 61.787870][ T7015] RAX: ffffffffffffffda RBX: 00007fbbbc5a5fa0 RCX: 00007fbbbc38d169 [ 61.787880][ T7015] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000000000000000d [ 61.787889][ T7015] RBP: 00007fbbbc40e990 R08: 0000000000000000 R09: 0000000000000000 [ 61.787897][ T7015] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 61.787905][ T7015] R13: 0000000000000000 R14: 00007fbbbc5a5fa0 R15: 00007fff18ca9e98 [ 61.787921][ T7015] [ 61.787925][ T7015] Mem-Info: [ 61.827211][ T7030] netlink: 292 bytes leftover after parsing attributes in process `syz.0.274'. [ 61.828747][ T7015] active_anon:10695 inactive_anon:0 isolated_anon:0 [ 61.828747][ T7015] active_file:1820 inactive_file:38452 isolated_file:0 [ 61.828747][ T7015] unevictable:1768 dirty:2190 writeback:0 [ 61.828747][ T7015] slab_reclaimable:11261 slab_unreclaimable:72079 [ 61.828747][ T7015] mapped:24422 shmem:6545 pagetables:1053 [ 61.828747][ T7015] sec_pagetables:290 bounce:0 [ 61.828747][ T7015] kernel_misc_reclaimable:0 [ 61.828747][ T7015] free:454878 free_pcp:705 free_cma:0 [ 61.853362][ T7031] delete_channel: no stack [ 61.854561][ T7015] Node 0 active_anon:42780kB inactive_anon:0kB active_file:7280kB inactive_file:153732kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:97688kB dirty:8760kB writeback:0kB shmem:22644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13296kB pagetables:4212kB sec_pagetables:1160kB all_unreclaimable? no Balloon:0kB [ 61.885485][ T67] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 61.888096][ T7015] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 61.929482][ T7015] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 61.939659][ T7015] lowmem_reserve[]: 0 1236 1236 1236 1236 [ 61.941404][ T7015] Node 0 DMA32 free:218380kB boost:0kB min:27548kB low:34432kB high:41316kB reserved_highatomic:0KB active_anon:43152kB inactive_anon:0kB active_file:7280kB inactive_file:153732kB unevictable:3536kB writepending:8760kB present:2080628kB managed:1265904kB mlocked:0kB bounce:0kB free_pcp:5004kB local_pcp:656kB free_cma:0kB [ 61.950878][ T7015] lowmem_reserve[]: 0 0 0 0 0 [ 61.952911][ T7015] Node 1 Normal free:1582476kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781964kB mlocked:0kB bounce:0kB free_pcp:564kB local_pcp:0kB free_cma:0kB [ 61.961428][ T7015] lowmem_reserve[]: 0 0 0 0 0 [ 61.963919][ T7015] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 61.968851][ T7015] Node 0 DMA32: 1*4kB (E) 9*8kB (E) 15*16kB (ME) 7*32kB (UME) 6*64kB (UME) 5*128kB (UME) 6*256kB (UM) 1*512kB (M) 1*1024kB (U) 0*2048kB 52*4096kB (UM) = 217628kB [ 61.968941][ T7015] Node 1 Normal: 4*4kB (UM) 8*8kB (UME) 12*16kB (UME) 159*32kB (UME) 61*64kB (UME) 19*128kB (UME) 2*256kB (U) 5*512kB (UME) 1*1024kB (E) 3*2048kB (UM) 381*4096kB (UM) = 1582512kB [ 61.969029][ T7015] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 61.969037][ T7015] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 61.969044][ T7015] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 61.969052][ T7015] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 61.969060][ T7015] 46817 total pagecache pages [ 61.969064][ T7015] 0 pages in swap cache [ 61.969067][ T7015] Free swap = 124996kB [ 61.969071][ T7015] Total swap = 124996kB [ 61.969075][ T7015] 1048443 pages RAM [ 61.969079][ T7015] 0 pages HighMem/MovableOnly [ 61.969082][ T7015] 282636 pages reserved [ 61.969086][ T7015] 0 pages cma reserved [ 62.012445][ T67] Bluetooth: hci3: command 0x0c1a tx timeout [ 62.012483][ T5941] Bluetooth: hci2: command 0x0c1a tx timeout [ 62.014252][ T5950] Bluetooth: hci1: command 0x0c1a tx timeout [ 62.519599][ T7027] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 62.522704][ T7027] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 62.524368][ T7027] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 62.526284][ T7027] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 62.635863][ T7067] exFAT-fs (nullb0): invalid boot record signature [ 62.637750][ T7067] exFAT-fs (nullb0): failed to read boot sector [ 62.639363][ T7067] exFAT-fs (nullb0): failed to recognize exfat type [ 62.697891][ T7070] kvm: emulating exchange as write [ 62.700292][ T7070] warning: `syz.0.288' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.705791][ T7070] netlink: 32 bytes leftover after parsing attributes in process `syz.0.288'. [ 62.710893][ T7073] NILFS (nbd2): device size too small [ 62.789628][ T5941] Bluetooth: hci0: Malformed LE Event: 0x0d [ 62.962511][ T7088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.292'. [ 62.966590][ T7088] xt_hashlimit: size too large, truncated to 1048576 [ 62.989099][ T7086] ocfs2: Unknown parameter 'usrquota.net/syz0' [ 62.997761][ T7086] SELinux: policydb magic number 0x75622f2e does not match expected magic number 0xf97cff8c [ 63.000636][ T7086] SELinux: failed to load policy [ 63.159530][ T7094] netlink: 'syz.1.294': attribute type 11 has an invalid length. [ 63.161586][ T7094] netlink: 'syz.1.294': attribute type 11 has an invalid length. [ 63.163506][ T7094] netlink: 224 bytes leftover after parsing attributes in process `syz.1.294'. [ 63.575268][ T7122] xt_l2tp: missing protocol rule (udp|l2tpip) [ 63.607746][ T7127] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 63.612361][ T7129] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3631 [ 63.659367][ T7134] netlink: 24 bytes leftover after parsing attributes in process `syz.4.298'. [ 63.719515][ T7139] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.772320][ T5941] Bluetooth: hci0: command 0x0c1a tx timeout [ 63.940230][ T7154] xt_hashlimit: size too large, truncated to 1048576 [ 63.943520][ T7152] program syz.0.308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.097228][ T7161] FAULT_INJECTION: forcing a failure. [ 64.097228][ T7161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.100985][ T7161] CPU: 0 UID: 0 PID: 7161 Comm: syz.4.311 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 64.100999][ T7161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.101006][ T7161] Call Trace: [ 64.101010][ T7161] [ 64.101014][ T7161] dump_stack_lvl+0x16c/0x1f0 [ 64.101032][ T7161] should_fail_ex+0x512/0x640 [ 64.101046][ T7161] _copy_from_user+0x2e/0xd0 [ 64.101058][ T7161] kstrtouint_from_user+0xd6/0x1d0 [ 64.101073][ T7161] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 64.101088][ T7161] ? __lock_acquire+0xaa4/0x1ba0 [ 64.101103][ T7161] proc_fail_nth_write+0x83/0x250 [ 64.101120][ T7161] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 64.101140][ T7161] vfs_write+0x25c/0x1180 [ 64.101148][ T7161] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 64.101165][ T7161] ? __pfx___mutex_lock+0x10/0x10 [ 64.101180][ T7161] ? __pfx_vfs_write+0x10/0x10 [ 64.101196][ T7161] ? __fget_files+0x20e/0x3c0 [ 64.101210][ T7161] ksys_write+0x12a/0x240 [ 64.101218][ T7161] ? __pfx_ksys_write+0x10/0x10 [ 64.101226][ T7161] ? rcu_is_watching+0x12/0xc0 [ 64.101246][ T7161] do_syscall_64+0xcd/0x260 [ 64.101261][ T7161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.101271][ T7161] RIP: 0033:0x7fbbbc38bc1f [ 64.101279][ T7161] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 64.101288][ T7161] RSP: 002b:00007fbbba1f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 64.101298][ T7161] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbbbc38bc1f [ 64.101304][ T7161] RDX: 0000000000000001 RSI: 00007fbbba1f60a0 RDI: 0000000000000005 [ 64.101309][ T7161] RBP: 00007fbbba1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 64.101315][ T7161] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 64.101321][ T7161] R13: 0000000000000000 R14: 00007fbbbc5a5fa0 R15: 00007fff18ca9e98 [ 64.101333][ T7161] [ 64.246070][ T7177] dccp_invalid_packet: pskb_may_pull failed [ 64.468622][ T7201] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 64.470698][ T7201] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 64.474345][ T7201] vhci_hcd vhci_hcd.0: Device attached [ 64.572746][ T5941] Bluetooth: hci3: command 0x0c1a tx timeout [ 64.573823][ T67] Bluetooth: hci2: command 0x0c1a tx timeout [ 64.582332][ T67] Bluetooth: hci1: command 0x0c1a tx timeout [ 64.619724][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.623675][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.627143][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.630793][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.634322][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.637923][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.641330][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.645850][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.657076][ T7210] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 64.667851][ T7210] CIFS mount error: No usable UNC path provided in device string! [ 64.667851][ T7210] [ 64.671064][ T7210] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 64.712824][ T5977] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 64.713621][ T1327] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 64.715058][ T24] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 64.872390][ T5977] usb 9-1: Using ep0 maxpacket: 16 [ 64.875268][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 64.877162][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 64.879685][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 64.882145][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 64.887057][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 64.890792][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 64.892891][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 64.895549][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 64.898057][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 64.900873][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 64.903472][ T5977] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 64.905956][ T5977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.908008][ T5977] usb 9-1: Product: syz [ 64.909074][ T5977] usb 9-1: Manufacturer: syz [ 64.910298][ T5977] usb 9-1: SerialNumber: syz [ 64.913641][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 64.916009][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 64.918974][ T5977] usb 9-1: config 0 descriptor?? [ 64.920463][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 64.922990][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 64.926738][ T5977] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 64.929297][ T5977] usb 9-1: Detected FT232H [ 64.932162][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 64.940448][ T24] usb 5-1: string descriptor 0 read error: -22 [ 64.942500][ T24] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 64.944844][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.958969][ T24] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 64.979738][ T7225] netlink: 'syz.2.330': attribute type 4 has an invalid length. [ 64.986166][ T7225] netlink: 'syz.2.330': attribute type 4 has an invalid length. [ 65.026720][ T67] Bluetooth: hci0: Unexpected advertising set terminated event [ 65.026762][ T67] Bluetooth: hci0: Unexpected advertising set terminated event [ 65.029324][ T67] Bluetooth: hci0: Unexpected advertising set terminated event [ 65.031895][ T67] Bluetooth: hci0: Unexpected advertising set terminated event [ 65.034270][ T67] Bluetooth: hci0: Unexpected advertising set terminated event [ 65.036566][ T67] Bluetooth: hci0: Unexpected advertising set terminated event [ 65.038576][ T67] Bluetooth: hci0: Unexpected advertising set terminated event [ 65.040717][ T67] Bluetooth: hci0: Unexpected advertising set terminated event [ 65.042841][ T67] Bluetooth: hci0: Unexpected advertising set terminated event [ 65.044720][ T67] Bluetooth: hci0: Unexpected advertising set terminated event [ 65.128959][ T7201] @ÿ: renamed from bond_slave_0 (while UP) [ 65.145902][ T7201] netlink: 'syz.4.322': attribute type 1 has an invalid length. [ 65.149919][ T5977] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 65.150578][ T7231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7231 comm=syz.1.331 [ 65.152566][ T5977] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 65.154668][ T7202] usb 45-1: recv xbuf, 0 [ 65.156642][ T6134] vhci_hcd: stop threads [ 65.158517][ T5977] ftdi_sio 9-1:0.0: GPIO initialisation failed: -71 [ 65.159637][ T6134] vhci_hcd: release socket [ 65.161482][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.164410][ T6134] vhci_hcd: disconnect device [ 65.167516][ T5977] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 65.167775][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.174336][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.177364][ T5977] usb 9-1: USB disconnect, device number 4 [ 65.179616][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.183771][ T5977] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 65.189300][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.190064][ T5977] ftdi_sio 9-1:0.0: device disconnected [ 65.192019][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.197140][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.199852][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.207725][ T9] usb 5-1: USB disconnect, device number 2 [ 65.222450][ T1327] vhci_hcd: vhci_device speed not set [ 65.233198][ T7225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.236457][ T7225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.272667][ T7044] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 65.400817][ T67] ================================================================== [ 65.403830][ T67] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0x16a/0x170 [ 65.406896][ T67] Read of size 8 at addr ffff888050094188 by task kworker/u33:0/67 [ 65.411387][ T67] [ 65.412044][ T67] CPU: 3 UID: 0 PID: 67 Comm: kworker/u33:0 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 65.412059][ T67] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.412067][ T67] Workqueue: hci0 hci_rx_work [ 65.412092][ T67] Call Trace: [ 65.412096][ T67] [ 65.412101][ T67] dump_stack_lvl+0x116/0x1f0 [ 65.412117][ T67] print_report+0xc3/0x670 [ 65.412133][ T67] ? __virt_addr_valid+0x5e/0x590 [ 65.412151][ T67] ? __phys_addr+0xc6/0x150 [ 65.412166][ T67] ? l2cap_sock_ready_cb+0x16a/0x170 [ 65.412180][ T67] kasan_report+0xe0/0x110 [ 65.412191][ T67] ? l2cap_sock_ready_cb+0x16a/0x170 [ 65.412203][ T67] l2cap_sock_ready_cb+0x16a/0x170 [ 65.412214][ T67] l2cap_le_start+0x1ea/0xe40 [ 65.412228][ T67] ? l2cap_connect_cfm+0x819/0xf80 [ 65.412237][ T67] ? __pfx_l2cap_le_start+0x10/0x10 [ 65.412252][ T67] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 65.412268][ T67] ? __l2cap_chan_add+0x3e6/0xa20 [ 65.412284][ T67] l2cap_connect_cfm+0x8f4/0xf80 [ 65.412295][ T67] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 65.412306][ T67] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 65.412315][ T67] le_conn_complete_evt+0x1662/0x1d70 [ 65.412326][ T67] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 65.412335][ T67] ? hci_event_packet+0x43c/0x1190 [ 65.412347][ T67] hci_le_conn_complete_evt+0x23c/0x370 [ 65.412358][ T67] hci_le_meta_evt+0x2f3/0x5e0 [ 65.412369][ T67] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 65.412380][ T67] hci_event_packet+0x669/0x1190 [ 65.412389][ T67] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 65.412400][ T67] ? __pfx_hci_event_packet+0x10/0x10 [ 65.412410][ T67] ? kcov_remote_start+0x3c9/0x6d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 65.412421][ T67] ? lockdep_hardirqs_on+0x7c/0x110 [ 65.412435][ T67] hci_rx_work+0x2c5/0x16b0 [ 65.412446][ T67] ? rcu_is_watching+0x12/0xc0 [ 65.412460][ T67] process_one_work+0x9cc/0x1b70 [ 65.412474][ T67] ? __pfx_process_one_work+0x10/0x10 [ 65.412487][ T67] ? assign_work+0x1a0/0x250 [ 65.412498][ T67] worker_thread+0x6c8/0xf10 [ 65.412512][ T67] ? __pfx_worker_thread+0x10/0x10 [ 65.412523][ T67] kthread+0x3c2/0x780 [ 65.412533][ T67] ? __pfx_kthread+0x10/0x10 [ 65.412543][ T67] ? __pfx_kthread+0x10/0x10 [ 65.412552][ T67] ? __pfx_kthread+0x10/0x10 [ 65.412561][ T67] ? __pfx_kthread+0x10/0x10 [ 65.412570][ T67] ? rcu_is_watching+0x12/0xc0 [ 65.412582][ T67] ? __pfx_kthread+0x10/0x10 [ 65.412592][ T67] ret_from_fork+0x45/0x80 [ 65.412604][ T67] ? __pfx_kthread+0x10/0x10 [ 65.412613][ T67] ret_from_fork_asm+0x1a/0x30 [ 65.412631][ T67] [ 65.412635][ T67] [ 65.496881][ T67] Allocated by task 7238: [ 65.498169][ T67] kasan_save_stack+0x33/0x60 [ 65.499475][ T67] kasan_save_track+0x14/0x30 [ 65.500842][ T67] __kasan_kmalloc+0xaa/0xb0 [ 65.502144][ T67] __kmalloc_noprof+0x223/0x510 [ 65.503493][ T67] sk_prot_alloc+0x1a8/0x2a0 [ 65.504790][ T67] sk_alloc+0x36/0xc20 [ 65.505872][ T67] bt_sock_alloc+0x3b/0x3a0 [ 65.507124][ T67] l2cap_sock_alloc.constprop.0+0x33/0x1d0 [ 65.508719][ T67] l2cap_sock_create+0x123/0x1f0 [ 65.510279][ T67] bt_sock_create+0x182/0x350 [ 65.512021][ T67] __sock_create+0x335/0x8d0 [ 65.513737][ T67] __sys_socket+0x14d/0x260 [ 65.515000][ T67] __x64_sys_socket+0x72/0xb0 [ 65.516307][ T67] do_syscall_64+0xcd/0x260 [ 65.517587][ T67] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.519223][ T67] [ 65.520027][ T67] Freed by task 7238: [ 65.521553][ T67] kasan_save_stack+0x33/0x60 [ 65.523304][ T67] kasan_save_track+0x14/0x30 [ 65.524717][ T67] kasan_save_free_info+0x3b/0x60 [ 65.526116][ T67] __kasan_slab_free+0x51/0x70 [ 65.527433][ T67] kfree+0x2b6/0x4d0 [ 65.528524][ T67] __sk_destruct+0x740/0x980 [ 65.529877][ T67] sk_destruct+0xc2/0xf0 [ 65.531467][ T67] __sk_free+0xf4/0x3e0 [ 65.533049][ T67] sk_free+0x6a/0x90 [ 65.534299][ T67] l2cap_sock_kill+0x171/0x2d0 [ 65.535619][ T67] l2cap_sock_release+0x189/0x210 [ 65.537002][ T67] __sock_release+0xb0/0x270 [ 65.538298][ T67] sock_close+0x1c/0x30 [ 65.539449][ T67] __fput+0x3ff/0xb70 [ 65.540896][ T67] task_work_run+0x14d/0x240 [ 65.542642][ T67] syscall_exit_to_user_mode+0x27b/0x2a0 [ 65.544427][ T67] do_syscall_64+0xda/0x260 [ 65.545715][ T67] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.547239][ T67] [ 65.547880][ T67] The buggy address belongs to the object at ffff888050094000 [ 65.547880][ T67] which belongs to the cache kmalloc-2k of size 2048 [ 65.552101][ T67] The buggy address is located 392 bytes inside of [ 65.552101][ T67] freed 2048-byte region [ffff888050094000, ffff888050094800) [ 65.555856][ T67] [ 65.556502][ T67] The buggy address belongs to the physical page: [ 65.558277][ T67] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50090 [ 65.560681][ T67] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 65.562975][ T67] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 65.565212][ T67] page_type: f5(slab) [ 65.566374][ T67] raw: 00fff00000000040 ffff88801b442f00 0000000000000000 dead000000000001 [ 65.568634][ T67] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 65.570972][ T67] head: 00fff00000000040 ffff88801b442f00 0000000000000000 dead000000000001 [ 65.573337][ T67] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 65.576337][ T67] head: 00fff00000000003 ffffea0001402401 00000000ffffffff 00000000ffffffff [ 65.579369][ T67] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 65.582393][ T67] page dumped because: kasan: bad access detected [ 65.584652][ T67] page_owner tracks the page as allocated [ 65.586665][ T67] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5939, tgid 5939 (syz-executor), ts 48018983643, free_ts 0 [ 65.593032][ T67] post_alloc_hook+0x181/0x1b0 [ 65.594362][ T67] get_page_from_freelist+0x1193/0x39b0 [ 65.595830][ T67] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 65.597452][ T67] alloc_pages_mpol+0x1fb/0x550 [ 65.598796][ T67] new_slab+0x23c/0x330 [ 65.599962][ T67] ___slab_alloc+0xd9c/0x1940 [ 65.601380][ T67] __slab_alloc.constprop.0+0x56/0xb0 [ 65.602890][ T67] __kmalloc_node_noprof+0x2ed/0x500 [ 65.604437][ T67] qdisc_alloc+0xbb/0xc50 [ 65.606007][ T67] qdisc_create_dflt+0x73/0x430 [ 65.607744][ T67] dev_activate+0x63f/0x12d0 [ 65.609429][ T67] __dev_open+0x43a/0x7d0 [ 65.610990][ T67] __dev_change_flags+0x55d/0x720 [ 65.612818][ T67] netif_change_flags+0x8d/0x160 [ 65.614571][ T67] do_setlink.constprop.0+0xddf/0x44b0 [ 65.616540][ T67] rtnl_newlink+0x1446/0x2000 [ 65.618269][ T67] page_owner free stack trace missing [ 65.620235][ T67] [ 65.621125][ T67] Memory state around the buggy address: [ 65.623199][ T67] ffff888050094080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.626123][ T67] ffff888050094100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.629038][ T67] >ffff888050094180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.631468][ T67] ^ [ 65.632683][ T67] ffff888050094200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.634907][ T67] ffff888050094280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.637217][ T67] ================================================================== [ 65.641453][ T67] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 65.643482][ T67] CPU: 3 UID: 0 PID: 67 Comm: kworker/u33:0 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 65.646652][ T67] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.649904][ T67] Workqueue: hci0 hci_rx_work [ 65.651146][ T67] Call Trace: [ 65.652063][ T67] [ 65.652881][ T67] dump_stack_lvl+0x3d/0x1f0 [ 65.654134][ T67] panic+0x71c/0x800 [ 65.655183][ T67] ? __pfx_panic+0x10/0x10 [ 65.656342][ T67] ? irqentry_exit+0x3b/0x90 [ 65.657587][ T67] ? lockdep_hardirqs_on+0x7c/0x110 [ 65.659005][ T67] ? preempt_schedule_thunk+0x16/0x30 [ 65.660900][ T67] ? l2cap_sock_ready_cb+0x16a/0x170 [ 65.662319][ T67] ? preempt_schedule_common+0x44/0xc0 [ 65.663767][ T67] ? l2cap_sock_ready_cb+0x16a/0x170 [ 65.665169][ T67] check_panic_on_warn+0xab/0xb0 [ 65.666500][ T67] end_report+0x107/0x170 [ 65.667644][ T67] kasan_report+0xee/0x110 [ 65.668847][ T67] ? l2cap_sock_ready_cb+0x16a/0x170 [ 65.670303][ T67] l2cap_sock_ready_cb+0x16a/0x170 [ 65.671678][ T67] l2cap_le_start+0x1ea/0xe40 [ 65.672955][ T67] ? l2cap_connect_cfm+0x819/0xf80 [ 65.674345][ T67] ? __pfx_l2cap_le_start+0x10/0x10 [ 65.675738][ T67] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 65.677334][ T67] ? __l2cap_chan_add+0x3e6/0xa20 [ 65.678678][ T67] l2cap_connect_cfm+0x8f4/0xf80 [ 65.680466][ T67] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 65.682046][ T67] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 65.683497][ T67] le_conn_complete_evt+0x1662/0x1d70 [ 65.684924][ T67] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 65.686443][ T67] ? hci_event_packet+0x43c/0x1190 [ 65.687777][ T67] hci_le_conn_complete_evt+0x23c/0x370 [ 65.689264][ T67] hci_le_meta_evt+0x2f3/0x5e0 [ 65.690547][ T67] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 65.692227][ T67] hci_event_packet+0x669/0x1190 [ 65.693564][ T67] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 65.694934][ T67] ? __pfx_hci_event_packet+0x10/0x10 [ 65.696327][ T67] ? kcov_remote_start+0x3c9/0x6d0 [ 65.697643][ T67] ? lockdep_hardirqs_on+0x7c/0x110 [ 65.699123][ T67] hci_rx_work+0x2c5/0x16b0 [ 65.700748][ T67] ? rcu_is_watching+0x12/0xc0 [ 65.702073][ T67] process_one_work+0x9cc/0x1b70 [ 65.703357][ T67] ? __pfx_process_one_work+0x10/0x10 [ 65.704637][ T67] ? assign_work+0x1a0/0x250 [ 65.705896][ T67] worker_thread+0x6c8/0xf10 [ 65.707171][ T67] ? __pfx_worker_thread+0x10/0x10 [ 65.708565][ T67] kthread+0x3c2/0x780 [ 65.709713][ T67] ? __pfx_kthread+0x10/0x10 [ 65.710936][ T67] ? __pfx_kthread+0x10/0x10 [ 65.712167][ T67] ? __pfx_kthread+0x10/0x10 [ 65.713400][ T67] ? __pfx_kthread+0x10/0x10 [ 65.714676][ T67] ? rcu_is_watching+0x12/0xc0 [ 65.715960][ T67] ? __pfx_kthread+0x10/0x10 [ 65.717172][ T67] ret_from_fork+0x45/0x80 [ 65.718389][ T67] ? __pfx_kthread+0x10/0x10 [ 65.719696][ T67] ret_from_fork_asm+0x1a/0x30 [ 65.720962][ T67] [ 65.722319][ T67] Kernel Offset: disabled [ 65.723498][ T67] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:21:04 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88801c6f4200 RCX=ffffffff8243b473 RDX=ffff888030eec880 RSI=ffffffff8243b8a4 RDI=ffff88810068e2b0 RBP=ffffc900035df4b0 RSP=ffffc900035df3a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000fe7 R11=0000000000000000 R12=ffff88810068e1c0 R13=0000000000000000 R14=ffff88810443c178 R15=dffffc0000000000 RIP=ffffffff81bb3dd6 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb78bcb8280 ffffffff 00c00000 GS =0000 ffff8880d69b3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3f0ef6 CR3=000000003125a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000800000c0 Opmask01=0000000000421100 Opmask02=000000000000ffdf Opmask03=0000000000000000 Opmask04=00000000ffffffdf Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b5f5455504e495f 4449006b636f6c62 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd80764000 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d25203a7325206b 6e696c6d79732065 7461657263206f74 2064656c69614600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00706d742e323a37 622f617461642f76 6564752f6e75722f 00007ffd80764008 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000000000000000 32706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb78b9f2130 00007fb78b9f2130 0000000000001311 00006c61636f6c2d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 59647a305f474f5b 647c79303a243a78 68303e3b3a38253b 3a253e3a6e68303b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382433273f397b27 697a787c69303b7e 69305f474f5b647c 6930382433273f39 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=ffff88806a7415c0 RCX=ffffffff81af2699 RDX=ffff888040cd4880 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90003f1fa50 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100d4e82b9 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88806a53b040 RIP=ffffffff81af2699 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8367a566c0 ffffffff 00c00000 GS =0000 ffff8880d6ab3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c439923 CR3=00000000513b0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020100001 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8367a55bf0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8366c0f972 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8366c0f97f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8366c0f979 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8366c0f98d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8366c0fa13 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8366c0faf1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a732520656c6261 7462650064656c69 61662029736e7465 6e28736e74657300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f56000540494744 514740004140494c 4443050c564b5140 4b0d564b51405600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000b4 0000000000000000 0000000000000000 00000000000032a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000001 RCX=1ffff92000853eda RDX=dffffc0000000000 RSI=ffffffff8bf465c0 RDI=ffffffff8dcfbd10 RBP=ffffc9000429f6d0 RSP=ffffc9000429f618 R8 =3df0fb5f77fffd5a R9 =0000000000000000 R10=0000000000000003 R11=0000000000000000 R12=ffffc9000429f6d8 R13=ffffc9000429f688 R14=ffffc9000429f6bd R15=ffffffff81839767 RIP=ffffffff8169dad5 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bb3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007eff672d56c0 CR3=0000000029eaa000 CR4=00352ef0 DR0=7fffffffffffffff DR1=0000000000000008 DR2=0002000000000000 DR3=0000000000000001 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcfeffd0 Opmask01=0000000000000008 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffffdf Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd80763b20 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 962b1e9bed4bebb1 737373761351f73b ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737072 7373737373737333 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 54003d534b4e494c 564544003d4d4554 535953425553003d 4854415056454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 540018534b4e494c 56454400184d4554 5359534255530018 4854415056454400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000191 0000000000000032 2e6364003130323a 306963682f306963 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb78b9f1bb0 00007fb78b9f1bb0 00000000000000c1 00000000302e3836 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb78bcd1d4c 00007fb78bcd1d47 00000000000000b1 0000003177617264 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382433273f397b27 697a787c69303b7e 69305f474f5b647c 6930382433273f39 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854e0b45 RDI=ffffffff9ae254e0 RBP=ffffffff9ae254a0 RSP=ffffc90000d97148 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3530383838666666 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9ae254a0 R15=ffffffff854e0ae0 RIP=ffffffff854e0b6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cb3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c339194 CR3=000000005a9e6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff6660f972 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff6660f97f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff6660f979 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff6660f98d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff6660fa13 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff6660faf1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff6677d488 00007eff6677d480 00007eff6677d478 00007eff6677d450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff672dd100 00007eff6677d440 00007eff6677d458 00007eff6677d4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff6677d498 00007eff6677d490 00007eff6677d488 00007eff6677d480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000