last executing test programs: 36.99722141s ago: executing program 0 (id=1908): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_TARGET_NETNSID={0x8}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000c812800b00010067656e657665000010000280060005004e20000004000600"], 0x40}}, 0x0) 36.9967063s ago: executing program 0 (id=1910): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_cache\x00') read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x202c) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmsg$unix(r1, &(0x7f0000000900)={&(0x7f00000000c0), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000140)=""/217, 0xd9}, {&(0x7f0000000240)=""/162, 0xa2}, {&(0x7f0000000300)=""/154, 0x9a}, {&(0x7f0000000780)=""/140, 0x8c}], 0x4, &(0x7f0000000880)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x2000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r4, 0x1}, 0x1c}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x148, 0x4c, 0x1a, 0x0, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000940)=0x2, 0x4) sendmmsg$inet(r2, &(0x7f0000001100)=[{{&(0x7f0000000980)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000001040)=[{&(0x7f00000009c0)="ac957423693107cd11f77093c3511c8b19c071f9ad1c644734d39e297fb0b992ba98c1ed0c80542f6a9eb673e9560080d04e9af879c94b9722aaf2e0054c75c394e9fa81da8ba3a5b6ab4e130570cbcc221881832ab286f198011ee3fd9c95dc7000d14cfd56a05a94a663dbcae3c70bed93bde55436ff31bb0723397ddd22c3332ff4410066944bd12f489d4438c44ddc3ddf75db60f3fde6d320efb60d2ca765b3d0456f8353187f11d115c7380fafdb0624d05803c9d4f4a619b42a", 0xbd}, {&(0x7f0000000a80)="c9ca7c3f4602e496a7de85a3c5b5cf7bb2b89cb8144b25f418e914eaafb7f214651264981b7541f07ce1e005358612e95f9c682bea59185b5bbe9e80eb34865177bd2f9b284df6edcad3d6a030ab02a0c1d3edd11085a550bd54764c97d172d10538e5e0ce5ef573966a4ff8e99fe6bd57d758bf498d92f5557d34013b332a6428bfbd4fea973a93bf4f017c731e3f4cf1a5a371bc56e831be388d6f6b5868d01c7a6504eda48f374984fb0550f0670a31acbc9efc6f2d165c556b9f03c726131591da0fdb6935884bd6f137a0c68c5dc38f6d4e683a79ae394bb9510c98d28c2342b9708a", 0xe5}, {&(0x7f0000000b80)="e67c0dd6ad8448b08cdba6fab6d08a5e023ac0a780caa9fc608a146d275a64696f0e0f76d2ae868c482a094ea0d1f81a", 0x30}, {&(0x7f0000000bc0)="26ca51158c518029dde7d28e78317b951b1c11a4238f4011f363672e0c98c46cb66a93f3a5ee943be062d8e2fa343aaa410422ce5b5f03a0b1a41ac8cdc62e3c403e21b870c0828b7d0c12cea7443018eccc3ed5daa2c69d6aada391c641eedd9ed46fa14eb5379a240380a0f3c2198e4042d9cf8194a1b7d70f7d092a14a5aa0ad6b2dbebe165c90ca3c424f9282fcc50c088e481918e73122152ebc40be7ae7bb60a8322a2f299c91f519e98b512c955f60447f662b08a54d8260057323db6f784168a2147be1147d90be03059875fbfc1d764f5a5a4c5e322100eed31055f0a724260b9b05e28a451562a1e0565158a", 0xf1}, {&(0x7f0000000cc0)="97901e7069a3278b1f7193488d53f572b9bc3d6c0ab4341cc94a422a355f8f9ff2ca30f6053ddad0754c516b4b2948b90ad75f868177b780ae1e6ada34ee7a42cfac136593e42badd6a14eefd55a4c079726dc43e7b489b06fac4cd201f50e9d6b285d3aa0c83206e790591ac8a3bf533aed065eb8e0ef940da821f31225e75901eb1d62857e1cdbfbb260997a74c92b463ec33ddf25056ad4fdeb45dab5d9539dbfcf37d9924814e24e9f7b64213359e9ba766e427116c6822f5ae0971a9cc8daf9fbb1e256b146f315e9130589206870b620ff74eb", 0xd6}, {&(0x7f0000000dc0)="a633ba2915c3627bc7ea30cd9ec13d9f69e6f6cb182aa7816f0aa9b388b24758712d0baffbda4c92656dfd25137e6d867470051951b15ceb286a2d4cd2d8afd6f563cbe954e0523649298bd4452de25615049436cd321bc23483a08022910ab7f1592718d071f845e67d5a3d51011582e8de115bff9877a35ac1808cee48951ce5b0c4c184e0d94fc22f2ae3b9aca3abfd9d729d530b9beeeb523a227357aa3763267537da48e2e27afefac21f0efb2dd214d75ea6188d479526fdc55d601610", 0xc0}, {&(0x7f0000000e80)="9d9c43248b4adf75e2faeed33103392c84fc6e49131f4b4c43ec60f05912678b48a2f60efcb057e01ce502dd07700cf9b507bcea7d12941fb562f6a5090da42a56de58a2fd116ef80ef2f53dcf65513e91dbf1af44e190f7d391c3bb66ce3536b753fcab380fe31cca057376523f20a8c1ba7efdef84fe361c77b21722983dc6fb1d99a8bf9cb2be0673d230e114ac5a4fffde0199f55b7164e0255e3cdd75c356", 0xa1}, {&(0x7f0000000f40)="c067f967c390317e3cbd51639a5a302aa9a40f22ab937c201ae7fe699da3d52f07c1ca2a23b379", 0x27}, {&(0x7f0000000f80)="2e3e18b7f79a958d2f39df18d675eeee27d3d22cf3fd651ee15877fc43ccf689ce729e7f9352b942017f71799fbd1997ad49c6d8e9e7395afbbae2f00a37b85e2532fceaa4db4b678ec7296bab5d7f7dd53b219299d972715aeb1575f24781b22c2f2e07f530fb020f10c10b7a108528641f1e9c60bed59b75199dd23ef25769a61e9e1f0a9fe1c04e4e1d145cca3abaab2cf36a2e8e6e131869891ca6a50a05499958ebade665af7e258ee1ccf6a5ac", 0xb0}], 0x9}}], 0x1, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaabb08004322006600650000c90690780a0101020a01010000831b2bac1414aae0000002ffffffffac1e00017f0000017f00000183173b7f000028b01414bb0a01010264010102e000000294040000000000000000000000000000000000000400004e2200004e230000"], &(0x7f0000000080)={0x0, 0x1, [0x425, 0xe9f, 0xa79, 0x7e9]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_cache\x00') (async) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x202c) (async) socket(0x1e, 0x1, 0x0) (async) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async) recvmsg$unix(r1, &(0x7f0000000900)={&(0x7f00000000c0), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000140)=""/217, 0xd9}, {&(0x7f0000000240)=""/162, 0xa2}, {&(0x7f0000000300)=""/154, 0x9a}, {&(0x7f0000000780)=""/140, 0x8c}], 0x4, &(0x7f0000000880)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x2000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r4, 0x1}, 0x1c}}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x148, 0x4c, 0x1a, 0x0, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000940)=0x2, 0x4) (async) sendmmsg$inet(r2, &(0x7f0000001100)=[{{&(0x7f0000000980)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000001040)=[{&(0x7f00000009c0)="ac957423693107cd11f77093c3511c8b19c071f9ad1c644734d39e297fb0b992ba98c1ed0c80542f6a9eb673e9560080d04e9af879c94b9722aaf2e0054c75c394e9fa81da8ba3a5b6ab4e130570cbcc221881832ab286f198011ee3fd9c95dc7000d14cfd56a05a94a663dbcae3c70bed93bde55436ff31bb0723397ddd22c3332ff4410066944bd12f489d4438c44ddc3ddf75db60f3fde6d320efb60d2ca765b3d0456f8353187f11d115c7380fafdb0624d05803c9d4f4a619b42a", 0xbd}, {&(0x7f0000000a80)="c9ca7c3f4602e496a7de85a3c5b5cf7bb2b89cb8144b25f418e914eaafb7f214651264981b7541f07ce1e005358612e95f9c682bea59185b5bbe9e80eb34865177bd2f9b284df6edcad3d6a030ab02a0c1d3edd11085a550bd54764c97d172d10538e5e0ce5ef573966a4ff8e99fe6bd57d758bf498d92f5557d34013b332a6428bfbd4fea973a93bf4f017c731e3f4cf1a5a371bc56e831be388d6f6b5868d01c7a6504eda48f374984fb0550f0670a31acbc9efc6f2d165c556b9f03c726131591da0fdb6935884bd6f137a0c68c5dc38f6d4e683a79ae394bb9510c98d28c2342b9708a", 0xe5}, {&(0x7f0000000b80)="e67c0dd6ad8448b08cdba6fab6d08a5e023ac0a780caa9fc608a146d275a64696f0e0f76d2ae868c482a094ea0d1f81a", 0x30}, {&(0x7f0000000bc0)="26ca51158c518029dde7d28e78317b951b1c11a4238f4011f363672e0c98c46cb66a93f3a5ee943be062d8e2fa343aaa410422ce5b5f03a0b1a41ac8cdc62e3c403e21b870c0828b7d0c12cea7443018eccc3ed5daa2c69d6aada391c641eedd9ed46fa14eb5379a240380a0f3c2198e4042d9cf8194a1b7d70f7d092a14a5aa0ad6b2dbebe165c90ca3c424f9282fcc50c088e481918e73122152ebc40be7ae7bb60a8322a2f299c91f519e98b512c955f60447f662b08a54d8260057323db6f784168a2147be1147d90be03059875fbfc1d764f5a5a4c5e322100eed31055f0a724260b9b05e28a451562a1e0565158a", 0xf1}, {&(0x7f0000000cc0)="97901e7069a3278b1f7193488d53f572b9bc3d6c0ab4341cc94a422a355f8f9ff2ca30f6053ddad0754c516b4b2948b90ad75f868177b780ae1e6ada34ee7a42cfac136593e42badd6a14eefd55a4c079726dc43e7b489b06fac4cd201f50e9d6b285d3aa0c83206e790591ac8a3bf533aed065eb8e0ef940da821f31225e75901eb1d62857e1cdbfbb260997a74c92b463ec33ddf25056ad4fdeb45dab5d9539dbfcf37d9924814e24e9f7b64213359e9ba766e427116c6822f5ae0971a9cc8daf9fbb1e256b146f315e9130589206870b620ff74eb", 0xd6}, {&(0x7f0000000dc0)="a633ba2915c3627bc7ea30cd9ec13d9f69e6f6cb182aa7816f0aa9b388b24758712d0baffbda4c92656dfd25137e6d867470051951b15ceb286a2d4cd2d8afd6f563cbe954e0523649298bd4452de25615049436cd321bc23483a08022910ab7f1592718d071f845e67d5a3d51011582e8de115bff9877a35ac1808cee48951ce5b0c4c184e0d94fc22f2ae3b9aca3abfd9d729d530b9beeeb523a227357aa3763267537da48e2e27afefac21f0efb2dd214d75ea6188d479526fdc55d601610", 0xc0}, {&(0x7f0000000e80)="9d9c43248b4adf75e2faeed33103392c84fc6e49131f4b4c43ec60f05912678b48a2f60efcb057e01ce502dd07700cf9b507bcea7d12941fb562f6a5090da42a56de58a2fd116ef80ef2f53dcf65513e91dbf1af44e190f7d391c3bb66ce3536b753fcab380fe31cca057376523f20a8c1ba7efdef84fe361c77b21722983dc6fb1d99a8bf9cb2be0673d230e114ac5a4fffde0199f55b7164e0255e3cdd75c356", 0xa1}, {&(0x7f0000000f40)="c067f967c390317e3cbd51639a5a302aa9a40f22ab937c201ae7fe699da3d52f07c1ca2a23b379", 0x27}, {&(0x7f0000000f80)="2e3e18b7f79a958d2f39df18d675eeee27d3d22cf3fd651ee15877fc43ccf689ce729e7f9352b942017f71799fbd1997ad49c6d8e9e7395afbbae2f00a37b85e2532fceaa4db4b678ec7296bab5d7f7dd53b219299d972715aeb1575f24781b22c2f2e07f530fb020f10c10b7a108528641f1e9c60bed59b75199dd23ef25769a61e9e1f0a9fe1c04e4e1d145cca3abaab2cf36a2e8e6e131869891ca6a50a05499958ebade665af7e258ee1ccf6a5ac", 0xb0}], 0x9}}], 0x1, 0x0) (async) syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaabb08004322006600650000c90690780a0101020a01010000831b2bac1414aae0000002ffffffffac1e00017f0000017f00000183173b7f000028b01414bb0a01010264010102e000000294040000000000000000000000000000000000000400004e2200004e230000"], &(0x7f0000000080)={0x0, 0x1, [0x425, 0xe9f, 0xa79, 0x7e9]}) (async) 36.847191933s ago: executing program 0 (id=1913): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240), &(0x7f0000000280)=0x8) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000080)={0x0, &(0x7f0000000100), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000600)={r6, 0x0, 0x5, 0x4000000, 0x2, [0x0, 0x0, 0x0, 0x0], [0xbc2], [0x805, 0x1001000, 0x0, 0x3], [0x0, 0x1, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x2, [r7, 0x0, 0x0, r8], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000140)={0x0, 0x85b, 0xffff, 0x7fffffff, 0x2, [0x0, 0x0], [0x4, 0x401, 0x6, 0x72], [0x2, 0x6, 0x400, 0xfffffffa], [0x4, 0x1, 0xe, 0x5]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000001c0)={0x0}) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r12 = dup(r11) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r13, &(0x7f00000003c0), 0xb315) ioctl$FS_IOC_RESVSP(r13, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x300, 0x80000001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r12, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r12}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000002c0)={r2, 0xe, 0xffffffff, 0x3, 0x2, [r8, r9, r10, r14], [0x9a, 0x6, 0x9, 0x3], [0x1, 0xa93, 0x9, 0x704b], [0x7, 0x2, 0x81, 0x4]}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000040)={0x2, 0x0, 0x4, 0x7, 0x5b45, 0xbb, 0x823, 0x8ae, 0xf81e}) 36.737076093s ago: executing program 0 (id=1914): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000007200010300000000ffffffa607000000", @ANYRES32=0x0, @ANYBLOB="0800010012"], 0x20}, 0x1, 0xf00}, 0x800) 36.736570216s ago: executing program 0 (id=1915): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="8c0000043147a776d82275a609b1269e46954e3379", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf25060000003000070073797374656d5f753a6f626a6563745f723a69707461626c65735f696e697472635f657865635f743a7330000500010000000000080005006401010014000200fe80000000000000000000000000001c140006006d61637674617030000000000000000008000500e00000010800050064010100"], 0x8c}, 0x1, 0x0, 0x0, 0xc0000}, 0x14000) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)=0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32], 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd7000fcdbdf25060000000800030020000000080003007200000008000e000400000008000e0080000000080003008400000008000d000400000008000100", @ANYRES32=0x0, @ANYBLOB="2af71a2c6557fcd58fcc5548cd4cb6fb0e6c335f1de541eaf553424e2ee56931df9af4d41277f20ee85cced7fe850dfe348e19d0112e19bc838486b5973a1ad7deccc22f6df6951a8eb990c2e597deab98a0631d722a4449cd82b0aca8ad39b7f952fdb4861891c21db5090000005402a3083de646265da1f1a8adb9ab2c753f6413ec0ba76f6ff4f18afc5f00ac5b8e7c9036ec2640f72930d0cd87ab64d8f0ee155232a2b9dd61eae068cc0da1e449a8a52e47db28267433f2e83caad80f9c27a942"], 0x4c}, 0x1, 0x0, 0x0, 0x9}, 0x8000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvfrom$inet6(r7, &(0x7f0000000000)=""/29, 0x1d, 0x2040, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @private1, 0x7}, 0x1c) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) pipe(&(0x7f0000000040)) vmsplice(r2, &(0x7f00000002c0), 0x0, 0x0) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000200)={0x60, 0x1, &(0x7f0000245000/0x2000)=nil, &(0x7f0000994000/0x2000)=nil, 0xb, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x9}) write$cgroup_pid(r4, &(0x7f0000000000), 0x12) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) r8 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000}, &(0x7f0000000040), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="11042abd7000ffdbdf48110000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x4040840) 36.358654956s ago: executing program 0 (id=1921): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYRESDEC=r1], 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x0) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1019c2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x13) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r7, 0x3) r8 = accept(r7, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000300), 0x0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000300), 0x0}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="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"]) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x558, 0x280, 0x280, 0x368, 0xd0, 0x1b0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [0x0, 0x0, 0x0, 0xff000000], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x203, 0x6}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x36}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) (async) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x558, 0x280, 0x280, 0x368, 0xd0, 0x1b0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [0x0, 0x0, 0x0, 0xff000000], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x203, 0x6}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x36}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) splice(r3, 0x0, r5, 0x0, 0x1fffffffffff, 0x0) (async) splice(r3, 0x0, r5, 0x0, 0x1fffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYRESOCT=r2], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x459ec16cdd17479e) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYRESOCT=r2], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x459ec16cdd17479e) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4012}, 0x20000010) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x8, 0x7}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flow={{}, {0x0, 0x2, [@TCA_FLOW_DIVISOR={0x0, 0x8, 0xc}, @TCA_FLOW_MODE={0x0, 0x2, 0x1}, @TCA_FLOW_MASK={0x0, 0x6, 0xfffffffe}, @TCA_FLOW_MASK={0x0, 0x6, 0x2}, @TCA_FLOW_KEYS={0x0, 0x1, 0x1ce94}, @TCA_FLOW_KEYS={0x0, 0x1, 0x1a4a3}, @TCA_FLOW_PERTURB={0x0, 0xc, 0x7}, @TCA_FLOW_XOR, @TCA_FLOW_RSHIFT, @TCA_FLOW_DIVISOR={0x0, 0x8, 0xfffff800}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x8, 0x7}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flow={{}, {0x0, 0x2, [@TCA_FLOW_DIVISOR={0x0, 0x8, 0xc}, @TCA_FLOW_MODE={0x0, 0x2, 0x1}, @TCA_FLOW_MASK={0x0, 0x6, 0xfffffffe}, @TCA_FLOW_MASK={0x0, 0x6, 0x2}, @TCA_FLOW_KEYS={0x0, 0x1, 0x1ce94}, @TCA_FLOW_KEYS={0x0, 0x1, 0x1a4a3}, @TCA_FLOW_PERTURB={0x0, 0xc, 0x7}, @TCA_FLOW_XOR, @TCA_FLOW_RSHIFT, @TCA_FLOW_DIVISOR={0x0, 0x8, 0xfffff800}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) r13 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r13, &(0x7f00000004c0)=[{&(0x7f0000000140)="22eba9fdb4cbab48929e1af1510000000000000000000000003b9ac9", 0x1c}], 0x1) 20.844509619s ago: executing program 32 (id=1921): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYRESDEC=r1], 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x0) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1019c2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x13) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r7, 0x3) r8 = accept(r7, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000300), 0x0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000300), 0x0}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="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"]) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x558, 0x280, 0x280, 0x368, 0xd0, 0x1b0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [0x0, 0x0, 0x0, 0xff000000], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x203, 0x6}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x36}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) (async) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x558, 0x280, 0x280, 0x368, 0xd0, 0x1b0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [0x0, 0x0, 0x0, 0xff000000], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x203, 0x6}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x36}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) splice(r3, 0x0, r5, 0x0, 0x1fffffffffff, 0x0) (async) splice(r3, 0x0, r5, 0x0, 0x1fffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYRESOCT=r2], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x459ec16cdd17479e) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYRESOCT=r2], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x459ec16cdd17479e) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4012}, 0x20000010) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x8, 0x7}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flow={{}, {0x0, 0x2, [@TCA_FLOW_DIVISOR={0x0, 0x8, 0xc}, @TCA_FLOW_MODE={0x0, 0x2, 0x1}, @TCA_FLOW_MASK={0x0, 0x6, 0xfffffffe}, @TCA_FLOW_MASK={0x0, 0x6, 0x2}, @TCA_FLOW_KEYS={0x0, 0x1, 0x1ce94}, @TCA_FLOW_KEYS={0x0, 0x1, 0x1a4a3}, @TCA_FLOW_PERTURB={0x0, 0xc, 0x7}, @TCA_FLOW_XOR, @TCA_FLOW_RSHIFT, @TCA_FLOW_DIVISOR={0x0, 0x8, 0xfffff800}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x8, 0x7}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flow={{}, {0x0, 0x2, [@TCA_FLOW_DIVISOR={0x0, 0x8, 0xc}, @TCA_FLOW_MODE={0x0, 0x2, 0x1}, @TCA_FLOW_MASK={0x0, 0x6, 0xfffffffe}, @TCA_FLOW_MASK={0x0, 0x6, 0x2}, @TCA_FLOW_KEYS={0x0, 0x1, 0x1ce94}, @TCA_FLOW_KEYS={0x0, 0x1, 0x1a4a3}, @TCA_FLOW_PERTURB={0x0, 0xc, 0x7}, @TCA_FLOW_XOR, @TCA_FLOW_RSHIFT, @TCA_FLOW_DIVISOR={0x0, 0x8, 0xfffff800}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) r13 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r13, &(0x7f00000004c0)=[{&(0x7f0000000140)="22eba9fdb4cbab48929e1af1510000000000000000000000003b9ac9", 0x1c}], 0x1) 1.953796251s ago: executing program 1 (id=2372): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0x8}}}, 0x24}}, 0x40004) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x140) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r5, r6, 0x26, 0x0, 0x0, @void, @value}, 0x10) (async) r7 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r5, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r7}, 0x20) (async) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f00000003c0)=@v={0x93, 0x0, 0xa0}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100626f6e64000000000c0002800500160001"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYBLOB="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", @ANYRES16=r9], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000800) 1.85348501s ago: executing program 1 (id=2374): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x189801, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x1, 0xff, 0x5, 0xfffc, 0xe, "f682756c98cc948c"}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x91}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000680)="b395af315714546038bae1cdc7da482405f430a9b7f1e3fd395c0d3b327d751982986756cf08c4a5ebda23e84f7f39eff4d5a53e1f2d0483eaffb4fc5385dda2069ad57f70050a18", 0x48}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x0) 1.813679737s ago: executing program 1 (id=2375): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x0, 0x0, 0xfa5, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[{}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000000)=[0x0, 0x0], 0x3, 0x2, 0x5, 0x0, r1}) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x4a22c94, 0x400020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001240)=ANY=[@ANYBLOB="5800000002060500000000000000000000e8ffff04000400"], 0x58}}, 0x0) ioctl$USBDEVFS_GET_SPEED(r4, 0x551f) 1.733248719s ago: executing program 1 (id=2378): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="6c0000001000090400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000004c001280110001006272696467655f736c6176650000000034000580050009000000000005000a5e4a1fe2000500190002000000060002000800000005001b00000000000500080200000000fc77a5cc77ec0d507db8f9d09eda79bc68bb2c6fe0cc572319f3eb273899c35cf9e4c500e00b045f6088dc337627f4b8a68b"], 0x6c}}, 0x0) r4 = syz_open_procfs(0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, 0x0, 0x0) ioctl$KVM_CAP_SYNC_REGS(r4, 0x4068aea3, &(0x7f0000000240)) shutdown(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r5, &(0x7f0000000400)={0x28, 0x0, 0x2711, @host}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x401}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r11, 0x8905, &(0x7f0000000100)={'bond0\x00', @ifru_names='rose0\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000011000100000000000000000000000000000000000000000000000000000000000000000014000d00"], 0x3c}}, 0x0) 1.6539089s ago: executing program 1 (id=2380): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000300)={0x11}, 0x8) (async) r1 = fsopen(&(0x7f0000000140)='autofs\x00', 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0xfffffffc, 0x0, 0x0, 0x4, 0x1, 0x1000}, @restrict={0x6, 0x0, 0x0, 0x6}]}}, 0x0, 0x32, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @local, 0x3ff}, 0x1c) 1.652904312s ago: executing program 1 (id=2382): syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000047c0)=r6, 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000007e00)=@newtaction={0x14, 0x32, 0x12f}, 0x14}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f00000015c0)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], {0x4e22, 0xe22, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x7, 0x100}}}}}}}}, 0x0) recvmmsg(r7, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006080)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x5}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x4}, @TCA_FLOW_KEYS={0x8, 0x1, 0x10e22}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r12 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r12, &(0x7f0000000100)={0x1d, r13, 0x2, {0x3}}, 0x18) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r12) sendmsg$TIPC_NL_KEY_SET(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r14, 0x800, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11, {}, {0x6}, {0x0, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.124457182s ago: executing program 3 (id=2397): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x3}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@generic={0x9, 0x0, 0x9, 0x4, 0x7}, @alu={0x4, 0x0, 0x2, 0x4, 0x0, 0x30, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x3}}}, 0x24}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@generic={0x9, 0x0, 0x9, 0x4, 0x7}, @alu={0x4, 0x0, 0x2, 0x4, 0x0, 0x30, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) (async) 1.074732412s ago: executing program 3 (id=2398): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) shutdown(r0, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) bind(0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x23) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @link_local}, 0x14) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r6 = socket(0x6, 0xa, 0x3) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a188fb", 0x11, 0x0, &(0x7f0000000140)={0x11, 0x10, r8}, 0x14) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = socket(0x10, 0x3, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) r12 = accept(r11, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r12) sendmsg$IPVS_CMD_NEW_SERVICE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x80, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4201}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x24040804}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x25dfdbfb, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r13}]}, 0x28}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @mcast2}}}}}}, 0x0) ioctl$KDSETMODE(r9, 0x4b3a, 0x1) 325.906262ms ago: executing program 2 (id=2406): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x226281, 0x0) 325.704323ms ago: executing program 2 (id=2407): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000080), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0xe, &(0x7f0000001f80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x14000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 266.373478ms ago: executing program 2 (id=2408): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) socket$unix(0x1, 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x400400) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1f00, 0x1, 0x13, r1, 0x81000000) socket$unix(0x1, 0x5, 0x0) 265.147929ms ago: executing program 2 (id=2409): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r3, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r3, {r1, r2}}, './file0\x00'}) (async, rerun: 32) setgroups(0x1, &(0x7f00000003c0)=[r2]) (rerun: 32) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000380)={0x8, 0x9, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x3d71, 0x9}) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x200080, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wudne=', @ANYRESHEX=r4, @ANYBLOB=',loose,afid=0x0000000028f791fe,version=9p2000.L,ignoreqv,cache=mmap,obj_type=9p_client_res\x00,uid<', @ANYRESDEC=r6, @ANYBLOB=',obj_role=GPL\x00,fsuuid=be021b59-8def-Yfe0-997\x00-7d0907be,\x00']) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r7}, 0x10) (async, rerun: 64) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$int_in(r8, 0x5452, &(0x7f00000001c0)=0x1) r9 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async, rerun: 32) r10 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) r11 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8, 0x80800) (async) r12 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r12, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x4}) read$FUSE(r11, &(0x7f0000003a40)={0x2020}, 0x2020) getsockopt$SO_J1939_ERRQUEUE(r11, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 264.406918ms ago: executing program 4 (id=2410): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000b86eb34ae541911c000085000000c40000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 206.114387ms ago: executing program 3 (id=2411): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, 0x0}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x30003, 0x0, [0x8000000002f1b, 0x200000000005, 0x100000081, 0x2, 0x6, 0x5, 0x4000000000008, 0xe83c]}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000100)=0x40) ioctl$KVM_RUN(r2, 0xae80, 0x0) 205.848804ms ago: executing program 4 (id=2412): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000072000103000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0800010012"], 0x20}, 0x1, 0xf00, 0x0, 0xa6ffffff}, 0x800) 205.278375ms ago: executing program 2 (id=2413): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg(r1, &(0x7f0000006ac0)={&(0x7f0000006800)=@ethernet={0x6, @remote}, 0x80, &(0x7f0000006a40)=[{&(0x7f0000006880)="1a6c3fdb1215ed8bf032f09192", 0xd}], 0x1}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r3) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 204.437443ms ago: executing program 4 (id=2414): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @empty}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x110) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000400)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @broadcast}, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x6}) 136.35633ms ago: executing program 4 (id=2415): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x20) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000000)={0x97, 0x0, 'client1\x00', 0x4, "e07fd187e36823c5", "d969d205213edd5063b70042ff0d395b1d75a50b05e5e7d5a8bd20f7a444d1e8", 0x2, 0x100}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x20) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000000)={0x97, 0x0, 'client1\x00', 0x4, "e07fd187e36823c5", "d969d205213edd5063b70042ff0d395b1d75a50b05e5e7d5a8bd20f7a444d1e8", 0x2, 0x100}) (async) 136.065113ms ago: executing program 4 (id=2416): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}, {@uuid_on}, {@redirect_dir_on}], [{@euid_gt}], 0x2f}) (async) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chroot(&(0x7f0000000000)='./bus\x00') (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3400be6d6d01000900003e078fbdc5fb39becc0c8daa2a73082c4cef22ddb45b5b6a700293127cb3e093a4720c2e2980d89dc6b79f1614c5be2deebef40660e96bb22130e99593196863c29659fdbac8500a8f9e0eb0b02632199ff3deea27f281758492b695ed30bcd6ac4b1beeb97a2a4181db15ae2fe19cb08635f24f3c4f3c43fba2d67fcdaeefc5a044a545f72a5ae40533563094f2b2f12ee0daa3742d17b59240d91ff37b296c67690050e993b7da18ef657a9a4f528d881b43f19fe67e6f3b0b01711149823b604fe20615953aecf82b9a9d9b715b5f783885a3e7084cd6dd6c77aae079db1ca929f7d3d19836e851eda7b6c3fdd86648bd3291180ee44bee2ef354818a521b62665f084acbde3432181fbc789a6a080a67b41bdb79bb4c009d954e4d2350693e86fb34bc069d6974dab861ed37b140065dd0c69c187bc56f332b06cff447979c1ab27f22a1c72503cef11607cdd6b32337b6182b71e0568dfc110682ed7dd6fe2db9fc5f55487d767dd2b814c2f5", @ANYRES16=r2, @ANYBLOB="030c0000000002000000340000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x8850}, 0x0) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) (async) recvfrom$inet_nvme(r0, &(0x7f0000000540)=""/227, 0xe3, 0x40010060, &(0x7f0000000640)=@sco, 0x80) (async) setxattr$trusted_overlay_nlink(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)={'L-', 0x5}, 0x16, 0x0) close(r0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb08004500001c000000000201907800000000e00000011100907800000000"], 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) open_tree(r4, &(0x7f0000000440)='./bus\x00', 0x1) (async) dup3(r3, r0, 0x80000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd(0x40) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000380)={0x4, 0x1, 0x8, r7, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0), 0x1000898, &(0x7f00000002c0)={[{@uuid_on}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@redirect_dir_nofollow}], [{@obj_user={'obj_user', 0x3d, '\x00\x00\x00\x00\x00\x00\x00\x00'}}, {@subj_role={'subj_role', 0x3d, 'workdir'}}, {@pcr={'pcr', 0x3d, 0x2b}}]}) chdir(&(0x7f00000000c0)='./bus\x00') (async) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 84.92707ms ago: executing program 4 (id=2417): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) fcntl$getownex(r8, 0x10, &(0x7f0000000100)) ptrace$poke(0x5, r7, &(0x7f0000000080), 0x0) 84.582898ms ago: executing program 3 (id=2418): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='net\x00') connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x7ff, @ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x4}, 0x20) getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}, 0x6b84, 0x7}, 0x90) 6.35729ms ago: executing program 2 (id=2419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x10000, 0x4) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x3c, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1b0}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c080}, 0x4000000) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r3 = syz_io_uring_setup(0x7501, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x127}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440)=r2, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{r5, r6+60000000}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') r8 = open_tree(r7, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20) fsmount(r7, 0x1, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') syz_io_uring_setup(0x6fd7, &(0x7f0000000100)={0x0, 0x8b7c, 0x4000, 0x2, 0x1c8}, &(0x7f0000000540), &(0x7f0000000280)) 3.035866ms ago: executing program 3 (id=2420): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000068000100030010000000008000000000000000000c00020001000000150000000c000c80f2ffffffffffffff0600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, r1}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3, r3}, &(0x7f0000000600), &(0x7f0000000640)=r2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) 0s ago: executing program 3 (id=2421): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x1520, 0x1298, 0x1298, 0xffffffff, 0x0, 0x1180, 0x1488, 0x1488, 0xffffffff, 0x1488, 0x1488, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10d8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x4f00, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1580) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x14, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001400090025bd700000009cb10e01aa55bc00000400000008"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r5}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x2}) syz_io_uring_setup(0xd5, &(0x7f0000000480)={0x0, 0x96b9, 0x1, 0x81000, 0x1ff}, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r7, &(0x7f0000004180)={0x2020}, 0x2020) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000000)={0x8, 0xc4c}) kernel console output (not intermixed with test programs): deprecated (pid=11402 comm=syz.2.1727) [ 145.836556][ T5951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.845938][ T5947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.849519][ T5947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.855197][ T5947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.859917][ T5947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.869527][ T40] audit: type=1400 audit(1745073944.292:773): avc: denied { mounton } for pid=11417 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 145.988458][T11417] wg1 speed is unknown, defaulting to 1000 [ 145.996334][ T40] audit: type=1400 audit(1745073944.423:774): avc: denied { read } for pid=11421 comm="syz.3.1733" path="socket:[37429]" dev="sockfs" ino=37429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 146.095422][T11436] kAFS: No cell specified [ 146.097398][T11417] chnl_net:caif_netlink_parms(): no params data found [ 146.256972][T11417] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.260656][T11417] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.262946][T11417] bridge_slave_0: entered allmulticast mode [ 146.265772][T11417] bridge_slave_0: entered promiscuous mode [ 146.268806][T11417] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.272543][T11417] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.275553][T11417] bridge_slave_1: entered allmulticast mode [ 146.279784][T11417] bridge_slave_1: entered promiscuous mode [ 146.290144][ T40] audit: type=1400 audit(1745073944.724:775): avc: denied { map } for pid=11452 comm="syz.3.1739" path="socket:[38732]" dev="sockfs" ino=38732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 146.333528][T11417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.338060][T11417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.377526][T11417] team0: Port device team_slave_0 added [ 146.384612][T11417] team0: Port device team_slave_1 added [ 146.444288][T11417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.447047][T11417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.457092][T11417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.462888][T11417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.465752][T11417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.477149][T11417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.522409][T11417] hsr_slave_0: entered promiscuous mode [ 146.524748][T11417] hsr_slave_1: entered promiscuous mode [ 146.526896][T11417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.530283][T11417] Cannot create hsr debugfs directory [ 146.532448][T11461] netlink: 'syz.3.1742': attribute type 10 has an invalid length. [ 146.552992][T11461] veth1_macvtap: left promiscuous mode [ 146.653801][T11417] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.658054][T11417] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.733803][T11417] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.737970][T11471] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1746'. [ 146.738077][T11417] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.823989][T11417] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.832328][T11417] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.915692][T11417] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.920041][T11417] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.038766][T11417] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 147.047648][T11417] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 147.053654][T11417] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 147.060149][T11417] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 147.073104][T11417] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.075678][T11417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.078529][T11417] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.081044][T11417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.107770][ T6642] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.114227][ T6642] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.143326][T11417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.151524][T11417] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.156949][ T6642] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.159226][ T6642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.170538][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.173662][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.202623][T11502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1752'. [ 147.210032][T11502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1752'. [ 147.339573][T11417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.370501][T11417] veth0_vlan: entered promiscuous mode [ 147.380951][T11417] veth1_vlan: entered promiscuous mode [ 147.417337][T11417] veth0_macvtap: entered promiscuous mode [ 147.421266][T11417] veth1_macvtap: entered promiscuous mode [ 147.431792][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.435500][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.438882][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.442079][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.445621][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.448877][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.455271][T11417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.466045][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.469370][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.472447][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.477069][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.480308][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.483499][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.487608][T11417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.492402][T11417] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.495669][T11417] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.498662][T11417] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.501466][T11417] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.563764][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.574266][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.578231][T11516] wg1 speed is unknown, defaulting to 1000 [ 147.598332][ T6595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.601605][ T6595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.623644][T11526] Invalid source name [ 147.625597][T11526] UBIFS error (pid: 11526): cannot open "/dev/sg0", error -22 [ 147.631175][T11526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1757'. [ 147.639354][T11526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1757'. [ 147.685862][T11533] syzkaller1: entered promiscuous mode [ 147.687884][T11533] syzkaller1: entered allmulticast mode [ 147.796380][T11516] wg1 speed is unknown, defaulting to 1000 [ 147.892932][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 147.896833][ T5297] Bluetooth: hci1: command tx timeout [ 147.978983][T11516] wg1 speed is unknown, defaulting to 1000 [ 148.026102][T11547] netlink: 'syz.2.1760': attribute type 29 has an invalid length. [ 148.062327][T11551] net_ratelimit: 46 callbacks suppressed [ 148.062337][T11551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.299247][T11516] wg1 speed is unknown, defaulting to 1000 [ 148.307060][T11568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1767'. [ 148.886722][T11588] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1773'. [ 149.052054][T11571] syz.2.1767 (11571): drop_caches: 2 [ 149.067183][T11598] nbd: must specify a device to reconfigure [ 149.101267][T11599] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1776'. [ 149.390062][T11613] wg1 speed is unknown, defaulting to 1000 [ 149.818350][T11633] trusted_key: encrypted_key: insufficient parameters specified [ 149.822708][T11637] trusted_key: encrypted_key: insufficient parameters specified [ 149.868570][ T6595] Bluetooth: hci4: Frame reassembly failed (-90) [ 149.965183][ T5297] Bluetooth: hci1: command tx timeout [ 150.129523][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1790'. [ 150.496539][T11660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1794'. [ 150.569844][T11666] xt_l2tp: v2 doesn't support IP mode [ 150.838080][T11417] cgroup: fork rejected by pids controller in /syz1 [ 151.124639][T11690] netlink: 'syz.3.1807': attribute type 1 has an invalid length. [ 151.154498][T11692] netlink: 'syz.2.1808': attribute type 3 has an invalid length. [ 151.310412][ T40] audit: type=1400 audit(1745073949.753:776): avc: denied { write } for pid=11708 comm="syz.3.1815" name="fdinfo" dev="proc" ino=41666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 151.317583][ T40] audit: type=1400 audit(1745073949.753:777): avc: denied { add_name } for pid=11708 comm="syz.3.1815" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 151.317766][ T40] audit: type=1400 audit(1745073949.763:778): avc: denied { create } for pid=11708 comm="syz.3.1815" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 151.347788][ T40] audit: type=1400 audit(1745073949.763:779): avc: denied { associate } for pid=11708 comm="syz.3.1815" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 151.374870][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.438398][ T40] audit: type=1400 audit(1745073949.883:780): avc: denied { bind } for pid=11715 comm="syz.3.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 151.452202][T11720] ufs: You didn't specify the type of your ufs filesystem [ 151.452202][T11720] [ 151.452202][T11720] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 151.452202][T11720] [ 151.452202][T11720] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 151.455374][T11716] bond0: entered promiscuous mode [ 151.465162][T11716] bond_slave_0: entered promiscuous mode [ 151.465191][T11720] ufs: ufstype=old is supported read-only [ 151.467129][T11716] bond_slave_1: entered promiscuous mode [ 151.469183][T11720] bio_check_eod: 2 callbacks suppressed [ 151.469191][T11720] syz.3.1817: attempt to access beyond end of device [ 151.469191][T11720] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 151.471237][T11716] batadv0: entered promiscuous mode [ 151.878594][ T5297] Bluetooth: hci4: command 0xfc11 tx timeout [ 151.881999][ T5951] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 151.953219][T11737] 9pnet_virtio: no channels available for device syz [ 151.955673][T11737] 9pnet_virtio: no channels available for device syz [ 151.957659][ T5297] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.958232][ T1343] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 151.959558][T11737] 9pnet_virtio: no channels available for device syz [ 151.963741][ T5297] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.964281][T11737] 9pnet_virtio: no channels available for device syz [ 151.967712][ T5297] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.970741][T11737] 9pnet_virtio: no channels available for device syz [ 151.973789][ T5297] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.974633][ T5297] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.977893][T11737] 9pnet_virtio: no channels available for device syz [ 151.984454][T11737] 9pnet_virtio: no channels available for device syz [ 151.987271][T11737] 9pnet_virtio: no channels available for device syz [ 151.990080][T11737] 9pnet_virtio: no channels available for device syz [ 151.992309][T11737] 9pnet_virtio: no channels available for device syz [ 151.994549][T11737] 9pnet_virtio: no channels available for device syz [ 151.996751][T11737] 9pnet_virtio: no channels available for device syz [ 151.999042][T11737] 9pnet_virtio: no channels available for device syz [ 152.001266][T11737] 9pnet_virtio: no channels available for device syz [ 152.132194][ T1343] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 152.135497][ T1343] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.140059][ T1343] usb 8-1: Product: syz [ 152.141953][ T1343] usb 8-1: Manufacturer: syz [ 152.143803][ T1343] usb 8-1: SerialNumber: syz [ 152.151459][ T1343] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 152.163423][T11739] wg1 speed is unknown, defaulting to 1000 [ 152.173480][ T1343] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 152.290032][T11739] chnl_net:caif_netlink_parms(): no params data found [ 152.402797][T11739] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.405942][T11739] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.409327][T11739] bridge_slave_0: entered allmulticast mode [ 152.413487][T11739] bridge_slave_0: entered promiscuous mode [ 152.418966][T11739] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.421921][T11739] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.424635][T11739] bridge_slave_1: entered allmulticast mode [ 152.427274][T11739] bridge_slave_1: entered promiscuous mode [ 152.489154][T11739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.495443][T11739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.556206][T11739] team0: Port device team_slave_0 added [ 152.562178][T11739] team0: Port device team_slave_1 added [ 152.594566][T11755] netlink: 'syz.2.1825': attribute type 1 has an invalid length. [ 152.597737][T11755] __nla_validate_parse: 3 callbacks suppressed [ 152.597746][T11755] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1825'. [ 152.658933][T11739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.661962][T11739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.674126][T11739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.715245][T11739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.718321][T11739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.728197][T11739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.793129][T11739] hsr_slave_0: entered promiscuous mode [ 152.796491][T11739] hsr_slave_1: entered promiscuous mode [ 152.799380][T11739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.802346][ T40] audit: type=1400 audit(1745073951.258:781): avc: denied { write } for pid=11758 comm="syz.2.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 152.802515][T11739] Cannot create hsr debugfs directory [ 152.842753][T11759] netfs: Couldn't get user pages (rc=-14) [ 152.945585][T11739] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.056496][T11739] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.107061][T11779] netlink: 'syz.2.1832': attribute type 4 has an invalid length. [ 153.150598][T11739] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.178987][T11781] syzkaller1: entered promiscuous mode [ 153.180850][T11781] syzkaller1: entered allmulticast mode [ 153.233904][ T1343] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 153.236585][ T1343] ath9k_htc: Failed to initialize the device [ 153.261465][ T1343] usb 8-1: ath9k_htc: USB layer deinitialized [ 153.261902][T11739] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.357663][ T6592] bridge_slave_1: left allmulticast mode [ 153.361188][ T6592] bridge_slave_1: left promiscuous mode [ 153.365230][ T6592] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.374217][ T6592] bridge_slave_0: left allmulticast mode [ 153.376065][ T6592] bridge_slave_0: left promiscuous mode [ 153.377883][ T6592] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.549475][T11791] ntfs3(sr0): Primary boot signature is not NTFS. [ 153.554577][T11791] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 153.672740][ T6592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.680309][ T6592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.686093][ T6592] bond0 (unregistering): Released all slaves [ 153.763153][T11739] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 153.774091][T11739] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 153.787004][T11739] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 153.801057][T11739] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 153.909405][T11739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.930878][T11739] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.963405][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.965847][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.973465][ T6602] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.976425][ T6602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.987793][T11815] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1845'. [ 154.031117][ T5951] Bluetooth: hci1: command tx timeout [ 154.062911][ T40] audit: type=1804 audit(1745073952.522:782): pid=11821 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1847" name="/newroot/459/file0" dev="tmpfs" ino=2515 res=1 errno=0 [ 154.128599][ T6592] hsr_slave_0: left promiscuous mode [ 154.140620][ T6592] hsr_slave_1: left promiscuous mode [ 154.143345][ T6592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.147267][ T6592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.157473][ T6592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.160465][ T6592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.196610][ T6592] veth1_macvtap: left promiscuous mode [ 154.199031][ T6592] veth0_macvtap: left promiscuous mode [ 154.201089][ T6592] veth1_vlan: left promiscuous mode [ 154.203137][ T6592] veth0_vlan: left promiscuous mode [ 154.542692][ T40] audit: type=1326 audit(1745073953.004:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11727 comm="syz.3.1820" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40d58e169 code=0x7fc00000 [ 154.554945][ T5984] usb 8-1: USB disconnect, device number 8 [ 154.718843][T11835] misc userio: The device must be registered before sending interrupts [ 154.930495][ T6592] team0 (unregistering): Port device team_slave_1 removed [ 154.999395][ T6592] team0 (unregistering): Port device team_slave_0 removed [ 155.533375][T11739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.567107][ T40] audit: type=1400 audit(1745073954.037:784): avc: denied { name_bind } for pid=11843 comm="syz.0.1853" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 155.600094][T11739] veth0_vlan: entered promiscuous mode [ 155.616099][T11739] veth1_vlan: entered promiscuous mode [ 155.660227][T11739] veth0_macvtap: entered promiscuous mode [ 155.665661][ T5951] block nbd3: Receive control failed (result -32) [ 155.665904][T11848] netlink: 'syz.3.1854': attribute type 27 has an invalid length. [ 155.666726][T11739] veth1_macvtap: entered promiscuous mode [ 155.684381][T11739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.689102][T11739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.693170][T11739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.697972][T11739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.701181][T11739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.704601][T11739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.729488][T11739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.737359][T11739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.740467][T11847] block nbd3: shutting down sockets [ 155.746066][T11739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.765129][T11739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.768562][T11739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.771579][T11739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.776201][T11739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.783959][T11739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.789016][T11739] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.791757][T11739] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.794957][T11739] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.798461][T11739] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.960716][ T6637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.963256][ T40] audit: type=1400 audit(1745073954.418:785): avc: denied { ioctl } for pid=11872 comm="syz.3.1858" path="socket:[45152]" dev="sockfs" ino=45152 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 155.963338][ T6637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.011685][ T6642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.025119][ T6642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.104223][ T5951] Bluetooth: hci1: command tx timeout [ 156.259287][T11903] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=11903 comm=syz.1.1869 [ 156.582001][T11942] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11942 comm=syz.0.1882 [ 156.588407][T11944] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11944 comm=syz.0.1882 [ 156.619416][T11943] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11943 comm=syz.0.1882 [ 156.624684][T11943] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11943 comm=syz.0.1882 [ 156.628930][T11943] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11943 comm=syz.0.1882 [ 156.633290][T11943] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11943 comm=syz.0.1882 [ 156.637990][T11943] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11943 comm=syz.0.1882 [ 156.642105][T11943] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11943 comm=syz.0.1882 [ 156.648180][T11943] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11943 comm=syz.0.1882 [ 156.688157][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 156.688168][ T40] audit: type=1400 audit(1745073955.151:787): avc: denied { read } for pid=11948 comm="syz.1.1883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 156.799412][T11959] SELinux: security_context_str_to_sid () failed with errno=-22 [ 156.803814][T11959] program syz.0.1887 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.948648][ T40] audit: type=1400 audit(1745073955.412:788): avc: denied { read write } for pid=11962 comm="syz.2.1889" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 156.956535][ T40] audit: type=1400 audit(1745073955.412:789): avc: denied { open } for pid=11962 comm="syz.2.1889" path="/464/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 157.008235][T11976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1892'. [ 157.044961][T11981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1894'. [ 157.047907][T11981] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1894'. [ 157.129040][T11990] netlink: 'syz.2.1895': attribute type 1 has an invalid length. [ 157.132226][T11990] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1895'. [ 157.234240][T12002] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1900'. [ 157.296448][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1903'. [ 157.296805][T12014] overlayfs: conflicting options: nfs_export=on,index=off [ 157.333471][T12018] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 157.371534][ T40] audit: type=1400 audit(1745073955.843:790): avc: denied { setattr } for pid=12025 comm="syz.3.1906" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 157.390903][ T66] hid-generic 00A0:000B:0007.0009: unknown main item tag 0x7 [ 157.394125][ T66] hid-generic 00A0:000B:0007.0009: unknown main item tag 0x7 [ 157.397156][ T66] hid-generic 00A0:000B:0007.0009: unknown main item tag 0x6 [ 157.401166][T12027] netlink: 'syz.3.1906': attribute type 21 has an invalid length. [ 157.403758][T12027] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1906'. [ 157.410384][ T66] hid-generic 00A0:000B:0007.0009: hidraw1: HID v0.05 Device [syz1] on syz0 [ 157.412452][T12027] netlink: 'syz.3.1906': attribute type 4 has an invalid length. [ 157.417474][T12027] netlink: 'syz.3.1906': attribute type 5 has an invalid length. [ 157.420385][T12027] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1906'. [ 157.516754][T12042] xt_l2tp: v2 doesn't support IP mode [ 157.539836][ T6010] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 157.691244][ T6010] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 157.694604][ T6010] usb 7-1: config 0 has no interface number 0 [ 157.697102][ T6010] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 157.711275][ T6010] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 157.715908][ T6010] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 157.729080][ T6010] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 157.733502][ T6010] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 157.737913][ T6010] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 157.758710][ T6010] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 157.761495][ T6010] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.765262][ T6010] usb 7-1: config 0 descriptor?? [ 157.767307][T12014] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 157.769690][T12014] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 157.774928][ T6010] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 157.781488][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 157.857936][T12059] netlink: 'syz.1.1918': attribute type 28 has an invalid length. [ 157.861617][T12059] netlink: 'syz.1.1918': attribute type 3 has an invalid length. [ 157.864245][T12059] __nla_validate_parse: 1 callbacks suppressed [ 157.864253][T12059] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1918'. [ 157.880028][T12059] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 157.941290][T12061] nfs: Bad value for 'source' [ 157.948050][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 157.957703][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.962060][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.966049][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65312, setting to 1024 [ 157.974723][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 157.979454][T12014] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 157.984545][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.993155][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.993483][ T40] audit: type=1400 audit(1745073956.465:791): avc: denied { getattr } for pid=12013 comm="syz.2.1902" name="/" dev="9p" ino=36831288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 157.996668][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.014597][ T6010] usb 7-1: USB disconnect, device number 17 [ 158.029446][ T6010] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 158.071724][T12070] netlink: 'syz.1.1922': attribute type 15 has an invalid length. [ 158.095478][T12068] syz.0.1921 (12068): drop_caches: 2 [ 158.103579][T12072] /dev/sg0: Can't lookup blockdev [ 158.106408][T12072] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1923'. [ 158.187550][ T5951] Bluetooth: hci1: command tx timeout [ 158.240948][T12046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.244711][T12046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.252614][T12046] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1912'. [ 158.256368][T12046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1912'. [ 158.266810][ T10] usb 8-1: GET_CAPABILITIES returned e6 [ 158.270384][ T10] usbtmc 8-1:16.0: can't read capabilities [ 158.514886][T12046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1912'. [ 158.611684][T12105] netlink: 'syz.2.1929': attribute type 21 has an invalid length. [ 158.614363][T12105] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1929'. [ 158.618881][T12105] netlink: 'syz.2.1929': attribute type 21 has an invalid length. [ 158.622124][T12105] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1929'. [ 158.626873][T12105] netlink: 'syz.2.1929': attribute type 29 has an invalid length. [ 158.670429][ T5992] usb 8-1: USB disconnect, device number 9 [ 158.759568][T12110] cgroup: Invalid name [ 159.020513][T12120] usb usb8: usbfs: process 12120 (syz.2.1935) did not claim interface 0 before use [ 159.123976][T12126] kvm: user requested TSC rate below hardware speed [ 159.312390][ T5951] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 159.338895][T12153] libceph: resolve '40' (ret=-3): failed [ 159.342153][T12154] libceph: resolve '40' (ret=-3): failed [ 159.377087][T12162] FAULT_INJECTION: forcing a failure. [ 159.377087][T12162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.384556][T12162] CPU: 3 UID: 0 PID: 12162 Comm: syz.3.1947 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 159.384571][T12162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.384577][T12162] Call Trace: [ 159.384580][T12162] [ 159.384584][T12162] dump_stack_lvl+0x16c/0x1f0 [ 159.384616][T12162] should_fail_ex+0x512/0x640 [ 159.384632][T12162] _copy_from_user+0x2e/0xd0 [ 159.384644][T12162] copy_msghdr_from_user+0x98/0x160 [ 159.384657][T12162] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 159.384675][T12162] ___sys_sendmsg+0xfe/0x1d0 [ 159.384687][T12162] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.384713][T12162] __sys_sendmsg+0x16d/0x220 [ 159.384725][T12162] ? __pfx___sys_sendmsg+0x10/0x10 [ 159.384740][T12162] ? rcu_is_watching+0x12/0xc0 [ 159.384756][T12162] do_syscall_64+0xcd/0x260 [ 159.384770][T12162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.384780][T12162] RIP: 0033:0x7fc40d58e169 [ 159.384788][T12162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.384798][T12162] RSP: 002b:00007fc40e33e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.384832][T12162] RAX: ffffffffffffffda RBX: 00007fc40d7b5fa0 RCX: 00007fc40d58e169 [ 159.384841][T12162] RDX: 0000000000040050 RSI: 00002000000001c0 RDI: 0000000000000003 [ 159.384848][T12162] RBP: 00007fc40e33e090 R08: 0000000000000000 R09: 0000000000000000 [ 159.384853][T12162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.384858][T12162] R13: 0000000000000000 R14: 00007fc40d7b5fa0 R15: 00007fff972f9b18 [ 159.384871][T12162] [ 159.457277][ C3] vkms_vblank_simulate: vblank timer overrun [ 159.467866][T12166] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1948'. [ 159.471003][T12166] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1948'. [ 159.473994][T12166] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1948'. [ 159.601898][ T40] audit: type=1400 audit(1745073958.070:792): avc: denied { accept } for pid=12178 comm="syz.2.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 159.687133][T12204] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.690043][T12204] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.695443][T12204] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.698828][T12204] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.750015][T12207] veth3: entered promiscuous mode [ 159.944772][ T40] audit: type=1400 audit(1745073958.421:793): avc: denied { setopt } for pid=12214 comm="syz.2.1957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 160.206792][T12234] veth5: entered promiscuous mode [ 160.260918][ T5951] Bluetooth: hci1: command tx timeout [ 160.292914][T12242] syz.1.1967 (12242): /proc/12241/oom_adj is deprecated, please use /proc/12241/oom_score_adj instead. [ 160.426932][T12249] usb usb8: usbfs: process 12249 (syz.1.1969) did not claim interface 0 before use [ 160.887044][T12276] gre1: entered promiscuous mode [ 160.889574][T12276] gre1: entered allmulticast mode [ 160.995581][T12287] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 160.999178][T12287] overlayfs: overlapping lowerdir path [ 161.220193][T12310] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 161.233396][T12310] bridge4: entered promiscuous mode [ 161.237310][T12310] xt_limit: Overflow, try lower: 1207959552/384 [ 161.293025][T12316] program syz.2.1993 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.320012][T12316] fuse: Bad value for 'rootmode' [ 161.338178][ T10] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 161.500235][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 161.502677][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 161.506112][ T10] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.511414][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 161.515149][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 161.519880][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 161.522263][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 161.525680][ T10] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.530204][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 161.533846][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 161.539482][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 161.542443][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 161.545997][ T10] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.550992][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 161.554540][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 161.561021][ T10] usb 6-1: string descriptor 0 read error: -22 [ 161.562979][ T10] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 161.565770][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.573534][ T10] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 161.830761][T12342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.834503][T12342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.850628][ T836] usb 6-1: USB disconnect, device number 13 [ 161.874418][T12348] cgroup: noprefix used incorrectly [ 161.893988][T12348] netfs: Couldn't get user pages (rc=-14) [ 162.183695][T12355] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 162.249645][T12362] tmpfs: Invalid uid '0x00000000ffffffff' [ 162.301499][T12365] ip6t_srh: unknown srh match flags 4000 [ 162.557414][T12378] kvm: kvm [12377]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x85a [ 162.583964][ T836] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 162.667452][T12386] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 162.744610][ T836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.748034][ T836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.751011][ T836] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.755360][ T836] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.758184][ T836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.766452][ T836] usb 6-1: config 0 descriptor?? [ 162.876615][T12405] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 163.063525][T12410] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 163.170471][ T836] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 163.174309][ T836] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 163.176651][ T836] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 163.179016][ T836] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 163.181550][ T836] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 163.184226][ T836] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 163.186634][ T836] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 163.188996][ T836] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 163.191299][ T836] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 163.196807][ T836] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 163.199129][ T836] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 163.201446][ T836] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 163.204089][ T836] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 163.206453][ T836] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 163.208888][ T836] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 163.211605][ T836] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 163.222954][ T836] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 163.281762][ T5951] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 163.281793][ T5297] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.313119][ T5984] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 163.427894][ T10] usb 6-1: USB disconnect, device number 14 [ 163.463020][ T5984] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.466493][ T5984] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 163.469420][ T5984] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 163.472443][ T5984] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.477131][ T5984] usb 8-1: config 0 descriptor?? [ 163.480529][ T5984] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 163.483378][ T5984] dvb-usb: bulk message failed: -22 (3/0) [ 163.490249][ T5984] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 163.494455][ T5984] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 163.496917][ T5984] usb 8-1: media controller created [ 163.499663][ T5984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.508261][ T5984] dvb-usb: bulk message failed: -22 (6/0) [ 163.510774][ T5984] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 163.514679][ T5984] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input33 [ 163.521191][ T5984] dvb-usb: schedule remote query interval to 150 msecs. [ 163.523368][ T5984] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 163.680155][T12410] __nla_validate_parse: 37 callbacks suppressed [ 163.680169][T12410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2023'. [ 163.687336][ T5984] dvb-usb: bulk message failed: -22 (1/0) [ 163.689482][ T5984] dvb-usb: error while querying for an remote control event. [ 163.691954][T12410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.692094][T12410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.852295][ T5984] dvb-usb: bulk message failed: -22 (1/0) [ 163.856571][ T5984] dvb-usb: error while querying for an remote control event. [ 163.858279][ T144] usb 8-1: USB disconnect, device number 10 [ 163.876005][ T144] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 164.418309][T12446] xt_hashlimit: size too large, truncated to 1048576 [ 164.444875][T12451] overlayfs: failed to resolve './bus/file0': -2 [ 164.479504][ T40] audit: type=1400 audit(1745073962.965:794): avc: denied { create } for pid=12455 comm="syz.3.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 164.660134][T12464] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 164.662905][T12464] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 164.666279][T12464] vhci_hcd vhci_hcd.0: Device attached [ 164.673711][T12464] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 164.676295][T12464] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 164.679689][T12464] vhci_hcd vhci_hcd.0: Device attached [ 164.682354][T12467] vhci_hcd: connection closed [ 164.682570][T12465] vhci_hcd: connection closed [ 164.685529][T12187] vhci_hcd: stop threads [ 164.689339][T12187] vhci_hcd: release socket [ 164.691250][T12187] vhci_hcd: disconnect device [ 164.693221][T12187] vhci_hcd: stop threads [ 164.695043][T12187] vhci_hcd: release socket [ 164.696919][T12187] vhci_hcd: disconnect device [ 165.351503][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2044'. [ 166.029840][T12485] validate_nla: 3 callbacks suppressed [ 166.029855][T12485] netlink: 'syz.3.2045': attribute type 10 has an invalid length. [ 166.039207][T12487] netlink: 372 bytes leftover after parsing attributes in process `syz.1.2046'. [ 166.059941][T12489] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2047'. [ 166.074097][T12489] syzkaller1: entered promiscuous mode [ 166.076423][T12489] syzkaller1: entered allmulticast mode [ 166.371430][ T40] audit: type=1400 audit(1745073964.860:795): avc: denied { mounton } for pid=12506 comm="syz.1.2055" path="/syzcgroup/unified/syz1" dev="rpc_pipefs" ino=48571 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 166.612357][ T836] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 166.771907][ T836] usb 6-1: Using ep0 maxpacket: 32 [ 166.775789][ T836] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 166.782677][ T836] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 166.786507][ T836] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 166.789896][ T836] usb 6-1: Product: syz [ 166.792482][ T836] usb 6-1: Manufacturer: syz [ 166.794944][ T836] usb 6-1: SerialNumber: syz [ 166.799010][ T836] usb 6-1: config 0 descriptor?? [ 166.801967][T12507] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 166.806125][ T836] hub 6-1:0.0: bad descriptor, ignoring hub [ 166.808642][ T836] hub 6-1:0.0: probe with driver hub failed with error -5 [ 166.861596][ T6092] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 167.021136][ T6092] usb 8-1: Using ep0 maxpacket: 16 [ 167.023957][ T6092] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 167.029581][ T6092] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 167.032921][ T6092] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.035416][ T6092] usb 8-1: Product: syz [ 167.036833][ T6092] usb 8-1: Manufacturer: syz [ 167.038357][ T6092] usb 8-1: SerialNumber: syz [ 167.041298][ T6092] usb 8-1: config 0 descriptor?? [ 167.044065][ T6092] hub 8-1:0.0: bad descriptor, ignoring hub [ 167.045956][ T6092] hub 8-1:0.0: probe with driver hub failed with error -5 [ 167.050457][ T6092] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input34 [ 167.121060][ T144] usb 6-1: USB disconnect, device number 15 [ 167.250042][T12518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.251865][T12517] mkiss: ax0: crc mode is auto. [ 167.254382][T12518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.447947][ T40] audit: type=1400 audit(1745073965.943:796): avc: denied { write } for pid=12527 comm="syz.3.2063" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 167.666576][ T40] audit: type=1400 audit(1745073966.164:797): avc: denied { create } for pid=12549 comm="syz.1.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 167.679499][ T40] audit: type=1400 audit(1745073966.164:798): avc: denied { ioctl } for pid=12549 comm="syz.1.2071" path="socket:[50215]" dev="sockfs" ino=50215 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 167.689762][ T40] audit: type=1400 audit(1745073966.164:799): avc: denied { bind } for pid=12549 comm="syz.1.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 167.799115][ T144] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 167.830797][T12554] vlan2: entered promiscuous mode [ 167.832912][T12554] bridge0: entered promiscuous mode [ 167.835094][T12554] vlan2: entered allmulticast mode [ 167.837091][T12554] bridge0: entered allmulticast mode [ 167.845579][T12556] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 167.958610][ T144] usb 7-1: Using ep0 maxpacket: 8 [ 167.962326][ T144] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.966543][ T144] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.974173][ T144] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.978384][ T144] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.984483][ T144] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 167.988338][ T144] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.999809][T12572] batman_adv: batadv0: Adding interface: geneve3 [ 168.002809][T12572] batman_adv: batadv0: Not using interface geneve3 (retrying later): interface not active [ 168.077640][T12579] sp0: Synchronizing with TNC [ 168.083207][T12579] [U] [ 168.198544][ T144] usb 7-1: usb_control_msg returned -32 [ 168.200438][ T144] usbtmc 7-1:16.0: can't read capabilities [ 168.542584][ T40] audit: type=1400 audit(1745073967.046:800): avc: denied { map } for pid=12604 comm="syz.1.2091" path="socket:[51416]" dev="sockfs" ino=51416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 168.558453][ T6010] usb 7-1: USB disconnect, device number 19 [ 168.591835][T12615] netlink: 'syz.2.2093': attribute type 1 has an invalid length. [ 168.621335][T12615] bond5: (slave wireguard1): The slave device specified does not support setting the MAC address [ 168.624595][T12615] bond5: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 168.639859][T12615] bond5: (slave wireguard1): making interface the new active one [ 168.642553][T12615] bond5: (slave wireguard1): Enslaving as an active interface with an up link [ 168.649809][T12616] bond5: (slave wireguard2): The slave device specified does not support setting the MAC address [ 168.650919][T12622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2094'. [ 168.656801][T12616] bond5: (slave wireguard2): Enslaving as a backup interface with an up link [ 168.660165][T12622] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 168.916496][T12654] netlink: 'syz.2.2105': attribute type 1 has an invalid length. [ 168.918948][T12654] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.921200][T12654] IPv6: NLM_F_CREATE should be set when creating new route [ 168.979770][T12667] nbd: must specify a device to reconfigure [ 169.148989][T12693] use of bytesused == 0 is deprecated and will be removed in the future, [ 169.152199][T12693] use the actual size instead. [ 169.497135][T12703] No source specified [ 169.542613][T12705] /dev/nullb0: Can't open blockdev [ 169.715764][ T40] audit: type=1400 audit(1745073968.219:801): avc: denied { write } for pid=12712 comm="syz.1.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 169.919431][ T40] audit: type=1400 audit(1745073968.420:802): avc: denied { write } for pid=12720 comm="syz.3.2120" path="socket:[50479]" dev="sockfs" ino=50479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 169.953007][T12732] loop8: detected capacity change from 0 to 7 [ 169.958036][T12732] Dev loop8: unable to read RDB block 7 [ 169.959989][T12732] loop8: unable to read partition table [ 169.961832][T12732] loop8: partition table beyond EOD, truncated [ 169.970087][T12732] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 170.015534][T12740] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2126'. [ 170.100370][T12755] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2129'. [ 170.176908][ T40] audit: type=1400 audit(1745073968.680:803): avc: denied { mounton } for pid=12759 comm="syz.1.2131" path="/89/file0" dev="tmpfs" ino=483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 170.205820][T12761] 9pnet: Could not find request transport: xen [ 170.399494][T12785] 9pnet_fd: Insufficient options for proto=fd [ 170.407786][T12784] netlink: 'syz.2.2139': attribute type 1 has an invalid length. [ 170.410175][T12784] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2139'. [ 170.510224][ T5297] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 170.523281][ T5297] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 170.526292][ T5297] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 170.532789][ T5297] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 170.535747][ T5297] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 170.695103][T12791] wg1 speed is unknown, defaulting to 1000 [ 170.707444][T12811] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2148'. [ 170.743489][T12809] IPVS: Scheduler module ip_vs_non not found [ 170.748910][T12814] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.753358][T12814] bond0: (slave bond2): Enslaving as an active interface with an up link [ 170.753568][ T836] usb 8-1: USB disconnect, device number 11 [ 170.814689][T12188] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.885014][T12791] chnl_net:caif_netlink_parms(): no params data found [ 170.942854][T12188] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.019243][T12188] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.038983][T12791] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.041714][T12791] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.043965][T12791] bridge_slave_0: entered allmulticast mode [ 171.046555][T12791] bridge_slave_0: entered promiscuous mode [ 171.057342][T12791] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.059641][T12791] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.062514][T12791] bridge_slave_1: entered allmulticast mode [ 171.065185][T12791] bridge_slave_1: entered promiscuous mode [ 171.070173][T12837] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2154'. [ 171.073615][T12837] selinux_netlink_send: 80 callbacks suppressed [ 171.073624][T12837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=12837 comm=syz.1.2154 [ 171.080623][T12838] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2154'. [ 171.084328][T12188] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.171098][T12791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.177826][T12791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.213480][T12791] team0: Port device team_slave_0 added [ 171.232982][T12791] team0: Port device team_slave_1 added [ 171.275471][T12791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.277767][T12791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.286327][T12791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.297663][T12791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.299982][T12791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.307984][T12791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.315751][T12188] bridge_slave_1: left allmulticast mode [ 171.317664][T12188] bridge_slave_1: left promiscuous mode [ 171.319768][T12188] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.322974][T12188] bridge_slave_0: left allmulticast mode [ 171.324908][T12188] bridge_slave_0: left promiscuous mode [ 171.327981][T12188] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.459681][T12188] gretap0 (unregistering): left promiscuous mode [ 171.484208][T12188] batman_adv: batadv0: Removing interface: geneve3 [ 171.517784][ T40] audit: type=1400 audit(1745073970.024:804): avc: denied { remount } for pid=12847 comm="syz.2.2158" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 171.521240][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2158'. [ 171.525786][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2158'. [ 171.528653][T12849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2158'. [ 171.531893][T12848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2158'. [ 171.538174][T12188] bridge0 (unregistering): left promiscuous mode [ 171.569182][ T6092] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 171.719978][ T6092] usb 6-1: config 0 has an invalid interface number: 130 but max is 0 [ 171.722737][ T6092] usb 6-1: config 0 has no interface number 0 [ 171.726616][ T6092] usb 6-1: New USB device found, idVendor=145f, idProduct=013a, bcdDevice= 5.86 [ 171.729752][ T6092] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.732357][ T6092] usb 6-1: Product: syz [ 171.733810][ T6092] usb 6-1: Manufacturer: syz [ 171.735425][ T6092] usb 6-1: SerialNumber: syz [ 171.740272][ T6092] usb 6-1: config 0 descriptor?? [ 171.743741][ T6092] gspca_main: pac207-2.14.0 probing 145f:013a [ 171.848646][ T6092] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 171.875284][T12188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.878070][T12188] bond_slave_0: left promiscuous mode [ 171.881132][T12188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.884306][T12188] bond_slave_1: left promiscuous mode [ 171.887236][T12188] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 171.890344][T12188] batadv0: left promiscuous mode [ 171.895415][T12188] bond0 (unregistering): Released all slaves [ 171.903555][T12188] bond1 (unregistering): Released all slaves [ 171.965707][ T836] usb 6-1: USB disconnect, device number 16 [ 171.966931][T12791] hsr_slave_0: entered promiscuous mode [ 171.969882][T12791] hsr_slave_1: entered promiscuous mode [ 171.971875][T12791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.974212][T12791] Cannot create hsr debugfs directory [ 171.995091][T12188] : left promiscuous mode [ 172.142784][T12864] fuse: Unknown parameter '' [ 172.388156][T12188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.390872][T12188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.393806][T12188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.396127][T12188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.419098][T12188] veth0_macvtap: left promiscuous mode [ 172.420905][T12188] veth1_vlan: left promiscuous mode [ 172.422555][T12188] veth0_vlan: left promiscuous mode [ 172.454528][T12877] ipt_ECN: cannot use operation on non-tcp rule [ 172.618212][ T5951] Bluetooth: hci4: command tx timeout [ 172.623962][T12887] xt_hashlimit: size too large, truncated to 1048576 [ 173.719661][T12791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.726885][T12791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.747999][T12791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.760271][T12791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.817273][ T5297] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 173.818608][T12908] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.821180][ T5297] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 173.826812][ T5297] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 173.831953][ T5297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 173.837462][ T5297] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.898626][T12908] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.916836][T12791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.940792][T12791] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.949398][T12188] IPVS: stop unused estimator thread 0... [ 173.958628][T12182] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.961035][T12182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.970891][ T40] audit: type=1400 audit(1745073972.470:805): avc: denied { setopt } for pid=12928 comm="syz.2.2175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 173.978395][T12182] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.980569][T12182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.991050][T12935] blktrace: Concurrent blktraces are not allowed on loop3 [ 174.018875][T12908] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.026736][T12913] wg1 speed is unknown, defaulting to 1000 [ 174.039069][T12940] bond0: entered promiscuous mode [ 174.040728][T12940] bond_slave_0: entered promiscuous mode [ 174.042593][T12940] bond_slave_1: entered promiscuous mode [ 174.044689][T12940] batadv0: entered promiscuous mode [ 174.047557][T12940] bond0: left promiscuous mode [ 174.049119][T12940] bond_slave_0: left promiscuous mode [ 174.050881][T12940] bond_slave_1: left promiscuous mode [ 174.052626][T12940] batadv0: left promiscuous mode [ 174.087995][T12908] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.179383][T12913] chnl_net:caif_netlink_parms(): no params data found [ 174.194649][ T40] audit: type=1400 audit(1745073972.711:806): avc: denied { getopt } for pid=12951 comm="syz.2.2178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 174.272842][T12963] usb 2-1: USB disconnect, device number 3 [ 174.326541][T12908] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.330359][T12913] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.331302][T12965] hub 2-0:1.0: USB hub found [ 174.333033][T12913] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.334693][T12965] hub 2-0:1.0: 6 ports detected [ 174.336473][T12913] bridge_slave_0: entered allmulticast mode [ 174.340634][T12913] bridge_slave_0: entered promiscuous mode [ 174.343690][T12913] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.345905][T12913] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.348139][T12913] bridge_slave_1: entered allmulticast mode [ 174.350667][T12913] bridge_slave_1: entered promiscuous mode [ 174.369438][T12908] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.403736][T12908] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.408521][T12913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.416953][T12908] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.424840][T12913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.448405][T12791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.471283][T12913] team0: Port device team_slave_0 added [ 174.475244][T12913] team0: Port device team_slave_1 added [ 174.493492][ T66] usb 2-1: new high-speed USB device number 4 using ehci-pci [ 174.505987][T12913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.508175][T12913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.516587][T12913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.525896][T12913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.528156][T12913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.537324][T12913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.625850][T12913] hsr_slave_0: entered promiscuous mode [ 174.629125][T12913] hsr_slave_1: entered promiscuous mode [ 174.632314][T12980] netlink: 'syz.1.2186': attribute type 1 has an invalid length. [ 174.632616][T12913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.634951][T12980] netlink: 'syz.1.2186': attribute type 3 has an invalid length. [ 174.637977][T12913] Cannot create hsr debugfs directory [ 174.676975][ T66] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 174.680321][ T66] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 174.684129][ T66] usb 2-1: Product: QEMU USB Tablet [ 174.686295][ T66] usb 2-1: Manufacturer: QEMU [ 174.688289][ T66] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 174.702112][ T5297] Bluetooth: hci4: command tx timeout [ 174.711231][T12791] veth0_vlan: entered promiscuous mode [ 174.724854][ T66] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.000B/input/input35 [ 174.727941][T12791] veth1_vlan: entered promiscuous mode [ 174.743162][ T66] hid-generic 0003:0627:0001.000B: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 174.815546][T12791] veth0_macvtap: entered promiscuous mode [ 174.822339][T12791] veth1_macvtap: entered promiscuous mode [ 174.844037][T12988] ipvlan2: entered allmulticast mode [ 174.846315][T12988] bond0: entered allmulticast mode [ 174.848494][T12988] bond_slave_0: entered allmulticast mode [ 174.853213][T12988] bond_slave_1: entered allmulticast mode [ 174.855626][T12988] batadv0: entered allmulticast mode [ 174.858430][T12988] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 174.907714][T12913] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 174.917722][T12913] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.937256][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.941705][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.945681][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.949935][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.954829][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.959088][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.966032][T12791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.969179][T12913] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 174.977806][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.982458][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.986592][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.990945][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.994241][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.998138][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.003623][T12791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.006099][T12913] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 175.015602][T13000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.020590][T13000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.023723][T13000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.027027][T13000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.030431][T13000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.033863][T13000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.036886][T13000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.040153][T13000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.052726][T12791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.056802][T12791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.061288][T12791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.064943][T12791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.149456][T13009] syz_tun: refused to change device tx_queue_len [ 175.156631][T12186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.160570][T12186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.185309][T13009] kvm: kvm [13008]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x3030303030303030 [ 175.188151][T12186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.193188][T12186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.227910][T12913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.244545][T12913] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.252391][T12188] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.255675][T12188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.269181][T12186] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.272299][T12186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.288738][ T40] audit: type=1400 audit(1745073973.803:807): avc: denied { bind } for pid=13017 comm="syz.1.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 175.445430][T12913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.598090][T13057] @: renamed from hsr0 (while UP) [ 175.613310][T12913] veth0_vlan: entered promiscuous mode [ 175.621053][T12913] veth1_vlan: entered promiscuous mode [ 175.639360][T12913] veth0_macvtap: entered promiscuous mode [ 175.644931][T12913] veth1_macvtap: entered promiscuous mode [ 175.670820][T12913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.674958][T12913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.678244][T12913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.682305][T12913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.685559][T12913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.688997][T12913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.692258][T12913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.695669][T12913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.699990][T12913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.703070][T13064] syzkaller1: entered promiscuous mode [ 175.705460][T13064] syzkaller1: entered allmulticast mode [ 175.719905][T12913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.723337][T12913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.726345][T12913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.731006][T12913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.734777][T12913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.737961][T12913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.741448][T12913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.745804][T12913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.750740][T12913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.773232][T12913] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.776811][T12913] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.782049][T12913] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.785671][T12913] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.847168][T12187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.849886][T12187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.871274][T12186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.875449][T12186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.891665][ T5297] Bluetooth: hci3: command tx timeout [ 175.922447][ T40] audit: type=1400 audit(1745073974.445:808): avc: denied { ioctl } for pid=13094 comm="syz.2.2214" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 175.965760][T13098] netlink: 'syz.1.2212': attribute type 1 has an invalid length. [ 176.003389][T13111] __nla_validate_parse: 5 callbacks suppressed [ 176.003403][T13111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2215'. [ 176.018059][T13111] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2215'. [ 176.039022][ T40] audit: type=1800 audit(1745073974.565:809): pid=13111 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2215" name="bus" dev="overlay" ino=32 res=0 errno=0 [ 176.039601][T13115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2217'. [ 176.051272][T13111] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2215'. [ 176.054045][T13111] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2215'. [ 176.099581][T13126] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.2219' sets config #1 [ 176.109395][T13135] netlink: 'syz.4.2220': attribute type 11 has an invalid length. [ 176.111901][T13135] netlink: 'syz.4.2220': attribute type 11 has an invalid length. [ 176.114364][T13135] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2220'. [ 176.149812][T13140] netlink: 'syz.4.2225': attribute type 5 has an invalid length. [ 176.208824][ T40] audit: type=1400 audit(1745073974.736:810): avc: denied { ioctl } for pid=13149 comm="syz.4.2228" path="socket:[52789]" dev="sockfs" ino=52789 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 176.220766][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2229'. [ 176.224865][T13152] @: renamed from vlan0 (while UP) [ 176.351757][T13173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2235'. [ 176.403770][T13185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.406879][T13185] IPv6: NLM_F_CREATE should be set when creating new route [ 176.422793][T13185] aaaaaaaaa: entered allmulticast mode [ 176.425058][T13185] tunl0: entered allmulticast mode [ 176.433199][T13185] gre0: entered allmulticast mode [ 176.444842][T13185] gretap0: entered allmulticast mode [ 176.459271][T13185] erspan0: entered allmulticast mode [ 176.464412][T13185] ip_vti0: entered allmulticast mode [ 176.471572][T13190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.476851][T13185] ip6_vti0: entered allmulticast mode [ 176.483954][T13185] sit0: entered allmulticast mode [ 176.491532][T13185] ip6tnl0: entered allmulticast mode [ 176.498073][T13185] ip6gre0: entered allmulticast mode [ 176.512368][T13185] syz_tun: entered allmulticast mode [ 176.519700][T13185] ip6gretap0: entered allmulticast mode [ 176.526293][T13185] bridge0: port 3(team0) entered disabled state [ 176.529439][T13185] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.531789][T13185] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.535223][T13185] bridge0: entered allmulticast mode [ 176.542072][T13185] vcan0: entered allmulticast mode [ 176.552912][T13185] dummy0: entered allmulticast mode [ 176.560779][T13185] nlmon0: entered allmulticast mode [ 176.564142][T13185] caif0: entered allmulticast mode [ 176.566182][T13185] vxcan0: entered allmulticast mode [ 176.569758][T13185] vxcan1: entered allmulticast mode [ 176.573208][T13185] veth0: entered allmulticast mode [ 176.578790][T13185] veth1: entered allmulticast mode [ 176.585515][T13185] wg0: entered allmulticast mode [ 176.589970][T13185] wg1: entered allmulticast mode [ 176.595957][T13185] wg2: entered allmulticast mode [ 176.602044][T13185] veth0_to_bridge: entered allmulticast mode [ 176.609427][T13185] veth1_to_bridge: entered allmulticast mode [ 176.621276][T13185] veth0_to_bond: entered allmulticast mode [ 176.629150][T13185] veth1_to_bond: entered allmulticast mode [ 176.637639][T13185] veth0_to_team: entered allmulticast mode [ 176.647194][T13185] veth1_to_team: entered allmulticast mode [ 176.655734][T13185] veth0_to_batadv: entered allmulticast mode [ 176.661677][T13185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.665530][T13185] batadv_slave_0: entered allmulticast mode [ 176.670919][T13185] veth1_to_batadv: entered allmulticast mode [ 176.676592][T13185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.679987][T13185] batadv_slave_1: entered allmulticast mode [ 176.685889][T13185] xfrm0: entered allmulticast mode [ 176.691405][T13185] veth0_to_hsr: entered allmulticast mode [ 176.696942][T13185] hsr_slave_0: entered allmulticast mode [ 176.701713][T13185] veth1_to_hsr: entered allmulticast mode [ 176.710338][T13185] hsr0: entered allmulticast mode [ 176.717759][T13185] veth1_virt_wifi: entered allmulticast mode [ 176.724004][T13185] veth0_virt_wifi: entered allmulticast mode [ 176.729612][T13185] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 176.732872][T13185] veth1_vlan: entered allmulticast mode [ 176.738349][T13185] veth0_vlan: entered allmulticast mode [ 176.750999][T13185] @: entered allmulticast mode [ 176.752595][T13185] vlan1: entered allmulticast mode [ 176.756205][T13185] macvlan0: entered allmulticast mode [ 176.761483][T13185] macvlan1: entered allmulticast mode [ 176.765851][T13185] ipvlan0: entered allmulticast mode [ 176.766678][ T5297] Bluetooth: hci4: command tx timeout [ 176.768983][T13185] ipvlan1: entered allmulticast mode [ 176.776408][T13185] veth1_macvtap: entered allmulticast mode [ 176.784089][T13185] veth0_macvtap: entered allmulticast mode [ 176.788540][T13185] macvtap0: entered allmulticast mode [ 176.795211][T13185] macsec0: entered allmulticast mode [ 176.800599][T13185] geneve0: entered allmulticast mode [ 176.806053][T13185] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.808789][T13185] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.811528][T13185] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.814261][T13185] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.818641][T13185] geneve1: entered allmulticast mode [ 176.823645][T13185] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 176.828790][T13185] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 176.834566][T13185] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 176.841432][T13185] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 176.853361][T13185] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 176.863673][T13185] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 176.868116][T13185] bridge1: entered allmulticast mode [ 176.870191][T13185] vlan2: left promiscuous mode [ 176.872854][T13185] vlan3: entered allmulticast mode [ 176.874651][T13185] ip6_vti1: entered allmulticast mode [ 176.877007][T13185] vxlan0: entered allmulticast mode [ 176.878790][T13185] tipc: Resetting bearer [ 176.884038][T13185] syzkaller0: entered allmulticast mode [ 176.888151][T13185] bridge2: entered allmulticast mode [ 176.889936][T13185] bond1: entered allmulticast mode [ 176.891642][T13185] bond2: entered allmulticast mode [ 176.893294][T13185] wireguard0: entered allmulticast mode [ 176.897126][T13185] veth2: entered allmulticast mode [ 176.899006][T13185] veth3: entered allmulticast mode [ 176.900812][T13185] gtp0: entered allmulticast mode [ 176.902915][T13185] ip6tnl1: entered allmulticast mode [ 176.906996][T13185] bond3: entered allmulticast mode [ 176.908837][T13185] batadv0.5: entered allmulticast mode [ 176.910751][T13185] bridge3: entered allmulticast mode [ 176.913484][T13185] macsec1: entered allmulticast mode [ 176.919522][T13185] erspan1: entered allmulticast mode [ 176.921964][T13185] ip6erspan0: entered allmulticast mode [ 176.925104][T13185] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.929749][T13185] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.933431][T13185] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.936774][T13185] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.940782][T13185] vxlan1: entered allmulticast mode [ 176.944922][T13185] bridge4: left promiscuous mode [ 176.947364][T13185] bridge4: entered allmulticast mode [ 176.949568][T13185] syztnl1: entered allmulticast mode [ 176.951997][T13185] syztnl0: entered allmulticast mode [ 176.954067][T13185] geneve2: entered allmulticast mode [ 176.955946][T13185] bond4: entered allmulticast mode [ 176.958043][T13185] bond5: entered allmulticast mode [ 176.959959][T13185] wireguard1: entered allmulticast mode [ 176.964213][T13185] wireguard2: entered allmulticast mode [ 176.966394][T13185] batadv1: entered allmulticast mode [ 176.969222][T13185] bridge5: entered allmulticast mode [ 176.971562][T13185] bridge6: entered allmulticast mode [ 176.979634][T13185] batadv_slave_0.: entered allmulticast mode [ 176.988021][ T6002] wg1 speed is unknown, defaulting to 1000 [ 176.989987][ T6002] syz0: Port: 1 Link DOWN [ 177.068894][T13211] netlink: 45 bytes leftover after parsing attributes in process `syz.4.2250'. [ 177.083708][T13207] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2249'. [ 177.963479][ T5297] Bluetooth: hci3: command tx timeout [ 178.841556][ T5297] Bluetooth: hci4: command tx timeout [ 180.038696][ T5297] Bluetooth: hci3: command tx timeout [ 182.114391][ T5297] Bluetooth: hci3: command tx timeout [ 186.676275][T13224] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 186.691722][T13223] ip6t_REJECT: ECHOREPLY is not supported [ 186.693735][T13222] ip6t_REJECT: ECHOREPLY is not supported [ 186.704050][T13236] PM: Enabling pm_trace changes system date and time during resume. [ 186.704050][T13236] PM: Correct system time has to be restored manually after resume. [ 186.719922][ T40] audit: type=1400 audit(1745073985.259:811): avc: denied { write } for pid=13232 comm="syz.2.2256" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 186.734213][T13238] Bluetooth: MGMT ver 1.23 [ 186.779965][T13243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2260'. [ 186.885576][T13255] Cannot find add_set index 0 as target [ 186.913754][T13257] netlink: 'syz.2.2265': attribute type 10 has an invalid length. [ 186.918200][T13257] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2265'. [ 186.922958][T13257] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.069362][T13277] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 187.072043][T13277] overlayfs: missing 'lowerdir' [ 187.124718][T13284] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 187.178908][ T40] audit: type=1400 audit(1745073985.720:812): avc: denied { map } for pid=13288 comm="syz.4.2275" path="socket:[52961]" dev="sockfs" ino=52961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 187.180089][T13289] xt_hashlimit: size too large, truncated to 1048576 [ 187.191842][ T40] audit: type=1400 audit(1745073985.720:813): avc: denied { read } for pid=13288 comm="syz.4.2275" path="socket:[52961]" dev="sockfs" ino=52961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 187.275900][T13295] overlayfs: failed to resolve './bus': -2 [ 187.283679][T13298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13298 comm=syz.4.2277 [ 187.295953][T13284] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:0 [ 187.304436][T13284] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:0 [ 187.321642][T13298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2277'. [ 187.369302][T13304] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2278'. [ 187.546995][ T5951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 187.553365][ T5951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.556485][ T5951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.559460][ T5951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.564109][ T5951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.703438][T13309] wg1 speed is unknown, defaulting to 1000 [ 187.789581][T13309] chnl_net:caif_netlink_parms(): no params data found [ 187.880069][T13309] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.882763][T13309] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.885154][T13309] bridge_slave_0: entered allmulticast mode [ 187.887867][T13309] bridge_slave_0: entered promiscuous mode [ 187.891184][T13309] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.894630][T13309] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.896989][T13309] bridge_slave_1: entered allmulticast mode [ 187.899640][T13309] bridge_slave_1: entered promiscuous mode [ 187.953648][T13334] netlink: 'syz.3.2286': attribute type 10 has an invalid length. [ 187.955905][T13309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.967996][T13334] batman_adv: batadv0: Adding interface: team0 [ 187.969975][T13334] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.979682][T13334] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 187.985039][T13334] netlink: 'syz.3.2286': attribute type 10 has an invalid length. [ 187.985947][T13309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.987565][T13334] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2286'. [ 188.004242][T13342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2288'. [ 188.007324][T13342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.013283][T13334] team0: entered promiscuous mode [ 188.015429][T13334] team_slave_0: entered promiscuous mode [ 188.017919][T13334] team_slave_1: entered promiscuous mode [ 188.022372][T13334] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.025964][T13334] batman_adv: batadv0: Interface activated: team0 [ 188.028696][T13334] batman_adv: batadv0: Interface deactivated: team0 [ 188.031446][T13334] batman_adv: batadv0: Removing interface: team0 [ 188.036950][T13334] bridge0: port 3(team0) entered blocking state [ 188.039652][T13334] bridge0: port 3(team0) entered disabled state [ 188.041860][T13334] team0: entered allmulticast mode [ 188.043730][T13334] team_slave_0: entered allmulticast mode [ 188.045559][T13334] team_slave_1: entered allmulticast mode [ 188.046332][T13346] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2289'. [ 188.048667][T13334] bridge0: port 3(team0) entered blocking state [ 188.052367][T13334] bridge0: port 3(team0) entered forwarding state [ 188.084107][T13348] syz.3.2290: vmalloc error: size 5234688, failed to allocated page array size 10224, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 188.085878][T13309] team0: Port device team_slave_0 added [ 188.089421][T13348] CPU: 2 UID: 0 PID: 13348 Comm: syz.3.2290 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 188.089436][T13348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 188.089442][T13348] Call Trace: [ 188.089446][T13348] [ 188.089449][T13348] dump_stack_lvl+0x16c/0x1f0 [ 188.089481][T13348] warn_alloc+0x248/0x3a0 [ 188.089492][T13348] ? __pfx_warn_alloc+0x10/0x10 [ 188.089506][T13348] ? __get_vm_area_node+0x1b9/0x300 [ 188.089519][T13348] ? __get_vm_area_node+0x1e5/0x300 [ 188.089535][T13348] __vmalloc_node_range_noprof+0x1110/0x1540 [ 188.089548][T13348] ? find_held_lock+0x2b/0x80 [ 188.089562][T13348] ? rcu_read_unlock+0x17/0x60 [ 188.089576][T13348] ? bpf_check+0x1d6/0xbbc0 [ 188.089589][T13348] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 188.089604][T13348] ? rcu_is_watching+0x12/0xc0 [ 188.089616][T13348] ? trace_kmalloc+0x2b/0xd0 [ 188.089627][T13348] ? __kvmalloc_node_noprof.cold+0x60/0x65 [ 188.089639][T13348] ? rcu_is_watching+0x12/0xc0 [ 188.089650][T13348] ? ktime_get+0x200/0x310 [ 188.089663][T13348] ? bpf_check+0x1d6/0xbbc0 [ 188.089672][T13348] vzalloc_noprof+0x6b/0x90 [ 188.089686][T13348] ? bpf_check+0x1d6/0xbbc0 [ 188.089694][T13348] bpf_check+0x1d6/0xbbc0 [ 188.089706][T13348] ? kasan_save_stack+0x42/0x60 [ 188.089715][T13348] ? kasan_save_stack+0x33/0x60 [ 188.089723][T13348] ? kasan_save_track+0x14/0x30 [ 188.089731][T13348] ? __kasan_kmalloc+0xaa/0xb0 [ 188.089739][T13348] ? bpf_prog_load+0xde7/0x2490 [ 188.089750][T13348] ? __sys_bpf+0x433c/0x4d80 [ 188.089761][T13348] ? __x64_sys_bpf+0x78/0xc0 [ 188.089773][T13348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.089785][T13348] ? __pfx_bpf_check+0x10/0x10 [ 188.089807][T13348] ? kasan_save_track+0x14/0x30 [ 188.089815][T13348] ? __kasan_kmalloc+0xaa/0xb0 [ 188.089824][T13348] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 188.089840][T13348] bpf_prog_load+0xe41/0x2490 [ 188.089855][T13348] ? __pfx_bpf_prog_load+0x10/0x10 [ 188.089866][T13348] ? avc_has_perm_noaudit+0x149/0x3b0 [ 188.089885][T13348] ? selinux_bpf+0xde/0x130 [ 188.089894][T13348] ? bpf_lsm_bpf+0x9/0x10 [ 188.089903][T13348] __sys_bpf+0x433c/0x4d80 [ 188.089917][T13348] ? __pfx___sys_bpf+0x10/0x10 [ 188.089929][T13348] ? lock_vma_under_rcu+0x47d/0x970 [ 188.089943][T13348] ? lock_vma_under_rcu+0x47d/0x970 [ 188.089958][T13348] ? do_futex+0x122/0x350 [ 188.089975][T13348] ? __pfx_do_futex+0x10/0x10 [ 188.089993][T13348] ? exc_page_fault+0x5c/0xc0 [ 188.090006][T13348] ? __pfx___x64_sys_futex+0x10/0x10 [ 188.090023][T13348] __x64_sys_bpf+0x78/0xc0 [ 188.090035][T13348] ? lockdep_hardirqs_on+0x7c/0x110 [ 188.090047][T13348] do_syscall_64+0xcd/0x260 [ 188.090061][T13348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.090070][T13348] RIP: 0033:0x7f56e978e169 [ 188.090079][T13348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.090088][T13348] RSP: 002b:00007f56ea60f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 188.090097][T13348] RAX: ffffffffffffffda RBX: 00007f56e99b5fa0 RCX: 00007f56e978e169 [ 188.090103][T13348] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 188.090109][T13348] RBP: 00007f56e9810a68 R08: 0000000000000000 R09: 0000000000000000 [ 188.090114][T13348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.090120][T13348] R13: 0000000000000000 R14: 00007f56e99b5fa0 R15: 00007ffea6ab9518 [ 188.090132][T13348] [ 188.090135][T13348] Mem-Info: [ 188.096516][T13309] team0: Port device team_slave_1 added [ 188.100821][T13348] active_anon:6780 inactive_anon:0 isolated_anon:0 [ 188.100821][T13348] active_file:5228 inactive_file:50815 isolated_file:0 [ 188.100821][T13348] unevictable:1770 dirty:89 writeback:0 [ 188.100821][T13348] slab_reclaimable:7560 slab_unreclaimable:85642 [ 188.100821][T13348] mapped:29103 shmem:2449 pagetables:857 [ 188.100821][T13348] sec_pagetables:308 bounce:0 [ 188.100821][T13348] kernel_misc_reclaimable:0 [ 188.100821][T13348] free:430712 free_pcp:9001 free_cma:0 [ 188.136131][T13346] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2289'. [ 188.138080][T13348] Node 0 active_anon:27136kB inactive_anon:0kB active_file:20912kB inactive_file:203168kB unevictable:3544kB isolated(anon):0kB isolated(file):0kB mapped:117864kB dirty:356kB writeback:0kB shmem:6256kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14640kB pagetables:3336kB sec_pagetables:1232kB all_unreclaimable? no Balloon:0kB [ 188.236717][T13348] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 188.246397][T13348] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 188.254702][T13348] lowmem_reserve[]: 0 1236 1236 1236 1236 [ 188.256527][T13348] Node 0 DMA32 free:141332kB boost:10240kB min:37788kB low:44672kB high:51556kB reserved_highatomic:0KB active_anon:27272kB inactive_anon:0kB active_file:20912kB inactive_file:203168kB unevictable:3536kB writepending:356kB present:2080628kB managed:1265888kB mlocked:0kB bounce:0kB free_pcp:20412kB local_pcp:356kB free_cma:0kB [ 188.268089][T13348] lowmem_reserve[]: 0 0 0 0 0 [ 188.270107][T13348] Node 1 Normal free:1563404kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781964kB mlocked:0kB bounce:0kB free_pcp:15720kB local_pcp:2708kB free_cma:0kB [ 188.273229][T13309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.279674][T13348] lowmem_reserve[]: 0 0 0 0 0 [ 188.282674][T13309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.284130][T13348] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB [ 188.294753][T13309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.296929][T13348] 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 188.303446][T13309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.303764][T13348] Node 0 DMA32: 385*4kB [ 188.306674][T13309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.308022][T13348] (UME) 810*8kB (UME) 328*16kB (ME) 326*32kB (UME) 133*64kB (UME) 115*128kB (UME) 83*256kB (UME) 53*512kB (UME) 21*1024kB (UME) 6*2048kB (M) 5*4096kB (UM) = 149588kB [ 188.319385][T13309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.324116][T13348] Node 1 Normal: 3*4kB (M) 4*8kB (ME) 14*16kB (UME) 14*32kB (UME) 11*64kB (UME) 7*128kB (UME) 2*256kB (ME) 4*512kB (UME) 2*1024kB (UE) 2*2048kB (UM) 379*4096kB (M) = 1563404kB [ 188.334024][T13348] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 188.337142][T13348] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 188.339990][T13348] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 188.343173][T13348] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 188.346097][T13348] 58496 total pagecache pages [ 188.347577][T13348] 2 pages in swap cache [ 188.348896][T13348] Free swap = 124988kB [ 188.350232][T13348] Total swap = 124996kB [ 188.351776][T13348] 1048443 pages RAM [ 188.353067][T13348] 0 pages HighMem/MovableOnly [ 188.354555][T13348] 282640 pages reserved [ 188.355996][T13348] 0 pages cma reserved [ 188.392386][T13309] hsr_slave_0: entered promiscuous mode [ 188.395160][T13309] hsr_slave_1: entered promiscuous mode [ 188.397481][T13309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.399841][T13309] Cannot create hsr debugfs directory [ 188.533394][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2299'. [ 188.533479][ T40] audit: type=1400 audit(1745073987.082:814): avc: denied { getopt } for pid=13376 comm="syz.3.2299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 188.538469][T13374] could not allocate digest TFM handle sha512-arm64 [ 188.607258][T13374] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 188.638912][T13393] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 188.855156][T13414] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2305'. [ 188.866452][T13414] netlink: 'syz.1.2305': attribute type 1 has an invalid length. [ 188.889843][T13414] vxcan1: entered allmulticast mode [ 188.891910][T13414] vxcan1: left allmulticast mode [ 188.925835][ T40] audit: type=1400 audit(1745073987.473:815): avc: denied { create } for pid=13418 comm="syz.1.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 188.944460][ T40] audit: type=1400 audit(1745073987.473:816): avc: denied { getopt } for pid=13418 comm="syz.1.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 189.014173][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.016896][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.019177][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.021901][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.024199][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.033609][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.040626][T13309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 189.042662][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.045062][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.046592][T13309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 189.047355][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.051893][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.053363][T13309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 189.054213][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.059361][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.066038][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.068383][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.069975][T13309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 189.071051][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.075178][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.078200][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.082574][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.085428][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.087929][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.091407][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.093723][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.096331][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.099016][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.101798][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.104106][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.106398][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.108694][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.111476][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.113821][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.116105][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.118428][ T836] hid-generic 0007:0000:0000.000C: unknown main item tag 0x0 [ 189.130658][ T836] hid-generic 0007:0000:0000.000C: hidraw1: HID vffffff.ff Device [syz0] on syz0 [ 189.138883][T13309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.148577][T13309] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.154216][T12187] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.156475][T12187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.163308][T12187] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.165670][T12187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.263988][T13309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.285776][T13450] tipc: Enabling not permitted [ 189.288192][T13450] tipc: Enabling of bearer rejected, failed to enable media [ 189.295774][T13309] veth0_vlan: entered promiscuous mode [ 189.302277][T13309] veth1_vlan: entered promiscuous mode [ 189.317882][T13309] veth0_macvtap: entered promiscuous mode [ 189.324426][T13309] veth1_macvtap: entered promiscuous mode [ 189.335912][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.340622][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.344523][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.348172][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.351380][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.354748][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.357855][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.362092][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.366821][T13309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.375456][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.378880][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.383346][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.386594][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.390279][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.393521][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.396566][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.400676][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.406343][T13309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.413309][T13309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.416983][T13309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.421159][T13309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.424839][T13309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.476959][T12191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.479660][T12191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.495831][T12185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.498563][T12185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.601947][ T40] audit: type=1400 audit(1745073988.154:817): avc: denied { unmount } for pid=12791 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 189.628808][ T5951] Bluetooth: hci2: command tx timeout [ 189.705168][T13472] syz_tun: entered allmulticast mode [ 189.712311][T13471] syz_tun: left allmulticast mode [ 189.717760][T13474] Invalid source name [ 189.721026][T13474] UBIFS error (pid: 13474): cannot open "ubifs", error -22 [ 189.725933][T13474] pimreg3: entered allmulticast mode [ 189.829510][T13477] /dev/sr0: Can't open blockdev [ 189.848771][T13484] block device autoloading is deprecated and will be removed. [ 189.876495][T13486] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 189.901015][T13482] md2: using deprecated bitmap file support [ 189.903334][T13482] md2: error: bitmap file must be a regular file [ 189.918284][ T6002] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 190.067765][ T6002] usb 7-1: Using ep0 maxpacket: 32 [ 190.070664][ T6002] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 190.075582][ T6002] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 190.078642][ T6002] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 190.081128][ T6002] usb 7-1: Product: syz [ 190.082412][ T6002] usb 7-1: Manufacturer: syz [ 190.084284][ T6002] usb 7-1: SerialNumber: syz [ 190.092640][ T6002] usb 7-1: config 0 descriptor?? [ 190.096717][T13491] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 190.096872][T13466] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 190.104723][ T6002] hub 7-1:0.0: bad descriptor, ignoring hub [ 190.107185][ T6002] hub 7-1:0.0: probe with driver hub failed with error -5 [ 190.299121][T13498] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 190.694367][T13505] af_packet: tpacket_rcv: packet too big, clamped from 416 to 4294967272. macoff=96 [ 190.850657][ T40] audit: type=1400 audit(1745073989.407:818): avc: denied { connect } for pid=13512 comm="syz.1.2331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 190.988304][T13518] vivid-002: ================= START STATUS ================= [ 190.991145][T13518] vivid-002: Radio HW Seek Mode: Bounded [ 190.993104][T13518] vivid-002: Radio Programmable HW Seek: false [ 190.994990][T13518] vivid-002: RDS Rx I/O Mode: Block I/O [ 190.997518][T13518] vivid-002: Generate RBDS Instead of RDS: false [ 190.999524][T13518] vivid-002: RDS Reception: true [ 191.001091][T13518] vivid-002: RDS Program Type: 0 inactive [ 191.002897][T13518] vivid-002: RDS PS Name: inactive [ 191.004810][T13518] vivid-002: RDS Radio Text: inactive [ 191.006559][T13466] usb 7-1: reset high-speed USB device number 20 using dummy_hcd [ 191.009512][T13518] vivid-002: RDS Traffic Announcement: false inactive [ 191.011799][T13518] vivid-002: RDS Traffic Program: false inactive [ 191.014180][T13518] vivid-002: RDS Music: false inactive [ 191.016617][T13518] vivid-002: ================== END STATUS ================== [ 191.158908][T13466] usb 7-1: device firmware changed [ 191.161196][ T10] usb 7-1: USB disconnect, device number 20 [ 191.305470][ T10] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 191.309958][ T40] audit: type=1400 audit(1745073989.858:819): avc: denied { listen } for pid=13535 comm="syz.3.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 191.465249][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 191.470633][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 191.476441][ T10] usb 7-1: string descriptor 0 read error: -22 [ 191.478443][ T10] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 191.481549][ T10] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 191.485289][ T10] usb 7-1: config 0 descriptor?? [ 191.487306][T13500] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 191.490337][ T10] hub 7-1:0.0: bad descriptor, ignoring hub [ 191.492197][ T10] hub 7-1:0.0: probe with driver hub failed with error -5 [ 191.635177][ T144] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 191.690976][ T40] audit: type=1400 audit(1745073990.238:820): avc: denied { write } for pid=13465 comm="syz.2.2319" path="socket:[55232]" dev="sockfs" ino=55232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 191.705321][ T5951] Bluetooth: hci2: command tx timeout [ 191.784592][ T144] usb 8-1: Using ep0 maxpacket: 32 [ 191.789919][ T144] usb 8-1: config 8 has an invalid interface number: 228 but max is 1 [ 191.793316][ T144] usb 8-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 191.800545][ T144] usb 8-1: config 8 has an invalid interface number: 58 but max is 1 [ 191.803866][ T144] usb 8-1: config 8 has an invalid interface number: 4 but max is 1 [ 191.807446][ T144] usb 8-1: config 8 has an invalid interface number: 7 but max is 1 [ 191.810684][ T144] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 191.815467][ T144] usb 8-1: config 8 has 4 interfaces, different from the descriptor's value: 2 [ 191.819185][ T144] usb 8-1: config 8 has no interface number 0 [ 191.821717][ T144] usb 8-1: config 8 has no interface number 1 [ 191.824294][ T144] usb 8-1: config 8 has no interface number 2 [ 191.827021][T13007] usb 7-1: USB disconnect, device number 21 [ 191.828099][T13558] netlink: 'syz.2.2346': attribute type 21 has an invalid length. [ 191.829603][ T144] usb 8-1: config 8 has no interface number 3 [ 191.832046][T13558] netlink: 'syz.2.2346': attribute type 6 has an invalid length. [ 191.834757][ T144] usb 8-1: config 8 interface 228 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 191.842000][ T144] usb 8-1: config 8 interface 228 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 191.843287][T13558] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2346'. [ 191.846660][ T144] usb 8-1: config 8 interface 228 altsetting 2 endpoint 0x4 has invalid maxpacket 52656, setting to 64 [ 191.853987][ T144] usb 8-1: config 8 interface 228 altsetting 2 endpoint 0x3 has an invalid bInterval 70, changing to 10 [ 191.858819][ T144] usb 8-1: config 8 interface 228 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 191.862851][ T144] usb 8-1: config 8 interface 228 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 191.867531][ T144] usb 8-1: config 8 interface 228 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 191.871909][ T144] usb 8-1: config 8 interface 228 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 191.876788][ T144] usb 8-1: config 8 interface 58 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 191.880831][ T144] usb 8-1: config 8 interface 4 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 191.884949][ T144] usb 8-1: config 8 interface 7 altsetting 37 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 191.884963][ T144] usb 8-1: config 8 interface 228 has no altsetting 0 [ 191.884972][ T144] usb 8-1: config 8 interface 58 has no altsetting 0 [ 191.884980][ T144] usb 8-1: config 8 interface 4 has no altsetting 0 [ 191.884988][ T144] usb 8-1: config 8 interface 7 has no altsetting 0 [ 191.889865][ T144] usb 8-1: New USB device found, idVendor=0b3c, idProduct=c003, bcdDevice=60.1f [ 191.902705][ T144] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.905321][ T144] usb 8-1: Product: syz [ 191.906734][ T144] usb 8-1: Manufacturer: ᚓ쌫棝膔燠ẩ뻗 [ 191.908804][ T144] usb 8-1: SerialNumber: syz [ 191.969366][T13571] sg_write: data in/out 440207358/4056 bytes for SCSI command 0x45-- guessing data in; [ 191.969366][T13571] program syz.4.2352 not setting count and/or reply_len properly [ 192.018306][T13577] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2355'. [ 192.021105][T13577] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2355'. [ 192.030341][T13581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2357'. [ 192.068470][T13589] netlink: 'syz.1.2358': attribute type 10 has an invalid length. [ 192.080970][T13589] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 192.129189][ T144] option 8-1:8.228: GSM modem (1-port) converter detected [ 192.139251][ T144] option 8-1:8.58: GSM modem (1-port) converter detected [ 192.145945][ T144] option 8-1:8.4: GSM modem (1-port) converter detected [ 192.155289][ T144] option 8-1:8.7: GSM modem (1-port) converter detected [ 192.165123][ T144] usb 8-1: USB disconnect, device number 12 [ 192.182382][ T144] option 8-1:8.228: device disconnected [ 192.186014][ T144] option 8-1:8.58: device disconnected [ 192.188854][ T144] option 8-1:8.4: device disconnected [ 192.192775][ T144] option 8-1:8.7: device disconnected [ 192.224471][T13610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2364'. [ 192.304057][T13618] netlink: 'syz.4.2367': attribute type 4 has an invalid length. [ 192.342004][T13618] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2367'. [ 192.346334][T13618] veth1_to_bond: entered allmulticast mode [ 192.348822][T13617] veth1_to_bond: left allmulticast mode [ 192.395299][T13627] 8021q: VLANs not supported on wg1 [ 192.531382][T13640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2373'. [ 192.534238][T13640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2373'. [ 192.537005][T13640] netlink: 'syz.4.2373': attribute type 20 has an invalid length. [ 192.575992][T13642] [U] 1WT`8H$09\ [ 192.578056][T13642] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 192.583806][T13641] [U]  [ 192.629311][T13644] netlink: 'syz.1.2375': attribute type 4 has an invalid length. [ 192.670003][T13648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13648 comm=syz.3.2377 [ 192.670059][T13650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13650 comm=syz.3.2377 [ 192.739740][T13651] syz.4.2379 (13651): drop_caches: 2 [ 192.758243][T13651] syz.4.2379 (13651): drop_caches: 2 [ 192.789922][T13666] tc_dump_action: action bad kind [ 192.871020][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 192.871031][ T40] audit: type=1400 audit(1745073991.421:822): avc: denied { map } for pid=13676 comm="syz.3.2386" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 192.882995][ T40] audit: type=1400 audit(1745073991.421:823): avc: denied { execute } for pid=13676 comm="syz.3.2386" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 192.894354][T13684] netlink: 'syz.4.2387': attribute type 25 has an invalid length. [ 192.897074][T13684] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2387'. [ 192.905605][T13688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2382'. [ 193.338871][ T40] audit: type=1400 audit(1745073991.891:824): avc: denied { shutdown } for pid=13725 comm="syz.3.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 193.617977][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.770903][ T5951] Bluetooth: hci2: command tx timeout [ 193.870278][T13734] ntfs3(sr0): Primary boot signature is not NTFS. [ 193.872703][T13734] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 193.993684][T13745] netlink: 'syz.4.2403': attribute type 11 has an invalid length. [ 193.996791][ T40] audit: type=1400 audit(1745073992.553:825): avc: denied { accept } for pid=13744 comm="syz.4.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 193.996935][T13745] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 194.088197][T13756] netlink: 'syz.4.2404': attribute type 16 has an invalid length. [ 194.091133][T13756] netlink: 'syz.4.2404': attribute type 3 has an invalid length. [ 194.094815][T13756] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 194.179963][T13768] 9pnet_fd: Insufficient options for proto=fd [ 194.306037][T13788] overlayfs: failed to resolve 'uuid=on': -2 [ 194.365775][ T40] audit: type=1400 audit(1745073992.923:826): avc: denied { map } for pid=13794 comm="syz.3.2418" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 194.373342][ T40] audit: type=1400 audit(1745073992.923:827): avc: denied { execute } for pid=13794 comm="syz.3.2418" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 194.453756][T13792] page: refcount:2 mapcount:0 mapping:ffff888104593678 index:0x4 pfn:0x61804 [ 194.456865][T13792] memcg:ffff888104d52000 [ 194.458384][T13792] aops:def_blk_aops ino:fa00000 [ 194.460447][T13792] flags: 0xfff800000002b9(locked|waiters|uptodate|dirty|lru|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 194.463931][T13792] raw: 00fff800000002b9 ffffea0001860148 ffffea0001860188 ffff888104593678 [ 194.466615][T13792] raw: 0000000000000004 0000000000000000 00000002ffffffff ffff888104d52000 [ 194.469305][T13792] page dumped because: VM_BUG_ON_FOLIO(!folio_contains(folio, index)) [ 194.474042][T13792] page_owner tracks the page as allocated [ 194.475854][T13792] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 13791, tgid 13791 (syz.4.2417), ts 194385943466, free_ts 192655374832 [ 194.482508][T13792] post_alloc_hook+0x181/0x1b0 [ 194.484733][T13792] get_page_from_freelist+0x135c/0x3920 [ 194.486552][T13792] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 194.488513][T13792] alloc_pages_mpol+0x1fb/0x550 [ 194.490569][T13792] folio_alloc_noprof+0x20/0x2d0 [ 194.492206][T13792] filemap_alloc_folio_noprof+0x3a1/0x470 [ 194.494036][T13792] page_cache_ra_order+0x4c0/0xd00 [ 194.495749][T13792] filemap_fault+0x1a5e/0x2740 [ 194.497263][T13792] __do_fault+0x10a/0x490 [ 194.498634][T13792] do_pte_missing+0x1a6/0x3fb0 [ 194.500668][T13792] __handle_mm_fault+0x103d/0x2a40 [ 194.502804][T13792] handle_mm_fault+0x3fe/0xad0 [ 194.504478][T13792] do_user_addr_fault+0x60c/0x1370 [ 194.506187][T13792] exc_page_fault+0x5c/0xc0 [ 194.508061][T13792] asm_exc_page_fault+0x26/0x30 [ 194.510046][T13792] page last free pid 12187 tgid 12187 stack trace: [ 194.512081][T13792] free_unref_folios+0x999/0x1630 [ 194.513688][T13792] folios_put_refs+0x56f/0x740 [ 194.515204][T13792] release_pages+0x2a2/0x4b0 [ 194.516747][T13792] io_free_region+0x102/0x2e0 [ 194.518245][T13792] io_ring_exit_work+0x992/0xf60 [ 194.520249][T13792] process_one_work+0x9cc/0x1b70 [ 194.521840][T13792] worker_thread+0x6c8/0xf10 [ 194.523324][T13792] kthread+0x3c2/0x780 [ 194.524680][T13792] ret_from_fork+0x45/0x80 [ 194.526104][T13792] ret_from_fork_asm+0x1a/0x30 [ 194.527890][T13792] ------------[ cut here ]------------ [ 194.529728][T13792] kernel BUG at mm/filemap.c:3433! [ 194.532325][T13792] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 194.535315][T13792] CPU: 0 UID: 0 PID: 13792 Comm: syz.4.2417 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 194.539287][T13792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 194.542606][T13792] RIP: 0010:filemap_fault+0x1862/0x2740 [ 194.544344][T13792] Code: 00 e9 bf ec ff ff 48 8b 7c 24 28 e8 78 46 2d 00 e9 66 f3 ff ff e8 7e cd c7 ff 48 c7 c6 40 ee 98 8b 48 89 df e8 0f 90 10 00 90 <0f> 0b e8 67 cd c7 ff 48 c7 c6 a0 e4 98 8b 48 89 df e8 f8 8f 10 00 [ 194.550255][T13792] RSP: 0018:ffffc900036d7790 EFLAGS: 00010287 [ 194.552154][T13792] RAX: 000000000005959c RBX: ffffea0001860100 RCX: ffffc9002503c000 [ 194.554617][T13792] RDX: 0000000000080000 RSI: ffffffff81f38221 RDI: ffff888047630444 [ 194.557074][T13792] RBP: ffffc900036d7a60 R08: 0000000000000001 R09: 0000000000000001 [ 194.559557][T13792] R10: ffffffff90864617 R11: 0000000000000000 R12: ffff888104593678 [ 194.562208][T13792] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 194.565088][T13792] FS: 00007fa3491706c0(0000) GS:ffff8880d69b2000(0000) knlGS:0000000000000000 [ 194.568061][T13792] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.570312][T13792] CR2: 00007f56ea5edf98 CR3: 00000000473d6000 CR4: 0000000000352ef0 [ 194.573224][T13792] DR0: 0008000000002f1b DR1: 0000200000000005 DR2: 0000000100000081 [ 194.576072][T13792] DR3: 0000000000000002 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 194.579084][T13792] Call Trace: [ 194.580432][T13792] [ 194.581627][T13792] ? __pfx_filemap_fault+0x10/0x10 [ 194.583638][T13792] ? __lock_acquire+0xaa4/0x1ba0 [ 194.585603][T13792] ? __pfx_filemap_map_pages+0x10/0x10 [ 194.587684][T13792] __do_fault+0x10a/0x490 [ 194.589157][T13792] ? __pfx_filemap_map_pages+0x10/0x10 [ 194.590875][T13792] do_pte_missing+0x1a6/0x3fb0 [ 194.592396][T13792] ? __handle_mm_fault+0x1010/0x2a40 [ 194.594114][T13792] __handle_mm_fault+0x103d/0x2a40 [ 194.595728][T13792] ? __pfx___handle_mm_fault+0x10/0x10 [ 194.597463][T13792] ? find_vma+0xbf/0x140 [ 194.598807][T13792] ? __pfx_find_vma+0x10/0x10 [ 194.600291][T13792] handle_mm_fault+0x3fe/0xad0 [ 194.601817][T13792] do_user_addr_fault+0x7a6/0x1370 [ 194.603418][T13792] ? rcu_is_watching+0x12/0xc0 [ 194.604933][T13792] exc_page_fault+0x5c/0xc0 [ 194.606372][T13792] asm_exc_page_fault+0x26/0x30 [ 194.607909][T13792] RIP: 0010:__put_user_4+0xd/0x20 [ 194.609505][T13792] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 194.615484][T13792] RSP: 0018:ffffc900036d7cf0 EFLAGS: 00050206 [ 194.617409][T13792] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000005278 [ 194.619922][T13792] RDX: 0000000000080000 RSI: ffffffff893fe179 RDI: ffffffff8bf46440 [ 194.622395][T13792] RBP: 0000000000000086 R08: 14128129e3c1c85b R09: 0000000000000001 [ 194.624880][T13792] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000040000 [ 194.627349][T13792] R13: 0000200000005240 R14: 0000000000000180 R15: 0000000000000181 [ 194.629711][T13792] ? __sys_sendmmsg+0x229/0x420 [ 194.631251][T13792] __sys_sendmmsg+0x234/0x420 [ 194.632808][T13792] ? __pfx___sys_sendmmsg+0x10/0x10 [ 194.634449][T13792] ? __pfx_do_futex+0x10/0x10 [ 194.635958][T13792] ? xfd_validate_state+0x5d/0x180 [ 194.637687][T13792] ? rcu_is_watching+0x12/0xc0 [ 194.639219][T13792] __x64_sys_sendmmsg+0x9c/0x100 [ 194.640802][T13792] ? lockdep_hardirqs_on+0x7c/0x110 [ 194.642447][T13792] do_syscall_64+0xcd/0x260 [ 194.644185][T13792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.646499][T13792] RIP: 0033:0x7fa34838e169 [ 194.648265][T13792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.655728][T13792] RSP: 002b:00007fa349170038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 194.658999][T13792] RAX: ffffffffffffffda RBX: 00007fa3485b5fa0 RCX: 00007fa34838e169 [ 194.662081][T13792] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000007 [ 194.665172][T13792] RBP: 00007fa348410a68 R08: 0000000000000000 R09: 0000000000000000 [ 194.668075][T13792] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.670552][T13792] R13: 0000000000000000 R14: 00007fa3485b5fa0 R15: 00007fffd4853e48 [ 194.673038][T13792] [ 194.674042][T13792] Modules linked in: [ 194.675828][T13792] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 194.691979][T13792] RIP: 0010:filemap_fault+0x1862/0x2740 [ 194.694359][T13792] Code: 00 e9 bf ec ff ff 48 8b 7c 24 28 e8 78 46 2d 00 e9 66 f3 ff ff e8 7e cd c7 ff 48 c7 c6 40 ee 98 8b 48 89 df e8 0f 90 10 00 90 <0f> 0b e8 67 cd c7 ff 48 c7 c6 a0 e4 98 8b 48 89 df e8 f8 8f 10 00 [ 194.719176][T13792] RSP: 0018:ffffc900036d7790 EFLAGS: 00010287 [ 194.721154][T13792] RAX: 000000000005959c RBX: ffffea0001860100 RCX: ffffc9002503c000 [ 194.723663][T13792] RDX: 0000000000080000 RSI: ffffffff81f38221 RDI: ffff888047630444 [ 194.726154][T13792] RBP: ffffc900036d7a60 R08: 0000000000000001 R09: 0000000000000001 [ 194.728668][T13792] R10: ffffffff90864617 R11: 0000000000000000 R12: ffff888104593678 [ 194.731635][T13792] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 194.734168][T13792] FS: 00007fa3491706c0(0000) GS:ffff8880d69b2000(0000) knlGS:0000000000000000 [ 194.736972][T13792] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.747183][T13792] CR2: 00007f56ea5edf98 CR3: 00000000473d6000 CR4: 0000000000352ef0 [ 194.750255][T13792] DR0: 0008000000002f1b DR1: 0000200000000005 DR2: 0000000100000081 [ 194.752782][T13792] DR3: 0000000000000002 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 194.755280][T13792] Kernel panic - not syncing: Fatal exception [ 194.757891][T13792] Kernel Offset: disabled [ 194.759263][T13792] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:46:32 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854e2fb5 RDI=ffffffff9ae264a0 RBP=ffffffff9ae26460 RSP=ffffc900036d7130 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e69203a73706f4f R12=0000000000000000 R13=0000000000000020 R14=ffffffff9ae26460 R15=ffffffff854e2f50 RIP=ffffffff854e2fdf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fa3491706c0 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f56ea5edf98 CR3=00000000473d6000 CR4=00352ef0 DR0=0008000000002f1b DR1=0000200000000005 DR2=0000000100000081 DR3=0000000000000002 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56e9811a4a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56e9811a57 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56e9811a51 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56e9811a65 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56e9811aeb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56e9811bc9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56e9983488 00007f56e9983480 00007f56e9983478 00007f56e9983450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56ea4ed100 00007f56e9983440 00007f56e9983458 00007f56e99834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56e9983498 00007f56e9983490 00007f56e9983488 00007f56e9983480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000dead4ead RBX=ffff8880288585a0 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff8880288585a4 RBP=1ffff92000686edf RSP=ffffc900034376f0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff88805d129000 R13=1ffff92000686ef4 R14=ffffc90003437968 R15=ffff8880288585a0 RIP=ffffffff81987909 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ab2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f76b4ae7d60 CR3=000000002704c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f76b3f836a3 00007f76b3f836a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee62857d0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555581dbafe2 0000555581dbae00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555581dae719 0000555581dae680 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80030030656c6966 2f2e01ffffffffff ffffffef080a8003 0180040008000401 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010a800415800404 800403bfae080008 0172ea0000000000 0000000000000001 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff e70804b803010800 04b0030790080004 a003040800049803 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0280800800049003 04adf80800048803 0b80040a80040401 4b800030656c6966 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e01ffffffffff ffffffef080b8003 0030656c69662f2e 01ffffffffffffff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000003c9df RBX=0000000000000001 RCX=ffffffff81af5c51 RDX=ffff88802b5ca440 RSI=0000000000000000 RDI=0000000000000005 RBP=ffffc90003b37228 RSP=ffffc90003b37158 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88806a43ada0 R12=1ffff92000766e30 R13=0000000000000000 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff81bb4921 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f56ea60f6c0 ffffffff 00c00000 GS =0000 ffff8880d6bb2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa3485a6248 CR3=000000002a714000 CR4=00352ef0 DR0=0008000000002f1c DR1=0000200000000005 DR2=ffffffffffffff8c DR3=0000000000000007 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa348411a4a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa348411a57 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa348411a51 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa348411a65 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa348411aeb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa348411bc9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa348583488 00007fa348583480 00007fa348583478 00007fa348583450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3490ed100 00007fa348583440 00007fa348580004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa348583498 00007fa348583490 00007fa348583488 00007fa348583480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000012e114 RBX=0000000000000003 RCX=ffffffff8b72a419 RDX=ffffed100d4e65be RSI=ffffffff8bf463c0 RDI=ffffffff8191b751 RBP=ffffed1003bdd000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e65bd R10=ffff88806a732deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801dee8000 R14=ffffffff90864610 R15=0000000000000000 RIP=ffffffff8b728caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cb2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f56ea5eed58 CR3=000000002a714000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56e9811a4a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56e9811a57 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56e9811a51 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56e9811a65 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56e9811aeb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56e9811bc9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56ea4ed100 00007f56e9983440 00007f56e9980004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56e9983498 00007f56e9983490 00007f56e9983488 00007f56e9983480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000