last executing test programs: 1m12.578496709s ago: executing program 1 (id=1447): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x168, 0x10, 0x713, 0x70bd28, 0x0, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffd, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@multicast2, 0x4d5, 0x32}, @in=@initdev={0xac, 0x1e, 0x2, 0x0}, {0x2, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x1c00000000000, 0x0, 0xd}, {0x11df, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4}, 0x70bd29, 0x0, 0xa, 0x1}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x60, "00000000000000000000a1c31b3718243e97a18e6085921a4cf3f6e2bca135414f6bec0c"}}, @tfcpad={0x8, 0x16, 0x2b}]}, 0x168}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delneigh={0x30, 0x1a, 0x1, 0x9, 0x25dfdb7c, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r2, r0, &(0x7f0000002700)=0x1, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) pselect6(0x40, &(0x7f0000000040)={0x3, 0x10000, 0x3, 0x7, 0x4, 0x7ff, 0xf, 0xe11d}, 0x0, &(0x7f00000001c0)={0x8, 0x0, 0x1, 0x100000001, 0x5, 0x100000000, 0x4, 0x262}, 0x0, 0x0) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x2, 0xea5}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 1m11.738462714s ago: executing program 1 (id=1471): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfffe}, {0xfff1, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xe, 0xe5}}]}, 0x38}}, 0x20008154) r5 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000100081050000279f36b2c37277f40000fcdb2500000000006555c3d47b9021ad11", @ANYRES32=0x0, @ANYBLOB="f7d40400000000001400128009000100626f6e640000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x4042}, 0x0) 1m11.669189407s ago: executing program 1 (id=1472): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_complete(0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000080)=0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(r4, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x13}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, 0x0, 0x292}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000100)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m11.154883759s ago: executing program 1 (id=1488): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x801, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r2 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = getpgid(r2) setpgid(0x0, r3) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20c400, 0x11d) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f0000001080)) 1m11.088176256s ago: executing program 1 (id=1491): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002500)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000380)={0x5, 0x5, 0x5, 0x5}, 0x8) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r5, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00\x00\b'], 0x60}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) readv(r6, &(0x7f0000000140)=[{&(0x7f0000000080)=""/177, 0xb1}], 0x1) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000000514abbf3b287000fedbdf25080001"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r7) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0xffffff88, &(0x7f0000000580)={&(0x7f0000000480)={0x4c, r8, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r10, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r10, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8001, 0x2800, 0x6, 0x2, 0xba2, 0x18, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00012abd7000fedbdf256c000000080022010000050019010e00000008002700030000000800a10000000000000022013f00"/62], 0x44}, 0x1, 0x0, 0x0, 0x48005}, 0x40000d1) 1m10.838864564s ago: executing program 1 (id=1496): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0x18, 0xa, 0x1, "b75c89e7a20c8eac82ad0416bb1844038d2cd97c945462f31638b5394c00", 0x59455247}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x2, 0x3, 0x14, 0x3}, 0x8, 0x36d0, 0x8, 0x0, 0x0, 0x0, 0x0}) 1m10.803596766s ago: executing program 32 (id=1496): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0x18, 0xa, 0x1, "b75c89e7a20c8eac82ad0416bb1844038d2cd97c945462f31638b5394c00", 0x59455247}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x2, 0x3, 0x14, 0x3}, 0x8, 0x36d0, 0x8, 0x0, 0x0, 0x0, 0x0}) 22.197450329s ago: executing program 0 (id=2262): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) close(0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f000000c400)={0x2020}, 0x2020) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x7a000000}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x40d, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x41010}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fffffff}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 21.926464496s ago: executing program 4 (id=2268): chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00070c000000000000000002000000", @ANYRES32=r1, @ANYBLOB="020000000a000100aaaaaaaaaabb000008000f0001"], 0x30}, 0x1, 0x0, 0x0, 0x68eaadec908dc23b}, 0x20024090) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_kthread_work_queue_work\x00', r5}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) fanotify_mark(r3, 0x2d, 0x1001, r2, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00070c000000000000000002000000", @ANYRES32=r1, @ANYBLOB="020000000a000100aaaaaaaaaabb000008000f0001"], 0x30}, 0x1, 0x0, 0x0, 0x68eaadec908dc23b}, 0x20024090) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) (async) fanotify_init(0x200, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_kthread_work_queue_work\x00', r5}, 0x10) (async) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) (async) fanotify_mark(r3, 0x2d, 0x1001, r2, 0x0) (async) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) 21.925371941s ago: executing program 4 (id=2270): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x6}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) (async) setitimer(0x1, 0x0, 0x0) 20.775745464s ago: executing program 0 (id=2279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x6}, 0x8) listen(r3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="7000000002060503000000000000000000070000120003006269746d61703a69702c6d616300000005000400000000000900020073797a30000000a8240007800c00028008000140000008010c0001800800014000000006080006400000001005000500020000000500010006"], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 20.647032596s ago: executing program 0 (id=2280): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000001300), 0x2102, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x20004000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001400)={0x2, &(0x7f0000000280)=[{0x8, 0x3, 0x6, 0x3ff}, {0x8, 0x9, 0x9, 0x8}]}) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000001340)="8907040400b380da383846ecc3775e93a0d23978b300000000000000b4070085191eba69d719f1bffa1142e8793482e141428b22c974bb27cea5b845819bf924c4fce053e85817b616d94204bdc996fa40a9305f8b0c3735b17e61e96c113fe33f749e4e91a49c2ddc03c0dba8c36ebad696e33ec86b71383b27662dcfe0cdcae52300bd111394a49df234b595ba0000000000000000", 0xfffffecc) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0x4) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000001c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f0000000240)={0x28, 0x4, r7, 0x0, &(0x7f0000000200)}) 20.398900497s ago: executing program 3 (id=2282): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_open_dev$video(0x0, 0x7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r4 = fsmount(r2, 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000000c0)={0x3, 0x8, [0x9, 0x0, 0x0, 0x3], &(0x7f0000000000)=[0x0]}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r4, 0x3, 0x0, @val=@perf_event={0x1}}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r4, 0x7af, &(0x7f0000000100)={@my=0x0, 0x5aff}) sendto$inet6(r0, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x2, @empty}, 0x1c) 20.393620691s ago: executing program 3 (id=2284): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x38}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x40, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 20.265764568s ago: executing program 3 (id=2285): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000080)) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{}, "fdc66756925aaa67", "fe8b3974eea368ef408f383529f5050c", "ec6b795b", "9d5543619c69c4c9"}, 0x28) sendmsg$NFT_MSG_GETTABLE(r2, 0x0, 0x4000000) socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) 20.264190989s ago: executing program 4 (id=2286): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@newlink={0x64, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0xfff}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x400}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0xcbd}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$sock(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000400)="a3f705e21de52d4492f6b1e800a56a0e0108c8191463a4d893a82a7802ffa540d4fefe9a3fe31e9c0db762de03ee9a72d062df19f035da737b35467af0194a6b96656e47c8be4c4d3ae265020ce65a90a01ef1485164b0567d3df8979b095a3c94e35cad3b9419c851ef5ff177d74f2bc12af0400cc3c13a58bb6ce273c53c842dcf2098feb29e2047f693a8a1c7c2f969f5918f31e183519270c9dfc4693d44e0a59b186738", 0xa6}, {&(0x7f0000000800)="be022afb12c42ce54dc7dce527758e16bc60b65d4d78dcc70f06036ab985e20e7d0a138593b8df3941a785580236a0f8d15b65d64b8b3e6d48a9b7ae2187703d1d7c7f5b24610f9eb04a3a04949eb2d178435434f893fc264836c1e30966c381f3e9a367580a82d398fe893eed81541bb656e7860ce15322ea23f4bda10e1ddbf2f91f06dfb8f99bc5952724758ddce93b2e99ca46100c5bd02f8e3ef4b5546482d1c46fe3bf43967205d08a6389b437e859fb9957f64bdde395fe3ccd772e221c4052568ed39dc7e6ce4d0a44c818e5f4f6", 0xd2}, {&(0x7f0000000680)="cd8f2c067d3102e1158b65a8001324585c53759ea5bcc0ece629f84e72bd1b9786b58ab9a56d5e9499703c5a834ca2e09230b6ed6b5f56d004d48e554545033a4d5bc922fd10d511c231aae56fdfad636bd4fac5247b3550b053f2b51408d39ce1e54839ee38609868766e3c32acfe7ab43e854363ca5ddccdc5ea061c9b1406d9ee912248d96c0758c713c4ff568a156a5caa82ea31143a97f7adfcd82b98c76bbc210b97c5edb5129d9da1fa817cf67bb999f266b2d8e1a99f25bf000000", 0xbf}], 0x3}, 0x44000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd30, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff1, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3400489c) 19.407879639s ago: executing program 3 (id=2294): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x212) r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0xe98, 0x300}) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60840, 0x8) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000d59000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000a91000/0x1000)=nil) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000885000/0x1000)=nil, 0x1000}}) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000300", @ANYRES16=r4, @ANYBLOB="01072bbd7000ffffffff41000000"], 0x14}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x0) 18.827885001s ago: executing program 4 (id=2297): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x80000, 0x8) read$char_usb(r4, &(0x7f0000000040)=""/169, 0xa9) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r10], 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) pread64(r7, &(0x7f00000013c0)=""/15, 0xf, 0x404) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x140, 0x28, 0xd27, 0x100c001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffff, 0x7}, {}, {0xf, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x110, 0x2, [@TCA_CGROUP_ACT={0x10c, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0x4, 0x8, {0x2, 0x2}}}}, @m_vlan={0xd8, 0x3, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xfba}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x99, 0x6, "de82989b62b90394b078f92af56b2544cc8979ce55dcbf581fae3a1376b9baf864e6c84afb3c4eb99a18e843b25c45b1cfc7ceaafe8a832de696b4c43328c28e20df484f0faf3bf67c12715c80b218c03c7757e320c4d742354b10d593ec365e75d374279da786aa9ef233a28be1b5471008caf08e0b86ba9fd6e0d37cff2aa7ec5cafbfd11ec2c542adcf959bbbe711a8b6dc5c32"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0x1}}}, 0x24}}, 0x10) 18.699047779s ago: executing program 4 (id=2298): add_key$user(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x69) r0 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000000200), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)="96e501ca6a992bd40cb0670e27a5590bff7f864b9919df7dea244379e2ee65aea41cce694e042c2d3161683e9d69f873e684153c6a7a65aca858bdf5f48413e1d8c9be0f63864c0ce77ebfcfc7ab692909a91ec1d3b8f64d4cd9d75e1c2a4a4529eeaddabad0edcb6472d737fae846f53262c9b5981c928a8ab01214bcbd57c44c2013ee9d4b5d4912fe37e6e88f2407e485b8703bd710be2f85661b9c2e461ebc112eda9de08f580a0441ab83f16a604c2fe278597bbd6bb304d982c305f3464bf9d2ed77ec01f5af301d19ac2c116dacab75c0daee267d7f1057d6228e046b000fb03083e76f536af514841fd26ad894", 0xf1, r0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000040000900ff7698ecd2a6ce22e6fdb31136fffffffddbdf250300000004000bc00800018004009e00"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2001000012001307"], 0x120}}, 0x0) recvmmsg(r3, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback, 0x20, 0x1, 0x7fffffff, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0}, 0x79) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@netkit={@void, @value=r4, @void, @void, r5}}, 0x1c) 18.523869832s ago: executing program 4 (id=2299): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd23, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xb}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "4c3aaadb1d8c61fa0403aee537da3dc2"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x20000884) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0xf5, 0xc66701) r8 = dup(r7) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x8, 0x7, 0x7, 0x8, 0x4, 0x2}) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}}, 0x80) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="00008b1500", @ANYRES32=r11, @ANYBLOB="000a00000021010024001280110001006272696467655f736c617665000000000c0005800500190002000000"], 0x44}}, 0x0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r12 = syz_io_uring_setup(0x7a61, &(0x7f0000000100)={0x0, 0x53, 0x10100, 0x0, 0x2b5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r13, r14, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r12, 0x708, 0x41e3, 0xc, 0x0, 0x0) r15 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r15, 0x2) r16 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r16, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 18.523059961s ago: executing program 3 (id=2300): r0 = syz_clone(0x400, &(0x7f0000000000)="6eb53fc063e554d00a7e99a4b51e1290b58f73d8926438678f9a96f7d19c845875b16f1e8defcb1554", 0x29, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="517ac70b989216fc7cfcf2a26b325f65c9ae6760e7414eb1b29c70dbefa269150303e7ded3d46f1d2a24349fa412577c27ff6820ee808a06727e03fa4391f19becab0987264777bdabf32cf5b39440ed0d4aa84ce1d1ee1eb22ef69a499034cc1ed3b9470150b844fede2dfee6468693bba9031350c02c8ba6c510a77debb08c67bbd865d5e9d695995febaeb9f6ebf6227421da6eb74d787c43c473f2502050917115b6624b627d4ce39d291d7e3a471a058729a1050658630e5520bc6da6dec883ecec7410f2574722bb246ec263f772522b09200d2a0b1593549671b200102a91a0cc6a60e9f1902d") ptrace$getregs(0xc, r0, 0x1ff, &(0x7f00000001c0)=""/29) r1 = socket$inet_icmp(0x2, 0x2, 0x1) fcntl$lock(r1, 0x25, &(0x7f0000000200)={0x2, 0x3, 0x3, 0x6}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000240), 0x101041) rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000280)={0x34, 0x3}) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x2, 0x18}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001380)={r2, &(0x7f0000000340)="a2ef71b26ad022391becba2faa3e2a70d1fc6472cc6590cb34405a04a3ffed68130bd25e72e39fa0110f7491b0ae63e99f94c696ece260ab0aef777c0f2be74e4f524b59f96f2adbd286e64dad38dba1eaf57fc3c6f452c2ef01db51beba618c39c3dff3d01b5e56e86f2906810c1a3fb1cf17adfe4f930df18c366671d95cbc2823118fcded00b04c82c54b3d3431f991b676f0d0301e0178137ce8501b55e1b584f9a7807999289cd373a807172d714b9adb622b084403f654daefc7df9d75c1783be38992616263481b23330b5ad3552f9f7feac9d81139aa79b4ce39421bc412ada231869a97a1039900dac86d44eb0798396058c1c447df528a9c64ae16b436d31ea4259591443d8d1a8eafeccc7ea5d750863e4040633f215ad4bd95a798d16485604def963db344554834f18854bf145985ba5a5c4b053c694444ee51f7e93c1377bdd17f5e38e512c5a05fb36c220c925b4a286fd9b1b4e434f3bf6e5c94f993148721dd68b51182ceaa6bedf4f49b44c8baf1f3f0485bd7c077f7106125f0f21cb69d0c8a3450aa59c2f9ac4e9a39c8f119507efd2f20ee69bc6f7913963d9f92d637776586699ca5bec134aa3870e61c916bf070bf8e9716ca7b24e39ec5e58338324f1889a8706079e0aea05318084eea7c52f2918f554de808041eb6b3bd019d96b1d39ea60a97a1f4171aa5ca8d904ef6f62a384900fd270d8afda10bc75a33a024a51d2b86564eaa36e18b96f7cac7c879c713a08ef6c95f664deb00eb98259f5855dfa7cb015989d5b8b5ab756e88d065407277b8e1a1cd7e5a8287da044d853dbd33366eb9f52f76bcb6a6205a574f719c9dd8f2947c1b02a3ded576637e83435c94e15e235e63916bc107c5f8a452561ec3bab482bc127ff9c6530e28685a030365d90b86236196a428bcdcd47d61a8fb02b05fd5401049ff9af433381cf42204e37dcd27445d5a6e935a0494e498277840d82756064bfaf78a2b41017ae8545f9ac610a3310a2df3fb4cc435174623db4ff01a49bd3608d2b1e2e6f54f9ac8d5b7ddcc8a7fe29aba94a683ee209e0ec54f86f725ed83a99c134d4b07297792c99de050182a985925d90436cf9e3796787f0cf265f3c46cae1c6f208a2b292cc2e236d39a519db495ec6aeab57136d803ce93750444754de76658dcfb081f7269d97351814fe6b985f3bce732c612cd1c10bdd3d2680ce3ad90d54b45efe894ae2ab867a1814899a87b2e5bb4a3bee7837deeb51bb906fb62cf466812e73b8f09631802e97444673e0e20d8c982c5a50840cf1e4f7574587fe13c339aa6fcc0e1e11476ff35f47d6b0b2c4f7d618cced3b8c8b1c0e6b2baee68266f8cb5c200dc8ac3a7d1c1f43fef93cff4fbf36ed99cba7286879b416c53e3ed697ad323d1582bf949dc436a85a30b7ad4ff46cd98f8f5a64688f9f9f631f8343959259704952eeb2bb5e7212de20df969dc731ae7525835f71b944f7bf8eabe876f01ee502021ef6d6b45a164bfc725bd0a067e1bbe513884bca255bb6b49a96c884c220a76a9d92a17f95c8ff3b2f4e92bf1ff49aab2da70798edae35a90ba171bd3eab7ea479614227d9eed6f44889f130e69afa74eb9af3001e89584a867c78153fc13c62b49f00fa58fbeb10d44b5f0e34c7b01811bfaa4b6f29feac5e824264ebf82d93fae88147eeb310f2601968ae918995db9d4a9f21a37985b40818fcd01a5e862b517eb1024771d7cf62d1f14de0be1c4963f4663e340ed0642a2f75c56f7723e76c5f8aae932e6940fc0c2e6dc7b1ed3088bcf89ed8c691f973fb3f1f468d27c75c3cd8ae65368898cfcc81df24d10446e55423101e219b80e4efbe4c5c779811868d92825c1427644aff49eb625caa0103b392aa24e7316a2ae1b0ca5ce53d39b1ec2049e3d105011cc978c265ae859fca0fe179aa3f8a240fdfb13a284c9e78b03f29b11e8ffbd5fc78ab652696336f739fc07e6e94d0ade6412ca3c3a2b91de225301cdb67d82ef931c39b82bffe25aa14e3484f376240aea40bd1055b65475d39c498a6f7892a7ad1aea381cdc92961281f1216299c2e4724785727ec6c31620762a3ab4df138a9c35338ce92865506a33a51620daedc35e40064f6e1544dc9828baa84b7ffc261b6b7a22fbffb20d95156d1f42b1c7d0425a68e39c5c00e77e8b047e6af8744ce7bd147dc33c8a442783b33da042d0b0fb897ee0f32a9a081526032641d1ac87024aee539e6334f39ef0746991142664ae29c7c2877df59a5a187d9427f27f9177ae61d93ec74879e1a6bcfd946e08844b26bd242af016452755e638c885059caada6e2d8ad6211c821e86ea8ce0ea7ce6378ba4a38a842564a541a94ba9142f9b6f194958f87dca63def6578921c62b5b1b695cc2a2a8bb84b8479114e62918f31631bc5900682ee54c2b246eca084cbec8edd4ef062329aa34ff900fd1dd4a838555ee2225157dc6517712d038887b521d89309fb054af4079d934d4d2e832784f2353ca709660d73cdeac473545e44a41ba3aa4d43f6096aa94595151d8c967cd44807dfa15d49071a63c16c639f5dcb5bfb96525f1a23037a82b5a1c39fecf0f678ac2b7c0d94e790a441447144e7e5fa0e5c5dcdafaec48d9a64f2623e726940542e15a868169e30509fd478abe4468a2c9abba3d0b476b8c10661efa054d69190a346f5f6b875957c851809354978e9f35a70bee8af5aa43482c0324997085edb16e439bc05e8f47901c624cc34ba815e79c2c949b8c677d3367d93393c3e842c3441b9e49ba9b53ea89b627271306b9b686418c6b21805d13232b29d0d6751b573825fe5d25b21be9dd1ab0425d4ec2901ab40437d0c81e2d9052271b988bd5b530810af5fd75feccabf9dcd272365f79091fe56afd21c74e24d9dcf2ff357ad616376b51e287cbf6f213354b11ec40c2474111364abbac5a1c2a51d52b1041a8e2cb765cd6d54ec80548e0973ed65fd5a006945901092155c4106d30b9f9819ce577ea6f0f5a671b5817f666418f78a29fe142050d6e626f027293717b59e5650636fe648ffba92d5336cff58ecc490c34ce7774918b7f989afe08969e86e23e99dbff8d7a6a14d55d5367d2c23748742f64ddf5d8dc246f829cf4c371ac8253afe5a67542486511a16f5e7eba810c6db45a60c69fa0d41c708f53d1018233438ca85d0e8aa86aeaf30da710076219bfe2bc4b6302665b6792f24a4cb276971a89987e6716c61fa84e577e833701e79857d93c8ead440612b3d411cfe9a4f3b97a724ecab6284535192d269bbbed0a69dd3a601686e118dbc8d05eb9d066db62e85cbed787c1cd7d93a4a5a3f3b540e159367ab7d5af09239bee7b58e7612a2a4536676b96e0b6698a09f4b8727333267124d88119a3b3b86c31e15d33860ff59cb5b5d277b3aa78363b686f273b124a8bf8d92f9c3826034a8c349f05f6560bc3f5a8c6ee9bcf93dfaf4c87f53e6ba71b73d5ecd5541063fb813a8d67c87a29cfb6e647d9dee522b60c5a382b13762d0eecf1ede1ce59cb309b75abe7d38c41dc13c5e820f669269d03e3ea60a1b7da4f7b3252b8cdf097ed18a61796f51488027e7daaf24af778cadeb595f4c75e34461d330bcf93fa868182ea426c79c52cb4f622f72a012f90c9dafb25d6a25a79fa06dd6f4b143c686043fefd10d744428fdb9785c9a1caf5f57812bc0793f7f617ec948e9fa6ef5ecfbbc03d2fc96a7163632c782dd47bb41c78c0ed8e47db34492ba1648d5d2fdb4367fcf3edec4a4a5ddc76ba09e599a6cca27cf24a73495736adebff8d230ec6a38711937f69e3f5160254af05ea012c4c2a23737664cbf612584fa9cf10f194a34cdf068077da511f05e3e4463d6f697bf2e77c1de06a1a0a11bbf3b53b4ee894497dd69211797c640c5081e88afcac02ff91037831dfc10f54885773a08e0424a599827043df51b64f08adbdcca34dea54eb694fde6a43ede073558616b97914bea12641761b0d19ed93755334a59bf6df00a5c378e7798615bdc197ff1d9f201cacfda809e5e62157146717b6fe2f75085406602a9627ffda3f99ec24095de83fc5c4329fad808e9554aa55bf4e3eb54e3ff73f1661c24aa0f2dabc33e62e892e48aa92810055a697f5578dd29349096902b8e0f7552784bef3fc9c21c062762b5b4d5826d631b4f58572c15ba0a16b492a0449c04a3d2c91b92a5e0e0d9c1ac7830bd5a08e112d7ac3e68a86797c9d9805517ab49d4c76f787fc88faf6dc9a5c501b022dd607cfbfe432a660b48423fcb9a511a55c05753d3cedb90f8e4738379f97f9ce3da3b7b81b76f342336eb3712c8fc1dceafac58c3bde01cd309ecf25e25232ca0739f9d4284d336b3970856ff7cd3ab7a429fa0ada7544ad00d5376c8be77850bac38d4cfdddb70025baa303070d9e5fe4346253aacd35084eeb481b1febfb74b299a57c8431e3e39cd33c9dd4b98c91d3f49ec2a0233e4f45cfc0a091ab71044215b86c971ddbecc4af0884541e4cecfbfb5b8406416bc93af48c0767128f253ae5031b44bc9e6717b5db89e762e0501ced1e48832418b1b9705d2b865aceb331aea05809e6fed9c32a14dbb51152b0d5d83ccede5044b961bce39a8cf23ec4fffb29ecb290e222a1c37e174e9b8f4b840db4babf7156b526570b3490390ef59a7207c9ed41d7ba3cdb715caa15fbc5c550fb0661eb87e4d7d7bb9378ad079c2d0a00a870821c7137ac91b6a100339de4124bb5c7dd888254cdb9034589deb43409364b8cc3ff415902d5c86f03195811ca1816a4707d46054a5f3d8678507eb19b836a01679ad856394033856fc965b8a07a19d20a489d5db191dec41530a79fede13238f457e3eb3cafc0455424587ec92a762e2f1cf98ce4ccb582fc2832d31c5370eb1ef76af9b0fce10dc73c254d39bf42b530e1a7c4fff4a04d19018ed1ab8272f3d9e466ef6ebe9c23c67030757c4e9332c61ae4084d595c85479353067b6f32266b23d7026a26e6526dea94ec83b91ce84fb2a28417eed964a7c1657d3802392d81ccf65692a03639d9fa5933c703c1f34b50e55756a2f56780b68ad7f2cabfecec7100607570c0e4f261a4e8a40287a5f87d134dd208e1d2a42d09a4b3d12fe76e3d3c0677ca73a8572e3abaa947723845d28e88913a756069d256fbc882338d97b3b1b4b8bc8ccd47543b797627bf490235ca77255e2386b739d19fb274a2660676810de22088abfecdd5d199f8bca77ca158b922a83ba8bea5de1c0b152753e52f42b32fe8d3c2215c0d663570fd3d2126455541cc1ccc093cefbef2b5437499147e7a009cc85ad9abd5826f6e239631282936b00e4f4795cab3462ee8e6b00eb2de9411d1ad7bd2338f4e62ff767492345dcb8f718ef8e1932479ef9ffdd986b6c9575fa1d53b45f7de539c81865e45328667b3be2790088d2b07d41f0ca8f22514106c325707ba318b6314c1a81030a5d2bd440ffcb223b761a01190b418871b1ed6cbe9567c61efb117586e91a13e23649412ac5aadb74dc9acc17234b40fff0e69faede58a5b2f97a6f7cfe41e147c8a896f4b3439d4e382457a1f984165736c7608dcff23b9541ee3eb673b7fef88ca4fc7e666118ab301de08e4847fa6befa5a8feb183fc216b6a83522b998d12c358c136d6e4b129f0da8eaa07165d7fa7d7e9674518b966ef48f390c874ebc36712f0cde60de8a814ac264a1a617ee151366e67154a46bee487d70a41715cd073fc361c654aaa30406aca1d2eb956bfc2d0dc7707f", &(0x7f0000001340)=""/7}, 0x20) r3 = syz_open_dev$MSR(&(0x7f00000013c0), 0x8000000000000000, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001400), 0x40, 0x0) pidfd_send_signal(r4, 0x8, &(0x7f0000001440)={0x2a, 0x3ff, 0x80}, 0x0) r5 = syz_open_procfs(r0, &(0x7f00000014c0)='net/ip_vs_stats_percpu\x00') rt_tgsigqueueinfo(r0, r0, 0x3, &(0x7f0000001500)={0x3d, 0x7, 0x7ff}) pidfd_send_signal(r5, 0x9, &(0x7f0000001580)={0x7, 0x2, 0x5}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001680)={'syztnl1\x00', &(0x7f0000001600)={'ip6tnl0\x00', 0x0, 0x2f, 0xee, 0x7, 0xab26, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x7800, 0x2, 0x7}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001700)={r5, r6, 0x25, 0x1, @val=@kprobe_multi=@addrs={0x0, 0x3, 0x0, &(0x7f00000016c0)=[0x3, 0xfffffffffffffc00, 0x0], 0x6}}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000001780)={{0x4, 0x6, 0xb818, 0xb52, 'syz0\x00', 0x80000000}, 0x6, 0x10000000, 0xf, r0, 0x1, 0x5, 'syz0\x00', &(0x7f0000001740)=['net/ip_vs_stats_percpu\x00'], 0x17}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001900), r5) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001940)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000001c00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001980)={0x210, r7, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001c80)=@raw={'raw\x00', 0x9, 0x3, 0x1e0, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x148, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x3, &(0x7f0000001c40), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x43}, @loopback, 0xff, 0xff, 'syzkaller1\x00', 'wlan0\x00', {}, {0xff}, 0x1d, 0x2, 0x8}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@remote, @broadcast, 0xff000000, 0xff000000, 'bond_slave_1\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x73, 0x1, 0x41}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001ec0), 0x193000, 0x0) r9 = signalfd4(r3, &(0x7f0000001f00)={[0x1ff]}, 0x8, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000001f40)={0x0, 0x1000, "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"}, &(0x7f0000002f80)=0x1008) setsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000002fc0)={r10, 0x8, 0x3, 0x9}, 0x10) socket$netlink(0x10, 0x3, 0x8) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000003000)={0x0, 0x5, 0x4, 0x9}, &(0x7f0000003040)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000003080)={r12, @in6={{0xa, 0x4e20, 0x10001, @dev={0xfe, 0x80, '\x00', 0x40}, 0x3}}, 0x4, 0x535c, 0x3, 0x8, 0x55, 0x8, 0x1}, &(0x7f0000003140)=0x9c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008c00)=[{{&(0x7f00000031c0)={0xa, 0x4e23, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000001}, 0x1c, &(0x7f0000004300)=[{&(0x7f0000003200)="52e8528483acb3d9d22b8adb65c680883a285ba6a491befd3c6785cdfc2e83a0dcc7ad57265a8647c7023401996af37559b0dcf838a44b33366b87a4331f9c9951ccfabe61f9d26c1645e13b50a0b13d4e6db3a48b7f1d77848196dd7f9f6958c64c83142d2378590208f3bfbaf645e4d268a640035c5d17ab46285c812b951157869a81e411dea9a60ecf78ff5c98b64f57f782b1724e8a108f27fcf6fca134d153792b22a3816c280e22aaebc3d42eae69764cc69c1252d2b156179290a8b9b828d36cf6cc5a48c1fea32f46694db34d36993003e9f05a6bf271e334ce8864d0", 0xe1}, {&(0x7f0000003300)="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", 0x1000}], 0x2, &(0x7f0000004340)=[@hopopts_2292={{0x38, 0x29, 0x36, {0x21, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0xfb}, @calipso={0x7, 0x18, {0x3, 0x4, 0xb1, 0x6, [0xd5, 0x0]}}, @enc_lim={0x4, 0x1, 0xb}]}}}, @dstopts={{0xf8, 0x29, 0x37, {0x87, 0x1b, '\x00', [@generic={0x1, 0xdc, "bd3e82136444aed949b011e67ba4ab3cff5a0832d9f223d0f984e337ddfc45e58628473b7dbbf02c5fd7cf29b0125da484e4a3bafb2d9f384f0ff9707284f942517507d233d1294f36bdb23fd5b3f583f3de0bc8bd6f90e813a27e8c3a09ef425c34e1fabc4932e7ba9202714b787a030e98d21bc05a43a7a4258ad3020e681265c5e83d5b271f2cf7668efc99450e5ed7cfab3f839732e0100fcc9ba799cb9f879bb331d422cfcdb00975f922923bfefbf9fb78525549c25f49726f1bed7e9cbd5dc848d65878435fc0b6d95fa105103fa1a2bd114432be731d7874"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}], 0x148}}, {{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f00000044c0)="7f10afc7fad31a20a111769f8e50c641c146c4f3fb6ef3c3f9dc0025070134e5ea8250f3f991907c79b20e6368f24046ceed56b6ff1a19289b945325aa890cc44ac5b38b94f8afdbbfc405f00fd5b3412a7b4f96327c7e9dbeafa6a1f718c9edd74d3f35f29fbae4b4ed25b700014848da4b643d69b49922eb47e8f2e0729700fa4e4d3845f874250e2d0d8e3aa46ad5dce4dea6834d56f28d06f8dc0b8419c1e110c465d59e1e7cb52b22e1d0f107eb39b0db5c728dbaa79553a6a47599d4574ab2edce6e13084c469c963a07ab0c302dfa155a2f5d3c563e7f6ece1987124e5a64b700b6b9d221445aab06b41b9f7a0a59d7c63210", 0xf6}, {&(0x7f00000045c0)="e0f7086ab98eaf9153c6902340d4", 0xe}, {&(0x7f0000004600)="e3d90bbe8a7296141a", 0x9}, {&(0x7f0000004640)="f42f38b6dd0079e7f27eac8bd65441c987cbc79e413f6b469f25bf9c41682751e3113a606db86007efd49fbec657e8a6ec7fc3046e12c640e3ede28a32d3aaee05e4df47882d68193e1922305f674a1a308ff263867f465be4897f5883d67a6d4697a1f36f381c45af22918a5c4ab80d5fd52146501bccd29567f97f318516423d5aab3774490cf6959635b3b3085696abfb7671a9b3d739235110f10a35d75a9761cd2b33f515a21b5621f7621a3226833e9a745f6e61e429bc6aec30790877034ba87a", 0xc4}, {&(0x7f0000004740)="50ddf4ebbffd86a5a8d83f64d6528a8e73cab9f280ee8b02c522e5860a43e862dc3bcc7271e8d35f781e0967de8b378b02ec6fbfa0206237bc0c737122bd15ae2e8d57229f8a14c348fff22a31b15653cf31b5def5fd466f2e47238925668915c3bee2857f521ac7c856f351db032bc9a539ae48bc363a1a05a8f59c5703ad050e3762fd91512da7c40ea6f555e7177e2f5a0060e7235bd63ddd296cf3888e817a40ce0ccf4c7c670ae9bf49af56d82b5c8c7e0fe7415c65d236fa69756bfba5d997df2cad0ac67ec51dfd1fb128841ec037bf12854ae685d43369ab1d12a0cca026fb9f4f26fdd4923e4c4ff3e234f65deaf5a28635cb", 0xf7}, {&(0x7f0000004840)="6e8683663fe0f9e5240bb82575727d9d1178b609b9346126b9d8ca6580d4fc9a65455db25d0ea834accab7e5c4292141d810a9eb13da69c7747c4dce5a611a1fb45d0e8300d05f5a", 0x48}], 0x6}}, {{&(0x7f0000004940)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0xac31}, 0x1c, &(0x7f0000005bc0)=[{&(0x7f0000004980)="8c7e342c1ba5b53ec93b5d46852b725965d349e46ee45854cb010e4c597befef2ffe7f310f6b8f80cd77183107f19bf3475cd35661ff71ae068b373b64255d08a5c7ae32f4d420a0006b4d3873ce4a", 0x4f}, {&(0x7f0000004a00)="b767b7df1b302b3cd63f29025251f9ffd887323b88c779695f81b4b483a9fc44", 0x20}, {&(0x7f0000004a40)="9d5dda5aef71ec9400b56426cd319c59fcb02aa6542326a16a1b29e040be2cfe79a5807b7fffd1edd92ea06ab4d69f33127560dfa33c3e3bb7afd74948edff16afcaf85b6d8cd2bb167ff711d7ef11899631f9459dd5ecbd1ec1830f03449e00b5f5c0e96cdf680081e559ba28bc7ce5e5fa1cc52252277706788bb1cc8f9754159eaf4a7a4fbe9f624a3f0314c4238e", 0x90}, {&(0x7f0000004b00)="100c0821f9782227d697c11c8ef7e081b03b2330a5fd497bc1445f806f71d0", 0x1f}, {&(0x7f0000004b40)="2270831687626052bc95df3df8e7a26d012df54ff18d1e780e2aa93030268cfb887dab936d8092ca2e3848b892022580bd68003b253e6e0024e2315c18c978e77211592faa47ee5103868d4072ebc50bbb8d2979c3299f512bbf5dbff75e3a4113cdc2d2deded11956c01e", 0x6b}, {&(0x7f0000004bc0)="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", 0x1000}], 0x6, &(0x7f0000005c40)=[@rthdr={{0x58, 0x29, 0x39, {0xc, 0x8, 0x2, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private1, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x2c, 0xa, 0x0, 0xb, 0x0, [@mcast1, @private1, @local, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}]}}}, @hopopts={{0x68, 0x29, 0x36, {0x33, 0x9, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xe533}, @calipso={0x7, 0x38, {0x7c71ab445cf8948e, 0xc, 0x4, 0xfff9, [0x4, 0x7ff, 0x5, 0x2, 0xfffffffffa2153df, 0x101]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @hopopts_2292={{0x110, 0x29, 0x36, {0x1d, 0x1e, '\x00', [@generic={0x9, 0xa1, "0380c780b72ba1cbb75827302e76fbf54a15e17e8cd6fc2dbc1d795ed46c5efd5b0ec5d6fcfe06031c5532ab19515089d915b8405a14390e6125b165171eb9190e7689de5831a67a323182444113bd6c400aff45e35def105d84adae6e2f6e9b1fa754522c8405a8145c95e7fd05b445b78fde715ed334f52e46ef427265510ffc655f784c08749cca4ce9c38b8f838bbc3639d71a14264cbf368273a71f6c338f"}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x8c}, @ra={0x5, 0x2, 0xc}, @pad1, @calipso={0x7, 0x18, {0x1, 0x4, 0xb5, 0x5, [0x6, 0x800]}}, @pad1, @pad1, @hao={0xc9, 0x10, @mcast1}]}}}], 0x268}}, {{&(0x7f0000005ec0)={0xa, 0x4e22, 0x8, @local, 0x3}, 0x1c, &(0x7f0000008200)=[{&(0x7f0000005f00)="f29ed40612ebfa37193b613984dbc097c6d3cdbb8ce061f379896f879c1a24a354940d02648597535bcb5075", 0x2c}, {&(0x7f0000005f40)="5172096937a586127c9972bba17d9d24454c3d6a01bb8735fe671939982e82a645eef348cf6cf8a27d89069564ca32a435d0388c160dc382488813428d891cb265372c2a9e", 0x45}, {&(0x7f0000005fc0)="d31001b12bdb450bf512208857f69917a7db02d127d5f15b75d4659a912b8df6dcdfedcc8713bb632af3da031c276de52fd33c791e6a6d27ce0f740a5245c62a43365b6fce4ed9965c010dcc0c6c5d9ffd73b2662af8d4176486e19d5cf65a7b6cffeb0714d6c7d6a39c55221c5a72da0f27cfb1bcafb187a54498836a38edf0c34f267287b8637728ec603e3c238e0fda7e701de4d626ff9b7bb05a1fa7d0d363724c82a0a44e951479444eb9f69c37f74ecef8d5fe591768a85cc351a5fecd12b3bcb52f2aaff87b42966f7177747ca6e31c3f784b38276e6f79372426e37afcc083daf8e5c0bbe79ddc12bc9afbfa56a648ae3a4c36ce3b456cd98f96d54339742adff9e6b04ce1db322174b36a5e42aa0c2e6e4955a3e061701ee465bb6f13a5e106ed7c089d75c725ef74a7e3ce51f119fb2dadc5217b49acf31192b04b3d607ab6ac4fecb268e1cce14b5d440c0ea0256bcd52fc87048b70a9ecb4c0afcb81785a7b878dbc156a3b2655ecd4cbda4034e0365bc50a4809ee641f82b9eb27189b6b7b0899751334c72340a171c50ad8767231bd3bd71e485993ce436066ce93186b2bbc197d8e765877c9432dfa5d58fef70d8aa463e550a2fd74252f62f3b81599a9a3349699eb5a561c9f75b54a667b6bcab8cbd52cfd2958827259b288e437cb78e85265190d447f4910211b933721bc5ed3a55881bb6b979e9dfcef73e016cf4a5471d923d0536f3d142e289f04c49fd41b2b01beea4569c7fbc5e7f7b466adab0b6e9bf01ecb72da6b9ab9d72dde7a346f224d8c690ff55b6c4a615857877ec66051faf1b3d5c200d514f9d450a2083fc80252e9950c6b6a2a14181c0f525147125ef1992514c79f85cb678ace53a0306de303907b05cd52e2e2b1abc70cbbf4f1bff0fd230c0a8c8c67e9bf6391b9d5e8306784873f1a6906cbb5fb654744c10b5397d82c1466ff2be25eda81fa436400d47d036f14b56d23bf9af9486013cdd46148003b73bf57e7003e89c36ad1495a2ad9db316ec58e0a8f390571d802242e30f3c28c3c667c10813430f9011ca19ee8eee0c968632719e4848ddfbac260ac68bad1c609248e3bd5f33e41d8eccea46bda827f93a4143be240dc5bb9f3ca8413a644555ab6e13b786ccb14f4def9e433dd0a6a55f099bde597795a07d65ff52b0aea687ccc8f5666a008a005c1cbfc2f8c3f5e8d6558d5194e6dfe309ceeef15e32d1bb7811ed48857c3293ec09b9db63f520a43f82d5af5df0d6cd5401c380b59cab56a797436b133a2c4c23a68b9123a39a9161e9d3dd8a5493a1a3d09c29a984851688a78ae12da5621d11497bd92582349d5001bc0daaee052db76cbf1bceae83e9669a142ee99da2e29966f93deaa51eea0924111d32856252ee5dae2d03d0ea255af6600cf99117be40ac060054f3c1b200aa9dc7750c749642dd9bb1b7665394131a6541341dc8cd6c74c04104e0b73c47d4abd9dc9ac53db818f023b05c5ddd6b0438af12da757c784ac965a40a36daddc283bee005102df6cc74c494ceb4ee99f01bad978ce9b1766aa054dacc555001a698b46da811e7050163cd6525d93cdcb7a87feb953329e04b719f1d3ce73857f7ce4bb800c29d7e9cc0a38a65d1e7c1e63c714cc0cece709b03f8697c2daaac5e5be97098b2943889ab9b304ee0f6b17f3b237acf6ec4259060c14832e55bdd3b58cc62feaa8731927f6ae2b7d38117586e627657d33f30ce3aef44d66ed0be84c84f39a60e7e91d882e83dbcd5df82c1fa8fa928ce8df04ce0a4955c54ebdbeb532b6cbff59bfa51513f8de7c508220368c3b51d1c28dc82eae391fe67aeeae5566ee0d8a3c9fa49bad4d10897e321c654bfc278c162525dcbadc163634a264bad2c3f79e7f5aebb2dd8a1dcde0d32aecaa6f1ff9531f810baf3b2a1653b111b8e53e6657895d771213c01f73ce7a8e563e7f841b590a3ef4811659d2f037e2075cc8db140c266889cbc03629282966baf45186950008d0ceffe74311b30e16db495e8d2714c347ffdb4a71ff3ea63a1c4c5fa0aa91ea0e85ca46f3637b74c4ed0d00a4ab268930491bef429fe5d6dca73ee38a5828690eb6dd350136c1303ed07bc535d252741045ee07bf03d067801efdb8955e232152d79b69bd84e47c956af74d44cca626e9c768a392a62ed8356cc80d0cecd06e5762a76c1b2752519de0103b1ba4ad3958baea99215e7de490f044ffc93bb3d30e377a579efe2a10732e3873524cbbfcff07acf8eab98be409658a6cd572828a1a4bb72dc638edea7d0763fa37695e80f83c2725a06357855865cc271af22e50a97c2362cc93384cc54cf4072bd7f7db9a402f87dc36a8a07b6cf8896f32db91d2ffe30c64a4d70452a2a9f5a289746dcf1d184bd291fa520fd0b5c12d293e7a6d4d4c880fc7ff5910c66226e0bf1ae1014a5c1ca3873047ee4cecc653d7492a414a3befbdb5256553c063bfefb330123519ee84931fb3df9405e448d221b95c244fcb86ca99ad964d3fb60743bfa2acbc0c8aa057ccf0fc6f47a1a443300f002cf5dbecd2e764018ec233f8f7b460e9954d11d3ea5338c8d7840876b84e97b91c07af37ff0f6a663015e4de60b025d15c3dbb5525fcf656301c28cbff3a2cc0ca0a5101bd38764a9a3b1b556b2f32279f2e4395aa16bb0d200a42b5ccfaf627aea775470c1a5205dbbe54dab15792d2ec57c933ec4ac655b210481b9442fc1cb8541c46bd11d90d5b4e2fef28ef8dc743b08901d9447701f1fc11c8eef5a9f6797e58426226430b0bf50e1c19b686b68c800d6cfcde428eaf4e45e6423ac958d68261b5ee94bf124e4b14c7db60fdb2b40c0a7118e6df8c1f4812ea54f0bb00e034003195462dc9bbdd647170e6e4015b009a3d85093fe8b3999e57b1d4a9b03186537e03d341b5ea7c48464f69ba404947e41e8cb8be40a9cca6bd51201d6ea072821209ab847698524a3d480ac2a8ff0b0f6e3ad076eb852ecd793d83d277a9f7a678da09788cc1276a6d98a561158732aee4a8eb11acb6624928423c9d898a479a5fbdfc6858ee31455d597a334fe1994097a589fee3f61fbe1d16652aa10966af6832165b3a83eb849b684f3efc24654d07ff49f5e273e5bb0562aa79a712fbde4f39c62ff50854f749314d76a232a0a4f8a6b9ac9b71d71c290f47073032b0e2d9ff342b07daa45671be39166499060a3eec97343a7f47d584fab7f2d0b198196f15efea312ec93db474c85e8b1ef880d3c38f993d99719f929aae60514ea888aa0485624faf15c07e16ccb6abfb8ea3f605341b3001d6439c1d9894fb8a8536a2d4b11d11000d8b9671813253878ef71632bd8b187c7c9b1c5e0266e7f7cb91d907e867c32a3b351138df2f8f843398fe45cb06e8d463cbad9da7a68d0a631f80cc0cec9f6fe95b40dca22633d79b1a84b3f5c43fdcf6a8feabf134505690d140a610ef2ff8dafe1ece3b3786dec5bcd465296d8b56acb683d6940f080775670a4076938f1e8e3b263495d219d656918866f5d44f004a09c44328742449a8e7b013f8bf885ac6b2cd80a11af388fce4ce24c689dd1823bfeab4bb55ceb9b64cc74fc5a48f89af37fd73877e35813a99f2b48df0db2e40912caa1ebfd709763be2fa069ba433a88db9492165edd25c1485884714129ef4fc02b9e0258c2e5d44928bc447697b169e1efd1a4b490895f64f89b33d3d5913f7e0862c82138888c08c5d608647f6e1ee0b024204c2e7920817e247d11a5cc892e7e6e28f6115d7b29bd28681f0651ca91a1757e8efd5ef81ab388a4c966c15a7ac60fa11c6a559ae2430376c5d922633f1096e99335c65ff0b101cfb745dc6543ba1a0b3e07e843d96deddb62eb3c0194f2937aa973bb5590ff652224af267b77d62d11f5c6071b54e85ce4ec28145a7633e767755be8a3f8d3912dbb6a718e4c833ab42245a376516e47f000dc99cbe283af2b7793306be4b1144a8177544b499a8ed2f91315f89d3b9e383f9302689c37920c0f177ad6ee19ca7a20d7c4fd19c005052989db43614b9b44eefb6f566ba3bcf44be92389b3029c0ffc6b0509a99d5efebfce121040c3e73e56b0696c86ca8e4b8a00b085c841cf69d1fb8967389ba6394526a6f3c0d9d459780301c47a9b39c8d8befb8ceb7d0edb782c7a8b9c7b3ac5372750c92565c569b4da3f7ab182d934e99559d70e0e2bc50e8d92e4392f3705591feee3f07f478df25b093d78d1ad02f371416838362e4c68a917e6eb7f7cfc4b4fa5a36261ce3f192344da894208804f6f87bf668444a0e2bb82944535472c6cee68fcbe69d2842d491a536b2036a3220e9160bca40520b57b97f1f95bd4afbbfef9b10fec1a5d3c7a6b06ae82f7a0706e7c2e8f0c88e3283433aeaccebee450a9a5e5e82d95b2ffdd42f1d523e1b44da9581835bda4392661276df1a75919dfd74de00eaf6cd508875e74e0e2154256c377b13b89a2f4f14ac97c3728a67bbc11647eb578bb79bd0c8464fbdab1f5166af7ef5c554b15836752c1f0089d829bbe8334a597c1756329966c7b6e2fef55b076b5b1b099a93f4619bd73245afa6d6221529cd40680446cac73946d4f7323c230605214ec6923ced437bbe70aa31450ec6b2550ae3d42ba73b99860fdfbf9aa47c066fb069795ea7dbf9098e314faa50a6a0269fb0a7a151ec1a4dc1eda52233e69bdb02989da09ae6e0d853b74ab1a527ade9a8f680be18d2cf49cc67e1367549ab0751e4efc52f5d2ecdba4ed668779c106dbe1650b4c9eb9d284263430395daec9795b512d616b8f750fd813f9e11fa9868dada505b03d19e1a0d2d0bd103332a112f9fe5c5cd2a81f6fc51e556cbc04ecd9c1d28803a355b3d924b59336f852887fe2dc5182099e3500efdb8ee1ae593ae79a2a00e2bdce75ad0cd97bbf4836474197bde078333ff9da6cdfbd77c0c789a8fef06998b29078016fd50b2de7e9945c3de88bddd3e51f4a9684a9cac5f13a366e646c25935ec2f5bfe3621fedc7e8342c1669cd460024d32625134a636d263c54cb71c5653f3269cdccba447c08782e3f09980cf957e0ebd167ea31073ed9054e2bd4d347273fba883ee5ec728aa0fce6f81123d868ac618911cdc91ab6fc7ea43762313d7f14e56bf45cfe36e0555b7cd4209de0d3ef19b09312a9360c089c0d789a37c4d6bfbbb30a228b51dc5d9bae63109db23665c6408edfb6d1431ebb703668c753813b1700357cc18b3b1175bcfa06cba2401462bd855f491cd0802e32d2b99473eeb216b53d74d709e406df20c09b3850bf75cec6ecb0c9af46e5a42690454efd14220f1cb39325290c512c9de03b2314f9b92e8d2be66f9cad524fd5faf50032cfbfc13fbcff91ba1246854be1cbbee7936750884ba1e544936fa9b99f3ff029c17e54c28be59a00151dcfd584118b72e8538d643b2edb9718dc8ebe737634808db5306ef52a2aa16943c56e61fab90af30e4a6dac8fd247a7eb5f3a39a284dd70c99a6d82bc058971a203164a11eff0ce1807fa56a95758495a4055f6e93f6f95a00df402b65102e3bc2225d7723895d25bfb205e1475062076ecf3aa549dcaa6c33c3463f6244181b82d0a7c995eaa305ce00476bcf692921702eab836957574d44a96edceace7d659db7f50441523e8ee9a2abf1e94809061b4843680c842425048af740cf3fc4059df9272fd17f71c73e71d72205f3a15d612ff25e3de78c8c2ede42052eeb2252d452c277cfeae67c0af9cbe9eadfae509e0af5cd4797d5d30643", 0x1000}, {&(0x7f0000006fc0)="a2b9bd4f7679a077330239beb247ff3a66189ce0cb04f2cc41bfae9b3526f5916c53b651a673a414a19afc85bc518cff01beb9fb229ca979e17cdf8be3dcfcc7d9a3fdc076593f6f8950243ffbf70cd1f72bfae06ce881f771f2337e5d4b49b255fd0678959fe03d29740717165de43cd8fdbe90a5e0aaab95fd59ce42a063a970fa72d5dd504de2d0667185c4e022d00eb4df06c547cbdc6ddbf25c8d45164f3e6e7ed93d70b561779649e84ddb", 0xae}, {&(0x7f0000007080)="8e0725754099818ebe39491a44d3a7060de2c1027a4d432feb808a0d77f2ade371b0bda060b4a50992223842c9a43bb9a4b8b930d05e1962e9d3b706343697fcf32436027e5cbf0dd508e85dd1195a88201c42ab14a853528f32c0740facdba21013ffb97ace904875222b8aec7952cb2b2a65bfcfb6241bdd52976df48def5c4278b4b055c3a7409d9610808b4ba7a026260eba3e5898f217f2e7109dfb50100f9e985a6a58420ba1357067b951acd34808f739ad013925f62a0ac110380323e3c5f160cc02294604c80e0769ff8f526c3a1476c58b3b5bc6e1ffa80b9d8823efb0657878799ab9ddff175defa17b6728d4116b6765cae84f5c7202f8db8cd3d3138438ab04ab5ad19628297940aa9e86512982ed6422dfb37dec4ffb8c24090e7cb2fca7c329ee9c1e43d04cda37c5fff4816469f69e490f60227fae990d65da14e765b43ab571b02e7d26e31e05156191db2c07bfaffe9cbfab934fba61648f3c648613212d777893bdb8b4deeba0a8ae0c27e84c4d010fb49402acf26df4298d5a581e0c9eb1a70b30da73237911ae16cb772825ad8ebda790dc6a752a56f0c531038886f06ec61d3687504c9d0ace5f1412fbe18c44455fe8b867f4b7c56f29d4fc2b7a43f8d4926030b7a2a557da346b6504e0a4c3438a84609369014d0b685cb1203e6cb83a52c4dca4d3772c21af26beb8e702ebde1dfb0f6ac198a7610940faec5ed7bd1ccdb9bd4caa3189da4ba82319e92d2062e9ad860eb518a85c17f7092d99fa1f3881c08cb2a4fd1f7be45902498994906021e323f31de8eba505b9c82f45637a3b6bee6896fdd77be4b351581a15b14bba997b58bf5269931c86061cc5884e6d38e6d9f067f6c16f46503eded3565019f702a135ab61c15c50664f6ddb8d55df2348f65ea6e8ab11ade2be2ab6376e88845f1264110a1f6d35e41849d3e8338396a50461f5c5fe4b72337046acdbd97fa0869145332befae1dcd198fe08b29016770e9d432bac0e3f0d5e9a3b24f96204b6c0054bea7fee7cf8ee5c129ac20415a530a10ab3a0928741a229b09b83084aa226262d7f5e387caba0a9117fbf3a3204f85b5611794e1af5942edfb2583cee8268fcaf64fce144fccac7426422f32e971f017869e0785e2718dbc9568f4c001382acc2a3bc8eccfe05cd27be4437290787fd3c46e8411bfb670212efa2eb3d6ad6de64322d1aa8f69ecfd5cc67082e1e3c2f59969f0f0e54509f380e86702ea2435d47d8bffd0ebf84ce5a2fd45ec383ad3ee0fe226c050d2cab86379d6654045c7a4f7b44d8626944772646ca81fb60285f583161f81fe1110200982e6d0434238531c57298d87d7ba8367da5251135e3f46231fcb975c2af401db2e8c39b5fb7296c79faee9714b2d07af51003e2b7c46737837b9acfe9a050ee7d73bdde9ea307585d591faeda61eaa22fa26f7a1e0a9b3ae74ffb1e7dfcc0572a33f38030808ecaa18dc030b83556d683e1e57614857476c9ba7a849bb32b054cb0572bc6dd1838088ec13ee3e23aefa02202f12c514cf9fa267e99cf59f15ba7ecf228f8c87e9945d16e61a00b05c7f05b74a80906ab99174acacf6378c05e689e7d36b8f6ad1aab1124d07dc4f368c7a079f84aab0e8797aaa7bb445fb966f378ea50e1b5ec60bf7ceccc60a9bfafec6f312d02ead5da2cf30313a78ec628815b763b8325a4447edaa3b08052dd6a857ef1eb71c32a049dec670dec5b68ddab8f34954b493eaa8e47b1cfdab97d08f310daf81ac5a197e72b15bcc2f75e33f1ed9859d3de1587e97a4ef9117e4d9f61b5ad283ed4c263a8321042e5eeccb85fb79c77d3325ddde9d221d7f006ead909ca5a6a8eddd3aa76afccdd8f42708bdfe5e6ac4619d15ee6a8277372f7d5b5d750d5fc6c67d7cbe8ab0602e10da2c662b86cb517528ebc5822a32a3a686b610ad22f0711442e801293ec5405ceeac8202d49f700f5a60095f89fc79a2acb34715bbd0445ca6f16fb237f4bf9598e49f813b08d8af76db244267795b1117777ab3a91e1d8dee233590098e82362bc9f52d79cabf3e14f180747abf9a26754928f89899477b27f3ae38de908111f9adbe105ada42edf1af2b49afb2682bab588b1fa42b8427a3a3cdcfa5ccefc864fa4966964ef5495052cdcbf9d8f013a2da50e83d90872232656e9d18a200a237ed5cddeb9e14bc41687d6311a8dbe8e153a5d74d8d25bc7a48fcaa357f4774024adb1dd65aa21b83a4da55546d1806fcd659be3c8ae60ad5154ca71780123d3d64329853f64af63b035250849e074cbbfc278c2227abfb28d660c434111170acf95a50e625f97a01ec01de2c494996ca56eba05a35e8c756c6fcb108d2b7ab53017f4d88783d15e026795bc52633e24393e6c0b04dceec7e157e8c2b036ffb27d1f54ad538aaa57782814b77238e3393abcfac77fa5a2af8a6652c2071f7272c5cd310cb0429b14cd1a5c086e56cd0488628c6b0de84f3d66b29d6c463f764c11a8f19c5b347e2edae9b9b9b6bd78ac363c13d78677ca3a6f321fdfd3350dc762af0084cf5c2e2677a5219d920a82e78df454cfba3ba465c8b4744d3ef6d9276bc0b9921a142b9a7222d78c7332adf44927ce8cd5707fc3502178bb1209d8eea3cf53344d9c7c76254adf097a897f61634808d6bd6e4961c76867354b3fdf31741f8a154a05bd1d8077483e1b4127f1d3d96fff78f13d6b4a857feab053e719f8854490a1e9785dd45307f2840013406b1768cad4e3ebb929eb02abcf4360d0faabf6c8b01c3f7d84398a8becfaaf6b2377f183b474ced8e78acbf11b7807cdf16aea34ce80ab48b0205ee289a14a3db74728fe01060cfa2bc83ddb5457b05b4e80763cf888dfbcffaad915020740edc3cce3937e3413506233ea4291da10354b8903b0738a6919427679cbd975ac6259f2389a29370e9d615b231a95a32a1db37ef9f263e90acf588d4f6f63c1a18ea01dcb0c5a5c8e55c74f1d245b6fc8fd98ef81337c3a1574e03cd1063a1343f683a2533c3ccfbfa2cd1f1c693974bcfe373116b2b7f9225fe99d9971b309bdf46bc19452e795dd51ad5b1aa02292814caf85a6c5a99aa967b8ffeac6cc30c3a48f94691d4f1296d9a29ed48ff3b7d3f993949c982f7447abee5ee35c9c340f20a3636e29436fcebcd3908cdbacf4056f00c88653d34c14dd98f56d8095b4e4ad3cab708d834b0617b87b30ec1e04567a45ac1fa071e2540f51c184903e827bf999aa8b7b19d740c114d86d994bf1b9be0d287a371e288b9b8876eb5c7b85035ae2364083661629e37fa54880db4bf8622f8afee8dcb45bdbb7cd63817162a7b2703fd9f7dab3166181f5e9859eda1db337a1aa1640c88b693f70f8c3d1c40bff29bcb717bb366484b7001cb43b47eaa6a5942712986ae62747febcae73bc5c4ae28bf0d0fe6c6efb046dead8789c2119b52563ae6703205f7474d78de2d086da646e127c46195e099921bafcd0952f6763d2c8b6b9bb98cc1481a84f09731947419c6b5a0668d60f0455943e8c6b7573302d78a82ef08d5f242bcea81cc4f5d94860c7ff4510b76f6318d02de47ccedd22814c12770b98da6ac06dc4ec3144c181be66f4946dab8dfa647d53d3af63669580733b974954d4faaf645a93fb6ced35feac2ebbdcf16316447806d4734304b5cc7b0f14016eda13de97d2221589afa958790feee9ae87a3f598b7d921cdf632e67cc280ba70060c5b0afb8cefc7d1801b35285a5428fd9d29b39aadf20957783d6d2a92145fb6fb20cbe629d7aa4498de2e4059a70857827b0942419dda1fb9ec8e64b9f93bc77853cd4e9a1a2ad1277031bdfae558e79e819932fdabde2fb9f5a18eb65b9e4e367a37f510149bb309c71f0576696e55eb20eae1b3c6615078685f134328c8cfacadd747383a5fe144d470604e0c422aaa4edbf13aae11955eef266189fe78705f4def9c6eb8214e619b9e8b351dd54b793f40618cb03ae8562e468668dc0989dcedb11987e2c006d9f3a9b6ab65f63865778b014e996a6da5cc528f6ad0ba9a6883d50dbbb9208fb0265a0e5a1a19275554baa5d6889fcf4bc908eae242f8f0492895d74a551b57a0be6186a9c17b84ee79f456ed46adc4f9fa525340e5efb16488863f1fa15ceb9dc8c0d340bc07df6c33b197222249d9cf87c70af4a572b014f5fc7ab4f9404a5f93e45917d05abdbd61d96c28b7dd6282d1967286865e986897557b07099af7ec610d5cc52ad0454e432e733cfacb314730d9a7705c90a65497cf5e9e100153ec79494d8fa213cd2d97764fe369541506a872d7637e5bb69f81ccbed1c1788603616b6c8ae7f811a20a4ab0318e1f85213a424846cde9e9cd218e59e495f77c74b1784cff4eeb1def611c3d850d56003442abd8a728c52a54341fa7d64462a2ce7dbba79022301db338a1c98a7a864300fc48d109e2f483e7b32996d72b4a217db2bd9d489dd0f364c67c7986adbba0d813ea08cffe96663442d488425a23e3c396191e20425905f5ec8f5ab262b602a818d7d4d4bf961badf405d3bcabc1e3224897a5f4a32d26b5bdbdd5ac72ef8330cc56651387d66708c85d665be0895d8dc7f9e0c6af73fbb22c21f37d00511335599baf6114e1db761a29584ae73f540f7581234e78b423116dea10fc783fcb406addf336bb699c10fad6105a1e3a7b9538667dccbc55fa4838c4ca5aaff1227ba4f011b819363e8bd9ff6ad4cd31295c303fb8b1b523c50ab803321055f67fe4d3d4cb75b80e97cbb6b85467e4eeaad4a4a2f9e4f9437f6930255a45e7e9c191e4ef45a618929f6b92d51071abc8f7eeaf878deedf3e6dc33824a6570203905fc44926795227add115d0045c56b485a481da957ec6270bedbf541311bcb7d9a0262583eeeaecb199dafa4b13d2e26639021721eefdd6eb6068a9ec5c4c7b1dbc2b3379f8fda3764f5b94f82ac7ca8031a25300368f1cc4e0fd2f4abcf9b58347d01b4ac6b650e874385b41a4c9ebeedbf62cec5b68e44e0f37b15b7a84b10eebc68075d8c138c9191de89f0a4cb28f5f24c3f5d3916926fdfa66fec82770bd5d2baaecf42b44ce81adb3cbc3f597dd938901b53c986e8471aa4d3c55900e885a25d7a015526b886cda06a15221a9e2e92e11547d99853c2f3206abbdbbf9e543578c166840bfe2f135eef72bbe7ded32fd416a3d9e2a34a9a653069e9130ea2220f7de4bd8c90b8f4182093c5e8e8851d81148656470071efd435501b256f8d8505a81be33f08b300d573a67845f76575bcdb5a62ef89ffa4ba474c59a25e36281d32114e381beae8a0f7117a66df8d069c88c17c9e1083ccbc51ba5e678a2a42bab22fedcf55117b5857194d0dd792960fe4b9d1fbc56c503930da45adc93f7a3daf19bf1849242150b6e074c77e357737c7528f5e7ee86d6f39501f9cfe35bb599e78daa0871ff5b60c2ef5174fe85471c718c781706eab39120cc1508dd273f2862da2e63e49eab02981394f41dfddb592628c9757ce646faf31981ecfa5dc721581fd725a637055250b9e8378f2db9d558d2ce3b082bc5f049971ce0e992231f098363dca60e990127d3dfba8d1a51d9a9837f9dc3b39283a26f32de635c369396f073fc3bcdd741ab39e05d3b9d8b5a4f7b01b369bb5557ad224155e16b369163ce38ce5432cf5c26108e820492ea0fc200534144e6d33056831b46bdcd199031ee3f77c21e1cd021626a7c2d247eb129e915d8e3106bd8972e4cba7d9f4ee4ed2679d14631bf4ea6e08", 0x1000}, {&(0x7f0000008080)="61ec5b9ef62ecf4faec0167ba726a240e9afd7562cc6c373a1bcf2e5cdc8a0185beb5c076aa7ef96f2e961dbc94d4ccde9091d327ed509b3f360545eab803d4d3441b83dbbe6c731c5ff67d2cc4a3efe47e5121e751929e9adee", 0x5a}, {&(0x7f0000008100)="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", 0xfc}], 0x7, &(0x7f0000008280)}}, {{&(0x7f00000082c0)={0xa, 0x4e24, 0x3, @loopback, 0xb98}, 0x1c, &(0x7f0000008440)=[{&(0x7f0000008300)="ef150e37c0d292adbc74a13418b2e678047005dd9481c11b38b06b27a15d686f952e3e90bcbe055f00c182ac8716bde4198bd4d77b103838ea2c5aae8562bd730c0253ce79eb2f35a68726470cb33107a9fe3f3a05c79c0bbfdb62432de9e7c011bbda9ca71ce83160f245bcb389d12632a1b4baf83850fdf29755279928a046df10cabd240f4f0dfd7de7b7111435c6e4814b871716f2e486ac0b2c3da734c9aedfc4492d31b0d1d973b403deeb6186ebf50f03454e648543e090544b715d2b5d32089ef80f2a39cee5acaca665f0be2878bce87a917a", 0xd7}, {&(0x7f0000008400)="9f2a8d42a75d4ed79343061ccf21a5e68351a52554b8a999f788023d8b69660d6564694067a3534bcb0b", 0x2a}], 0x2, &(0x7f0000008480)=[@hoplimit={{0x14, 0x29, 0x34, 0x8}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x89, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xb4}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r6}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @hopopts_2292={{0x158, 0x29, 0x36, {0x3a, 0x27, '\x00', [@pad1, @generic={0x1, 0xd2, "2a54b97bf23f689cc7534eabd679d236dcbf141e68bfd87d8effc5423329ad0ec64945968162b2ceed7d672857c1286717517fe204ab3333adc970fef54d55b167d6a3aa5e819ce07d8d0e073dfa7e1982a618a5ea655c5e2f6bacb8048a00a5ddae939c2ab31328dd270c8b395fb874087d5e2d6198ccf4c814b2c1601d7fd7c26b633af538b4dc53427b5044342d570228d5dc8a46b7f3f7388c7b75c4aaae10a219db611b2afbc4c08f1ba4aba85646b6a3905a63bede445f7a2ad90fb6e668dbd7615aa0b3d09796cb9c18633973e85f"}, @jumbo={0xc2, 0x4, 0x7fffffff}, @jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x50, {0x1, 0x12, 0x0, 0x8, [0x76a3, 0x200, 0x9, 0x100000000, 0x4, 0x800, 0x8, 0x9, 0x7fff]}}, @jumbo={0xc2, 0x4, 0x76}, @ra={0x5, 0x2, 0xffff}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7fd}}, @rthdr={{0x88, 0x29, 0x39, {0x5e, 0xe, 0x2, 0x2, 0x0, [@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @mcast2, @private1, @dev={0xfe, 0x80, '\x00', 0x3a}]}}}, @hopopts_2292={{0x1c0, 0x29, 0x36, {0x3b, 0x34, '\x00', [@ra={0x5, 0x2, 0xfffd}, @padn={0x1, 0x1, [0x0]}, @generic={0x8, 0xe0, "ea69f2276ac86dba986e7cc95ac08ad31ed8fabb640d397454843b54800f8ced9e7c7dd8798414938bb68e35bcae46180950f3a9a485d948d55c7930ba6aa66e45c544ca3a6e7d6f28733c2a496c2badcbfedf2dca9f6995278d7342ce0c8168d3aec8721da9ad7a6cf237c0a8e9a456180ba9cb2a9257f9f8f5402f3e5d080e6a81d1faaaa0d6dcd8e0c517ffc2e11e9e546b9ba51c1c4060e2e3196653e7b549c69201ddce390a78498837ccf781525a81802adbceb600aa82e0253765dc7b9f6df890601dc6d3e0d214cd7bb9cdf11b1cd4eac61970e009d7b0e255102390"}, @generic={0x5, 0xb6, "5553600773d428351f8a1b2663cc71de106adaed55aa4f92397ce18851a1c2596a5bbd5f3b54dec7c6131e17bc9768bdba0f49d6536d051f0b70fe5588c96b4a34f36e06e26d25faf249fcace98531899e9330933dc959d9f92c312d1bb630be39014965f78fe8cc3e3a3a8d597cfbce9aeeff36a78d83616361a75221a91be39ec37f909c17aa96c820c7a600fe991e71251b03dada834bc08113d06a5a463602a24e3cf6d2ceb76ccc49c53074d47ae693bf49a1ee"}, @pad1]}}}, @hopopts_2292={{0x138, 0x29, 0x36, {0x4, 0x23, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8, 0x28, "c2a5be936b7fc6ddaab26e68c6d2b196cce59ed6d47f3dcea9dc1e34dbbbdca0aa0894f17ea1df3a"}, @generic={0x3c, 0xb9, "637625fbc0e93e7168c56bcbb97b3480d8eae3c5c1965f61d35358d41c6050c6dc9d25686f4992fa3321650a178672039e45a50c99a76f31e325380f8049e32f2b6b505bdfe2c33f9ce56a84be35df4a80ebd568a5ec745ea82e10afcdd79789ad04db956bee55c59f954d4ea024ec95006bc71c5f621481ea1e60baaac8b7a82d61f721eab567086bc990681757803c5c63b62ee2903822fed310aba49835449e9f1f85122caa28b451c089209c541075bd75f0348f0c5f1b"}, @hao={0xc9, 0x10, @mcast2}, @pad1, @calipso={0x7, 0x10, {0x0, 0x2, 0x3, 0xffff, [0xb]}}, @jumbo={0xc2, 0x4, 0xd3d8}, @pad1]}}}], 0x580}}, {{&(0x7f0000008a00)={0xa, 0x4e22, 0x2, @loopback, 0x7}, 0x1c, &(0x7f0000008bc0)=[{&(0x7f0000008a40)="1295c7a1d15e641a18e5ae158a65eb2842b61791fcf5a9c4332c4fb50d24ff1b421800492054822cbfb26fc5fb12dac7b2ffcc0ea8e90b1f4f566fbad2460679f31e70f315db5859cbe79226dffb2ea6c2d36d884246b1a1f1dd7265ff04163269cbc0eb9bef7f3b7ba74fce3d51e327ff1ffb3fd4661c0239e4ec62b3af11d04c737c5930b3f4409ce1d9a1ce1e510c8a76cabed1e025733f8270dcd5c0eaf960dea4c4b1dfbe37968723c77f92e42c21791784a628e04035a697e232f18824500eb1bfdbbcf11b1a621ac9863e9074a5ae6d9055c4130edf2db87837bf6a90fc6d8c32a3917676156f7e6f90d3d345d2846e9bdc9d892d44e538b15ef988", 0xff}, {&(0x7f0000008b40)="e57d32a88003f206166ef8c1b3fc46489769f00e5537e9cf527b5f50965ffdbd9caa504596982550af2223f926655d77987b1deb97705481572d596791a0a55cb23a776ebbbdb5", 0x47}], 0x2}}], 0x6, 0x0) 18.522908925s ago: executing program 0 (id=2301): sched_rr_get_interval(0x0, &(0x7f0000000000)) 18.224940274s ago: executing program 0 (id=2302): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x2c9ab000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000060000000405"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)='\x00'/10, 0x0, r2}, 0x38) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x37, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='qtr(4\x14\xd6\xbb\xa9\x19sm4)\x00'}]}]}, 0x2c}}, 0x0) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000003780), 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 18.22330155s ago: executing program 3 (id=2303): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000300)="f36dc744240015000000c34424020e000000c7442406000000000f0114240f01dfb9b8020000b8494d0000ba000000000f30c4c37d044a08040fff090f8e43d399ad66baf80cb802028e8cef66bafc0c66b8010066efc4c1e956c80fc77cc187", 0x60}], 0x1, 0x51, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0xffffffffffffffff, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000280)={0x6, 0xe, 0xf, 0x4, 0x681, 0x8000000000000000, 0xa, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x10, 0x5, 0x9, 0x7, 0x5, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x80, 0x7, 0x1, 0x6}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0, 0xfffffffffffffd69}], 0x1, 0x6fcef00345e8684, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18.1891059s ago: executing program 0 (id=2304): mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x10) write$qrtrtun(r0, &(0x7f0000000400)="2ec8425d4ce2ef0035", 0x9) getsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = userfaultfd(0x801) add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket(0x10, 0x3, 0x0) connect$unix(r2, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x18, 0x18, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x123, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, 0x18}], 0x1, 0x0, 0x0, 0x4}, 0x20000880) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2}) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aa0b00907800010000452900040068800102020189a3119effac14"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000003ef0001800e000100636f6e6e6c696d69740000000c000280080001400000e41f08000340000001"], 0xd0}, 0x1, 0x0, 0x0, 0x60000800}, 0x4000024) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) munmap(&(0x7f0000929000/0x1000)=nil, 0x1000) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) openat2(r0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x48000, 0x80, 0x9}, 0x18) read$FUSE(r7, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 16.926984104s ago: executing program 2 (id=2309): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000140)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x58, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000000}, 0x80045) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000180)={[{@memory_localevents}]}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x40000}, [@IFLA_WEIGHT={0x8, 0xf, 0x6}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 16.914373608s ago: executing program 2 (id=2310): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000600)=0x7, 0x4) recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x14, 0x13, 0x1, 0x40000000, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x88}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x30, r2, 0xc4fc9e906872338b, 0x20, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x32c3c34c, 0x1c}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001700)={0x50, r5, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac04}]}]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, r2, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x6b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffe01}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x400}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 15.988679374s ago: executing program 2 (id=2311): io_cancel(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) listen(r1, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1e, 0x7c}, [@nested={0x4, 0x142}, @typed={0x14, 0x15, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 15.897415913s ago: executing program 2 (id=2312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000240), &(0x7f00000001c0)}, 0x20) (async) r1 = fanotify_init(0x10, 0x1) (async) io_setup(0xedf, &(0x7f0000001740)=0x0) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r3, &(0x7f0000000040)=[{0x41, 0x0, 0x0, 0xfd, @tick, {}, {0xf}, @addr={0x1b}}], 0x1c) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@ptr={0x9}, @restrict={0x7, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x5f, 0x5f, 0x61, 0x0, 0x30, 0x2e]}}, &(0x7f0000000040)=""/174, 0x39, 0xae, 0x0, 0x1, 0x10000, @value=r4}, 0x28) (async) io_submit(r2, 0x1, &(0x7f0000001a40)=[&(0x7f00000017c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 15.89569574s ago: executing program 2 (id=2313): ioctl$KVM_CAP_MSR_PLATFORM_INFO(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) io_setup(0x222, 0x0) io_submit(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000025c0)={0x2020}, 0x2020) 15.35853825s ago: executing program 2 (id=2314): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x8000000000000000, 0x3, 0x100000}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x3, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000440)=""/192, 0xc0}], 0x1, 0xda, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c00210080000000c8"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x13, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff], [0x400, 0x2], [0xfff]], '\x00', [{0x0, 0x1, 0x1}]}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtaction={0xbc, 0x30, 0x48b, 0x1, 0x0, {}, [{0xa8, 0x1, [@m_ctinfo={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x0, 0x4, 0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7fffffff}]}, {0x4}, {0xc}, {0xc, 0x8, {0xcb7eb051e9bf233d}}}}, @m_nat={0xffffffffffffff70, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x10000000}, @loopback, @remote, 0xff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='vxcan1\x00') r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x41}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r6, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8803}, 0x1) close$fd_v4l2_buffer(r1) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d009539b7f360604dc0df250510000008000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000086) 3.25413631s ago: executing program 33 (id=2304): mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x10) write$qrtrtun(r0, &(0x7f0000000400)="2ec8425d4ce2ef0035", 0x9) getsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = userfaultfd(0x801) add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket(0x10, 0x3, 0x0) connect$unix(r2, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x18, 0x18, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x123, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, 0x18}], 0x1, 0x0, 0x0, 0x4}, 0x20000880) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2}) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aa0b00907800010000452900040068800102020189a3119effac14"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000003ef0001800e000100636f6e6e6c696d69740000000c000280080001400000e41f08000340000001"], 0xd0}, 0x1, 0x0, 0x0, 0x60000800}, 0x4000024) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) munmap(&(0x7f0000929000/0x1000)=nil, 0x1000) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) openat2(r0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x48000, 0x80, 0x9}, 0x18) read$FUSE(r7, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 3.225792052s ago: executing program 34 (id=2299): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd23, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xb}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "4c3aaadb1d8c61fa0403aee537da3dc2"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x20000884) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0xf5, 0xc66701) r8 = dup(r7) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x8, 0x7, 0x7, 0x8, 0x4, 0x2}) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}}, 0x80) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="00008b1500", @ANYRES32=r11, @ANYBLOB="000a00000021010024001280110001006272696467655f736c617665000000000c0005800500190002000000"], 0x44}}, 0x0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r12 = syz_io_uring_setup(0x7a61, &(0x7f0000000100)={0x0, 0x53, 0x10100, 0x0, 0x2b5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r13, r14, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r12, 0x708, 0x41e3, 0xc, 0x0, 0x0) r15 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r15, 0x2) r16 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r16, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.102481474s ago: executing program 35 (id=2303): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000300)="f36dc744240015000000c34424020e000000c7442406000000000f0114240f01dfb9b8020000b8494d0000ba000000000f30c4c37d044a08040fff090f8e43d399ad66baf80cb802028e8cef66bafc0c66b8010066efc4c1e956c80fc77cc187", 0x60}], 0x1, 0x51, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0xffffffffffffffff, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000280)={0x6, 0xe, 0xf, 0x4, 0x681, 0x8000000000000000, 0xa, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x10, 0x5, 0x9, 0x7, 0x5, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x80, 0x7, 0x1, 0x6}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0, 0xfffffffffffffd69}], 0x1, 0x6fcef00345e8684, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 36 (id=2314): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x8000000000000000, 0x3, 0x100000}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x3, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000440)=""/192, 0xc0}], 0x1, 0xda, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c00210080000000c8"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x13, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff], [0x400, 0x2], [0xfff]], '\x00', [{0x0, 0x1, 0x1}]}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtaction={0xbc, 0x30, 0x48b, 0x1, 0x0, {}, [{0xa8, 0x1, [@m_ctinfo={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x0, 0x4, 0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7fffffff}]}, {0x4}, {0xc}, {0xc, 0x8, {0xcb7eb051e9bf233d}}}}, @m_nat={0xffffffffffffff70, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x10000000}, @loopback, @remote, 0xff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='vxcan1\x00') r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x41}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r6, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8803}, 0x1) close$fd_v4l2_buffer(r1) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d009539b7f360604dc0df250510000008000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000086) kernel console output (not intermixed with test programs): 23372036854771712 [ 135.227247][T10437] total_cache 0 [ 135.228684][T10437] total_rss 0 [ 135.230068][T10437] total_rss_huge 0 [ 135.231628][T10437] total_shmem 0 [ 135.236551][T10437] total_mapped_file 0 [ 135.238415][T10437] total_dirty 0 [ 135.239870][T10437] total_writeback 0 [ 135.241440][T10437] total_workingset_refault_anon 3937 [ 135.244196][T10437] total_workingset_refault_file 0 [ 135.246247][T10437] total_swap 303104 [ 135.247827][T10437] total_swapcached 40960 [ 135.249564][T10437] total_pgpgin 125447 [ 135.251201][T10437] total_pgpgout 125437 [ 135.252851][T10437] total_pgfault 66667 [ 135.254746][T10437] total_pgmajfault 512 [ 135.256463][T10437] total_inactive_anon 40960 [ 135.258341][T10437] total_active_anon 0 [ 135.259999][T10437] total_inactive_file 0 [ 135.261676][T10437] total_active_file 0 [ 135.263482][T10437] total_unevictable 0 [ 135.265121][T10437] anon_cost 0 [ 135.266553][T10437] file_cost 0 [ 135.267957][T10437] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1358,pid=10437,uid=0 [ 135.275250][T10437] Memory cgroup out of memory: Killed process 10437 (syz.2.1358) total-vm:101948kB, anon-rss:948kB, file-rss:23464kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 135.315562][T10454] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 135.319220][T10454] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 135.322553][T10454] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 135.325799][T10454] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 135.329863][T10454] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 135.333497][T10454] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 135.337041][T10454] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 135.340558][T10454] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 135.345830][T10454] geneve3: entered promiscuous mode [ 135.347961][T10454] geneve3: entered allmulticast mode [ 135.460209][ T24] usb 8-1: USB disconnect, device number 12 [ 135.487316][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1361'. [ 135.540145][ T40] audit: type=1400 audit(2000000082.647:1574): avc: denied { read write } for pid=10461 comm="syz.3.1363" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 135.549640][T10462] batadv_slave_1: entered promiscuous mode [ 135.672700][T10468] ptrace attach of "/syz-executor exec"[5931] was attempted by "/syz-executor exec"[10468] [ 135.709394][T10461] batadv_slave_1: left promiscuous mode [ 135.754794][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1366'. [ 135.758278][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1366'. [ 135.761770][T10470] netlink: 'syz.2.1366': attribute type 13 has an invalid length. [ 135.905891][T10483] delete_channel: no stack [ 135.929943][T10489] xt_hashlimit: size too large, truncated to 1048576 [ 136.154796][T10498] netlink: 'syz.1.1376': attribute type 1 has an invalid length. [ 136.168976][T10498] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1376'. [ 136.712262][T10522] netlink: 'syz.3.1383': attribute type 4 has an invalid length. [ 136.717485][T10522] xt_socket: unknown flags 0x8 [ 136.743118][ T839] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 136.893103][ T839] usb 7-1: Using ep0 maxpacket: 16 [ 136.897313][ T839] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 136.900402][ T839] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 136.903959][ T839] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 136.907021][ T839] usb 7-1: config 0 interface 0 has no altsetting 0 [ 136.911593][ T839] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 136.915235][ T839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.917744][ T839] usb 7-1: Product: syz [ 136.919072][ T839] usb 7-1: Manufacturer: syz [ 136.920541][ T839] usb 7-1: SerialNumber: syz [ 136.923617][ T839] usb 7-1: config 0 descriptor?? [ 137.067432][T10545] hub 9-0:1.0: USB hub found [ 137.069061][T10545] hub 9-0:1.0: 1 port detected [ 137.129647][ T839] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input16 [ 137.135446][ T5329] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 137.149326][ T5329] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 137.154591][ T5329] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 137.159181][ T5329] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 137.191908][T10554] netlink: 'syz.0.1392': attribute type 10 has an invalid length. [ 137.195866][ T6939] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 137.196344][T10561] netlink: 'syz.0.1392': attribute type 10 has an invalid length. [ 137.208013][ T5329] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 137.217772][ T5329] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 137.221038][ T5329] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 137.313154][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 137.313165][ T40] audit: type=1400 audit(2000000084.427:1579): avc: denied { getopt } for pid=10570 comm="syz.3.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.332377][ T40] audit: type=1400 audit(2000000084.437:1580): avc: denied { read } for pid=10518 comm="syz.2.1382" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 137.352278][ T40] audit: type=1400 audit(2000000084.437:1581): avc: denied { open } for pid=10518 comm="syz.2.1382" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 137.384252][T10519] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 137.396326][ T1348] usb 7-1: USB disconnect, device number 9 [ 137.442160][T10582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10582 comm=syz.3.1400 [ 137.524870][ T40] audit: type=1400 audit(2000000084.637:1582): avc: denied { nlmsg_tty_audit } for pid=10594 comm="syz.3.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 138.029226][T10607] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 138.032209][T10607] SELinux: failed to load policy [ 138.213674][T10623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.413979][T10648] overlayfs: failed to clone upperpath [ 138.441112][ T40] audit: type=1400 audit(2000000085.547:1583): avc: denied { listen } for pid=10651 comm="syz.3.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.482851][T10659] __nla_validate_parse: 6 callbacks suppressed [ 138.482863][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1425'. [ 138.488132][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1425'. [ 138.490925][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1425'. [ 138.613424][ T837] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 138.647195][ T9808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.649833][ T9808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.676355][T10667] validate_nla: 1 callbacks suppressed [ 138.676366][T10667] netlink: 'syz.0.1427': attribute type 1 has an invalid length. [ 138.681674][T10667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.773296][ T837] usb 7-1: Using ep0 maxpacket: 16 [ 138.777824][ T837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.782408][ T837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.786706][ T837] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 138.791903][ T837] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 138.795851][ T837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.809361][T10673] xt_CT: No such helper "pptp" [ 138.810153][ T837] usb 7-1: config 0 descriptor?? [ 138.975895][ T40] audit: type=1400 audit(2000000086.087:1584): avc: denied { ioctl } for pid=10680 comm="syz.3.1430" path="/dev/input/mouse0" dev="devtmpfs" ino=946 ioctlcmd=0xaf30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 139.196805][ T40] audit: type=1326 audit(2000000086.307:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10688 comm="syz.1.1433" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f068878e929 code=0x0 [ 139.228981][ T837] HID 045e:07da: Invalid code 65791 type 1 [ 139.236356][ T837] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:045E:07DA.0004/input/input17 [ 139.245437][ T837] microsoft 0003:045E:07DA.0004: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 139.403405][T10703] xt_ecn: cannot match TCP bits for non-tcp packets [ 139.437025][T10705] bond0: (slave bond_slave_0): Releasing backup interface [ 139.442011][T10705] bond0: (slave bond_slave_1): Releasing backup interface [ 139.457577][T10705] team0: Port device team_slave_1 removed [ 139.459806][T10705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.462103][T10705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.467225][T10705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.469553][T10705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.483901][ T40] audit: type=1326 audit(2000000086.597:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10704 comm="syz.3.1438" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b86b8e929 code=0x7ffc0000 [ 139.494908][ T40] audit: type=1326 audit(2000000086.597:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10704 comm="syz.3.1438" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b86b8e929 code=0x7ffc0000 [ 139.504831][ T1348] usb 7-1: USB disconnect, device number 10 [ 139.513164][ T40] audit: type=1326 audit(2000000086.597:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10704 comm="syz.3.1438" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b86b8e929 code=0x7ffc0000 [ 139.733405][T10714] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1441'. [ 139.736060][T10715] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1441'. [ 139.995354][T10726] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1444'. [ 140.056843][T10735] netlink: 'syz.1.1447': attribute type 1 has an invalid length. [ 140.066097][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1448'. [ 140.110687][T10741] netlink: 'syz.0.1449': attribute type 39 has an invalid length. [ 140.280349][T10757] netlink: 'syz.2.1454': attribute type 4 has an invalid length. [ 140.324356][T10760] tmpfs: Unknown parameter 'es' [ 140.611090][T10788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1464'. [ 140.614848][T10790] openvswitch: netlink: VXLAN extension 149 out of range max 1 [ 140.647138][T10792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1465'. [ 140.718294][T10800] netlink: 'syz.2.1467': attribute type 4 has an invalid length. [ 140.721312][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'. [ 140.940276][T10813] wireguard0: entered promiscuous mode [ 140.942173][T10813] wireguard0: entered allmulticast mode [ 141.120138][T10827] netlink: 'syz.3.1475': attribute type 4 has an invalid length. [ 141.157924][ T5941] Bluetooth: hci3: link tx timeout [ 141.161093][ T5941] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 141.164301][ T5941] Bluetooth: hci3: link tx timeout [ 141.165923][ T5941] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.841739][ T9815] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.845185][ T9815] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.896895][T10886] dummy0: entered promiscuous mode [ 141.955217][ T9815] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.958990][ T9815] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.982594][T10894] 9pnet_fd: Insufficient options for proto=fd [ 141.986463][T10894] 9pnet_fd: Insufficient options for proto=fd [ 142.033287][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 142.037866][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 142.040800][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 142.055540][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 142.058792][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 142.065193][T10903] devpts: Bad value for 'max' [ 142.069802][ T9815] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 142.078081][ T9815] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.081438][ T9815] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.139515][ T9815] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.143881][ T9815] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.264413][T10899] chnl_net:caif_netlink_parms(): no params data found [ 142.340443][T10923] input input18: cannot allocate more than FF_MAX_EFFECTS effects [ 142.344798][T10923] SELinux: policydb string does not match my string SE Linux [ 142.349586][T10923] SELinux: failed to load policy [ 142.377785][T10899] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.380077][T10899] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.382299][T10899] bridge_slave_0: entered allmulticast mode [ 142.384959][T10899] bridge_slave_0: entered promiscuous mode [ 142.390877][ T9815] team0: left allmulticast mode [ 142.392658][ T9815] team_slave_0: left allmulticast mode [ 142.394783][ T9815] team_slave_1: left allmulticast mode [ 142.397837][ T9815] bridge0: port 3(team0) entered disabled state [ 142.401736][ T9815] bridge_slave_1: left allmulticast mode [ 142.404752][ T9815] bridge_slave_1: left promiscuous mode [ 142.406646][ T9815] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.411585][ T9815] bridge_slave_0: left allmulticast mode [ 142.413572][ T9815] bridge_slave_0: left promiscuous mode [ 142.415390][ T9815] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.506532][T10936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10936 comm=syz.0.1516 [ 142.512145][T10936] netlink: 'syz.0.1516': attribute type 1 has an invalid length. [ 142.583009][ T6016] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 142.734576][ T6016] usb 7-1: not running at top speed; connect to a high speed hub [ 142.738061][ T6016] usb 7-1: config 2 has an invalid interface number: 188 but max is 2 [ 142.740580][ T6016] usb 7-1: config 2 has an invalid interface number: 6 but max is 2 [ 142.743750][ T6016] usb 7-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 142.746510][ T6016] usb 7-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 142.749606][ T6016] usb 7-1: config 2 has 2 interfaces, different from the descriptor's value: 3 [ 142.752340][ T6016] usb 7-1: config 2 has no interface number 0 [ 142.754349][ T6016] usb 7-1: config 2 has no interface number 1 [ 142.756800][ T6016] usb 7-1: too many endpoints for config 2 interface 6 altsetting 16: 43, using maximum allowed: 30 [ 142.760240][ T6016] usb 7-1: config 2 interface 6 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 43 [ 142.764289][ T6016] usb 7-1: config 2 interface 188 has no altsetting 0 [ 142.766408][ T6016] usb 7-1: config 2 interface 6 has no altsetting 0 [ 142.769991][ T6016] usb 7-1: New USB device found, idVendor=0af0, idProduct=6250, bcdDevice=f9.37 [ 142.772774][ T6016] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.776126][ T6016] usb 7-1: Product: syz [ 142.777444][ T6016] usb 7-1: Manufacturer: ノꈃ䜁ଚซ靎ꂣ驻㽸蕰㊋씖멡࢚嬘煃䉜묒醌煙陴៟䦿霔끀݄碓⑞굥偵ꏂ昩室쥩곯㓯⒆⅊뢜 [ 142.782272][ T6016] usb 7-1: SerialNumber: syz [ 142.943871][ T9815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.948668][ T9815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.952541][ T9815] bond0 (unregistering): Released all slaves [ 142.962792][ T9815] bond1 (unregistering): Released all slaves [ 143.001221][ T6016] option 7-1:2.188: GSM modem (1-port) converter detected [ 143.018813][ T6016] option 7-1:2.6: GSM modem (1-port) converter detected [ 143.025528][ T6016] usb 7-1: USB disconnect, device number 11 [ 143.037207][ T6016] option 7-1:2.188: device disconnected [ 143.041439][ T9815] bond2 (unregistering): Released all slaves [ 143.042054][ T6016] option 7-1:2.6: device disconnected [ 143.052486][ T9815] bond3 (unregistering): Released all slaves [ 143.123748][ T9815] bond4 (unregistering): Released all slaves [ 143.131192][ T9815] bond5 (unregistering): Released all slaves [ 143.138212][ T9815] bond6 (unregistering): Released all slaves [ 143.145138][ T9815] bond7 (unregistering): Released all slaves [ 143.151548][T10899] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.154157][T10899] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.156610][T10899] bridge_slave_1: entered allmulticast mode [ 143.159867][T10899] bridge_slave_1: entered promiscuous mode [ 143.183042][ T5941] Bluetooth: hci3: command 0x0406 tx timeout [ 143.311081][T10937] bond7: (slave bridge5): making interface the new active one [ 143.315730][T10937] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 143.346789][T10899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.354855][T10899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.361961][T10942] netlink: 'syz.0.1518': attribute type 32 has an invalid length. [ 143.390099][T10942] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 143.427380][T10899] team0: Port device team_slave_0 added [ 143.431492][T10899] team0: Port device team_slave_1 added [ 143.492263][T10899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.497312][T10899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.507311][T10899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.540512][T10899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.550121][T10899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.563609][T10899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.669898][T10899] hsr_slave_0: entered promiscuous mode [ 143.672144][T10899] hsr_slave_1: entered promiscuous mode [ 143.676289][T10899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.678657][T10899] Cannot create hsr debugfs directory [ 143.684389][T10971] netlink: 'syz.0.1524': attribute type 1 has an invalid length. [ 143.697938][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 143.697949][ T40] audit: type=1400 audit(2000000090.807:1611): avc: denied { create } for pid=10977 comm="syz.2.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 143.707187][ T40] audit: type=1400 audit(2000000090.827:1612): avc: denied { getopt } for pid=10977 comm="syz.2.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 143.750304][ T40] audit: type=1400 audit(2000000090.857:1613): avc: denied { write } for pid=10983 comm="syz.3.1528" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 143.768945][ T9815] hsr_slave_0: left promiscuous mode [ 143.771488][ T9815] hsr_slave_1: left promiscuous mode [ 143.777820][ T9815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.780369][ T9815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.783926][ T9815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.786338][ T9815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.811122][ T9815] veth1_macvtap: left promiscuous mode [ 143.815461][ T9815] veth0_macvtap: left promiscuous mode [ 143.815493][T10971] __nla_validate_parse: 14 callbacks suppressed [ 143.815504][T10971] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1524'. [ 143.817356][ T9815] veth1_vlan: left promiscuous mode [ 143.824545][ T9815] veth0_vlan: left promiscuous mode [ 143.885542][ T9815] pim6reg (unregistering): left allmulticast mode [ 143.917262][T10991] nbd: socks must be embedded in a SOCK_ITEM attr [ 144.134788][ T5941] Bluetooth: hci1: command tx timeout [ 144.384532][ T9815] team_slave_1 (unregistering): left promiscuous mode [ 144.389674][ T9815] team0 (unregistering): Port device team_slave_1 removed [ 144.455303][ T9815] team_slave_0 (unregistering): left promiscuous mode [ 144.458068][ T9815] team0 (unregistering): Port device team_slave_0 removed [ 144.615772][ T6117] Process accounting resumed [ 144.620000][ T40] audit: type=1400 audit(2000000091.727:1614): avc: denied { accept } for pid=10993 comm="syz.2.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 144.621372][T10995] fuse: Bad value for 'fd' [ 144.627597][T10987] Falling back ldisc for ttyprintk. [ 145.137026][T10899] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 145.141045][T10899] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 145.147401][T10899] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 145.154337][T10899] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 145.221596][T10899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.235541][T10899] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.250675][ T1206] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.253226][ T5941] Bluetooth: hci3: command 0x0406 tx timeout [ 145.253576][ T1206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.279217][ T1206] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.281475][ T1206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.426860][ T9815] IPVS: stop unused estimator thread 0... [ 145.468493][T10899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.619463][T10899] veth0_vlan: entered promiscuous mode [ 145.627226][T10899] veth1_vlan: entered promiscuous mode [ 145.654412][T10899] veth0_macvtap: entered promiscuous mode [ 145.670699][T10899] veth1_macvtap: entered promiscuous mode [ 145.680305][T10899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.686509][T10899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.690745][T10899] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.693616][T10899] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.696445][T10899] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.699124][T10899] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.747653][ T1206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.750934][ T1206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.766973][ T9817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.769601][ T9817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.776613][ T40] audit: type=1400 audit(2000000092.887:1615): avc: denied { mounton } for pid=10899 comm="syz-executor" path="/syzkaller.sUufvu/syz-tmp" dev="sda1" ino=2038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 145.785105][ T40] audit: type=1400 audit(2000000092.887:1616): avc: denied { mounton } for pid=10899 comm="syz-executor" path="/syzkaller.sUufvu/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 145.795131][ T40] audit: type=1400 audit(2000000092.887:1617): avc: denied { mounton } for pid=10899 comm="syz-executor" path="/syzkaller.sUufvu/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=34682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 145.805375][ T40] audit: type=1400 audit(2000000092.897:1618): avc: denied { mounton } for pid=10899 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2826 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 145.812522][ T40] audit: type=1400 audit(2000000092.897:1619): avc: denied { mount } for pid=10899 comm="syz-executor" name="/" dev="gadgetfs" ino=7787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 145.820190][ T40] audit: type=1400 audit(2000000092.897:1620): avc: denied { mounton } for pid=10899 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 145.853644][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1499'. [ 145.856598][T11071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1499'. [ 146.017572][T11078] program syz.2.1541 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.091904][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1543'. [ 146.099486][T11086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1543'. [ 146.158788][T11094] xt_SECMARK: invalid mode: 0 [ 146.196130][T11099] xt_CT: You must specify a L4 protocol and not use inversions on it [ 146.224509][ T5946] Bluetooth: hci1: command tx timeout [ 146.240972][T11104] random: crng reseeded on system resumption [ 146.249554][T11104] Restarting kernel threads ... [ 146.252315][T11104] Done restarting kernel threads. [ 146.427848][T11128] bridge6: entered promiscuous mode [ 146.429858][T11128] bridge6: entered allmulticast mode [ 146.568452][T11147] netlink: 'syz.0.1555': attribute type 9 has an invalid length. [ 146.673472][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1558'. [ 146.676819][T11157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1558'. [ 146.679656][T11157] netlink: 'syz.0.1558': attribute type 19 has an invalid length. [ 147.158126][T11188] vxcan0: entered promiscuous mode [ 147.182006][T11190] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1566'. [ 147.192825][T11190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1566'. [ 147.196902][T11190] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1566'. [ 147.243417][T11192] autofs: Bad value for 'fd' [ 147.352686][T11205] NILFS (nullb0): couldn't find nilfs on the device [ 147.574740][ T6016] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 147.627637][T11223] 9pnet: Could not find request transport: rdmaD7Et=0x0000000000004e24 [ 147.733702][ T6016] usb 8-1: Using ep0 maxpacket: 16 [ 147.737845][ T6016] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.753421][ T6016] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.757737][ T6016] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 147.765215][ T6016] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 147.768962][ T6016] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.778268][ T6016] usb 8-1: config 0 descriptor?? [ 147.967591][T11253] netlink: 'syz.0.1587': attribute type 1 has an invalid length. [ 147.970846][T11253] netlink: 'syz.0.1587': attribute type 2 has an invalid length. [ 148.192404][T11204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=11204 comm=syz.3.1571 [ 148.200161][ T6016] usbhid 8-1:0.0: can't add hid device: -71 [ 148.202775][ T6016] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 148.212567][ T6016] usb 8-1: USB disconnect, device number 13 [ 148.293225][ T5946] Bluetooth: hci1: command tx timeout [ 148.796728][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 148.796745][ T40] audit: type=1400 audit(2000000095.907:1633): avc: denied { append } for pid=11273 comm="syz.3.1595" name="usbmon5" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 148.798885][T11275] binder: 11273:11275 ioctl c0306201 2000000003c0 returned -14 [ 148.856204][T11281] __nla_validate_parse: 1 callbacks suppressed [ 148.856221][T11281] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1597'. [ 148.918577][T11290] openvswitch: netlink: Missing key (keys=40, expected=100) [ 148.947545][ T40] audit: type=1400 audit(2000000096.057:1634): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 148.956231][T11297] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1601'. [ 148.961159][T11297] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1601'. [ 149.021459][ T5946] Bluetooth: hci3: unexpected event for opcode 0x0c2d [ 149.079652][ T40] audit: type=1326 audit(2000000096.187:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11314 comm="syz.0.1607" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff511d8e929 code=0x7ffc0000 [ 149.091887][ T40] audit: type=1326 audit(2000000096.187:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11314 comm="syz.0.1607" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff511d8e929 code=0x7ffc0000 [ 149.101705][ T40] audit: type=1326 audit(2000000096.187:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11314 comm="syz.0.1607" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff511d8e929 code=0x7ffc0000 [ 149.120367][ T40] audit: type=1326 audit(2000000096.187:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11314 comm="syz.0.1607" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff511d8e929 code=0x7ffc0000 [ 149.143944][ T40] audit: type=1326 audit(2000000096.187:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11314 comm="syz.0.1607" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff511d8e929 code=0x7ffc0000 [ 149.150999][ T40] audit: type=1326 audit(2000000096.187:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11314 comm="syz.0.1607" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff511d8e929 code=0x7ffc0000 [ 149.159819][ T40] audit: type=1326 audit(2000000096.187:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11314 comm="syz.0.1607" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff511d8e929 code=0x7ffc0000 [ 149.167145][ T40] audit: type=1326 audit(2000000096.187:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11314 comm="syz.0.1607" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff511d8e929 code=0x7ffc0000 [ 149.266881][T11341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1612'. [ 149.270611][T11341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1612'. [ 149.274915][T11341] netlink: 'syz.4.1612': attribute type 6 has an invalid length. [ 149.322407][T11346] geneve2: entered promiscuous mode [ 149.325044][T11346] geneve2: entered allmulticast mode [ 149.351466][T11348] syz.3.1614: attempt to access beyond end of device [ 149.351466][T11348] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 149.357163][T11348] (syz.3.1614,11348,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 149.357666][T11351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1617'. [ 149.359710][T11348] (syz.3.1614,11348,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 149.367740][T11348] (syz.3.1614,11348,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 149.370525][T11348] (syz.3.1614,11348,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 149.372021][T11351] netlink: 'syz.2.1617': attribute type 5 has an invalid length. [ 149.404960][T11348] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1614'. [ 149.595400][T11379] fuse: Bad value for 'user_id' [ 149.597437][T11379] fuse: Bad value for 'user_id' [ 149.785059][ T53] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 149.930218][T11399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1632'. [ 149.938178][ T53] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 149.941587][ T53] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 149.945636][ T53] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 149.950894][ T53] usb 8-1: string descriptor 0 read error: -22 [ 149.954773][ T53] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.958014][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.964927][T11372] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 150.174541][ T53] cdc_ncm 8-1:1.0: bind() failure [ 150.179490][ T53] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 150.181724][ T53] cdc_ncm 8-1:1.1: bind() failure [ 150.187062][ T53] usb 8-1: USB disconnect, device number 14 [ 150.258564][T11361] orangefs_mount: mount request failed with -4 [ 150.383334][ T5946] Bluetooth: hci1: command tx timeout [ 150.395800][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1639'. [ 150.548089][T11432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1642'. [ 150.728502][T11441] xt_CT: No such helper "pptp" [ 150.738504][T11441] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 150.741327][T11441] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 150.745257][T11441] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 151.038683][T11489] ufs: You didn't specify the type of your ufs filesystem [ 151.038683][T11489] [ 151.038683][T11489] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 151.038683][T11489] [ 151.038683][T11489] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 151.055513][T11489] ufs: failed to set blocksize [ 151.421491][ T9815] tipc: Subscription rejected, illegal request [ 151.759807][T11535] netlink: 'syz.0.1672': attribute type 10 has an invalid length. [ 151.862986][T11542] 9pnet: Could not find request transport: unixncer2 [ 151.930634][T11550] xfrm0 speed is unknown, defaulting to 1000 [ 151.934557][T11550] xfrm0 speed is unknown, defaulting to 1000 [ 151.940712][T11550] xfrm0 speed is unknown, defaulting to 1000 [ 151.950040][T11550] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 151.962533][T11550] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 152.005386][T11550] xfrm0 speed is unknown, defaulting to 1000 [ 152.010699][T11550] xfrm0 speed is unknown, defaulting to 1000 [ 152.013508][T11550] xfrm0 speed is unknown, defaulting to 1000 [ 152.016170][T11550] xfrm0 speed is unknown, defaulting to 1000 [ 152.103321][T11565] 8021q: adding VLAN 0 to HW filter on device bond10 [ 152.254878][T11580] 9pnet_fd: Insufficient options for proto=fd [ 152.295871][T11588] sp0: Synchronizing with TNC [ 152.313149][T11587] [U] [ 152.346165][T11590] /dev/sg0: Can't lookup blockdev [ 152.713692][ T53] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 152.755294][T11629] netlink: 'syz.2.1696': attribute type 3 has an invalid length. [ 152.758514][T11629] netlink: 'syz.2.1696': attribute type 3 has an invalid length. [ 152.761529][T11629] netlink: 'syz.2.1696': attribute type 3 has an invalid length. [ 152.765152][T11629] netlink: 'syz.2.1696': attribute type 3 has an invalid length. [ 152.768183][T11629] netlink: 'syz.2.1696': attribute type 3 has an invalid length. [ 152.771327][T11629] netlink: 'syz.2.1696': attribute type 3 has an invalid length. [ 152.774094][T11629] netlink: 'syz.2.1696': attribute type 3 has an invalid length. [ 152.778814][T11629] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 152.835786][T11631] 9pnet: Could not find request transport: rdmO [ 152.864501][ T53] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 152.867186][ T53] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 152.870249][ T53] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 152.873104][ T53] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 152.876449][ T53] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 152.882668][ T53] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 152.885613][ T53] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 152.888124][ T53] usb 8-1: Product: syz [ 152.889453][ T53] usb 8-1: Manufacturer: syz [ 152.894230][ T53] cdc_wdm 8-1:1.0: skipping garbage [ 152.896041][ T53] cdc_wdm 8-1:1.0: skipping garbage [ 152.900162][ T53] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 152.902034][ T53] cdc_wdm 8-1:1.0: Unknown control protocol [ 153.047923][T11644] loop8: detected capacity change from 0 to 8 [ 153.052798][T11644] Dev loop8: unable to read RDB block 8 [ 153.055238][T11644] loop8: unable to read partition table [ 153.057182][T11644] loop8: partition table beyond EOD, truncated [ 153.059224][T11644] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 153.106457][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 153.108570][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 153.110683][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 153.112757][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 153.115260][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 153.117244][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 153.119629][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 153.122041][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 153.124189][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 153.126233][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 153.128347][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 153.130452][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 153.132521][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 153.134529][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 153.136523][ T53] usb 8-1: USB disconnect, device number 15 [ 153.138488][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 153.138500][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 153.138508][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 153.352994][ T838] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 153.513025][ T838] usb 7-1: Using ep0 maxpacket: 16 [ 153.515936][ T838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.519306][ T838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.523258][ T838] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 153.527459][ T838] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 153.530222][ T838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.533995][ T838] usb 7-1: config 0 descriptor?? [ 153.943697][ T838] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 153.948028][ T838] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 153.950343][ T838] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 153.952488][ T838] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 153.954945][ T838] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 153.959101][ T838] input: HID 0955:7214 Haptics as /devices/virtual/input/input19 [ 153.989608][ T838] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 153.995274][ T838] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 154.079570][T11656] 9pnet_fd: Insufficient options for proto=fd [ 154.239036][ T40] kauditd_printk_skb: 72 callbacks suppressed [ 154.239053][ T40] audit: type=1400 audit(2000000101.347:1715): avc: denied { setattr } for pid=11657 comm="syz.3.1706" name="swradio7" dev="devtmpfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 154.288351][T11663] validate_nla: 41 callbacks suppressed [ 154.288368][T11663] netlink: 'syz.2.1701': attribute type 2 has an invalid length. [ 154.294557][T11663] __nla_validate_parse: 10 callbacks suppressed [ 154.294572][T11663] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1701'. [ 154.974298][T11667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1707'. [ 154.977529][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1707'. [ 155.006540][ T5998] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 155.011388][ T5998] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENOENT [ 155.019963][ T5998] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 155.029619][T11668] kernel profiling enabled (shift: 7) [ 155.033246][ T5998] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 155.065441][T11669] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1707'. [ 155.068749][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1707'. [ 155.163575][ T54] usb 7-1: reset high-speed USB device number 12 using dummy_hcd [ 155.312974][ T54] usb 7-1: device descriptor read/64, error -32 [ 155.583066][ T54] usb 7-1: reset high-speed USB device number 12 using dummy_hcd [ 155.723020][ T54] usb 7-1: device descriptor read/64, error -32 [ 155.963955][ T5941] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.968630][ T5941] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.971515][ T5941] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.980223][ T5941] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.983001][ T54] usb 7-1: reset high-speed USB device number 12 using dummy_hcd [ 155.986466][ T5941] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.013267][ T54] usb 7-1: device descriptor read/8, error -32 [ 156.261163][T11684] tipc: Started in network mode [ 156.265446][T11684] tipc: Node identity 4, cluster identity 4711 [ 156.267509][T11684] tipc: Node number set to 4 [ 156.310722][T11675] xfrm0 speed is unknown, defaulting to 1000 [ 156.390018][T11698] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1713'. [ 156.392850][T11698] tipc: Invalid UDP bearer configuration [ 156.392879][T11698] tipc: Enabling of bearer rejected, failed to enable media [ 156.405046][T11701] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1715'. [ 156.432585][T11701] netlink: 'syz.2.1715': attribute type 2 has an invalid length. [ 156.472288][ T1206] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.475904][ T1206] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.487863][T11675] chnl_net:caif_netlink_parms(): no params data found [ 156.498321][ T40] audit: type=1400 audit(2000000103.607:1716): avc: denied { firmware_load } for pid=11712 comm="syz.2.1717" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 156.500142][T11716] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1718'. [ 156.540524][T11725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1720'. [ 156.574407][T11713] syz.2.1717 (11713) used greatest stack depth: 19800 bytes left [ 156.579325][ T1206] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.582526][ T1206] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.700622][ T1206] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.706302][ T1206] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.718108][T11675] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.720464][T11675] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.722722][T11675] bridge_slave_0: entered allmulticast mode [ 156.727228][T11675] bridge_slave_0: entered promiscuous mode [ 156.730240][T11675] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.732491][T11675] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.735040][T11675] bridge_slave_1: entered allmulticast mode [ 156.738155][T11675] bridge_slave_1: entered promiscuous mode [ 156.741998][T11740] xfrm0 speed is unknown, defaulting to 1000 [ 156.791674][ T1206] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.795440][ T1206] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.818448][T11675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.823580][T11675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.867959][T11675] team0: Port device team_slave_0 added [ 156.871651][T11675] team0: Port device team_slave_1 added [ 156.906221][T11675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.908542][T11675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.916568][T11675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.946242][T11675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.948433][T11675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.963057][T11675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.019712][T11675] hsr_slave_0: entered promiscuous mode [ 157.021908][T11675] hsr_slave_1: entered promiscuous mode [ 157.025592][T11675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.028028][T11675] Cannot create hsr debugfs directory [ 157.203067][ T54] usb 7-1: reset high-speed USB device number 12 using dummy_hcd [ 157.233434][ T54] usb 7-1: device reset changed ep0 maxpacket size! [ 157.241223][ T5998] usb 7-1: USB disconnect, device number 12 [ 157.413106][ T5998] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 157.549954][ T1206] bond7 (unregistering): (slave bridge5): Releasing active interface [ 157.583188][ T5998] usb 7-1: Using ep0 maxpacket: 8 [ 157.586013][ T5998] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.589411][ T5998] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 157.592194][ T5998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.596327][ T5998] usb 7-1: config 0 descriptor?? [ 157.711202][ T1206] bond0 (unregistering): Released all slaves [ 157.791684][ T1206] bond1 (unregistering): Released all slaves [ 157.863825][ T1206] bond2 (unregistering): Released all slaves [ 157.929130][ T1206] bond3 (unregistering): Released all slaves [ 157.995623][ T1206] bond4 (unregistering): Released all slaves [ 158.054285][ T5941] Bluetooth: hci4: command tx timeout [ 158.061717][ T1206] bond5 (unregistering): Released all slaves [ 158.069695][ T1206] bond6 (unregistering): Released all slaves [ 158.075870][ T1206] bond7 (unregistering): Released all slaves [ 158.082314][ T1206] bond8 (unregistering): Released all slaves [ 158.089981][ T1206] bond9 (unregistering): Released all slaves [ 158.163897][ T1206] bond10 (unregistering): Released all slaves [ 158.205068][ T61] xfrm0 speed is unknown, defaulting to 1000 [ 158.207938][ T61] infiniband syz1: ib_query_port failed (-19) [ 158.312177][ T5998] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 158.323143][ T5998] usb 7-1: USB disconnect, device number 13 [ 158.345362][ T40] audit: type=1400 audit(2000000105.457:1717): avc: denied { listen } for pid=11794 comm="syz.4.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 158.348471][ T1206] tipc: Left network mode [ 158.351293][ T40] audit: type=1400 audit(2000000105.457:1718): avc: denied { accept } for pid=11794 comm="syz.4.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 158.404576][T11806] Dead loop on virtual device ip6_vti0, fix it urgently! [ 158.628720][ T1206] hsr_slave_0: left promiscuous mode [ 158.633520][ T1206] hsr_slave_1: left promiscuous mode [ 158.652776][T11830] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1744'. [ 158.668901][ T1206] veth0_macvtap: left promiscuous mode [ 158.671075][ T1206] veth1_vlan: left promiscuous mode [ 158.673532][ T1206] veth0_vlan: left promiscuous mode [ 158.717805][ T1206] pim6reg (unregistering): left allmulticast mode [ 159.763942][ T40] audit: type=1400 audit(2000000106.877:1719): avc: denied { getopt } for pid=11872 comm="syz.2.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 159.774748][ T40] audit: type=1400 audit(2000000106.887:1720): avc: denied { ioctl } for pid=11872 comm="syz.2.1752" path="socket:[40355]" dev="sockfs" ino=40355 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 159.942474][T11675] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 159.959561][T11675] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 159.964223][T11675] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 159.964673][T11893] tmpfs: Unknown parameter 'usrquota%‚KЮ' [ 159.971751][T11675] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 160.002730][ T1206] IPVS: stop unused estimator thread 0... [ 160.059269][T11675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.072411][T11675] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.078927][ T1206] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.081174][ T1206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.114818][ T40] audit: type=1400 audit(2000000107.227:1721): avc: denied { read } for pid=11919 comm="syz.3.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 160.134136][ T5941] Bluetooth: hci4: command tx timeout [ 160.141283][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.143659][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.272845][T11675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.300566][T11675] veth0_vlan: entered promiscuous mode [ 160.308156][T11675] veth1_vlan: entered promiscuous mode [ 160.335561][T11675] veth0_macvtap: entered promiscuous mode [ 160.339322][T11675] veth1_macvtap: entered promiscuous mode [ 160.351252][T11675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.359206][T11675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.365506][T11675] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.368248][T11675] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.370919][T11675] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.374140][T11675] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.383348][ T61] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 160.412318][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.414915][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.427617][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.430065][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.545528][ T61] usb 8-1: No LPM exit latency info found, disabling LPM. [ 160.547833][ T61] usb 8-1: too many configurations: 97, using maximum allowed: 8 [ 160.551363][ T61] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 160.555078][ T61] usb 8-1: can't read configurations, error -61 [ 160.593156][T11952] __nla_validate_parse: 1 callbacks suppressed [ 160.593167][T11952] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1766'. [ 160.599106][T11952] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1766'. [ 160.601936][T11952] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1766'. [ 160.683262][ T61] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 160.855964][ T61] usb 8-1: No LPM exit latency info found, disabling LPM. [ 160.858199][ T61] usb 8-1: too many configurations: 97, using maximum allowed: 8 [ 160.861926][ T61] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 160.864599][ T61] usb 8-1: can't read configurations, error -61 [ 160.866781][ T61] usb usb8-port1: attempt power cycle [ 160.969626][T11956] Invalid logical block size (4092) [ 161.203330][ T61] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 161.226284][ T61] usb 8-1: No LPM exit latency info found, disabling LPM. [ 161.228392][ T61] usb 8-1: too many configurations: 97, using maximum allowed: 8 [ 161.231683][ T61] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 161.234371][ T61] usb 8-1: can't read configurations, error -61 [ 161.340101][ T40] audit: type=1400 audit(2000000108.447:1722): avc: denied { append } for pid=11960 comm="syz.4.1769" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 161.363338][ T61] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 161.396134][ T61] usb 8-1: No LPM exit latency info found, disabling LPM. [ 161.398901][ T61] usb 8-1: too many configurations: 97, using maximum allowed: 8 [ 161.404615][ T61] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 161.407423][ T61] usb 8-1: can't read configurations, error -61 [ 161.410910][ T61] usb usb8-port1: unable to enumerate USB device [ 161.423692][ T40] audit: type=1400 audit(2000000108.527:1723): avc: denied { create } for pid=11962 comm="syz.4.1770" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 161.434088][T11963] (syz.4.1770,11963,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 162.051119][T11977] cgroup: name respecified [ 162.137482][T11981] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 162.213134][ T5941] Bluetooth: hci4: command tx timeout [ 162.361431][T11990] netlink: zone id is out of range [ 162.363867][T11990] netlink: zone id is out of range [ 162.365801][T11990] netlink: zone id is out of range [ 162.376891][T11990] netlink: set zone limit has 4 unknown bytes [ 162.510086][ T40] audit: type=1400 audit(2000000109.617:1724): avc: denied { bind } for pid=12005 comm="syz.4.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 162.520994][T12006] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 162.524222][T12006] SELinux: failed to load policy [ 162.527470][T12006] overlayfs: failed to resolve './file1': -2 [ 162.737396][T12020] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1789'. [ 162.759713][T12023] nbd: must specify a size in bytes for the device [ 162.771866][ T40] audit: type=1400 audit(2000000109.877:1725): avc: denied { setopt } for pid=12025 comm="syz.4.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 163.127728][T12069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12069 comm=syz.4.1804 [ 163.219989][ T40] audit: type=1400 audit(2000000110.327:1726): avc: denied { setopt } for pid=12076 comm="syz.3.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 163.282718][T12085] netlink: 'syz.2.1810': attribute type 1 has an invalid length. [ 163.285376][T12085] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1810'. [ 163.289765][T12085] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1810'. [ 163.567163][T12112] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1819'. [ 163.604358][T12115] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 163.612502][T12115] CIFS mount error: No usable UNC path provided in device string! [ 163.612502][T12115] [ 163.621834][T12115] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 163.624727][T12115] CIFS mount error: No usable UNC path provided in device string! [ 163.624727][T12115] [ 163.625201][T12118] SELinux: policydb version 1402900228 does not match my version range 15-34 [ 163.627889][T12115] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 163.630662][T12118] SELinux: failed to load policy [ 163.634187][T12118] netlink: 'syz.3.1821': attribute type 1 has an invalid length. [ 163.638855][T12118] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1821'. [ 163.672996][ T40] audit: type=1400 audit(2000000110.777:1727): avc: denied { remount } for pid=12123 comm="syz.4.1823" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 163.686812][T12124] geneve1: entered allmulticast mode [ 163.730530][T12127] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 163.868743][T12148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1832'. [ 163.875620][T12148] delete_channel: no stack [ 163.894111][T12150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1833'. [ 163.899033][ T40] audit: type=1400 audit(2000000111.007:1728): avc: denied { ioctl } for pid=12149 comm="syz.2.1833" path="socket:[38903]" dev="sockfs" ino=38903 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 163.948270][T12155] random: crng reseeded on system resumption [ 163.960295][T12155] Restarting kernel threads ... [ 163.963913][T12155] Done restarting kernel threads. [ 164.040855][T12168] xt_ipcomp: unknown flags 12 [ 164.157213][T12172] xt_TPROXY: Can be used only with -p tcp or -p udp [ 164.293089][ T5946] Bluetooth: hci4: command tx timeout [ 164.377035][T12203] tmpfs: Bad value for 'mpol' [ 164.737207][T12237] loop6: detected capacity change from 0 to 7 [ 164.740880][T12237] Dev loop6: unable to read RDB block 7 [ 164.744806][T12237] loop6: unable to read partition table [ 164.747000][T12237] loop6: partition table beyond EOD, truncated [ 164.748982][T12237] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 164.924472][T12260] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 164.946800][T12260] netlink: 'syz.3.1867': attribute type 11 has an invalid length. [ 164.982054][T12259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.058759][T12266] netlink: 'syz.0.1870': attribute type 1 has an invalid length. [ 165.233895][T12268] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 165.451158][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 165.451173][ T40] audit: type=1400 audit(2000000112.557:1730): avc: denied { map } for pid=12290 comm="syz.0.1879" path="socket:[41966]" dev="sockfs" ino=41966 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 165.459454][T12291] omfs: Invalid superblock (0) [ 165.462876][ T40] audit: type=1400 audit(2000000112.557:1731): avc: denied { read accept } for pid=12290 comm="syz.0.1879" path="socket:[41966]" dev="sockfs" ino=41966 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 165.474996][T12291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=12291 comm=syz.0.1879 [ 165.481858][ T40] audit: type=1400 audit(2000000112.587:1732): avc: denied { read } for pid=12290 comm="syz.0.1879" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 165.744878][T12320] tmpfs: Unknown parameter 'Mpol' [ 165.868965][T12327] __nla_validate_parse: 4 callbacks suppressed [ 165.868977][T12327] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1890'. [ 165.934972][ T40] audit: type=1400 audit(2000000113.047:1733): avc: denied { connect } for pid=12328 comm="syz.2.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 165.941181][ T40] audit: type=1400 audit(2000000113.047:1734): avc: denied { ioctl } for pid=12328 comm="syz.2.1891" path="socket:[43066]" dev="sockfs" ino=43066 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.027904][ T40] audit: type=1400 audit(2000000113.137:1735): avc: denied { append } for pid=12340 comm="syz.0.1895" name="video9" dev="devtmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 166.061809][T12347] 9pnet_virtio: no channels available for device syz [ 166.065280][T12346] 9pnet_virtio: no channels available for device syz [ 166.065939][ T40] audit: type=1400 audit(2000000113.177:1736): avc: denied { mounton } for pid=12345 comm="syz.3.1897" path="/469/file0" dev="9p" ino=35913826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.068329][T12346] 9pnet_virtio: no channels available for device syz [ 166.312996][ T61] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 166.373104][ T5946] Bluetooth: hci4: command 0x0405 tx timeout [ 166.469604][ T61] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 166.472617][ T61] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.475332][ T61] usb 5-1: Product: syz [ 166.476783][ T61] usb 5-1: Manufacturer: syz [ 166.478534][ T61] usb 5-1: SerialNumber: syz [ 166.489508][ T61] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 166.507603][ T6117] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 166.573077][ T5998] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 166.712538][ T837] usb 5-1: USB disconnect, device number 3 [ 166.722990][ T5998] usb 8-1: Using ep0 maxpacket: 32 [ 166.725897][ T5998] usb 8-1: config 0 has an invalid interface number: 195 but max is 2 [ 166.728548][ T5998] usb 8-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 166.732366][ T5998] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 166.735956][ T5998] usb 8-1: config 0 has no interface number 0 [ 166.738342][ T5998] usb 8-1: config 0 interface 195 altsetting 250 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 166.742746][ T5998] usb 8-1: config 0 interface 195 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 166.747965][ T5998] usb 8-1: config 0 interface 195 has no altsetting 0 [ 166.752202][ T5998] usb 8-1: New USB device found, idVendor=041e, idProduct=4051, bcdDevice=bb.33 [ 166.755888][ T5998] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.759030][ T5998] usb 8-1: Product: 禮鑟헛炅㼠薽冈猳郥댩㽭ꨩ䥜撫뼂껄奠毫母諎诅촁ʞ聨뵉셭듈箤츴欼⏧湦쮓肞꼐仉빈흏ᓾ2 [ 166.765125][ T5998] usb 8-1: Manufacturer: 嫀ᄊ䇿橊營뒹뮦쩍䇱삒⃐䣜썄奊촉쯑鱞蝸ქᅬ蠏賋畦剫ꪴ浇묛㎔幙῰僌煮能ෑ㒙뫝ຢ퉨䆽ﶼ䐺렔⾿℄컨油쪂톞ܔ鶛ᕎ鮽䅙委훈ፎ符뿫⫛핸郞ᭂ脱ఖ៍꟫꘭⾤띔뮿ퟃ뎨屢拱⛓ [ 166.775132][ T5998] usb 8-1: SerialNumber: Ⰺ [ 166.782072][ T5998] usb 8-1: config 0 descriptor?? [ 166.834770][T12363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1901'. [ 166.939887][T12370] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 167.343103][ T61] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 167.494852][ T61] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 9 [ 167.498027][ T61] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.503633][ T61] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 167.506371][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 167.508799][ T61] usb 7-1: Product: syz [ 167.510210][ T61] usb 7-1: Manufacturer: syz [ 167.511735][ T61] usb 7-1: SerialNumber: syz [ 167.515491][T12377] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 167.573215][ T6117] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 167.577151][ T6117] ath9k_htc: Failed to initialize the device [ 167.579621][ T837] usb 5-1: ath9k_htc: USB layer deinitialized [ 167.722430][ T61] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 167.921515][ T40] audit: type=1400 audit(2000000115.027:1737): avc: denied { read write } for pid=12375 comm="syz.2.1906" name="lp0" dev="devtmpfs" ino=3131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 167.924812][ C2] usblp0: nonzero write bulk status received: -71 [ 167.930968][ T40] audit: type=1400 audit(2000000115.027:1738): avc: denied { open } for pid=12375 comm="syz.2.1906" path="/dev/usb/lp0" dev="devtmpfs" ino=3131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 167.935847][T12377] binder: 12375:12377 ioctl c0306201 200000000180 returned -22 [ 167.940676][ T40] audit: type=1400 audit(2000000115.047:1739): avc: denied { mount } for pid=12375 comm="syz.2.1906" name="/" dev="configfs" ino=3235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 169.080703][T12397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1911'. [ 169.138060][T12401] netlink: 'syz.0.1912': attribute type 11 has an invalid length. [ 169.140552][T12401] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1912'. [ 169.144462][T12401] netlink: 'syz.0.1912': attribute type 10 has an invalid length. [ 169.162741][T12401] team0: Port device wlan1 added [ 169.172541][T12401] netlink: 'syz.0.1912': attribute type 10 has an invalid length. [ 169.184177][T12401] team0: Port device wlan1 removed [ 169.189814][T12401] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 169.195587][T12400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.288331][ T5998] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4051 [ 169.293465][ T5998] gspca_zc3xx: reg_w_i err -71 [ 169.297845][ T5998] gspca_zc3xx 8-1:0.195: probe with driver gspca_zc3xx failed with error -71 [ 169.305264][ T5998] usb 8-1: USB disconnect, device number 20 [ 170.037173][ T5998] usb 7-1: USB disconnect, device number 14 [ 170.045243][ T5998] usblp0: removed [ 170.168486][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1918'. [ 170.735467][T12444] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.070911][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 171.070927][ T40] audit: type=1400 audit(2000000118.177:1744): avc: denied { create } for pid=12456 comm="syz.3.1930" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 171.079731][ T40] audit: type=1400 audit(2000000118.177:1745): avc: denied { write } for pid=12456 comm="syz.3.1930" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 171.087588][ T40] audit: type=1400 audit(2000000118.177:1746): avc: denied { nlmsg_write } for pid=12456 comm="syz.3.1930" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 171.102850][T12460] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1931'. [ 171.155749][T12464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1933'. [ 171.188896][T12468] netlink: 'syz.0.1934': attribute type 21 has an invalid length. [ 171.191863][T12468] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1934'. [ 171.224332][T12474] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 171.226501][T12474] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 171.230366][T12474] vhci_hcd vhci_hcd.0: Device attached [ 171.236698][T12476] vhci_hcd: unknown pdu 1 [ 171.238331][ T12] vhci_hcd: stop threads [ 171.239738][ T12] vhci_hcd: release socket [ 171.241155][ T12] vhci_hcd: disconnect device [ 171.256321][T12482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1938'. [ 171.309759][T12485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1938'. [ 171.389056][T12484] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 171.540455][T12491] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 171.721923][T12505] netlink: 'syz.2.1946': attribute type 7 has an invalid length. [ 171.761724][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1947'. [ 171.767119][T12507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1947'. [ 171.769900][T12507] netlink: 'syz.2.1947': attribute type 20 has an invalid length. [ 171.950669][ T40] audit: type=1400 audit(2000000119.057:1747): avc: denied { getopt } for pid=12519 comm="syz.0.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 172.085624][ T40] audit: type=1800 audit(2000000119.197:1748): pid=12524 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1952" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 172.163916][ T40] audit: type=1400 audit(2000000119.277:1749): avc: denied { ioctl } for pid=12527 comm="syz.0.1954" path="socket:[44481]" dev="sockfs" ino=44481 ioctlcmd=0x9423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 172.167009][T12528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1954'. [ 172.179590][T12528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1954'. [ 172.199048][ T40] audit: type=1400 audit(2000000119.307:1750): avc: denied { getopt } for pid=12527 comm="syz.0.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.199542][T12528] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1954'. [ 172.210170][ T40] audit: type=1400 audit(2000000119.317:1751): avc: denied { write } for pid=12527 comm="syz.0.1954" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 172.294685][T12531] input: syz1 as /devices/virtual/input/input22 [ 172.305058][ T40] audit: type=1400 audit(2000000119.417:1752): avc: denied { setattr } for pid=12530 comm="syz.0.1955" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 172.414952][ T40] audit: type=1400 audit(2000000119.527:1753): avc: denied { ioctl } for pid=12533 comm="syz.0.1956" path="socket:[44499]" dev="sockfs" ino=44499 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 172.472680][T12539] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 172.547058][T12540] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 172.823088][ T53] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 172.893018][T12549] loop5: detected capacity change from 0 to 524287999 [ 172.953636][ T53] usb 8-1: device descriptor read/64, error -71 [ 172.958272][T12549] netlink: 'syz.2.1961': attribute type 1 has an invalid length. [ 172.980923][T12549] bond5: entered promiscuous mode [ 172.983034][T12549] bond5: entered allmulticast mode [ 172.988598][T12549] geneve4: entered allmulticast mode [ 172.992157][T12549] bond5: (slave geneve4): making interface the new active one [ 172.994630][T12549] geneve4: entered promiscuous mode [ 172.996979][T12549] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 173.003340][T12549] bond5: left promiscuous mode [ 173.004883][T12549] geneve4: left promiscuous mode [ 173.006519][T12549] bond5: left allmulticast mode [ 173.008633][T12549] 8021q: adding VLAN 0 to HW filter on device bond5 [ 173.192996][ T53] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 173.323687][ T53] usb 8-1: device descriptor read/64, error -71 [ 173.438050][ T53] usb usb8-port1: attempt power cycle [ 173.733110][ T837] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 173.773180][ T53] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 173.793772][ T53] usb 8-1: device descriptor read/8, error -71 [ 173.893174][ T837] usb 5-1: Using ep0 maxpacket: 8 [ 173.897417][ T837] usb 5-1: config 2 interface 0 has no altsetting 0 [ 173.902511][ T837] usb 5-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 173.906390][ T837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.909656][ T837] usb 5-1: Product: syz [ 173.911494][ T837] usb 5-1: Manufacturer: syz [ 173.913512][ T837] usb 5-1: SerialNumber: syz [ 174.043077][ T53] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 174.065176][ T53] usb 8-1: device descriptor read/8, error -71 [ 174.127722][ T837] usb 5-1: USB disconnect, device number 4 [ 174.174720][ T53] usb usb8-port1: unable to enumerate USB device [ 174.665688][T12592] ufs: You didn't specify the type of your ufs filesystem [ 174.665688][T12592] [ 174.665688][T12592] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 174.665688][T12592] [ 174.665688][T12592] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 174.676616][T12592] ufs: failed to set blocksize [ 174.704904][T12596] netlink: 'syz.2.1975': attribute type 1 has an invalid length. [ 174.721428][T12596] 8021q: adding VLAN 0 to HW filter on device bond6 [ 174.796758][T12596] vlan3: entered allmulticast mode [ 174.799979][T12596] bond6: (slave vlan3): making interface the new active one [ 174.802899][T12596] bond6: (slave vlan3): Enslaving as an active interface with an up link [ 175.307413][T12608] loop5: detected capacity change from 0 to 524287999 [ 175.362028][T12613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.523597][T12617] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 175.528575][T12617] xt_hashlimit: size too large, truncated to 1048576 [ 176.007973][T12627] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 176.084255][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 176.084270][ T40] audit: type=1400 audit(2000000123.197:1759): avc: denied { accept } for pid=12628 comm="syz.4.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 176.540308][T12650] netlink: 'syz.2.1991': attribute type 1 has an invalid length. [ 176.551165][T12650] bond7: entered promiscuous mode [ 176.554659][T12650] 8021q: adding VLAN 0 to HW filter on device bond7 [ 176.564417][T12650] 8021q: adding VLAN 0 to HW filter on device bond7 [ 176.566686][T12650] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address [ 176.569864][T12650] bond7: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 176.573975][T12650] bond7: (slave xfrm1): making interface the new active one [ 176.576284][T12650] xfrm1: entered promiscuous mode [ 176.578774][T12650] bond7: (slave xfrm1): Enslaving as an active interface with an up link [ 176.590307][T12650] __nla_validate_parse: 7 callbacks suppressed [ 176.590321][T12650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1991'. [ 176.595503][T12650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1991'. [ 176.628295][ T40] audit: type=1400 audit(2000000123.737:1760): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 176.694242][ T5941] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 176.815321][T12666] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 176.820989][T12666] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 176.851858][ T40] audit: type=1400 audit(2000000123.957:1761): avc: denied { ioctl } for pid=12671 comm="syz.3.1999" path="socket:[44908]" dev="sockfs" ino=44908 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 177.011288][ T40] audit: type=1400 audit(2000000124.117:1762): avc: denied { mounton } for pid=12671 comm="syz.3.1999" path="/file0" dev="ramfs" ino=45856 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 177.038632][ T40] audit: type=1804 audit(2000000124.147:1763): pid=12672 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1999" name="file0" dev="ramfs" ino=45856 res=1 errno=0 [ 177.173589][T12710] program syz.2.2005 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.197100][T12714] netlink: 57 bytes leftover after parsing attributes in process `syz.0.2006'. [ 177.215433][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 177.218174][ T1113] ata1.00: irq_stat 0x40000000 [ 177.219641][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT [ 177.222160][ T1113] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 10 [ 177.222160][ T1113] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 177.229499][ T1113] ata1.00: status: { DRDY ERR } [ 177.231625][ T1113] ata1.00: error: { ABRT } [ 177.234825][ T1113] ata1.00: device reported invalid CHS sector 0 [ 177.244937][T12720] program syz.2.2005 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.246051][T12712] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4c06, magic 4c != 6b] [ 177.252995][ T40] audit: type=1400 audit(2000000124.357:1764): avc: denied { ioctl } for pid=12711 comm="syz.3.2007" path="/494/file0/file0" dev="fuse" ino=0 ioctlcmd=0x4c06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 177.345773][T12732] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2010'. [ 177.484252][ T1113] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 177.486962][ T1113] ata1: failed to read log page 10h (errno=-5) [ 177.489507][ T1113] ata1.00: exception Emask 0x1 SAct 0x1000 SErr 0x0 action 0x0 [ 177.492755][ T1113] ata1.00: irq_stat 0x40000000 [ 177.495744][ T1113] ata1.00: failed command: WRITE FPDMA QUEUED [ 177.498356][ T1113] ata1.00: cmd 61/18:60:5e:0a:10/00:00:00:00:00/40 tag 12 ncq dma 12288 out [ 177.498356][ T1113] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 177.504829][ T1113] ata1.00: status: { DRDY } [ 177.506304][ T1113] ata1.00: error: { ABRT } [ 177.508998][ T1113] ata1.00: configured for UDMA/100 [ 177.511430][ T1113] ata1: EH complete [ 177.729946][ T40] audit: type=1400 audit(2000000124.837:1765): avc: denied { mounton } for pid=12741 comm="syz.2.2012" path="/457/file0" dev="tmpfs" ino=2529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 177.730058][T12745] fuse: Bad value for 'group_id' [ 177.743680][T12745] fuse: Bad value for 'group_id' [ 178.306403][ T40] audit: type=1400 audit(2000000125.417:1766): avc: denied { cmd } for pid=12765 comm="syz.0.2017" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 178.327617][T12769] netlink: 'syz.3.2018': attribute type 4 has an invalid length. [ 178.374857][T12772] bridge0: port 3(veth0_to_bridge) entered blocking state [ 178.377241][T12772] bridge0: port 3(veth0_to_bridge) entered disabled state [ 178.379641][T12772] veth0_to_bridge: entered allmulticast mode [ 178.382679][T12772] veth0_to_bridge: entered promiscuous mode [ 178.387151][T12772] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.391035][ T40] audit: type=1400 audit(2000000125.497:1767): avc: denied { open } for pid=12777 comm="syz.4.2021" path="/dev/ptyqc" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 178.391728][T12772] bridge0: port 3(veth0_to_bridge) entered blocking state [ 178.398895][ T40] audit: type=1400 audit(2000000125.497:1768): avc: denied { ioctl } for pid=12777 comm="syz.4.2021" path="/dev/ptyqc" dev="devtmpfs" ino=139 ioctlcmd=0x5443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 178.401173][T12772] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 178.510913][T12796] geneve5: entered promiscuous mode [ 178.512671][T12796] geneve5: entered allmulticast mode [ 178.535400][T12801] netlink: 'syz.3.2028': attribute type 1 has an invalid length. [ 178.720045][T12816] netlink: 328 bytes leftover after parsing attributes in process `syz.4.2035'. [ 178.728940][T12818] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 178.735864][T12818] IPVS: Unknown mcast interface: nicvf0 [ 178.777360][T12824] fuse: blksize only supported for fuseblk [ 178.845510][T12836] binder: BINDER_SET_CONTEXT_MGR already set [ 178.847999][T12836] binder: 12832:12836 ioctl 4018620d 2000000000c0 returned -16 [ 178.913072][ T838] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 179.073061][ T838] usb 7-1: Using ep0 maxpacket: 8 [ 179.075985][ T838] usb 7-1: config 2 interface 0 has no altsetting 0 [ 179.085554][ T838] usb 7-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 179.088362][ T838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.090844][ T838] usb 7-1: Product: syz [ 179.092168][ T838] usb 7-1: Manufacturer: syz [ 179.094146][ T838] usb 7-1: SerialNumber: syz [ 179.208825][T12863] kvm: pic: non byte read [ 179.212833][T12863] kvm: pic: level sensitive irq not supported [ 179.215213][T12863] kvm: pic: non byte read [ 179.221847][T12863] kvm: pic: level sensitive irq not supported [ 179.222368][T12863] kvm: pic: non byte read [ 179.228724][T12863] kvm: pic: level sensitive irq not supported [ 179.229105][T12863] kvm: pic: non byte read [ 179.339329][T12811] could not allocate digest TFM handle blake2s-128-x86 [ 179.348585][ T838] usb 7-1: USB disconnect, device number 15 [ 179.431336][T12885] tipc: Trying to set illegal importance in message [ 179.443819][T12885] input: syz1 as /devices/virtual/input/input23 [ 179.824542][T12910] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 179.996463][T12940] program syz.4.2074 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.997129][T12924] /dev/sr0: Can't open blockdev [ 180.084209][T12929] /dev/sr0: Can't open blockdev [ 180.191312][T12956] netlink: 'syz.2.2079': attribute type 1 has an invalid length. [ 180.216438][T12956] macvtap1: entered allmulticast mode [ 180.218371][T12956] veth0_macvtap: entered allmulticast mode [ 180.223632][T12957] macvtap2: entered allmulticast mode [ 180.308330][T12961] @: renamed from vlan0 (while UP) [ 180.442784][T12966] netfs: Couldn't get user pages (rc=-14) [ 180.492054][T12970] xt_l2tp: unknown flags: 17 [ 180.784820][T12982] tipc: Started in network mode [ 180.786540][T12982] tipc: Node identity 7e8473539fbc, cluster identity 4711 [ 180.788978][T12982] tipc: Enabled bearer , priority 0 [ 180.791700][T12982] syzkaller0: entered promiscuous mode [ 180.795029][T12982] syzkaller0: entered allmulticast mode [ 180.811432][T12982] tipc: Resetting bearer [ 180.816955][T12982] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2090'. [ 180.824336][T12981] tipc: Resetting bearer [ 180.835664][T12981] tipc: Disabling bearer [ 181.027946][T12995] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 181.063580][T13000] batman_adv: batadv: cannot create tp meter kthread [ 181.156011][T13010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2097'. [ 181.471239][T13019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.541038][T13019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.844565][T13045] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2107'. [ 181.847557][T13045] 0: renamed from hsr0 (while UP) [ 181.850769][T13045] 0: entered allmulticast mode [ 181.852365][T13045] hsr_slave_0: entered allmulticast mode [ 181.854630][T13045] hsr_slave_1: entered allmulticast mode [ 181.857019][T13045] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 182.077451][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 182.077467][ T40] audit: type=1400 audit(2000000129.187:1781): avc: denied { accept } for pid=13066 comm="syz.4.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.144181][T13069] vivid-009: ================= START STATUS ================= [ 182.147846][T13069] vivid-009: FM Deviation: 75000 [ 182.150068][T13069] vivid-009: ================== END STATUS ================== [ 182.172676][ T40] audit: type=1400 audit(2000000129.277:1782): avc: denied { write } for pid=13074 comm="syz.0.2117" name="usbmon2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 182.185491][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2117'. [ 182.188822][T13075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2117'. [ 182.207343][T13077] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2118'. [ 182.211838][T13077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2118'. [ 182.269424][T13084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2120'. [ 182.372585][T13090] tmpfs: Unknown parameter 'uid>00000000000000060929' [ 182.381541][T13090] macvlan2: entered promiscuous mode [ 182.384007][T13090] macvlan2: entered allmulticast mode [ 182.388889][T13090] bond0: (slave macvlan2): Opening slave failed [ 182.438003][T13096] tmpfs: Unknown parameter 'uid>00000000000000060929' [ 182.456266][T13101] openvswitch: netlink: Missing key (keys=40, expected=100) [ 182.465303][T13101] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 182.524185][T13105] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2127'. [ 182.861341][ T40] audit: type=1400 audit(2000000129.967:1783): avc: denied { write } for pid=13131 comm="syz.0.2136" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 182.873011][ T5998] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 182.950419][T13141] 9pnet_fd: Insufficient options for proto=fd [ 182.970891][ T40] audit: type=1400 audit(2000000130.077:1784): avc: denied { write } for pid=13143 comm="syz.3.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 183.034060][ T5998] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 183.043677][ T5998] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.047056][ T5998] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.051038][ T5998] usb 7-1: config 0 interface 0 has no altsetting 0 [ 183.063915][ T5998] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.066555][ T5998] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.069529][ T5998] usb 7-1: config 0 interface 0 has no altsetting 0 [ 183.072330][ T5998] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.075973][ T5998] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.079461][ T5998] usb 7-1: config 0 interface 0 has no altsetting 0 [ 183.082793][ T5998] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.086112][ T5998] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.089303][ T5998] usb 7-1: config 0 interface 0 has no altsetting 0 [ 183.092234][ T5998] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.096333][ T5998] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.100261][ T5998] usb 7-1: config 0 interface 0 has no altsetting 0 [ 183.104669][ T5998] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.108941][ T5998] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.112072][ T5998] usb 7-1: config 0 interface 0 has no altsetting 0 [ 183.115165][ T5998] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.117819][ T5998] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.120942][ T5998] usb 7-1: config 0 interface 0 has no altsetting 0 [ 183.123807][ T5998] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.126413][ T5998] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.129523][ T5998] usb 7-1: config 0 interface 0 has no altsetting 0 [ 183.133519][ T5998] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 183.136174][ T5998] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 183.138616][ T5998] usb 7-1: Product: syz [ 183.139872][ T5998] usb 7-1: Manufacturer: syz [ 183.141258][ T5998] usb 7-1: SerialNumber: syz [ 183.146775][ T5998] usb 7-1: config 0 descriptor?? [ 183.154102][ T5998] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 183.241586][ T40] audit: type=1400 audit(2000000130.347:1785): avc: denied { map } for pid=13159 comm="syz.0.2146" path="/proc/286/pagemap" dev="proc" ino=48568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 183.369524][ T6016] usb 7-1: USB disconnect, device number 16 [ 183.382858][ T6016] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 183.399475][T13168] overlayfs: failed to verify upper root origin [ 183.509142][ T9808] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x4b [ 183.514129][T13180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62739 sclass=netlink_route_socket pid=13180 comm=syz.0.2149 [ 183.639084][T13184] netlink: 'syz.4.2152': attribute type 13 has an invalid length. [ 183.642448][T13184] macvtap0: entered promiscuous mode [ 183.646780][T13184] macvtap0: refused to change device tx_queue_len [ 183.839784][T13194] CIFS mount error: No usable UNC path provided in device string! [ 183.839784][T13194] [ 183.843434][T13195] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2155'. [ 183.846103][T13194] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 183.846966][T13195] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 183.917139][ T40] audit: type=1400 audit(2000000131.027:1786): avc: denied { mount } for pid=13190 comm="syz.4.2154" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 184.096704][T13214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2160'. [ 184.101293][T13214] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 184.109127][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2160'. [ 184.485326][T13226] xt_l2tp: unknown flags: 17 [ 184.489089][ T40] audit: type=1326 audit(2000000131.597:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13225 comm="syz.0.2162" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf61f8e929 code=0x0 [ 184.583166][ T61] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 184.613094][ T5938] Bluetooth: hci4: command 0x0405 tx timeout [ 184.733223][ T61] usb 8-1: Using ep0 maxpacket: 16 [ 184.737320][ T61] usb 8-1: config 3 has an invalid interface number: 139 but max is 3 [ 184.740083][ T61] usb 8-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 184.743193][ T61] usb 8-1: config 3 has an invalid interface number: 159 but max is 3 [ 184.746405][ T61] usb 8-1: config 3 has an invalid interface number: 147 but max is 3 [ 184.749367][ T61] usb 8-1: config 3 has an invalid interface number: 201 but max is 3 [ 184.752030][ T61] usb 8-1: config 3 has an invalid interface number: 39 but max is 3 [ 184.755199][ T61] usb 8-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 184.758079][ T61] usb 8-1: config 3 has an invalid interface number: 71 but max is 3 [ 184.760595][ T61] usb 8-1: config 3 has 6 interfaces, different from the descriptor's value: 4 [ 184.763729][ T61] usb 8-1: config 3 has no interface number 0 [ 184.768186][ T61] usb 8-1: config 3 has no interface number 1 [ 184.770477][ T61] usb 8-1: config 3 has no interface number 2 [ 184.772390][ T61] usb 8-1: config 3 has no interface number 3 [ 184.774624][ T61] usb 8-1: config 3 has no interface number 4 [ 184.776572][ T61] usb 8-1: config 3 has no interface number 5 [ 184.778528][ T61] usb 8-1: config 3 interface 139 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 184.781912][ T61] usb 8-1: config 3 interface 139 altsetting 3 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 184.785740][ T61] usb 8-1: config 3 interface 139 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 184.788990][ T61] usb 8-1: config 3 interface 139 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 184.792255][ T61] usb 8-1: config 3 interface 139 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 184.795695][ T61] usb 8-1: config 3 interface 139 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 184.799107][ T61] usb 8-1: config 3 interface 139 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 184.802365][ T61] usb 8-1: config 3 interface 139 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 184.805790][ T61] usb 8-1: config 3 interface 139 altsetting 3 has a duplicate endpoint with address 0x82, skipping [ 184.809075][ T61] usb 8-1: config 3 interface 139 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 184.812351][ T61] usb 8-1: config 3 interface 159 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 184.815965][ T61] usb 8-1: config 3 interface 159 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 184.819284][ T61] usb 8-1: config 3 interface 159 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 184.822472][ T61] usb 8-1: config 3 interface 159 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 184.825822][ T61] usb 8-1: config 3 interface 159 altsetting 1 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 184.829144][ T61] usb 8-1: config 3 interface 159 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 184.832493][ T61] usb 8-1: config 3 interface 159 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 184.835943][ T61] usb 8-1: config 3 interface 159 altsetting 1 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 184.839624][ T61] usb 8-1: config 3 interface 159 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 1023 [ 184.842765][ T61] usb 8-1: config 3 interface 159 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 184.846376][ T61] usb 8-1: config 3 interface 159 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 184.849674][ T61] usb 8-1: config 3 interface 159 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 184.853109][ T61] usb 8-1: config 3 interface 159 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 184.856455][ T61] usb 8-1: config 3 interface 159 altsetting 1 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 184.859810][ T61] usb 8-1: config 3 interface 147 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 184.863181][ T61] usb 8-1: config 3 interface 147 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 184.866659][ T61] usb 8-1: config 3 interface 201 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 184.870813][ T61] usb 8-1: config 3 interface 39 altsetting 168 has an invalid descriptor for endpoint zero, skipping [ 184.874860][ T61] usb 8-1: config 3 interface 39 altsetting 168 has a duplicate endpoint with address 0xE, skipping [ 184.878421][ T61] usb 8-1: config 3 interface 39 altsetting 168 has a duplicate endpoint with address 0x2, skipping [ 184.881753][ T61] usb 8-1: config 3 interface 39 altsetting 168 has a duplicate endpoint with address 0xF, skipping [ 184.885370][ T61] usb 8-1: config 3 interface 39 altsetting 168 endpoint 0x5 has an invalid bInterval 127, changing to 7 [ 184.888860][ T61] usb 8-1: config 3 interface 39 altsetting 168 has a duplicate endpoint with address 0x2, skipping [ 184.892118][ T61] usb 8-1: config 3 interface 39 altsetting 168 has a duplicate endpoint with address 0xD, skipping [ 184.895938][ T61] usb 8-1: config 3 interface 39 altsetting 168 has a duplicate endpoint with address 0xA, skipping [ 184.899921][ T61] usb 8-1: config 3 interface 39 altsetting 168 has a duplicate endpoint with address 0xD, skipping [ 184.903434][ T61] usb 8-1: config 3 interface 39 altsetting 168 has a duplicate endpoint with address 0xD, skipping [ 184.906868][ T61] usb 8-1: config 3 interface 39 altsetting 168 has 10 endpoint descriptors, different from the interface descriptor's value: 29 [ 184.910870][ T61] usb 8-1: too many endpoints for config 3 interface 71 altsetting 255: 241, using maximum allowed: 30 [ 184.914441][ T61] usb 8-1: config 3 interface 71 altsetting 255 has a duplicate endpoint with address 0x1, skipping [ 184.918336][ T61] usb 8-1: config 3 interface 71 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 184.921512][ T61] usb 8-1: config 3 interface 71 altsetting 255 has a duplicate endpoint with address 0x6, skipping [ 184.924997][ T61] usb 8-1: config 3 interface 71 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 241 [ 184.930278][ T61] usb 8-1: config 3 interface 139 has no altsetting 0 [ 184.933315][ T61] usb 8-1: config 3 interface 159 has no altsetting 0 [ 184.935928][ T61] usb 8-1: config 3 interface 39 has no altsetting 0 [ 184.938726][ T61] usb 8-1: config 3 interface 71 has no altsetting 0 [ 184.943613][ T61] usb 8-1: Dual-Role OTG device on HNP port [ 184.946275][ T61] usb 8-1: New USB device found, idVendor=2019, idProduct=ab24, bcdDevice=7e.cb [ 184.949855][ T61] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.953070][ T61] usb 8-1: Product: ⠉ [ 184.954775][ T61] usb 8-1: Manufacturer: ఉ [ 184.956602][ T61] usb 8-1: SerialNumber: 揥뵀䂜꯯ᕹ咹㆖昊껞䄂輠질趺ຐ封깎柢ཞʭשׂ菈壶룦滔칫Ꮎ梁㳭剥胛๩걺䩪祙䧨螾낇꨼储䳲ꛗ義㵭沧㕠꽮鳲끜᠚綩瀾젧桨孜우项䜱䥃읛៨캆부늏풮ᰈ㈷꽟磲鉟鰀얂鰬쥉ۘ냓媋ﯰጏᚭ [ 184.972177][T13222] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 184.975928][T13220] block nbd4: shutting down sockets [ 184.999369][ T40] audit: type=1400 audit(2000000132.107:1788): avc: denied { shutdown } for pid=13237 comm="syz.2.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 185.053317][T13240] trusted_key: encrypted_key: master key parameter is missing [ 185.096420][T13245] openvswitch: netlink: Duplicate key (type 0). [ 185.198545][ T61] usb 8-1: USB disconnect, device number 25 [ 185.202808][T13252] netlink: 'syz.2.2168': attribute type 9 has an invalid length. [ 185.206904][T13252] netlink: 'syz.2.2168': attribute type 7 has an invalid length. [ 185.210203][T13252] netlink: 'syz.2.2168': attribute type 8 has an invalid length. [ 185.322666][ T40] audit: type=1400 audit(2000000132.427:1789): avc: denied { bind } for pid=13256 comm="syz.4.2172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 185.381478][ T40] audit: type=1400 audit(2000000132.487:1790): avc: denied { map } for pid=13261 comm="syz.0.2173" path="/dev/video4" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 185.393033][T13262] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 185.789699][T13275] netlink: 'syz.4.2177': attribute type 1 has an invalid length. [ 185.919074][T13293] xt_l2tp: unknown flags: 17 [ 185.954149][T13297] netlink: 'syz.0.2183': attribute type 30 has an invalid length. [ 185.968533][T13297] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.972213][T13297] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.976615][T13297] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.980290][T13297] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.122404][ T5946] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 186.572139][ T5946] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 187.140386][T13361] __nla_validate_parse: 5 callbacks suppressed [ 187.140402][T13361] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2203'. [ 187.298750][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 187.298761][ T40] audit: type=1400 audit(2000000134.407:1798): avc: denied { mount } for pid=13372 comm="syz.0.2206" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 187.299898][T13373] dlm: no locking on control device [ 187.300881][ T40] audit: type=1400 audit(2000000134.407:1799): avc: denied { unmount } for pid=13372 comm="syz.0.2206" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 187.463277][ T5998] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 187.603036][ T5998] usb 9-1: device descriptor read/64, error -71 [ 187.854067][ T5998] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 187.983751][ T5998] usb 9-1: device descriptor read/64, error -71 [ 188.093183][ T5998] usb usb9-port1: attempt power cycle [ 188.247991][T13403] cgroup: name respecified [ 188.250084][T13403] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2215'. [ 188.378066][ T40] audit: type=1400 audit(2000000135.487:1800): avc: denied { setattr } for pid=13417 comm="syz.2.2220" name="vcs" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 188.433144][ T5998] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 188.446920][ T40] audit: type=1400 audit(2000000135.557:1801): avc: denied { setattr } for pid=13424 comm="syz.0.2222" path="socket:[49581]" dev="sockfs" ino=49581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 188.470725][ T5998] usb 9-1: device descriptor read/8, error -71 [ 188.558958][ T40] audit: type=1400 audit(2000000135.667:1802): avc: denied { mounton } for pid=13435 comm="syz.3.2226" path="/proc/1649/cgroup" dev="proc" ino=48920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 188.682710][T13451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.703036][ T5998] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 188.723847][ T5998] usb 9-1: device descriptor read/8, error -71 [ 188.833915][ T5998] usb usb9-port1: unable to enumerate USB device [ 189.156244][T13496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2246'. [ 189.287122][T13499] /dev/sr0: Can't open blockdev [ 189.290126][T13500] gfs2: gfs2 mount does not exist [ 189.326774][ T40] audit: type=1326 audit(2000000136.437:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13503 comm="syz.3.2249" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b86b8e929 code=0x7ffc0000 [ 189.336952][ T40] audit: type=1326 audit(2000000136.447:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13503 comm="syz.3.2249" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b86b8e929 code=0x7ffc0000 [ 189.346453][ T40] audit: type=1326 audit(2000000136.447:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13503 comm="syz.3.2249" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7b86b8e929 code=0x7ffc0000 [ 189.356068][ T40] audit: type=1326 audit(2000000136.447:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13503 comm="syz.3.2249" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b86b8e929 code=0x7ffc0000 [ 189.365791][ T40] audit: type=1326 audit(2000000136.447:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13503 comm="syz.3.2249" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b86b8e929 code=0x7ffc0000 [ 189.379416][T13506] netlink: 'syz.3.2250': attribute type 27 has an invalid length. [ 189.431348][T13507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2250'. [ 189.577156][T13506] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 189.601692][T13506] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.605517][T13506] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.611130][T13506] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.614086][T13506] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.617033][T13506] geneve2: left promiscuous mode [ 189.618911][T13506] geneve2: left allmulticast mode [ 189.651004][T13506] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.655410][T13506] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.659086][T13506] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.662808][T13506] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.690605][T13511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.694616][T13511] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.703502][T13511] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.768877][T13518] input: syz0 as /devices/virtual/input/input24 [ 189.774083][T13519] netlink: 'syz.0.2251': attribute type 10 has an invalid length. [ 189.778002][T13519] hsr_slave_0: left promiscuous mode [ 189.782241][T13519] hsr_slave_1: left promiscuous mode [ 189.840611][ T5946] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 189.977682][T13523] program syz.2.2254 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.018059][T13527] loop6: detected capacity change from 0 to 524287999 [ 190.247724][T13538] tipc: Started in network mode [ 190.249827][T13538] tipc: Node identity 4, cluster identity 4711 [ 190.252287][T13538] tipc: Node number set to 4 [ 190.438397][T13544] /dev/sr0: Can't open blockdev [ 190.553887][T13545] /dev/sr0: Can't open blockdev [ 190.723054][ T839] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 190.749227][T13568] tipc: Failed to remove unknown binding: 66,1,1/4:2306200628/2306200630 [ 190.753049][T13568] tipc: Failed to remove unknown binding: 66,1,1/4:2306200628/2306200630 [ 190.773587][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:03:ff:42:13:d0, vlan:0) [ 190.774250][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.778825][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:03:ff:42:13:d0, vlan:0) [ 190.783092][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.788061][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:03:ff:42:13:d0, vlan:0) [ 190.792480][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.797762][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:03:ff:42:13:d0, vlan:0) [ 190.801183][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.805197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:03:ff:42:13:d0, vlan:0) [ 190.883276][ T839] usb 5-1: Using ep0 maxpacket: 8 [ 190.899037][ T839] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 190.902826][ T839] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 190.923218][ T839] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 190.929017][ T839] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.943634][ T839] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 190.947212][ T839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.004455][ T1348] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 191.168117][ T839] usb 5-1: GET_CAPABILITIES returned 0 [ 191.170004][ T839] usbtmc 5-1:16.0: can't read capabilities [ 191.182447][ T1348] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.187675][ T1348] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.190703][ T1348] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 191.193986][ T1348] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.198267][ T1348] usb 9-1: config 0 descriptor?? [ 191.374878][ T839] usb 5-1: USB disconnect, device number 5 [ 191.603647][ T1348] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 191.606038][ T1348] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 191.608383][ T1348] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 191.610670][ T1348] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 191.612730][ T1348] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 191.622680][ T1348] cm6533_jd 0003:0D8C:0022.0006: hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 191.809210][ T1348] usb 9-1: USB disconnect, device number 6 [ 192.041831][T13620] loop2: detected capacity change from 0 to 7 [ 192.046239][T11620] Dev loop2: unable to read RDB block 7 [ 192.048722][T11620] loop2: AHDI p1 p2 p3 [ 192.050395][T11620] loop2: partition table partially beyond EOD, truncated [ 192.054642][T11620] loop2: p1 start 1601398130 is beyond EOD, truncated [ 192.057165][T11620] loop2: p2 start 1702059890 is beyond EOD, truncated [ 192.072826][T13620] Dev loop2: unable to read RDB block 7 [ 192.077245][T13620] loop2: AHDI p1 p2 p3 [ 192.079023][T13620] loop2: partition table partially beyond EOD, truncated [ 192.082582][T13620] loop2: p1 start 1601398130 is beyond EOD, truncated [ 192.087838][T13620] loop2: p2 start 1702059890 is beyond EOD, truncated [ 192.210068][T13625] syz.3.2282 (13625): drop_caches: 2 [ 192.218307][ T5344] Dev loop2: unable to read RDB block 7 [ 192.220195][ T5344] loop2: AHDI p1 p2 p3 [ 192.221580][ T5344] loop2: partition table partially beyond EOD, truncated [ 192.224071][ T5344] loop2: p1 start 1601398130 is beyond EOD, truncated [ 192.226307][ T5344] loop2: p2 start 1702059890 is beyond EOD, truncated [ 192.302435][T13628] netlink: 'syz.2.2283': attribute type 1 has an invalid length. [ 192.335480][T13628] 8021q: adding VLAN 0 to HW filter on device bond8 [ 192.340918][T13629] input: syz0 as /devices/virtual/input/input25 [ 192.383550][T13629] 8021q: adding VLAN 0 to HW filter on device bond8 [ 192.387016][T13629] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 192.391824][T13629] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 192.431715][T13628] gretap1: entered promiscuous mode [ 192.642104][T13641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2287'. [ 192.646386][T13641] netlink: 'syz.2.2287': attribute type 2 has an invalid length. [ 192.649539][T13641] netlink: 784 bytes leftover after parsing attributes in process `syz.2.2287'. [ 192.754594][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 192.754608][ T40] audit: type=1400 audit(2000000139.867:1834): avc: denied { ioctl } for pid=13646 comm="syz.2.2289" path="socket:[50988]" dev="sockfs" ino=50988 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 192.768646][T13647] program syz.2.2289 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.036863][T13652] (syz.2.2290,13652,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 193.040919][T13652] (syz.2.2290,13652,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 193.365741][T13663] netlink: 146840 bytes leftover after parsing attributes in process `syz.2.2293'. [ 193.445182][T13665] kAFS: unparsable volume name [ 193.831810][T13671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2297'. [ 193.856981][T13671] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2297'. [ 193.860903][T13671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2297'. [ 194.004279][T13673] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2298'. [ 194.009726][ T40] audit: type=1400 audit(2000000141.117:1835): avc: denied { read } for pid=13672 comm="syz.4.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 194.090239][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.144411][ T40] audit: type=1400 audit(2000000141.257:1836): avc: denied { lock } for pid=13676 comm="syz.3.2300" path="socket:[51018]" dev="sockfs" ino=51018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 194.195712][ T40] audit: type=1400 audit(2000000141.277:1837): avc: denied { create } for pid=13676 comm="syz.3.2300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 194.633212][ T40] audit: type=1326 audit(2000000000.300:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13702 comm="syz.2.2307" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f2578e929 code=0x0 [ 194.712978][ C2] net_ratelimit: 79726 callbacks suppressed [ 194.712981][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.712991][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.713108][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.715510][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:03:ff:42:13:d0, vlan:0) [ 194.720324][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.724022][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.729124][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.733472][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.738142][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.741838][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:03:ff:42:13:d0, vlan:0) [ 194.768075][T13707] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 194.768110][T13706] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 195.677943][T13711] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2308'. [ 197.327569][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2314'. [ 197.330520][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2314'. [ 199.722950][ C1] net_ratelimit: 109017 callbacks suppressed [ 199.722964][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.723021][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.725096][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.728718][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.732355][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:03:ff:42:13:d0, vlan:0) [ 199.736121][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.739783][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.743502][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.747160][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.750794][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.732994][ C1] net_ratelimit: 111958 callbacks suppressed [ 204.733002][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.733007][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.733105][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:03:ff:42:13:d0, vlan:0) [ 204.735085][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.738771][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.742535][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.746217][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.749734][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.753398][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:03:ff:42:13:d0, vlan:0) [ 204.757056][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.572420][ T5938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.600988][ T5938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.609922][ T5938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.636748][ T5938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.649394][ T5938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.742946][ C2] net_ratelimit: 108459 callbacks suppressed [ 209.742958][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.743020][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:03:ff:42:13:d0, vlan:0) [ 209.744974][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.748638][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.752283][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.756098][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.760839][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.764563][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:03:ff:42:13:d0, vlan:0) [ 209.768340][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.771977][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.890731][ T5945] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.897765][ T5295] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 209.899167][ T5295] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 209.900342][ T5295] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 209.907552][ T5295] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 209.910329][ T5295] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 209.910760][ T5945] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.934026][ T5945] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.956719][ T5945] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.969602][ T5945] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 210.007357][T13735] chnl_net:caif_netlink_parms(): no params data found [ 212.753175][ T1424] ================================================================== [ 212.755742][ T1424] BUG: KASAN: slab-use-after-free in handle_tx+0x5dc/0x630 [ 212.758009][ T1424] Read of size 1 at addr ffff888057fb4490 by task aoe_tx0/1424 [ 212.760981][ T1424] [ 212.762276][ T1424] CPU: 3 UID: 0 PID: 1424 Comm: aoe_tx0 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 212.762290][ T1424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 212.762297][ T1424] Call Trace: [ 212.762302][ T1424] [ 212.762306][ T1424] dump_stack_lvl+0x116/0x1f0 [ 212.762331][ T1424] print_report+0xcd/0x680 [ 212.762345][ T1424] ? __virt_addr_valid+0x81/0x610 [ 212.762357][ T1424] ? __phys_addr+0xe8/0x180 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 212.762368][ T1424] ? handle_tx+0x5dc/0x630 [ 212.762382][ T1424] kasan_report+0xe0/0x110 [ 212.762396][ T1424] ? handle_tx+0x5dc/0x630 [ 212.762411][ T1424] handle_tx+0x5dc/0x630 [ 212.762427][ T1424] dev_hard_start_xmit+0x94/0x740 [ 212.762441][ T1424] __dev_queue_xmit+0x7eb/0x43e0 [ 212.762454][ T1424] ? lockdep_hardirqs_on+0x7c/0x110 [ 212.762468][ T1424] ? finish_task_switch.isra.0+0x221/0xc10 [ 212.762482][ T1424] ? rcu_is_watching+0x12/0xc0 [ 212.762495][ T1424] ? __pfx___dev_queue_xmit+0x10/0x10 [ 212.762508][ T1424] ? __lock_acquire+0xb8a/0x1c90 [ 212.762523][ T1424] ? __lock_acquire+0xb8a/0x1c90 [ 212.762540][ T1424] ? do_raw_spin_lock+0x12c/0x2b0 [ 212.762553][ T1424] ? rcu_is_watching+0x12/0xc0 [ 212.762566][ T1424] tx+0xcc/0x190 [ 212.762576][ T1424] ? __pfx_tx+0x10/0x10 [ 212.762583][ T1424] kthread+0x1e4/0x3e0 [ 212.762598][ T1424] ? find_held_lock+0x2b/0x80 [ 212.762609][ T1424] ? __pfx_kthread+0x10/0x10 [ 212.762623][ T1424] ? __pfx_default_wake_function+0x10/0x10 [ 212.762635][ T1424] ? lockdep_hardirqs_on+0x7c/0x110 [ 212.762649][ T1424] ? __kthread_parkme+0x19e/0x250 [ 212.762663][ T1424] ? __pfx_kthread+0x10/0x10 [ 212.762676][ T1424] kthread+0x3c2/0x780 [ 212.762685][ T1424] ? __pfx_kthread+0x10/0x10 [ 212.762694][ T1424] ? rcu_is_watching+0x12/0xc0 [ 212.762706][ T1424] ? __pfx_kthread+0x10/0x10 [ 212.762714][ T1424] ret_from_fork+0x5d4/0x6f0 [ 212.762728][ T1424] ? __pfx_kthread+0x10/0x10 [ 212.762737][ T1424] ret_from_fork_asm+0x1a/0x30 [ 212.762751][ T1424] [ 212.762754][ T1424] [ 212.782960][ T40] audit: type=1400 audit(2000000018.450:1839): avc: denied { write } for pid=5846 comm="syz-executor" path="pipe:[7264]" dev="pipefs" ino=7264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 212.783834][ T1424] Allocated by task 8898: [ 212.833457][ T1424] kasan_save_stack+0x33/0x60 [ 212.834954][ T1424] kasan_save_track+0x14/0x30 [ 212.836468][ T1424] __kasan_kmalloc+0xaa/0xb0 [ 212.837922][ T1424] alloc_tty_struct+0x96/0x8c0 [ 212.839649][ T1424] tty_init_dev.part.0+0x1e/0x500 [ 212.841555][ T1424] tty_open+0xa50/0xf90 [ 212.843049][ T1424] chrdev_open+0x234/0x6a0 [ 212.844510][ T1424] do_dentry_open+0x744/0x1c10 [ 212.846033][ T1424] vfs_open+0x82/0x3f0 [ 212.847314][ T1424] path_openat+0x1de4/0x2cb0 [ 212.848770][ T1424] do_filp_open+0x20b/0x470 [ 212.850211][ T1424] do_sys_openat2+0x11b/0x1d0 [ 212.851686][ T1424] __x64_sys_openat+0x174/0x210 [ 212.853200][ T1424] do_syscall_64+0xcd/0x4c0 [ 212.854652][ T1424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.856524][ T1424] [ 212.857294][ T1424] Freed by task 24: [ 212.858521][ T1424] kasan_save_stack+0x33/0x60 [ 212.860009][ T1424] kasan_save_track+0x14/0x30 [ 212.861484][ T1424] kasan_save_free_info+0x3b/0x60 [ 212.863081][ T1424] __kasan_slab_free+0x51/0x70 [ 212.864644][ T1424] kfree+0x2b4/0x4d0 [ 212.865935][ T1424] process_one_work+0x9cf/0x1b70 [ 212.867519][ T1424] worker_thread+0x6c8/0xf10 [ 212.868989][ T1424] kthread+0x3c2/0x780 [ 212.870288][ T1424] ret_from_fork+0x5d4/0x6f0 [ 212.871751][ T1424] ret_from_fork_asm+0x1a/0x30 [ 212.873261][ T1424] [ 212.874053][ T1424] Last potentially related work creation: [ 212.875885][ T1424] kasan_save_stack+0x33/0x60 [ 212.877378][ T1424] kasan_record_aux_stack+0xa7/0xc0 [ 212.879080][ T1424] insert_work+0x36/0x230 [ 212.880676][ T1424] __queue_work+0x97e/0x10f0 [ 212.882572][ T1424] queue_work_on+0x1a4/0x1f0 [ 212.884436][ T1424] release_tty+0x4de/0x5d0 [ 212.886266][ T1424] tty_release_struct+0xb7/0xe0 [ 212.888188][ T1424] tty_release+0xe2d/0x1430 [ 212.889984][ T1424] __fput+0x402/0xb70 [ 212.891617][ T1424] task_work_run+0x150/0x240 [ 212.893454][ T1424] do_exit+0x86c/0x2bd0 [ 212.895164][ T1424] do_group_exit+0xd3/0x2a0 [ 212.897073][ T1424] get_signal+0x2673/0x26d0 [ 212.898947][ T1424] arch_do_signal_or_restart+0x8f/0x7d0 [ 212.901143][ T1424] exit_to_user_mode_loop+0x84/0x110 [ 212.903262][ T1424] do_syscall_64+0x3f6/0x4c0 [ 212.905119][ T1424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.907605][ T1424] [ 212.908710][ T1424] The buggy address belongs to the object at ffff888057fb4000 [ 212.908710][ T1424] which belongs to the cache kmalloc-cg-2k of size 2048 [ 212.914551][ T1424] The buggy address is located 1168 bytes inside of [ 212.914551][ T1424] freed 2048-byte region [ffff888057fb4000, ffff888057fb4800) [ 212.919946][ T1424] [ 212.920939][ T1424] The buggy address belongs to the physical page: [ 212.923462][ T1424] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57fb0 [ 212.926915][ T1424] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 212.930308][ T1424] memcg:ffff8880552eb381 [ 212.932114][ T1424] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 212.935270][ T1424] page_type: f5(slab) [ 212.936890][ T1424] raw: 00fff00000000040 ffff88801b84c140 ffffea0000979800 dead000000000002 [ 212.940214][ T1424] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff8880552eb381 [ 212.943564][ T1424] head: 00fff00000000040 ffff88801b84c140 ffffea0000979800 dead000000000002 [ 212.946977][ T1424] head: 0000000000000000 0000000000080008 00000000f5000000 ffff8880552eb381 [ 212.950330][ T1424] head: 00fff00000000003 ffffea00015fec01 00000000ffffffff 00000000ffffffff [ 212.953817][ T1424] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 212.957205][ T1424] page dumped because: kasan: bad access detected [ 212.959709][ T1424] page_owner tracks the page as allocated [ 212.961955][ T1424] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7635, tgid 7633 (syz.1.502), ts 91465132048, free_ts 91465022191 [ 212.971321][ T1424] post_alloc_hook+0x1c0/0x230 [ 212.973220][ T1424] get_page_from_freelist+0x1321/0x3890 [ 212.975408][ T1424] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 212.977770][ T1424] alloc_pages_mpol+0x1fb/0x550 [ 212.979679][ T1424] new_slab+0x23b/0x330 [ 212.981315][ T1424] ___slab_alloc+0xd9c/0x1940 [ 212.983192][ T1424] __slab_alloc.constprop.0+0x56/0xb0 [ 212.985364][ T1424] __kmalloc_cache_noprof+0xfb/0x3e0 [ 212.987515][ T1424] bpf_prog_alloc_no_stats+0x120/0x630 [ 212.989709][ T1424] bpf_prog_alloc+0x3b/0x230 [ 212.991550][ T1424] bpf_prog_load+0x1a04/0x2490 [ 212.993417][ T1424] __sys_bpf+0x433c/0x4d80 [ 212.995207][ T1424] __x64_sys_bpf+0x78/0xc0 [ 212.996996][ T1424] do_syscall_64+0xcd/0x4c0 [ 212.998816][ T1424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.001133][ T1424] page last free pid 7635 tgid 7633 stack trace: [ 213.003558][ T1424] __free_frozen_pages+0x7fe/0x1180 [ 213.005571][ T1424] __folio_put+0x329/0x450 [ 213.007334][ T1424] bpf_check+0x90c/0xbc50 [ 213.009044][ T1424] bpf_prog_load+0xe41/0x2490 [ 213.010900][ T1424] __sys_bpf+0x433c/0x4d80 [ 213.012663][ T1424] __x64_sys_bpf+0x78/0xc0 [ 213.014429][ T1424] do_syscall_64+0xcd/0x4c0 [ 213.016268][ T1424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.018594][ T1424] [ 213.019545][ T1424] Memory state around the buggy address: [ 213.021717][ T1424] ffff888057fb4380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 213.024842][ T1424] ffff888057fb4400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 213.027976][ T1424] >ffff888057fb4480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 213.031072][ T1424] ^ [ 213.032853][ T1424] ffff888057fb4500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 213.036003][ T1424] ffff888057fb4580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 213.039107][ T1424] ================================================================== [ 213.042327][ T1424] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 213.045095][ T1424] CPU: 3 UID: 0 PID: 1424 Comm: aoe_tx0 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 213.049626][ T1424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 213.053809][ T1424] Call Trace: [ 213.055133][ T1424] [ 213.056340][ T1424] dump_stack_lvl+0x3d/0x1f0 [ 213.058195][ T1424] panic+0x71c/0x800 [ 213.059767][ T1424] ? __pfx_panic+0x10/0x10 [ 213.061549][ T1424] ? irqentry_exit+0x3b/0x90 [ 213.063388][ T1424] ? lockdep_hardirqs_on+0x7c/0x110 [ 213.065454][ T1424] ? handle_tx+0x5dc/0x630 [ 213.067328][ T1424] ? check_panic_on_warn+0x1f/0xb0 [ 213.069363][ T1424] ? handle_tx+0x5dc/0x630 [ 213.071151][ T1424] check_panic_on_warn+0xab/0xb0 [ 213.073099][ T1424] end_report+0x107/0x170 [ 213.074838][ T1424] kasan_report+0xee/0x110 [ 213.076622][ T1424] ? handle_tx+0x5dc/0x630 [ 213.078416][ T1424] handle_tx+0x5dc/0x630 [ 213.080104][ T1424] dev_hard_start_xmit+0x94/0x740 [ 213.082173][ T1424] __dev_queue_xmit+0x7eb/0x43e0 [ 213.084198][ T1424] ? lockdep_hardirqs_on+0x7c/0x110 [ 213.086365][ T1424] ? finish_task_switch.isra.0+0x221/0xc10 [ 213.088721][ T1424] ? rcu_is_watching+0x12/0xc0 [ 213.090642][ T1424] ? __pfx___dev_queue_xmit+0x10/0x10 [ 213.092884][ T1424] ? __lock_acquire+0xb8a/0x1c90 [ 213.095042][ T1424] ? __lock_acquire+0xb8a/0x1c90 [ 213.097176][ T1424] ? do_raw_spin_lock+0x12c/0x2b0 [ 213.099776][ T1424] ? rcu_is_watching+0x12/0xc0 [ 213.102255][ T1424] tx+0xcc/0x190 [ 213.103869][ T1424] ? __pfx_tx+0x10/0x10 [ 213.105523][ T1424] kthread+0x1e4/0x3e0 [ 213.107148][ T1424] ? find_held_lock+0x2b/0x80 [ 213.108981][ T1424] ? __pfx_kthread+0x10/0x10 [ 213.110767][ T1424] ? __pfx_default_wake_function+0x10/0x10 [ 213.113052][ T1424] ? lockdep_hardirqs_on+0x7c/0x110 [ 213.115138][ T1424] ? __kthread_parkme+0x19e/0x250 [ 213.117137][ T1424] ? __pfx_kthread+0x10/0x10 [ 213.118973][ T1424] kthread+0x3c2/0x780 [ 213.120561][ T1424] ? __pfx_kthread+0x10/0x10 [ 213.122374][ T1424] ? rcu_is_watching+0x12/0xc0 [ 213.124247][ T1424] ? __pfx_kthread+0x10/0x10 [ 213.126108][ T1424] ret_from_fork+0x5d4/0x6f0 [ 213.127960][ T1424] ? __pfx_kthread+0x10/0x10 [ 213.129787][ T1424] ret_from_fork_asm+0x1a/0x30 [ 213.131672][ T1424] [ 213.133609][ T1424] Kernel Offset: disabled [ 213.135387][ T1424] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:23:59 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffffff8e5c4940 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8df0c08f RDI=ffffffff8c157ca0 RBP=0000000000000001 RSP=ffffc900038073f8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000012007 R12=ffffffff816acad4 R13=0000000000000206 R14=ffff888026770000 R15=ffffc900038074e4 RIP=ffffffff819876c9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6752000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fafa8cae060 CR3=0000000036190000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000047f70 00007fafa8a003c0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000047f70 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000007 RBX=0000000000000004 RCX=0000000036198be1 RDX=0000000000000000 RSI=00000000501fefef RDI=ffff8880296e2fd0 RBP=ffff8880296e2440 RSP=ffffc9000069fb50 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff8880296e2f30 R13=ffff8880296e2fd0 R14=0000000000000004 R15=0000000000000001 RIP=ffffffff81980a53 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6852000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa5700e5000 CR3=000000000e382000 CR4=00352ef0 DR0=000003fffffffffe DR1=0000000000000ddb DR2=0000000000000006 DR3=0000000000000006 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc0f8 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4511e5e0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa56f384fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000372e 302e30332e323731 00007fa56f346a22 00007fa56d9f76c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa5700ed6c0 000000000036726e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffff888029100000 RBX=ffffc90000647c08 RCX=ffffffff816aed04 RDX=1ffff920000c8f74 RSI=0000000000000000 RDI=ffffc90000647bd8 RBP=ffff888029100000 RSP=ffffc90000647b28 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc90000647b78 R11=0000000000000001 R12=0000000000000000 R13=ffffc90000647c38 R14=ffffc90000647b78 R15=ffffc90000647ba0 RIP=ffffffff816aed04 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6952000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa56f3c3170 CR3=000000000e382000 CR4=00352ef0 DR0=0000040000000000 DR1=000000000000064f DR2=0000000000000006 DR3=0000000000000006 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe546184d00 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000300000014 0000000200000021 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000007 0000000400000017 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000001c ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558f2ca11d 000055558f2c8b00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8004010800040074 e40070616d656761 000000000000000b 0000555000000001 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 016ed60108000380 030c800800048080 000000010000001e 2210000600000001 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d5000207a446e777 b4654a062976e941 7f121bc500000032 a42ccd9000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5728c2cc65806e4e 4705e3452626d857 2592661500000033 e9f6523500000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003f0b00301d410 0003e3d0039397d9 3960e2bb00000034 f334c10300000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e7e0030100000000 0603e7d003010000 00080603e7c80301 0000020800000037 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0301000000000000 e7b8030100000208 0603e7b003010000 3208060300000036 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000020800000000 0302080003e79803 02080003e7900358 100003e700000035 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 800403f000000000 0003f0b00301d410 0003e3d0039397d9 3960e2bb00000034 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bfc25 RDI=ffffffff9b088320 RBP=ffffffff9b0882e0 RSP=ffffc90006eff458 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000032 R14=ffffffff9b0882e0 R15=ffffffff855bfbc0 RIP=ffffffff855bfc4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c29c0a1 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c8ce11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c8ce11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c8ce11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c8ce11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c8ce11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c8ce11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c8cf84488 00007f4c8cf84480 00007f4c8cf84478 00007f4c8cf84450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c8daed100 00007f4c8cf84440 00007f4c8cf84458 00007f4c8cf844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c8cf84498 00007f4c8cf84490 00007f4c8cf84488 00007f4c8cf84480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000