last executing test programs: 1m20.730065915s ago: executing program 0 (id=1092): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x1c, 0x1, 0x0, "6040a7190200002000000000000000ff1057e31e94000000000000000006ff00", 0x42303159}) times(&(0x7f0000000000)) 1m20.729443255s ago: executing program 0 (id=1093): getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x9, 0x4, 0x100010, 0x80, 0x5, 0x3, 0x7}, &(0x7f00000000c0)=0x9c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={r0, 0x7}, &(0x7f0000000140)=0x8) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x400200, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000001c0)={r0, 0x8}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r1, 0x4, 0x6}, &(0x7f0000000280)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000002c0), 0x8) getsockopt$sock_buf(r2, 0x1, 0x3b, &(0x7f0000000300)=""/60, &(0x7f0000000340)=0x3c) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r2) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20008880) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000600)={&(0x7f00000004c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r5, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x61}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x40004) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000640), 0x400000, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xac, r8, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x60}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x616}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x59, 0xbe, "d45237212c22cb62f9447a03281f1566f9bbfb17c61646d0d8b657ee9ee2c93f327a05cf564ba415917e8fc5348f9efc5ff027bfd7b1dd8db03c3a193b41ceeb81c9deb147374aa023e0b6361ff2a1c5f31dcb252c"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xb000}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x6dd}]}, 0xac}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) bind$qrtr(r7, &(0x7f0000000840)={0x2a, 0xfffffffffffffffe, 0x1}, 0xc) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), r7) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000a00)={&(0x7f0000000880), 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x8c, r9, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x5c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1f}}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44}, 0x44044) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000a40), &(0x7f0000000a80)=0xe) ioctl$FS_IOC_MEASURE_VERITY(r7, 0xc0046686, &(0x7f0000000ac0)={0x0, 0xf0, "a4bb7a31ebd47a9d564e06a1b41ce320fc011a94d620b064c5ae1e9bd27c3e0f05cc44bb44d768351f4ad024d97cc89b3b56e4ea025998450af4e954ad819aad60867a045028436ce21252ee0a5d96744448be3941351d98b0c7851b7fa896aca5a62cfb941caabb1a6f6c593bee3c239bd39d56d152140abf1e11696f5204b1efbee48f44816f552e67bfff744201ab7f5730210043ff39202777633bbeff0070197fe0531a1f8e0f71c4607ad5c10783178787839fae8900be0d04058471e4a57e57e765ef07a1fe0915fb4828ebe0c7a86c469253ba76e61705c7cb7d5141bd680d9e00d971987633252fd2277f16"}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(r10, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r11, 0x20, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4051) bind$bt_hci(r7, &(0x7f0000000d00)={0x1f, 0x1, 0x4}, 0x6) r12 = open_tree(r7, &(0x7f0000000d40)='./file0\x00', 0x800) getpeername$netrom(r12, &(0x7f0000000d80)={{0x3, @null}, [@null, @default, @default, @default, @null, @remote, @rose, @default]}, &(0x7f0000000e00)=0x48) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000e40)={r3, 0x3}, 0x8) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ec0), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000f00)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r10, &(0x7f0000001080)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x81004c}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x5c, r13, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}}, 0x0) 1m20.59093942s ago: executing program 0 (id=1094): madvise(&(0x7f0000122000/0x4000)=nil, 0x4000, 0x66) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x9, 0x40, 0x0, 0x51, 0xa}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@getstats={0x1c, 0x5e, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x5}, ["", "", ""]}, 0x1c}}, 0x8000002) 1m20.590559996s ago: executing program 0 (id=1095): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') (async) chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2001, 0x8e) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x6, 0x3, 0x0, 0x0, 0x8, "87a6678cd7a9a3870b5016ba450590bd2cd64d"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3a) madvise(&(0x7f00004ba000/0x2000)=nil, 0x2000, 0xc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xc0068000, 0x0, 0xfd6c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f00000031c0)={0x0, 0x0, 0x1000000, 0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) (async) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f00000000c0)={0x5, 0x9, 0x5, 0x6, 0x8}) (async) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f00000000c0)={0x5, 0x9, 0x5, 0x6, 0x8}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x1000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x20, 0xc}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x4) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x4000, 0x1e3) openat(r4, &(0x7f0000000040)='./file0\x00', 0x20c0, 0x90) (async) openat(r4, &(0x7f0000000040)='./file0\x00', 0x20c0, 0x90) 1m20.417409514s ago: executing program 0 (id=1096): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x18) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x18) (async) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) (async) 1m20.04055825s ago: executing program 0 (id=1102): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x100, 0x2, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405668, &(0x7f0000000100)={0x0, 0x1, 0x2}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000040)=0x8001, 0x4) 1m19.997095486s ago: executing program 32 (id=1102): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x100, 0x2, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405668, &(0x7f0000000100)={0x0, 0x1, 0x2}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000040)=0x8001, 0x4) 18.574813009s ago: executing program 3 (id=1886): r0 = syz_io_uring_setup(0x660b, &(0x7f0000000000)={0x0, 0x3fa, 0x4, 0x3, 0x170}, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) (async) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1) (async) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x2) (async, rerun: 64) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) (rerun: 64) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000001c0)=0x1) (async, rerun: 64) r1 = open(&(0x7f0000000200)='./file0\x00', 0x408002, 0x10) (rerun: 64) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000240)={0x3f, 0x2, 0x7, 0x8, "f9ebd016c58772b98862d0fd8abbcec0df05370cf1d692f0fbe42e52c410927914c1153e9f4bf4"}) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) fcntl$lock(r1, 0x22, &(0x7f00000002c0)={0x2, 0x3, 0x7b1f, 0x3, r2}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x4) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000380)={0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x6, 0xa, 0x6}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000540)={r4, r5, r7, 0x0, 0x0, 0x7, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r13, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004800}, 0x4) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000006c0)=""/109) (async) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0], 0x9, 0x1, 0x2, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000980)={&(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0], 0x2, 0x9, 0x3, 0x1}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000ac0)={&(0x7f00000009c0)=[0x0], &(0x7f0000000a00)=[0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x6, 0x7}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000c00)={&(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0], 0x7, 0x5, 0x3, 0x3}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000c80)={&(0x7f0000000c40)=[r10, r14, r9, r15, r12, r16, 0x0, r11, r17, r10], 0xa, r8, r6, 0x9, 0x0, 0x1, 0x6, {0x7, 0x1f, 0xfb, 0x7, 0x5, 0x200, 0x3, 0xe, 0x8, 0x5, 0x2, 0xcce, 0xd9, 0x7fff, "5d5e4574180a8ca01371b79c296d84933923bc123ac83df72d623769e2d093ab"}}) close_range(r1, r3, 0x2) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000d00)={0x0, 0x1, r1}) (async) close_range(r1, r3, 0x2) pwritev(r3, &(0x7f0000000e40)=[{&(0x7f0000000d40)="80d9c9430d303f051435bc0855e1f6d03930ae9b63d87c7b1adbb23f4890cd0e2bd2b1c6927959577b88045a9b0999b1f13ee34c9fa918ee28086a80f004f7c38f95e5b12d48cb5f903b835e28b9474fa2d45bf93a6f646ddcbffcc4f6c4d1909d787c806240dd02bf6eb06b94af963e6a99c047adc4153cd7558e1a8ac87e173e1704dcd40cf994e8ad237aded77727797348f2b7d79e5356ea8aaf92c5453ebc16fcb0235935059a9cce256ffbb20c4a8199b2f8ca43d24f921a0665dd294ced323f369b0fec663e38510fea7e37", 0xcf}], 0x1, 0x101, 0x9) (async) r18 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r18, 0x112, 0x4, &(0x7f0000000e80)={0x5, 0x8}, 0x2) 18.490238509s ago: executing program 3 (id=1888): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010023, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x8, 0x47504a4d, 0x1, @discrete={0x0, 0x6}}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) recvmmsg(r2, &(0x7f0000000340), 0x4000000000000da, 0xda, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010023, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x8, 0x47504a4d, 0x1, @discrete={0x0, 0x6}}) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) (async) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) (async) recvmmsg(r2, &(0x7f0000000340), 0x4000000000000da, 0xda, 0x0) (async) 18.489853363s ago: executing program 3 (id=1889): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = dup(r2) write$snddsp(r3, &(0x7f0000000180)='9', 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) 15.847351604s ago: executing program 3 (id=1910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x100de34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x90812, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f0000000740)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x2b, 0x1, @empty, @local, {[@hopopts={0xff}]}}}}}, 0x0) r3 = dup(r2) r4 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x39c, 0x17, 0x200, 0x70bd29, 0x25dfdbfc, {0x1e}, [@typed={0x8, 0x120, 0x0, 0x0, @pid=r4}, @typed={0x8, 0x54, 0x0, 0x0, @fd=r0}, @nested={0x1dd, 0x4e, 0x0, 0x1, [@nested={0x4, 0x100}, @generic="f7a9ef9a37d1b58cfd7a941883c79f656ac8228977f8f70e65f3404b3bf6b6cec9ac87be9b1670cb3365859b0239ac8a1183947ba563e53a9e39faabe6544d35c9fdfe93aa31f3c28dd02f8abdbf05e49e06953a662999fbfe5c7c0208dcd3ed70084c3e3eeb9f6c6278d2d387da01c5c109112442abb443aff96c", @generic="4aab10d0b1def709040a4c4c672d5842e53de2b261031800673b7106d4faf3c679793f847ac3fc80cdf10b7a2ae2ececbe7029b257d1ce4963cc706dc433e5da08b990b83f2ef3f3f861d8fe56a6f0927c89f8f7f11aba8e81671b5eb3c4", @typed={0x8, 0xf4, 0x0, 0x0, @ipv4=@loopback}, @generic="8a5d59ecd034c68148e5204acf38c001c0e025bf21c116aaacf363440775cff6ca09e6bb1dfddf49a58e02b32b5ef7ae75e0f692cc0c6de6832dbf0bfca58cc0623b202d10b4d24e136bf61ef545cea8ef98c77ad0d70f8478ef464c93e804f46a87068cd8d8468e42fc6abace35d48c380087b1fc1f7395307e1fcb822212f79a0c89f57f5fd8d273aff7f71e", @typed={0x14, 0x13c, 0x0, 0x0, @ipv6=@empty}, @generic="d3dbaf78e977a315a9cb812067ceaf127801dc8e7fcad0b457bfa4d9eff133a82cd5c25c458fbde79141798b326f51c4be57355bcc2d34f98189e9cbeedf1f92344d6d56756c2e68fcf616", @nested={0x4, 0x30}, @nested={0x4, 0x119}]}, @generic="a20672456282f0f8ee8a81d8d2edda439716ae94bc73d278c3142c36f9db54d802cce10c46cae337fbc0dca2f4a132d74266e57eb07b720f1844cffae54fe6b89c2c9e6b50d385976c8d3fe4130ccd5d08ad68d6367c3dfbee423ee25d7cbaca5df136043729cc82c7d9e0b160beda8fc315c4b28fe2cdcc89fc7e7e7f0fe91220fa3949b0775cb252ec9eabe87604eb9ca8a1deb4d46ec56a536c993f4d7080ca34efdfdac18f208f00168aa9e4d62d015f54dc52d145c5b917834d29f5ac23129a94a2573af20a340f6747c931408283600b80fd06f56cd191af63b086ae1921b8f1b29c", @nested={0x55, 0x133, 0x0, 0x1, [@generic="0870b586cf4f89f32a9d686e16c3a5a4e08a2d3b050c7ce966649378c9887cec9e9594cee75946a914e1a1ad150e5e68cdf46f9a64f03953c1a8347605319c5598e2f2a02d08e08de3ee2420aa697029a2"]}, @generic="bcb5a64782264346942e7c2231375c416b1b994d4be0b8988ec043ce96e6eb4e8b0e59395dd7a24a62b9f5b8b0d50f3951fbb61f2d4448c2cff94b1b508a68295c0f8666384db5e3754a2181eb45d0ebf1e2d10c692d0a89fb85a9"]}, 0x39c}, 0x1, 0x0, 0x0, 0x48090}, 0x4000000) 15.589538865s ago: executing program 3 (id=1915): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x2c}}, 0xea5bc50b6199d77e) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'tunl0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x8000, 0x40, 0x246, 0x6, {{0x4f, 0x4, 0x2, 0x1d, 0x13c, 0x65, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x25}, {[@cipso={0x86, 0x62, 0xffffffffffffffff, [{0x6, 0xc, "66bcfec2a1ee32d1f388"}, {0x1, 0x5, "6990fd"}, {0x2, 0xa, "80e9406dc4d39408"}, {0x7, 0x5, "5ed065"}, {0x2, 0x6, "a8d6c2ca"}, {0x0, 0xf, "0fb5961319676664bb11cc769b"}, {0x1, 0xe, "0da3dabc1c0d5ad476097ead"}, {0x6, 0x11, "c3cb915ba5a5ee3b7c67570eda4b7f"}, {0x7, 0x8, "62de03982b20"}]}, @timestamp={0x44, 0x14, 0xe0, 0x0, 0xe, [0x5, 0x69, 0x81, 0x7]}, @timestamp_addr={0x44, 0x34, 0x54, 0x1, 0xb, [{@loopback, 0x4}, {@loopback, 0x6d4d}, {@multicast2, 0x8}, {@broadcast, 0x1}, {@broadcast, 0x9c94}, {@multicast1, 0x3}]}, @timestamp_addr={0x44, 0x14, 0x2f, 0x1, 0x3, [{@multicast1, 0x40}, {@multicast1, 0x6}]}, @end, @timestamp_prespec={0x44, 0x54, 0xf7, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x19}, 0x8}, {@rand_addr=0x64010102, 0x69}, {@broadcast, 0x6}, {@broadcast, 0x3}, {@loopback, 0xfffffffb}, {@remote, 0x6}, {@multicast2, 0x7}, {@private=0xa010102, 0x6}, {@remote, 0x4}, {@remote, 0xffff}]}, @rr={0x7, 0x13, 0x8e, [@multicast2, @dev={0xac, 0x14, 0x14, 0x1a}, @dev={0xac, 0x14, 0x14, 0x3b}, @private=0xa010102]}, @noop]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf, 0xfff1}, {0xc, 0xfff2}, {0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x401}, @qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0x6b}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x24048814}, 0x4000000) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x41}, {[@ssrr={0x89, 0x7, 0xf3, [@broadcast]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173683a6e65742c696661636500000500050002000000050004"], 0x68}}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async) unshare(0x2a020400) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) (async) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x0) (async) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, &(0x7f0000000240), &(0x7f0000001880)) (async) r7 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU$\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe39\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4\x06\x00\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7?\xfe?[\xdb9\xef\x9fb$aZ\xf1?r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16T~\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x99aW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x026 ~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9f^\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-g\xa3\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x86A4\xdcOr*\xfc\xa3\v\xe0\x8bs\x1c\x94\xab\xb3\x91\xa8\xa1uF\xd7|\x94\xf1\xf3\xb8\xa7L\x02\x1fMk%\xd4\x1fG\xc6w\xc2\x8d\x8d\xcd\x9c\x84{_(\x02\xc3G\xe8v\xdf\x7f\x81\xfe\xd6*;\x99C\x81L\x91P_A\x9f\xf9\xa9$\x02\"\xb2oiS\x89Q\xd6\xf0F;_c\x13\x10\x16\xf7\xdaxav\xaeH(\\\x1c\xffbv\xd9\xaf\xc3\x7fp\xef\x92\x9f\xae\x01', 0x6) (async) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r7, @ANYRES32=0x0, @ANYBLOB="020000005d0edc322bfa5a7960fb959ba479940965beb3ca1c8db4cd86399f3aad4c62357c30f6ee4a9d6942a2385aee3e2043aefa58c066ef762a128a3eb55c84d7972672f178a9a2e4dfed79ebfe260ebfe350ce06fc09e259d48abdec2e13871ae4110efc2a618b76759e0af5653aafb5281fa90feeadd9f589879ffcf8a2597c6fab9bf6dedda5e674886aea5ea4878a7dc44d0d6cdf0d8d84e8733d26aa6e4fbc76cea1c6cd91d8225781ac09aa2f2ed801f265f183a406646a439c2f461acadfc2"], 0x14c}}, 0x4810) 14.638464638s ago: executing program 3 (id=1923): syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa08004503005c00000000002f907800000000ffffffff0000883e00489078030000000300000090c7205b89c6ba79f201fb2a7ccdec3f092308bf4d1ae19911da928cceb7f2257669a73e935ab02244656cfe8638fefb94440b907850c38e4ca2ab1b7af1e82941d1bfaabb0dab5d0bea1aeb89dd23c854cb23f21752fda65e22e11f87455f33931ab7b7511915be0704e792"], 0x0) 14.543920782s ago: executing program 33 (id=1923): syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa08004503005c00000000002f907800000000ffffffff0000883e00489078030000000300000090c7205b89c6ba79f201fb2a7ccdec3f092308bf4d1ae19911da928cceb7f2257669a73e935ab02244656cfe8638fefb94440b907850c38e4ca2ab1b7af1e82941d1bfaabb0dab5d0bea1aeb89dd23c854cb23f21752fda65e22e11f87455f33931ab7b7511915be0704e792"], 0x0) 6.045911874s ago: executing program 2 (id=1979): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b40)='/sys/kernel/vmcoreinfo', 0x400, 0xe4) read$FUSE(r0, &(0x7f0000000b80)={0x2020}, 0x2020) 5.977670061s ago: executing program 2 (id=1981): r0 = socket$inet(0x2, 0x4, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) (async, rerun: 32) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) (async) inotify_init() r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r4, 0x0) keyctl$join(0x1, &(0x7f0000000340)={'syz', 0x1}) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') io_submit(0x0, 0x1, &(0x7f0000000940)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x0, 0xffff, r5, 0x0, 0x0, 0x80000000000, 0x0, 0x2, r2}]) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x2000) (async) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000900)={0x2, 0xce03, @local}, 0x10, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x60000000}, 0x2404c044) 5.870677647s ago: executing program 2 (id=1984): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) sendmsg$inet(r1, &(0x7f0000002340)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000040)="c310f7afa1d1eb47a27437d746d8ed6e2e720628e85dbf3457934f32dc5a79dc7ec5377158ebda55fc3154411e030f29dbd0cefa0a24868fad0046625cd7fb2c3436df7267669372a8583bc1a8c850a7cbf0472263209b7a724fb26baf6319884c81aefbef1b7947914239f74c96572030d61abf174cbf1914a30c1507f79598289818bcde1aded76765a473e409a77afbd2010990521676ab9ecb0db206f6340c9f014c61", 0xa5}, {&(0x7f00000001c0)="50c8e3850aa41dff986a28bd307564504ae5829b94212a2c8e66f00da7633b2920d8abfd881e7ed1e68474a58f7a2847251a9183f48e07548f6e5c0652355edc88ed173ed1d23762c9ee5ff0395c37f2ed5b03d8f97be4fcb9e19c514e118145de0581b139b6f8e9fa6a6ae9b1061d6cdf065baec10879c1db921db85047cb85a3fa1bf2d402ab8d5178f8ca85f5acf159c7ae9290a3c20fa583bb2f62ef77840c0a22d9ac7eb54eb5235cf21d575b09be4f6bde67e61accb89caac83545e9e8a93f221e9ffc8fcb8d6614c100879198742343fa32fa183ca4f53c960df693dff7167d69fc604b77a4f250c7d7b6720c8f36b7ad45585c4a2f083dc9ed81a07fa69861efb25e053f16da13d4ed8368526b18b8cafc84438c0404da844c573b96dbd45c3d7009c843c1ebb5de0153172da5df6642da2f7aa8722bfa7c5266df5c913e84fa1df2de1689b81805890e4d2f7db2dec817c0964201505ed84fe676b21bbacd1b7ec7268df3806c95ed5da77b302484f2a4c08a5b93f275e4ac86127ccc21b39d6100e99c672895fd6e86f379c9b5b0cb3536d4063f733207376a37579d1d06a2b1afe437f8dee29bfbf062334631e96dfcdb24795eadd2fec3099ffe7df627b2b65455493fbfc49225f579417cf872ff7818d80d91c4d86daddadc8ec9c96562fd4224f40c72f046ba948640e03e78da41f88c80ae8465b72e6b291a64caf85f769600283a772ba1ea89fc12ce58041153cbe652c1c5d603f067cbf994a50f056154a473631ec3f2d00b70503ae7e9643405a1f1dbd9a794f8df2b7f934a524a4c82a9757a74348acf68dc8bfa5d4b37011427ebb68b0479ac8f979ef76037e96d34bf2eac290e8f4eb437c0989e55623da8f4b5f4e38d14f82987c753dc210d10239170df0897055ed4ce38975da5a82b6854790ac32ee832cd627c66e1f3829e6d999ef59e636c636e5c24b3a1f6001d95ab9d18942f31ac7d364038c7e22323f4c51ee3c9968404e1757e05d9a4e8ba2f1531db5c7715d9f07b1d3c97eb470223a62a86898e5d6359cc3655785bf505c052ca77c8a252363118924a03182459f74642a40a76820e8975e76acfa85f469063b8c4e43f60e7d372a551f176a30de39774b8d686d68a82ff3f1dd89f42ff7a9049699fb4d1e863eb6866b851e6c5807d46e32ba17e4a6bebbab64af898a3a8ccd87eb83d220c6fe883245c4dfd9506543ec5c95ff2fd15e202b7b02b346db1c1c33287ad5ae68a4a1295f4dbc56b06ebb5a0aac28f670f562da7ba1efc3d8acb049cda84e96b3e315f761c58c39a0a7fde3123c9b7f680fde02e45aa0a4234af9aee5477b353da2077de80bd74c844239e1e85291c8f54f86665bdb987e3ae50591059ad430a175d41a0b97606e8a4cc7d59715ae69ccd6a44d3ec63207dd72ae59db890c6c79ab16a535c1a0ca4e9f84aa85a639e4398655fc3347014007d70a5f077083a8bad88f2dd91815fb49bd9a277897664566115ee9ec4f1efbbe6f12838914333b16610c909833a9c85246e9dbc59e66e656fa4cca7de9292df52002bca48e2cfea74864f85aeaa6e2ea3d00650a95a27ac0881b7db286da0c97b5815039ccd4f5ac90f77a7c7b58d89122424e2f6797e6656da85fa7f5910cb0df7c68f483ebb6f938fe978f9046a7ee6004678d165545247c92cbdc25359d8c2f53569359d75478e1ff440662e173f02635cc3fde3c6678a9bb81634e3fa1cbcf91882ac9a2145171c4c4387cbcaaa741f3061a85e0b18d84ff59f4661a26f3d1dd74088598db4ff4ad025c76e028e16751f840125f43423bf640c4a5d37a2508711dfd88c0f1b79d99e26a6589409c69c546e87fb0d1b012c8dcc827a3c8fc9cdb5ffef9f5055d17e5186890bf312611077b1c7eea78c7e9d66426478405dd7efe6655eac1da07e02efcfbf03ec892694a43541cbf0595f5bf01f2e0ef0fe915c95ea8f0a41fb1eaed3a852cb7b8461ef11eb897357d159092c4f4609b5071a5c8dc496c762e151bf413d4c661e904853daf130c689265b4e45347092a8134abf7ffeb6f471c43acaed890abfe85f2c00bbffc9289b8a2990d6a56c9a9cc801c696e47157c950b29d30adf1fa4e0007719ac2453c02319c44c306618308557578bb0ae691ca494a38c612f80afcadef1b4ffa093f500eb1df7816cfd2b0373db16473fcb578ce559b9de4c9be257bc5eea69608f51b6313e03e5be02d3b425a1fadae1cca06247843cd46438962e05b46262659d63b1ec015523eeaaa89ca3d46ae2f428eb6413de8f0c35c711d2a55229741c8fdefb505dec62340d4046afacb841c3e7b579ee1523982a18dc28cd834d41f61f460a2110d4c989a418661758928a22fbd24bee22312af8ae38fd975b718e7aa052dd2861d6620cfde457091731e23d4ffb1fdacabd3f4dedec14be4510f2858dda07a45f2a616f7ab8964b8410457cc18826499a0389d5bf924afed26a88c5defbd202a3797af0602c55cf8ce00e20100ab95c085bcbd0bcc02ef56bcf18d6f3ae4111376f5886551e2bea3258484987f86de2da620de45e711b39b9a756156c21c03690eb1d2c7c4dae175dd7152312a3b337f5f23c527aad8b0618a80560d27e2df746ee313a7e6f89ffe3287ae80e78a3b68913b19aced389f3f5ccaaf5536c3da00a2f43b2094136db1660170ced818688fa4046c7cd4deca064e3a0c174b9659ca6f1ebbfcdd1c8c598d33c4beb14a31216394d6a38d54e771ec3bf091d64aa35b48657728ca4167c85c1c7793c7a5acd475ec2523bc686b0536a960efc55911599dca0202cfdd52a87a3b9f329ad9bf29199bf8e1722fea53c92c8eca24eadc6ec6f07fa710003e0b7bea3f54c0d10fdf6c74e31625930db0d3c031a98b2707e306ba2d4fb3e04daed5bba781e1fe1fdc010000484eb10ebf5e244dac3309b06f034c8d79e1b01379317ee6b82012cea19abba3cc16c5e2530fa0b68e335cd7774365854930ff4e291d9567e7d7702c183a80db1da493e8ba4d2d91eed0f53c1ae1a70beb5d257651a3d0c664cd0518769e86bef94510d95c57fd0a65ea3c2c48ceffe49ab71738e9b4fd56d61e700f9c97b661445ebe78d380b48d9afacf0a4773a17e802d58912e201c7e7e4718888c4c0bc2e845f49789609ee574827dab8a9a992dfa282662378a52e7db47633b63921f6b8fc55bb5877d999c93933ceacc76b1353968d3a4747c6c5c4befe2cdff80767a6336ea76f5236295448292572c458c44c25b952581cef694305a89d4b2b7fa980b10ffc59ebefe1485225c44118217f7acd1b26a50c3b5f1662f98a351a8a1a7879e919e3921bddcd676403d06394ac2a69272bdb153f1a1b73ac91d5d340071514b1f550a1baa05a1cce984a30ec2e62dff62360d3fd2c51075af23e23bc0ecf3fd11c010c605278881d16f2728714e82d42785b7ceaa2e35a01dbc8b6b94278e736879c36a0a0a7eb9fde47e7fab5e473dfebdaa5b2f35752435389b838c4e6cb9cd98eef9cf71b54122192a80872c56fcb3a6fd8bd06cbe8deb0d4f8f071501d8f22cb172966a3372a02eaa824e1b49ac52b543bb41584edec55e4e604c55c38e504591b06cfd3296923d1565f89e45a59db3d3129bf55dea2e67cc196bb0002bc79b5b2a2ee65a8a6be2717db9fc68e963a73fd95d31ae5ee2855eac7af86adbbc06337c518015510b0669412748b787dc9c192360129ca8851fa97a1d60e839a0229071849b2ddf41ac23176250243298ce2bc5c22ce6a0ebc585a30e0b34de0e2195328c7ff81a261e262fc83acea3108af18eadbd479b507209e3cb3e6547b77a9557843961927795fff1f0dd578ec1929659d1f2e1efe5151ffe5ac802db25b90ad7ed1d056a605019438f78ac912f1e3cbec0343fba5a98b8b13f817167d60ffdfb963656fbb933db4f73a2cd1810dce1aec96c88a4813cc660e4927a08242635f848db521ee80dd1efdfcd821c1f7e65ad2fea444a1e1e8a2128e0e3393c271371f80f78da95b902654665d8268efe25ae120a2dbec5cf7591e949c2c39feb25d976f1c4eb49aefb0fe1b4603e8031829fd89d6ff71e0b87dfbc8b7ea2fed1c07cb8a5942f00b16536bfdfbc7d5f21f18706b5f5b6b3f4641daf6d6124f7378c29d9484f43e4fd489c9bbadde7485ee44a23f3ae91bd77c6c7d64fd85f4149acaf6a843387d856ab53a672d1d80468ce87f93c732aafd4c90062422977e4ccad415e73becb738923e2e488c8641233f8dd9dfd93b48d438bda2f8275bd513fe441e548b6102981c02900c15599ec8ddda829ccd673b7449f6f7702153592d447ebb947258589ffbc71be2cd079c5cf81642dbdff875684905d3e4b864fb40e77351fe42b6764499f114d7fdd96df3ab2e4ddb69c63e8e548097b483dcb533f71bb18467ccdec6f52c3ad32f61579e3a66631c5cf8a49970f4865a542b18312e2ee9d0b33013534717f7d01301b55d2e45b72168fc296cccbd1e6c00b8319bb4c206d6040619925711e1a1757c5cc3711ea5b88a731c842a9c39505969aed7cdb36ca3944ba9826b9ee108ed7b4fc5b6d0cc1072cb8a781d1c9b38eac71fb94d95322261cb5d7d3ec2c508775c2451092706e4513aa90f82d32ed1967d786a765855c9617b9d3b4725414fe26854742ce91ff2de3068333648b6865080c1381e462e18b5e4e08b736904dce91d6c8282d18de9b360b9ba8fe163ac007f632d0a76e82332860d870c71fd5eaddb56ef1cc376a5e9f85ff1cfade92bfe6b3a6dd35491b34b15697c335bbac48614ea734ee3a28a0eafe0ab2d03656283b1b3baedbef4183e3b8971a87ef16e8c1622fe9bf11d8e2565120bf559960613b6c436943dc6beaf0247b98321236bfe699823e695f2a9b1e05310eb65a67dcdbf6b0f11187db1f73f0e0c4528b77f64417cb701cb4d33a3162c52005757a8e30d686bcd726b155362c6a0db791a96f0c0b93ec1cdf0918ddcfa93cf19c99b2ab6df9d1396bb8be88f8a7d895c9ecca00b0366bf289780b27d4309a7c49a4ec5d68cff3f2391633b5bc5d2f860afe393d0c75e109dd9f55b60e23d2b798d3764575a3756a8b8c9c66a995be8be29f032519292bad446c16e8b6a4644bf6a24ba72ef55233b280216fc807bf46fa9fe858d34084865f15f1a7699a3733acbec17ef322ee20a7814e2674fec6248f6226a100eabd1309ac410b3a3c2878c53a9c387670a71fdef60449ba9bbfd1a3183ef81ba7f54e2192084ed90ac3a2ae5a748a3ad9f3fa82a5a7690a7583d2638d5df155d95657424daba9bd88f00db730baa7c729ae5eb9c0063b679636a08377aaaa85a86a18493c4117ccf936de9e51b4f325c6e00d8940497976f51b5a0bb4f17777a50abc95f45ff0513b519c2acf8365ed2c11a1bdc3bcc5c0fbea898cd77ca159c33c00b34142eb5c3d2ff83a98aaab38a14f352b04bb0b8ee20ffe081f48398b8535e6d9d0a047f7a2c3f178fb06daabc18fb00ada84cfbc6b16b95ff4c8d1ef71c4e432df6428f2fb6b4bae5fa8f56c5525e667eb7440b020d1c7807a4f98461c4f07fe42b859c11cfcdd5e4f6a1cd4d0912b963cd5a1e4ab03484eb01752a6673ddf893d958948d7959d6362fef19ff9dc3f6955445ee69c3f7f4ef6bbc2326fc82d222390a573bd45ba288bc8782d03b54598c6306341d810df23a0f21cd7b1e8c0379b16585b27ecd000e4b317edefec4683342d6693652c48145d384e7563303f38255e4eab85ab76c2e8", 0x1000}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="98b46750d1168ddd1320139a305d48c674f7f41e8be00160031b075227169b63b208776e566af5c1a1aaa5b53e25bd2e3e43e18bb4cad3ac98bacab5325cbfa09f975998efcf378cdd43fcb61016b319281601590056e75f5d4c5230a0e363fefa6595218522827649e89db46a4e5e0386bda2826482d8699af7c0c43bbc86db949ba962ef80a7df7c61758446ff7ed598ac248b4548f6faea99584648f99bf060aaac5e90071e903d4cbbd232237f3c545bfdadf91dd0eb3d0f74afe5218f6faf704a04a33ae1d51d4e2dc863ea17bef2d9d26ba06950d61ac0d8688d7ed0c7b63be4d1f31bf88fe83eddcfbee33d0dd98b8206705707daa289e87327685db2e4df8e69c42e570f0320dae5c17ebff8df435e25d9c124450ecec8dbc4dfbc02867b325cb5c18084d7aec58dfb912ee49ff32044688c489312569dca7b1e32476f87bd5880d025df608931425a3c195495fe88aad3406c625b61a8e9e222b870dce5dcc254eadf7437daedacf4dde4163f3d51f25eb51bbd0ff393d656b983890741c830657381e089e3304b4a70a260ac34e2a005b27120db823c2045d5b089b01c7be1f65c0156eeb36a48b80dddced0c5d29f5afc53ccefe5412727570ae727c99badcdcae451668da8bacb34298eb268ca0c21a0173f25876b0199f416aefac77bb616a3b29e8732137ed0ca5e5a044bc52ca889b85cf2e7307cc89b22a6631dea68a3afd756d05e4c1be2ef9680d6758502270ae97f9bcc9807e876c357bf0fa7a0fdeaa047e500ea9f8cad9ff39e9cd48e83a19281698bc6b27ce7d8b119cd59b3a994d55df14ba4132dac5e6a6dcdd668dd2c46e7c7f07159aa10ceb109fc4f59c1611d7f836ffcd9472be82d67d10467a2554ae38f3e2d14c28f40961fb7aca85c5476bc67b4a8d2fb14e8c1cce9cd7dfb381f199b549863a80a1141f805cdd1703d3f4f64d7384c37f9efd8a0b1757c37debc5fa241e30b2b1b0bd83365e658c1dc739cb58d9aab75855a90a5ca4cff30a5347f482752e3775210bd295bcbb98cc98094a19a0cb20118caae5a1f53c1ff0d9d9c38df795b776bbabf04b1a95634c619f6a8adb9629f48d7770260cbe385739b1566440d313d725f46f0207a283c08df06cec895fcf20034b631927b470a4dc0bb08bd68781e5c74552f826ec7a97b307ac0465a8496baf5b23d9bd3ca0bb16f77e7dabecb7c8b5e434afc379a97343c4907a2d532d76909adf46822281ae5a72b4d4b4ac0b9042e6ea89a2db92923d9229154cc28a6f174e08a3ffb1435a5e78913057e24f12e5c574989414e4d211780a3cd96f39fc25fa64080b0a012dc9f9ab10dc11b6fef6acbbe7c73ca661752f33990edd7e80f324b168557450edc9a82904863f064f80e61d26dfbb173b186bd6279739c5419b2bcf20cfbd06cfeea5b17ddba5288b1a27acbd6004a1d01638c4fa227316855398a84d7500352889309dbe9d4e1b9a930ff409d0e99ad6ac401a20effd866660112aebb2c9bc95448048d3aca2ef108ae2f7dac4991ebbcec47ed1b3c39427cb779a0f4af175162d72262f1c22320b86159d02704767ae2073fd633f5a0bb120b35b8cffe5ea580b4d715a0aabea99bc1c9bd9c081f12bb2d8c2c38ebd66d58f8cc0b7c29b05bbba543ae580748107fa38dade4f3a5a90a02d9d4b719acd04f99c92520f21f7a9408df70152641046e7368a38fd97102305b2209ade70847571cd29cc2e31620b1fae23266a4b06629a65202c22eb39984990136391b5f054dbadb4b9febf6ea93cb2112fbdc1ba7655baac1bfde6b0dab4e4e324f2af24b778a422c41523828da6006ce33ae524d742e6df06b3012e0c524499675944a661439d5c98c9d3e3fe2ea0d28f4f2762a76242b6e7974b96549e9e99e9aeccb47bcb7094ed16e489f895924276677b3a4fd3bbb2a4a4be4dd6a5880d01c53616cf73063b99b0a8ae915f76e84e36432131b58fc5532f83b66848682a0ab9c9cbedd51f35b38e4126dd376354a95b00933e2ae274e7944d32b8b36668908dc9e030631e02880aeff571882e9b3928395382f92e3c55cbb8953b7de10824648feab0e1b67d1c5b8f457a95ba96e546ea00d75c6c56cc97c0c3afad38c36fe8f4ba1db093091fed76358810eac07b55e0c8d61a404658ced381802136fefa9ef7cdd060c9b2b7160f048ac46ff5cf36b99e1b54248bea00bb94f7bce9996bb0b96627fbf44f347b03eee7a48b591fa66f94375760b43c43d10efc5a04d879b914690dd3216376a49e1b84fa400c759ec747ce93683df4f1b8c490216a9c74e98df08de88c0937b4d9d6c71743369a5fd0d0b9df77001c734b8f4ae179a7c84bccb99142d06b781cec190af8814bd6bd98ea56d0ccfa0a4cacfcf591a645086cef386ea5b4f1cfe90963503ae99574b2cfd57645f01082df728e15f58581da8333ea744644bb2c4ba600a088ff4b12c04f1996dd7d904d9e5caaf843688e2592adbf90541d142967ad7c7df3d81e43e479fcb4468b71485a4806e5b5ae26421622f5b262bc92557ab68cd21e1848415eaf3ea516fb02b04e36220a4cf50ad43fcb2f0fe87df0aa1b72b6a4a5d00003b6c72c008d2c20621fa49c3887c7feead596b47fe50c1ab2ebb28a4bbe7b24863b739aceb88f4d616d6578d069ed74ff14b37eb062c63c432874466aa09e4dc76a1e554364b782bc38d2d6391ba0aa9feef64214473c0fd9e06739adfbb3f8f6efae741bd3f9b802c3b330b799926aea936214a5d765ba00eed6959287e42cbc73972f1c2a6869967e36e008e837fb5aaad99f587c8189d13b7e13ed9cddc3c81db475a0040ba7eaaff21e4918b2f9f4dc9c3ceea603312e8ec529e26b9801d93625ebda72c904b8769a563fd46c68ac1dc4aa5fd259137c384fb99f0450d75e7b69a5eee09f026e0e1ff20ab3164cacd14950206b94076e3f93a0b7c4d3ea41be40927b6c3f4a986adf1253ed694fe8f870d4dca3963c1de8553cbd13583344cb9e6cdeb03b54e9967d32ab72ad65b37e0953fb887b36636061e04d306facbbb8a2ded2e4eea03d0ebd7bf34439f9fe70d0465147b3ebfdb017ca8ac464c050ff833d99750b6853baff6393b2c42db20b58bc474d47705ca0df383af7960809b1eb30b81e056aabc9a376c6fd2469063a742517a823901e7054fe074c2ed24b3b8b836ecf8c9e0d2cbab8f55744961f84c745b8707f83b4d6b90d16ca6489b79dc6f31dbb901d8dcb8bcacb98b0a07eb87e84919f6488fdc1d9ea911969d11b7be34af05fe2dbe2fec665af14962b6a9265ddec33abbb5e040ec08af9fe290cfbead02d9dfbd1a5baea8be41053097cef7de0f6988058b235d75d163bfbbd3462e5252b5814ee9655ef3af25b499a4977b150df8b5280dfa0234f40b3cafeb462bcae6af69b3b84a9827c2d423b33ec76d7b2b750d598cbbfc55211d3543da0b59cd0c37d68160ba25c404242b35f95e7b3f312a59fce5406353b120ed75a6935961774d69aa8ddb219af92187c952cbd20ab937e4a488320001e17553aebc3248fc799cf2aefd8f1569e19b7f6beb1418d9fda9adf567e645668b4a9503b85bdf8e319b238724778076096a9355f1d19a26cca7365a0fc64611e52bfb56d2405e78aaefa090b0724a1e2c2c904c48bf50b4bb771e9c4075102a4027ce85e491f0805e1f7db865b402257d93df3e305a938d98630df1a507ad4ccf78c222c3fa2db5853bfad38cf4c9c07317294a7db090d44f7846b9116d60f8e4f43329815b32da0416e8db08effa22df2670077c00db2dd09ff0df97b184a4a40f12c7cf23d19532ee6ab7e03aad2293f8b133d26119a697469b975fe50ef0963aa86082b345482b34e0a7954c148d0bdcf649ad8628991aff01cfe094fa256e001b5284dcf9c0380822e875730ac0352514f396ca36ad10f4dbb289ff0bbd1528e7847be347f2714e60323016dc7fa1b78d70246de7a40305122952326a032682cb13f01085a6a7acfee116aafdb380b7728bba7a83aff32d29a277b5c22a93ee19b500007786a0b340fe6e0c219f80b4712f7d31054c086517b906d145d39224db7ab70cc9c4685264e5ce5ec45a055b83c90d4be376ce7c8489afaa9372d209b53b013ce440d94ea604e8fed4bbe92d57e9d3a7b9119d3ed29ebc49db02d17f0801d63badde07b05d0a3a465a43e6a940aa96c601e0ffbaf4f5da3eaf7e8553b4857a01b36c5c189484fdbed8bd164ad44cf7fec85240e05ceea198810899478ce28fd8510f4983b2ba1979bcbcf991b35a1af25824364662aea371c92bde6b69effff09743e4e7763b6dafc40fe1415de1e3f723781cca4a457394698e9f8f2c33037ecf5ef16caf9f0573cd6425ae4c1ddfc31a3ede8b51861417abdf28d4652ebe0376fc4be5db27318c1ea3c5125a05c918d974304ea8a8e5b473acea15b7298b5dbf37e72ced3b3087484e3e2679cd4c5233956c9eac74ab156fa98500b1550a6bc48e666f0c34fbfac8c09f6356fdfa51f09fb7f7eae779f82814e3b7b33b7bc42817301bf73753be6f5995b1bd395b69c8464114a20312e8922abca9cc04a4c47b861cf98e81eaa3ff2296ae9e31350bd603e5a2d2a6f25eb6bcb2497455a829d8cc6829bb65dd9bba612e094f09e26b0622af39634a6c9e1e60cc0c59837dec888a13a0fd42e850945d24909f3c5118972f897f7fd6207ca05a4a89a1e094283f4eadfc72e0928721746b96d8d9ba2c17e95df33c9034ff993b644000d1fad98352470074c6fa1ed8e1043dc7fcf9f4b187f1279865263c4a34cbad97d6e9100a4bc29080d9bec23315637785dc977201c33cfa563f6e9a8a6fd1093a6aded1f8da426a80c31ea9c8f060f78c6cd08e1bb7bb901184eabe255bafb81856fd71d89153f8f659f39a98a8c954e7316c8111317c48d4fd099892017e712b7545252e3098a6fa7061d64298853f72d94f873a4a03a0823e2b7d15d12c4be99f6d194baf518ba7baa4c619a0ea093347fd613a760b3bc778afb99e8ce0370a2544904a0dd20c449d90c6e2040a0cb6f0497ecc87440896d78098cf19b1d815193d0585f3481d047c94f93ab6a41ed699de5c7a802f0aea14781390bbbcf77868b20c3c606d10ad5609f0bb93cd189b1bc352fdb999a9af1838c449b64c6d2dc6ec9037956f67630614ea4c2b75298e7acd0c8927160dd5f46e2851d3a490ab895a66d1f32fec995bb23bffb01d1d271a2df810d66694f194daca88f1c4c6264a6f478a679d96b743100961eb6e09bde26fd7e608dffca0dc0d674682be817e728e2cb8f85d6984058451e6d128f73f77c778bb9acf451aa685d17fc79937957d451316a1b90fd57e39f33eb4358249e4f15db903a73c7320b2cddbfc589d45ae0c25786b9203731b371e12333d9e70668f0cd68b22740f568523f19eadd6105bb4c505e980d389807b7fba66c84f094b2414086b961ac3f6da4bb6ec0019737ec3b729e3aaeb6fc8af3375bec50b015bd3b82eeb9ad05a19f52751879f279b18074bdc115a96ec9868cc226e46ebaa7edf83c0c015ee3d8482b44496b5170923a20d5b372488ed687b909cbc697d6a66b671502fe66c7cce5b4c7663f01eee21f3b14a57d7da5becb3b2ac8c2e8cc21f3f20cf7b8e35fcde7f5b3d2d9906e0a7f27a22a89960d55f9e417caafa435d15e590eff4f2b4a8f2a00fc0b7db62621d48c053fd055008394f4ec2e0be26a3650b60cad131cb93c03c5e4fed6d4ed94655caef0cfc9e9567", 0x1000}, {&(0x7f0000002200)="a4513fceb12f1d56f5b366007cb3ca2090a56913b68bbd3d6e321ce5702dc7bb76de20b05fe3ef0f088a0211b5fe9151e7b2b1ef776470c359f73dd467bdf4eca0f6336070dffe2d351e72631e814dc055f6d03145eb1ec600f7de6eebe0d72c5c945617e597d4d2211af06e6c3038e6d3465b05e883", 0x76}, {&(0x7f0000002280)="dd1a6bd27dbc6be9", 0x8}], 0x6}, 0x4000040) listen(r1, 0x5) accept4(r1, 0x0, 0x0, 0x80800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x8000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x302, 0xb92, 0xe0, 0x2, 0x0}) 5.490868543s ago: executing program 1 (id=1994): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$BLKZEROOUT(r0, 0xc0c0128e, &(0x7f0000000240)={0x4000000000002000, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x5, &(0x7f0000000080)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 5.49058256s ago: executing program 1 (id=1995): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x0, 0xfd, 0x0, 0x4, 0x88, 0x1, 0xfd, 0x3}, 0xe) shutdown(r0, 0x1) shutdown(r0, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x41d8, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f00000003c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r7, 0x40044d0e, 0x0) name_to_handle_at(r7, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@reiserfs_6={0x18, 0x6, {0x6, 0x9, 0x6, 0x9, 0x2, 0x4}}, &(0x7f00000001c0), 0x1c00) 5.01117911s ago: executing program 2 (id=2004): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x72, &(0x7f0000000800)=ANY=[@ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="4a81169be2da12abd61241f5b90581b9ec9bba72b39e22715965e80b6262f96298dce81140b2efddf6a6aab4aec11f3bd2474c2c917dde84df4e5a348f937040fd8f353af5597b6bab41d999a7de550b2a19a1978139eab89b849d69dc63f65a300caa6b6b2011c4835fdbef63bd773be77bd57c890bb6207488a0cca085b2a7269ec0a4138e6e8ba6cec892861820804742ceba534206657da1ad53f3fc1b89f7778899d8a76d0c909cb191f013b2b9f99e41363af0b30e7667de66196f67a67c98"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000240)) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000080)=0x100, 0x4) readv(r3, &(0x7f0000000780)=[{&(0x7f0000000080)=""/254, 0xfe}, {&(0x7f0000000180)=""/83, 0x53}, {&(0x7f0000000340)=""/244, 0xf4}, {&(0x7f0000000440)=""/76, 0x4c}, {&(0x7f00000004c0)=""/158, 0x9e}, {&(0x7f0000000580)=""/66, 0x42}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000700)=""/68, 0x44}], 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x79d9) syz_open_dev$admmidi(0x0, 0xfff, 0x1a9882) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4004, 0xfffffffd}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000004200010a"], 0x18}}, 0x890) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x8d) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) write$binfmt_format(r4, &(0x7f0000000100)='0\x00', 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) write$qrtrtun(r4, &(0x7f0000000300)="ca0e", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x2], 0x0, 0x0, 0x1}}, 0x40) 4.950988923s ago: executing program 4 (id=2006): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x0, 0x0, 0x2, 0x5}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x8000000000000008}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) sendmmsg$inet(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001380)="7bde898718a6c6c9237cb3183110240767593c40c38b46f5aaeb010661a7f3a802772dbeacbb719d97936097c7800c3d28a0234a87eba4fc532c7a3e1d96bc18a74bc61cf414ee3274f2ad278b47c77c0e45053d47029eb9ef0b3ac4a709f6dd73fdf65e6cc009bb98827b4d1716e42b0498dad14ebb339fe30c9128e7661135a70a36cc3a0198de1ee50ac13750797f4ea33fabeecb09d217918384bb28ef8d0367ab68e1ed5e3d832450b228c8c1feb0f8ec2d26694be70a3d212c9a304aa07e798a47ba95b016f13bfb0c94e2f325c1a8fc53ec4e06f0c27f07ed17b85387eb107c2ae94bc026472c78b61bc85fbb101d4c3a6ee4", 0xf6}, {&(0x7f00000000c0)="92309e6d23dd22b738dccfb217c3fe033ba644e321e9f54a1e7ec77550f2e0272b4806d914c9f23c3732ebae91b667771f0d5abb4436b0d81cb607cc7cfa30391ec6bbfdf6b477eeae64afd922c6b7aab5", 0x51}], 0x2}}], 0x1, 0x20048814) 4.540845095s ago: executing program 1 (id=2007): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) flistxattr(r5, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r7, 0x6) syz_emit_ethernet(0x56, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x3f}]}}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000040)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1}}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x6, &(0x7f0000000000)=[{0xf2c5, 0x3, 0x9e, 0x8}, {0x0, 0x2, 0x32, 0x64}, {0x0, 0xc, 0x9, 0x2}, {0x2, 0x33, 0xa6, 0x7}, {0x7, 0x7, 0x3, 0x7}, {0x9, 0x6, 0x4, 0x200}]}) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_uring_register$IORING_UNREGISTER_NAPI(r8, 0x1c, &(0x7f0000000380), 0x1) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='data', 0x4}}, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}, 0x0) open$dir(&(0x7f00000042c0)='./file1\x00', 0x4240, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) 4.070953798s ago: executing program 4 (id=2008): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) r5 = creat(&(0x7f0000000380)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x8d) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) write$binfmt_format(r5, &(0x7f0000000100)='0\x00', 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r5, &(0x7f0000000300)="ca0e", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x2], 0x0, 0x0, 0x1}}, 0x40) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r8, &(0x7f0000003340)={0x2020}, 0x2020) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r9, 0xffffffffffffffff}) close_range(r2, r10, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200020000067000aac14140ce000000d49e832f0", 0x0, 0x10004, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000c4fc8cac3bd4445cff0000000007000000", @ANYRES32=r14, @ANYBLOB="40c60000000004000c001a800800048004000580"], 0x2c}}, 0x0) r15 = socket$netlink(0x10, 0x3, 0x4) write(r15, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) 3.660861358s ago: executing program 1 (id=2009): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x20000004) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2, @ANYBLOB="140012800b0001006d6163736563"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 977.253802ms ago: executing program 4 (id=2014): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x80800, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040), 0xc) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$swradio(&(0x7f0000003200), 0x0, 0x2) r6 = syz_open_dev$vbi(&(0x7f0000001100), 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r6, 0xc054561d, &(0x7f0000001080)={0x20000009, "fa2189dec0bfff839b000000019a0200", 0x5, 0x1000, 0xd, 0x80, 0x4, 0x3, 0xfffefffb, 0x8}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x6, 0x0, 0x4, 0x10003, 0x2000000000000, 0x400200cc4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x100002, 0x8d], 0x38000, 0x2015c0}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000001040)="1f6b0345bf90c54cad", 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x88}, 0x0) r8 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000001000)={0x21, @loopback, 0x4e20, 0x0, 'wlc\x00', 0xa, 0x3a71, 0x2e}, 0x2c) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="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", 0x1000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) 976.494098ms ago: executing program 4 (id=2016): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video(0x0, 0x101, 0xab02) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x9, 0x1, 0x5, 0x6, 0x1, r2}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r5, 0x0, 0xf, 0x0, &(0x7f0000000c00)) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000280)={r4, r4, 0x1, 0x0, 0x0, 0x48, 0x41, 0x1000, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0xffffffffffffffff, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000, 0x0, 0x10000], 0xffffffff}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 911.137013ms ago: executing program 2 (id=2017): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x10, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) close(0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 892.855817ms ago: executing program 4 (id=2019): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300), 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aSpA\xd4\x98\x85D\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97\xe7\xe6\x97\xf9\xb3\xf6\xb9\v\xb5$\xee\x84\x1cn,B\xd5?\xe5E:+Pm\x1d\xb4\xb8', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) splice(r3, 0x0, r2, &(0x7f0000000140), 0x4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r4}}, 0xc) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8880, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0xd) read(r5, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000001c0)=""/18, &(0x7f0000000280)=0x12) 820.553889ms ago: executing program 2 (id=2020): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x6, 0x5, 0xfe, "ff00"}) r1 = syz_open_pts(r0, 0x141601) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x14) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000040)={0x200, 0x5, 0x0, 0x3ff, 0x17, "0108c179cd5f7837"}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000400000791090000000000069010a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 628.503353ms ago: executing program 1 (id=2021): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001280)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x90}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20008850) 627.929192ms ago: executing program 1 (id=2022): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081e0}, 0x44000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$dsp(0xffffffffffffffff, 0x0, 0xfffffe59) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) socket(0x10, 0x803, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xccaf, 0xa20998c, 0x1, 0x0, 0x40, 0x0, 0x0, 0x0, 0x51, 0x5}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0xe, {0x0, 0xe4351b544165c2ac}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000030811"], 0xfdef) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r6, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 380.582537ms ago: executing program 5 (id=2025): mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d76697274696f2c63616368653d7265616461686561642c6361630100000000000000282c00b359aafd9e7bb550ce70f412b40e471f6d769b4f8e82fec4f2162925b73c0716367aa88b609b77b4afceaea680334826b4ca8197"]) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00') 379.64755ms ago: executing program 5 (id=2026): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f"], 0x18) r3 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r3, 0x0) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000540)=""/17, 0x11}, {0x0, 0xffffffa0}, {&(0x7f0000000280)=""/190, 0xbe}, {&(0x7f0000000100)=""/101, 0x65}, {&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000000340)=""/142, 0x8e}], 0x6, 0x5, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0xd0, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfc, 0x7, 0x0, 0xb8, 0x0, 0x3, 0x2, 0x5}}, {0xe, 0x2, [0x9, 0x5, 0x9, 0x5, 0x2]}}, {{0x1c, 0x1, {0xf9, 0x5, 0xfff, 0x3, 0x2, 0x0, 0x200, 0x3}}, {0xa, 0x2, [0xc9b7, 0x7, 0x2]}}, {{0x1c, 0x1, {0x7f, 0x7, 0x40, 0x543, 0x2, 0x3, 0x31a2, 0x2}}, {0x8, 0x2, [0x8, 0x7]}}]}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x1b, [0x0, 0x0, 0x2, 0xcb, 0x10]}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 240.475289ms ago: executing program 5 (id=2027): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x7ffe, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x400, 0xffffffff, 0x0, 0x1e0, 0x0, 0xfeffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x41, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) getpeername$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000c40)=@delchain={0x11fc, 0x65, 0x2, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x1, 0xfff5}, {0xffff, 0x8}, {0xf}}, [@TCA_RATE={0x6, 0x5, {0x4, 0xd}}, @filter_kind_options=@f_matchall={{0xd}, {0x11c0, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_ACT={0x11ac, 0x2, [@m_gact={0xa4, 0x19, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x19e2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b87, 0xffffffffffffffff}}]}, {0x5f, 0x6, "65b9d7c81382519383e229e0e3fb5e61dd7a6dae45025690068f300936f3b96c623d9c73365e0dac614556c1ee518e90e6a1c4f9640dcd7f2ef08f07f1331cb9fce22e666504cb1b39e69c81e6c1364f668e44384c1f3c7023f0a9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x98, 0x5, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x5, 0x10000000, 0x88, 0xfca}}, @TCA_GACT_PARMS={0x18, 0x2, {0x100, 0x4, 0x10000000, 0x9, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x246f, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x4, 0x3, 0x1, 0x7fffffff}}]}, {0x18, 0x6, "41a2fad77146696cfbd1e63b204333c787675459"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x106c, 0x18, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_LABELS={0x14, 0x7, "aefbc9ce3d1bbd2d7b9c4c9d95515b4c"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_ACTION={0x6, 0x3, 0x67fff9c85b28a015}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0x8}}]}}]}, 0x11fc}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 161.161292ms ago: executing program 5 (id=2028): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x4004cd4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = epoll_create(0x4) r3 = socket(0x1e, 0x1, 0x0) shutdown(r3, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_getneigh={0x64, 0x1e, 0x800, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, r4, 0x0, 0x800}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x1000}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_macvtap\x00'}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6918}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0xcf}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xa906}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xc084) 48.207776ms ago: executing program 5 (id=2029): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x10, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x104, &(0x7f00000000c0)=0x3, 0x0, 0x4) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000010003704030000000300000000000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000540012800b00010069703667726500004400028008000100", @ANYRES32=r1, @ANYBLOB="14000600fe8000000000000000000000000000bb14000700fe80"], 0x74}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) 466.961µs ago: executing program 5 (id=2030): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000200)='ocfs2\x00', 0x200800, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b090c, 0x80, '\x00', @p_u32=0x0}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x200}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x41}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x30, r4, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}]}, 0x30}}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r6, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff1807}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x723}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0x9) openat$incfs(r8, &(0x7f00000000c0)='.log\x00', 0x100, 0x3) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x18}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/slabinfo\x00', 0x0, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000006380)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xe, &(0x7f00000002c0)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x2}, @ldst={0x0, 0x1, 0x6, 0x6, 0x7, 0x6c, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xae}, @exit, @map_fd={0x18, 0x1, 0x1, 0x0, r9}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 4 (id=2031): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000180)=0xffffffff) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r7, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xfffffff7}], 0x2, 0x0, 0x0) write$tun(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x13e) r8 = socket(0x27, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r8], 0x44}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="1855923e57ae4bb074906bf596fca89873172ef30fb967258f40df3a08e944dac47cfcb087d3c1aec2f1bf8c4c60a93b811342672580d9ad5c330906d131e61943b2e5f7782c170e038e0f4fd463cbf151744cc50cc6d18b66c0780260b523cadc70e68b2c38681be3c6a97017b4cc20ef342576fcf815d3289a1c81f7f4db0e86248d9dd0cd577152", @ANYRES16=r0, @ANYBLOB="01082cbd7000fedbdf250c0000001800058008000100657468000c0002800800040003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24008044}, 0x8040) syz_open_dev$sndctrl(&(0x7f0000000240), 0x4, 0x5c9100) syz_emit_ethernet(0x12, &(0x7f0000000080)={@random="659b3dfadf01", @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "e3", "dd"}}}}}, 0x0) getsockname$packet(r7, &(0x7f0000000400), &(0x7f0000000440)=0x14) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="200025bd7000fedbdf251400000008000d000700000008001500070000000500190000000000080004000400000008001400030000000800080000020000080011000500000008000e00ec0200000800130006000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4081) kernel console output (not intermixed with test programs): etlink: 12 bytes leftover after parsing attributes in process `syz.3.993'. [ 174.197473][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.993'. [ 174.257431][ T9599] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 174.276424][ T9599] overlayfs: missing 'lowerdir' [ 174.301425][ T9582] serio: Serial port ptm0 [ 174.319754][ T9604] random: crng reseeded on system resumption [ 174.332342][ T40] audit: type=1400 audit(1767834065.198:639): avc: denied { write } for pid=9608 comm="syz.1.997" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 174.623111][ T9628] netlink: 'syz.0.1002': attribute type 4 has an invalid length. [ 174.646163][ T9628] netlink: 'syz.0.1002': attribute type 4 has an invalid length. [ 174.777233][ T9637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1006'. [ 174.804756][ T9632] loop4: detected capacity change from 0 to 7 [ 174.818329][ T6086] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 174.820155][ T6086] loop4: partition table partially beyond EOD, truncated [ 174.822636][ T6086] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 174.846045][ T9632] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 174.849077][ T9632] loop4: partition table partially beyond EOD, truncated [ 174.851632][ T9632] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 174.978294][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'. [ 175.109877][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1016'. [ 175.112927][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1016'. [ 175.116032][ T9669] netlink: 'syz.0.1016': attribute type 6 has an invalid length. [ 175.184569][ T9675] tipc: Enabling of bearer rejected, failed to enable media [ 175.315721][ T9683] netlink: 'syz.0.1021': attribute type 2 has an invalid length. [ 175.547313][ T9706] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 175.552499][ T9706] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 175.559285][ T9706] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 175.642700][ T9717] sp0: Synchronizing with TNC [ 175.647302][ T9717] sp0: Found TNC [ 175.688556][ T9717] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 175.715930][ T9722] [U] ` [ 175.718790][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 175.718807][ T40] audit: type=1400 audit(1767834066.588:653): avc: denied { listen } for pid=9724 comm="syz.0.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 175.730480][ T40] audit: type=1400 audit(1767834066.588:654): avc: denied { accept } for pid=9724 comm="syz.0.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 175.774625][ T9734] autofs4:pid:9734:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 175.778025][ T9735] program syz.2.1037 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.811259][ T9737] fuse: Unknown parameter 'group_lxid' [ 175.957136][ T40] audit: type=1400 audit(1767834066.818:655): avc: denied { accept } for pid=9751 comm="syz.1.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 176.002212][ T9760] netlink: 'syz.1.1046': attribute type 1 has an invalid length. [ 176.022852][ T9760] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.036301][ T9760] bond2: (slave ip6erspan0): making interface the new active one [ 176.040832][ T9760] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 176.090911][ T40] audit: type=1400 audit(1767834066.958:656): avc: denied { execute } for pid=9764 comm="syz.1.1048" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 176.107128][ T61] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 176.258899][ T61] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 176.262577][ T61] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 176.267589][ T61] usb 7-1: config 0 interface 0 has no altsetting 0 [ 176.273027][ T61] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 176.277109][ T61] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 176.279897][ T61] usb 7-1: Product: syz [ 176.281425][ T61] usb 7-1: Manufacturer: syz [ 176.283056][ T61] usb 7-1: SerialNumber: syz [ 176.288741][ T61] usb 7-1: config 0 descriptor?? [ 176.292656][ T61] hub 7-1:0.0: bad descriptor, ignoring hub [ 176.294620][ T61] hub 7-1:0.0: probe with driver hub failed with error -5 [ 176.301318][ T61] usb 7-1: selecting invalid altsetting 0 [ 176.345662][ T9780] IPv6: addrconf: prefix option has invalid lifetime [ 176.354050][ T40] audit: type=1400 audit(1767834067.218:657): avc: denied { mount } for pid=9779 comm="syz.1.1055" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 176.372161][ T40] audit: type=1400 audit(1767834067.238:658): avc: denied { unmount } for pid=5953 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 176.405616][ T40] audit: type=1400 audit(1767834067.268:659): avc: denied { read } for pid=9781 comm="syz.1.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 176.485246][ T9782] bond0 (unregistering): (slave bond1): Releasing backup interface [ 176.493196][ T9782] bond0 (unregistering): Released all slaves [ 177.199366][ T9785] usb 7-1: reset high-speed USB device number 13 using dummy_hcd [ 177.219982][ T9797] netlink: 'syz.3.1060': attribute type 1 has an invalid length. [ 177.243612][ T9797] gre1: entered promiscuous mode [ 177.246291][ T9797] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 177.251276][ T9797] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 177.256001][ T9797] bond1: (slave gre1): making interface the new active one [ 177.260162][ T9797] bond1: (slave gre1): Enslaving as an active interface with an up link [ 177.273232][ T9797] bond1 (unregistering): (slave gre1): Releasing backup interface [ 177.280769][ T9797] bond1 (unregistering): Released all slaves [ 177.352301][ T9785] usb 7-1: device firmware changed [ 177.357573][ T9] usb 7-1: USB disconnect, device number 13 [ 177.528905][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 177.611468][ T40] audit: type=1400 audit(1767834068.474:660): avc: denied { read } for pid=9810 comm="syz.1.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 177.662802][ T40] audit: type=1400 audit(1767834068.524:661): avc: denied { setattr } for pid=9810 comm="syz.1.1065" name="audio1" dev="devtmpfs" ino=1323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 177.678963][ T9] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 177.682266][ T9] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 177.686363][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 177.692676][ T9] usb 7-1: string descriptor 0 read error: -22 [ 177.695415][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 177.699583][ T9] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 177.707743][ T9] usb 7-1: config 0 descriptor?? [ 177.717597][ T9] hub 7-1:0.0: bad descriptor, ignoring hub [ 177.720208][ T9] hub 7-1:0.0: probe with driver hub failed with error -5 [ 177.726158][ T9] usb 7-1: selecting invalid altsetting 0 [ 177.847358][ T61] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 177.999322][ T61] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 178.002619][ T61] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.007071][ T61] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 178.010650][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.027932][ T34] usb 7-1: USB disconnect, device number 14 [ 178.222601][ T61] usb 8-1: usb_control_msg returned -32 [ 178.224525][ T61] usbtmc 8-1:16.0: can't read capabilities [ 178.577534][ T24] usb 8-1: USB disconnect, device number 9 [ 178.589264][ T9822] netlink: 'syz.1.1068': attribute type 39 has an invalid length. [ 179.250396][ T9839] __nla_validate_parse: 12 callbacks suppressed [ 179.250419][ T9839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'. [ 179.258511][ T9839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=9839 comm=syz.0.1073 [ 179.338234][ T9846] bridge2: entered promiscuous mode [ 179.372436][ T9851] netlink: 'syz.3.1077': attribute type 1 has an invalid length. [ 179.404107][ T9851] bond1: entered promiscuous mode [ 179.410344][ T9851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.491113][ T9859] loop5: detected capacity change from 0 to 7 [ 179.499561][ C0] blk_print_req_error: 330 callbacks suppressed [ 179.499585][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.501571][ T9857] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 179.502257][ C0] buffer_io_error: 330 callbacks suppressed [ 179.502271][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 179.508190][ T9857] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1078'. [ 179.511567][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.524236][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 179.530391][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.535309][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 179.539932][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.544149][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 179.548084][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.552321][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 179.556513][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.560498][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 179.564024][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.567901][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 179.571230][ T6086] ldm_validate_partition_table(): Disk read failed. [ 179.573490][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.576861][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 179.580045][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.584052][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 179.588879][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.592095][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 179.596291][ T6086] Dev loop5: unable to read RDB block 0 [ 179.600328][ T6086] loop5: unable to read partition table [ 179.602992][ T6086] loop5: partition table beyond EOD, truncated [ 179.617073][ T9859] ldm_validate_partition_table(): Disk read failed. [ 179.620622][ T9859] Dev loop5: unable to read RDB block 0 [ 179.623498][ T9859] loop5: unable to read partition table [ 179.626331][ T9859] loop5: partition table beyond EOD, truncated [ 179.629783][ T9859] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 179.670853][ T9867] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1081'. [ 179.748040][ T40] audit: type=1400 audit(1767834070.614:662): avc: denied { read append } for pid=9873 comm="syz.2.1083" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 179.753325][ T9874] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 179.920335][ T9894] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 179.923039][ T9894] SELinux: failed to load policy [ 179.972432][ T9896] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 180.101537][ T9903] new mount options do not match the existing superblock, will be ignored [ 180.645482][ T9921] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 180.658427][ T9921] Context (ID=0x0) not attached to queue pair (handle=0xffffffff:0x0) [ 180.816854][ T9929] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.912045][ T9929] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.932922][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 180.932939][ T40] audit: type=1400 audit(1767834071.794:667): avc: denied { execute } for pid=9934 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 180.944238][ T40] audit: type=1400 audit(1767834071.794:668): avc: denied { execute_no_trans } for pid=9934 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 181.028477][ T5955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 181.029083][ T9929] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.034488][ T5955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 181.038009][ T5955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 181.041604][ T5955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 181.045166][ T5955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 181.119009][ T9929] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.225682][ T9940] chnl_net:caif_netlink_parms(): no params data found [ 181.227194][ T9949] netlink: 'syz.1.1107': attribute type 64 has an invalid length. [ 181.232021][ T9949] netlink: 'syz.1.1107': attribute type 4 has an invalid length. [ 181.235656][ T9949] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1107'. [ 181.282932][ T59] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.313919][ T6822] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.341769][ T6822] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.346416][ T9940] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.357166][ T9940] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.360648][ T9940] bridge_slave_0: entered allmulticast mode [ 181.364441][ T9940] bridge_slave_0: entered promiscuous mode [ 181.376328][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.380405][ T9940] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.383845][ T9940] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.389357][ T9940] bridge_slave_1: entered allmulticast mode [ 181.392967][ T9940] bridge_slave_1: entered promiscuous mode [ 181.430827][ T9940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.437729][ T9940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.450162][ T9961] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1109'. [ 181.463629][ T9940] team0: Port device team_slave_0 added [ 181.469104][ T9940] team0: Port device team_slave_1 added [ 181.508800][ T9940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.511782][ T9940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.523329][ T9940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.529594][ T9940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.532560][ T9940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.535985][ T60] hid-generic 00A0:0086:0003.0002: unknown main item tag 0x0 [ 181.544088][ T9940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.548667][ T60] hid-generic 00A0:0086:0003.0002: unknown main item tag 0x0 [ 181.556119][ T60] hid-generic 00A0:0086:0003.0002: unknown main item tag 0x0 [ 181.559622][ T60] hid-generic 00A0:0086:0003.0002: unknown main item tag 0x0 [ 181.563082][ T60] hid-generic 00A0:0086:0003.0002: unknown main item tag 0x0 [ 181.566577][ T60] hid-generic 00A0:0086:0003.0002: unknown main item tag 0x0 [ 181.570574][ T60] hid-generic 00A0:0086:0003.0002: unknown main item tag 0x0 [ 181.573664][ T60] hid-generic 00A0:0086:0003.0002: unknown main item tag 0x0 [ 181.577757][ T60] hid-generic 00A0:0086:0003.0002: unknown main item tag 0x0 [ 181.581240][ T60] hid-generic 00A0:0086:0003.0002: unknown main item tag 0x0 [ 181.587299][ T9963] futex_wake_op: syz.1.1110 tries to shift op by -1; fix this program [ 181.593327][ T60] hid-generic 00A0:0086:0003.0002: hidraw1: HID v0.05 Device [syz1] on syz0 [ 181.596732][ T9940] hsr_slave_0: entered promiscuous mode [ 181.601521][ T9940] hsr_slave_1: entered promiscuous mode [ 181.609599][ T9940] debugfs: 'hsr0' already exists in 'hsr' [ 181.612147][ T9940] Cannot create hsr debugfs directory [ 181.626616][ T5340] udevd[5340]: worker [6086] terminated by signal 33 (Unknown signal 33) [ 181.630453][ T5340] udevd[5340]: worker [6086] failed while handling '/devices/virtual/misc/uhid/00A0:0086:0003.0002/hidraw/hidraw1' [ 181.783301][ T9971] autofs4:pid:9971:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 181.795320][ T9940] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 181.806450][ T9940] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 181.813089][ T9940] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 181.820422][ T9940] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 181.830932][ T40] audit: type=1400 audit(1767834072.694:669): avc: denied { create } for pid=9972 comm="syz.3.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 181.874253][ T9940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.888098][ T9940] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.888148][ T9981] netlink: 'syz.3.1114': attribute type 11 has an invalid length. [ 181.893356][ T9981] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1114'. [ 181.894418][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.899464][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.909823][ T804] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.912140][ T804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.914875][ T40] audit: type=1400 audit(1767834072.774:670): avc: denied { bind } for pid=9980 comm="syz.3.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 182.049433][ T9994] netlink: 'syz.3.1118': attribute type 4 has an invalid length. [ 182.058526][ T9940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.229986][ T9940] veth0_vlan: entered promiscuous mode [ 182.230337][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1122'. [ 182.284437][ T9940] veth1_vlan: entered promiscuous mode [ 182.309954][ T9940] veth0_macvtap: entered promiscuous mode [ 182.316319][ T9940] veth1_macvtap: entered promiscuous mode [ 182.330628][ T9940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.341130][ T9940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.349489][ T804] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.352681][ T804] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.356404][ T804] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.359643][ T804] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.431688][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.434262][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.459008][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.461955][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.470831][ T40] audit: type=1400 audit(1767834073.334:671): avc: denied { mounton } for pid=9940 comm="syz-executor" path="/syzkaller.2UFTxS/syz-tmp" dev="sda1" ino=2038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 182.480475][ T40] audit: type=1400 audit(1767834073.344:672): avc: denied { mounton } for pid=9940 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 182.489309][ T40] audit: type=1400 audit(1767834073.344:673): avc: denied { mounton } for pid=9940 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 182.542528][ T40] audit: type=1400 audit(1767834073.404:674): avc: denied { bind } for pid=10015 comm="syz.4.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 182.549566][ T40] audit: type=1400 audit(1767834073.404:675): avc: denied { setopt } for pid=10015 comm="syz.4.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 182.555981][ T40] audit: type=1400 audit(1767834073.404:676): avc: denied { accept } for pid=10015 comm="syz.4.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 182.709465][T10019] (syz.4.1124,10019,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 182.713152][T10019] (syz.4.1124,10019,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 182.823042][T10027] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1127'. [ 183.117201][ T5960] Bluetooth: hci1: command tx timeout [ 183.131105][T10046] btrfs: Unknown parameter 'barrier' [ 183.211327][T10055] tmpfs: Bad value for 'mpol' [ 183.324628][T10077] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1138'. [ 183.328334][T10077] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 183.635966][T10086] xt_SECMARK: invalid mode: 2 [ 184.216298][T10095] bond1: Unable to set down delay as MII monitoring is disabled [ 184.220625][T10095] bond1 (unregistering): Released all slaves [ 184.222642][ T5960] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 184.251073][T10094] bond1: Unable to set down delay as MII monitoring is disabled [ 184.255971][T10094] bond1 (unregistering): Released all slaves [ 184.456501][T10109] netlink: 'syz.4.1147': attribute type 8 has an invalid length. [ 184.511582][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1150'. [ 184.551636][T10124] netlink: 'syz.3.1152': attribute type 1 has an invalid length. [ 184.565922][T10128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1153'. [ 184.583766][T10124] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.593348][T10130] netlink: 'syz.2.1155': attribute type 1 has an invalid length. [ 184.608656][T10130] bond8: entered promiscuous mode [ 184.610627][T10130] 8021q: adding VLAN 0 to HW filter on device bond8 [ 184.615383][T10130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1155'. [ 184.618642][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1155'. [ 184.621588][T10130] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1155'. [ 184.641336][T10124] bond2: (slave veth1): Enslaving as an active interface with a down link [ 184.655591][T10133] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 184.675984][T10124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.679622][T10124] bond2: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 184.712263][T10130] bond8: (slave bridge3): making interface the new active one [ 184.714979][T10130] bridge3: entered promiscuous mode [ 184.717838][T10130] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 184.795607][T10149] hpfs: Bad magic ... probably not HPFS [ 184.805541][T10149] hpfs: Bad magic ... probably not HPFS [ 184.836756][T10151] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 184.902729][T10159] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1163'. [ 184.912534][T10159] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 184.939426][T10159] : (slave syz_tun): Releasing backup interface [ 184.945417][T10159] bridge_slave_0: left allmulticast mode [ 184.947532][T10159] bridge_slave_0: left promiscuous mode [ 184.949429][T10159] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.954941][T10159] bridge_slave_1: left allmulticast mode [ 184.957271][T10159] bridge_slave_1: left promiscuous mode [ 184.959129][T10159] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.970247][T10159] : (slave bond_slave_0): Releasing backup interface [ 184.979204][T10159] : (slave bond_slave_1): Releasing backup interface [ 184.988711][T10166] netlink: 'syz.3.1163': attribute type 10 has an invalid length. [ 184.994446][T10159] : (slave batadv_slave_0): Releasing backup interface [ 185.003192][T10159] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 185.015396][T10166] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 185.068764][T10170] program syz.1.1169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.069913][T10169] overlayfs: failed to clone upperpath [ 185.088163][T10170] bond0: (slave bond_slave_1): Device is not bonding slave [ 185.090951][T10170] bond0: option active_slave: invalid value (bond_slave_1) [ 185.113079][T10170] bond0 (unregistering): Released all slaves [ 185.197420][ T5960] Bluetooth: hci1: command tx timeout [ 185.211990][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1174'. [ 185.266917][T10183] XFS (nbd1): SB validate failed with error -5. [ 185.375328][ T5960] Bluetooth: unknown link type 252 [ 185.377609][ T5960] Bluetooth: hci0: connection err: -111 [ 185.707016][ T34] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 185.858997][ T34] usb 6-1: config 0 has an invalid interface number: 168 but max is 1 [ 185.862008][ T34] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.865715][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 185.868862][ T34] usb 6-1: config 0 has no interface number 0 [ 185.871148][ T34] usb 6-1: too many endpoints for config 0 interface 168 altsetting 193: 36, using maximum allowed: 30 [ 185.875322][ T34] usb 6-1: config 0 interface 168 altsetting 193 has 0 endpoint descriptors, different from the interface descriptor's value: 36 [ 185.879967][ T34] usb 6-1: config 0 interface 168 has no altsetting 0 [ 185.882346][ T34] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 185.885714][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.891220][ T34] usb 6-1: config 0 descriptor?? [ 186.073308][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1181'. [ 186.080133][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 186.080145][ T40] audit: type=1400 audit(1767834076.944:696): avc: denied { map } for pid=10206 comm="syz.3.1182" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 186.093638][ T40] audit: type=1400 audit(1767834076.954:697): avc: denied { execute } for pid=10206 comm="syz.3.1182" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 186.100626][ T34] usb 6-1: string descriptor 0 read error: -71 [ 186.114261][ T34] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 186.120579][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 186.137983][ T34] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 186.142211][ T34] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 186.145071][ T34] usb 6-1: media controller created [ 186.151417][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.163656][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 186.166761][ T34] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 186.180143][ T34] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input15 [ 186.189130][ T34] dvb-usb: schedule remote query interval to 150 msecs. [ 186.191458][ T34] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 186.201064][ T34] usb 6-1: USB disconnect, device number 15 [ 186.211479][T10219] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1187'. [ 186.226398][ T34] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 186.306341][T10229] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1189'. [ 186.340248][ T40] audit: type=1400 audit(1767834077.204:698): avc: denied { create } for pid=10231 comm="syz.4.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 186.348032][ T40] audit: type=1400 audit(1767834077.204:699): avc: denied { setopt } for pid=10231 comm="syz.4.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 186.356092][ T59] bond0: (slave bond_slave_0): interface is now down [ 186.363982][ T40] audit: type=1400 audit(1767834077.224:700): avc: denied { bind } for pid=10231 comm="syz.4.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 186.370601][ T59] bond0: (slave bond_slave_1): interface is now down [ 186.449602][ T8883] bond0: (slave bond_slave_0): interface is now down [ 186.453033][ T8883] bond0: (slave bond_slave_1): interface is now down [ 186.465420][ T8883] bond0: now running without any active interface! [ 186.577823][T10246] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 186.586122][T10246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=10246 comm=syz.2.1195 [ 186.647520][T10249] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.832591][T10258] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 186.835622][T10258] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 186.838625][T10258] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 186.841056][T10258] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 187.210530][ T40] audit: type=1400 audit(1767834078.074:701): avc: denied { setattr } for pid=10280 comm="syz.3.1205" name="NETLINK" dev="sockfs" ino=35137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 187.248861][ T40] audit: type=1400 audit(1767834078.094:702): avc: denied { block_suspend } for pid=10278 comm="syz.1.1204" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 187.267133][ T5960] Bluetooth: hci1: command tx timeout [ 187.288866][T10286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.292449][T10286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.467139][T10294] can0: slcan on ttyS3. [ 187.508633][T10294] can0 (unregistered): slcan off ttyS3. [ 187.546999][ T6042] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 187.726977][ T6042] usb 8-1: Using ep0 maxpacket: 8 [ 187.730065][ T6042] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 187.733096][ T6042] usb 8-1: config 0 has no interface number 0 [ 187.736028][ T6042] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 187.740550][ T6042] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 187.744683][ T6042] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 187.750333][ T6042] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 187.755025][ T6042] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 187.758240][ T6042] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.767273][ T6042] usb 8-1: config 0 descriptor?? [ 187.771587][ T6042] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 187.972499][ T6042] usb 8-1: USB disconnect, device number 10 [ 187.977066][ T6042] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 188.055328][T10318] bpf: Bad value for 'gid' [ 188.096185][T10321] netlink: 'syz.1.1216': attribute type 1 has an invalid length. [ 188.681737][T10379] bridge_slave_0: default FDB implementation only supports local addresses [ 188.688320][T10380] loop2: detected capacity change from 0 to 7 [ 188.694954][ T5961] loop2: p1 [ 188.696242][ T5961] loop2: partition table partially beyond EOD, truncated [ 188.699787][ T5961] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 188.711491][T10380] loop2: p1 [ 188.712680][T10380] loop2: partition table partially beyond EOD, truncated [ 188.716440][T10380] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 188.743756][ T5961] udevd[5961]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 188.757953][ T5961] udevd[5961]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 188.771948][T10388] netlink: 'syz.2.1235': attribute type 29 has an invalid length. [ 188.784013][T10388] netlink: 'syz.2.1235': attribute type 29 has an invalid length. [ 188.929561][ T40] audit: type=1400 audit(1767834079.794:703): avc: denied { call } for pid=10394 comm="syz.2.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 188.936457][ T40] audit: type=1400 audit(1767834079.794:704): avc: denied { transfer } for pid=10394 comm="syz.2.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 189.347607][ T5960] Bluetooth: hci1: command tx timeout [ 189.408265][ T40] audit: type=1400 audit(1767834080.274:705): avc: denied { read } for pid=10428 comm="syz.1.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 189.411300][ T5960] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 189.738352][T10451] __nla_validate_parse: 17 callbacks suppressed [ 189.738365][T10451] netlink: 328 bytes leftover after parsing attributes in process `syz.2.1254'. [ 190.022017][T10460] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 190.113165][T10463] binder: 10462:10463 ioctl c0205647 200000000280 returned -22 [ 190.151778][T10466] netlink: 'syz.2.1258': attribute type 8 has an invalid length. [ 190.152659][T10463] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 4π!FVluc'f`ކ;1 [ 190.209219][T10467] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10467 comm=syz.2.1258 [ 190.209406][T10466] cdrom: dropping to single frame dma [ 190.280867][T10474] netlink: 'syz.3.1259': attribute type 2 has an invalid length. [ 190.284694][T10474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.413441][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1265'. [ 190.440883][T10497] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 190.444852][T10497] overlayfs: missing 'lowerdir' [ 190.493629][T10504] afs: Unknown parameter 'dyn6k' [ 190.498598][T10507] fuse: Unknown parameter 'roOtmode' [ 190.540452][T10512] netlink: 'syz.2.1268': attribute type 64 has an invalid length. [ 190.543087][T10512] netlink: 'syz.2.1268': attribute type 4 has an invalid length. [ 190.546228][T10512] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1268'. [ 190.558039][T10514] netlink: 'syz.2.1268': attribute type 64 has an invalid length. [ 190.560762][T10514] netlink: 'syz.2.1268': attribute type 4 has an invalid length. [ 190.564420][T10514] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1268'. [ 190.788184][T10535] binder: 10534:10535 ioctl 400c620e 200000000ac0 returned -22 [ 190.825689][ T5960] Bluetooth: hci1: unexpected cc 0x040e length: 236 > 7 [ 190.889314][T10543] netlink: 'syz.3.1278': attribute type 10 has an invalid length. [ 191.094121][T10564] netlink: 'syz.4.1284': attribute type 1 has an invalid length. [ 191.170901][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1287'. [ 191.175272][T10572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1287'. [ 191.230126][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 191.230137][ T40] audit: type=1400 audit(1767834082.094:713): avc: denied { read } for pid=10575 comm="syz.3.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 191.238155][T10578] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1290'. [ 191.273923][T10582] 9pnet_virtio: no channels available for device syz [ 191.367799][T10585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10585 comm=syz.4.1292 [ 191.392471][ T40] audit: type=1400 audit(1767834082.254:714): avc: denied { bind } for pid=10586 comm="syz.2.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 191.447537][ T40] audit: type=1400 audit(1767834082.314:715): avc: denied { setopt } for pid=10586 comm="syz.2.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 191.647070][ T40] audit: type=1400 audit(1767834082.504:716): avc: denied { associate } for pid=10608 comm="syz.4.1299" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 191.721901][T10612] overlayfs: failed to resolve './file0': -2 [ 191.752143][T10614] nfs4: Bad value for 'source' [ 191.768762][T10617] veth1_macvtap: left promiscuous mode [ 191.771071][T10617] macsec0: entered promiscuous mode [ 191.773139][T10617] macsec0: entered allmulticast mode [ 191.955372][T10631] ubifs: Unknown parameter 'cazJ+@[ [ 191.955372][T10631] ds˰pfV_Q'2I' [ 192.067923][ T60] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 192.237382][ T60] usb 7-1: Using ep0 maxpacket: 8 [ 192.248178][ T60] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 192.252799][ T60] usb 7-1: config 0 has no interface number 0 [ 192.255336][ T60] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 192.260657][ T60] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 192.265751][ T60] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 192.270659][ T60] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 192.275701][ T60] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 192.280258][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.286710][ T60] usb 7-1: config 0 descriptor?? [ 192.295623][ T60] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 192.477047][ T34] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 192.501168][T10645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.505729][T10645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.520444][ T61] usb 7-1: USB disconnect, device number 15 [ 192.525949][ T61] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 192.637047][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 192.646175][ T34] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 192.649205][ T34] usb 8-1: config 0 has no interface number 0 [ 192.651303][ T34] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 192.654914][ T34] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 192.660638][ T34] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 192.664256][ T34] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 192.677704][ T34] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 192.681787][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.688811][ T34] usb 8-1: config 0 descriptor?? [ 192.696469][ T34] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 192.784552][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1319'. [ 192.789022][T10661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1319'. [ 192.797868][T10663] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 192.800437][T10663] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 192.803635][T10663] vhci_hcd vhci_hcd.0: Device attached [ 192.803988][T10661] geneve2: entered promiscuous mode [ 192.809122][T10661] geneve2: entered allmulticast mode [ 192.817000][T10664] usbip_core: unknown command [ 192.819127][T10664] vhci_hcd: unknown pdu 0 [ 192.820575][T10664] usbip_core: unknown command [ 192.823667][ T59] vhci_hcd vhci_hcd.2: stop threads [ 192.825333][ T59] vhci_hcd vhci_hcd.2: release socket [ 192.827631][ T59] vhci_hcd vhci_hcd.2: disconnect device [ 192.861779][T10669] 9pnet_virtio: no channels available for device syz [ 192.897686][ T61] usb 8-1: USB disconnect, device number 11 [ 192.901453][ T61] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 193.132849][T10677] x_tables: duplicate underflow at hook 2 [ 193.288224][T10685] vlan0: entered promiscuous mode [ 193.299614][T10685] team0: Port device vlan0 added [ 193.433278][T10693] *;eܲ: renamed from lo [ 193.583561][T10707] veth0_to_bond: entered allmulticast mode [ 193.589770][T10707] netlink: 'syz.3.1333': attribute type 5 has an invalid length. [ 193.617067][T10698] block nbd3: shutting down sockets [ 193.639553][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1335'. [ 193.659783][ T40] audit: type=1400 audit(1767834084.524:717): avc: denied { write } for pid=10712 comm="syz.3.1337" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 193.667914][ T40] audit: type=1400 audit(1767834084.524:718): avc: denied { open } for pid=10712 comm="syz.3.1337" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 193.676372][T10716] xt_CONNSECMARK: invalid mode: 0 [ 193.711290][ T40] audit: type=1400 audit(1767834084.574:719): avc: denied { append } for pid=10712 comm="syz.3.1337" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 193.768218][ T40] audit: type=1400 audit(1767834084.634:720): avc: denied { ioctl } for pid=10712 comm="syz.3.1337" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 193.867893][T10741] unsupported nla_type 4111 [ 193.884783][ T40] audit: type=1400 audit(1767834084.744:721): avc: denied { ioctl } for pid=10742 comm="syz.1.1346" path="socket:[36899]" dev="sockfs" ino=36899 ioctlcmd=0x6722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 193.905347][T10745] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 194.116278][ T40] audit: type=1400 audit(1767834084.974:722): avc: denied { append } for pid=10766 comm="syz.1.1352" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 194.289274][ T6042] IPVS: starting estimator thread 0... [ 194.377084][T10784] IPVS: using max 45 ests per chain, 108000 per kthread [ 194.580711][T10783] ip6gretap1: entered promiscuous mode [ 194.583100][T10783] ip6gretap1: entered allmulticast mode [ 195.827055][ T5960] Bluetooth: hci0: command 0x040f tx timeout [ 195.827127][T10719] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 196.112362][T10791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1360'. [ 196.185034][T10797] Unknown options in mask b7f2 [ 196.188022][T10797] netlink: 'syz.4.1362': attribute type 1 has an invalid length. [ 196.202722][T10797] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1362'. [ 196.667050][T10719] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 196.669309][T10719] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 196.671603][T10719] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 196.700120][T10719] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 196.848003][T10826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1368'. [ 196.881052][T10848] syz_tun: refused to change device tx_queue_len [ 196.883942][T10847] syz_tun: refused to change device tx_queue_len [ 196.936102][T10847] Invalid logical block size (4098) [ 196.951990][T10847] usb 1-1: USB disconnect, device number 2 [ 197.356587][T10870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1381'. [ 197.388297][ T40] audit: type=1400 audit(1767834088.254:723): avc: denied { setopt } for pid=10869 comm="syz.2.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 197.560929][T10906] 9p: Could not find request transport: v [ 197.573490][T10898] QAT: Device 2 not found [ 197.745837][T10922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1398'. [ 197.907166][ T5960] Bluetooth: hci3: command 0x040f tx timeout [ 198.707073][ T5960] Bluetooth: hci1: command 0x0c1a tx timeout [ 199.511464][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.787502][ T5960] Bluetooth: hci1: command 0x0c1a tx timeout [ 202.867170][ T5960] Bluetooth: hci1: command 0x0c1a tx timeout [ 212.951916][ T40] audit: type=1400 audit(1767834103.814:724): avc: denied { write } for pid=10938 comm="syz.3.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 213.001308][ T40] audit: type=1400 audit(1767834103.864:725): avc: denied { checkpoint_restore } for pid=10931 comm="syz.4.1399" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 213.449940][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1408'. [ 213.453941][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1408'. [ 213.778747][T10991] geneve3: entered promiscuous mode [ 214.002617][T11020] cgroup2: Unknown parameter 'euid' [ 214.003182][T11021] cgroup2: Unknown parameter 'euid' [ 214.008182][T11020] openvswitch: netlink: Unknown key attributes 2 [ 214.009478][T11022] ucma_write: process 1069 (syz.2.1422) changed security contexts after opening file descriptor, this is not allowed. [ 214.073070][ T40] audit: type=1400 audit(1767834104.934:726): avc: denied { ioctl } for pid=11026 comm="syz.2.1424" path="socket:[38086]" dev="sockfs" ino=38086 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 214.387279][ T34] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 214.404753][T11043] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 214.420078][ T40] audit: type=1400 audit(1767834105.284:727): avc: denied { rename } for pid=11042 comm="syz.2.1429" name="file1" dev="overlay" ino=81264813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 214.428756][ T40] audit: type=1400 audit(1767834105.284:728): avc: denied { unlink } for pid=11042 comm="syz.2.1429" name="file0" dev="overlay" ino=81264791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 214.436802][ T40] audit: type=1400 audit(1767834105.284:729): avc: denied { write open } for pid=11042 comm="syz.2.1429" path=2F202864656C6574656429 dev="tmpfs" ino=1913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 214.445518][ T40] audit: type=1400 audit(1767834105.294:730): avc: denied { setattr } for pid=11042 comm="syz.2.1429" name="#1913" dev="tmpfs" ino=1913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 214.453441][ T40] audit: type=1400 audit(1767834105.294:731): avc: denied { read } for pid=11042 comm="syz.2.1429" dev="tmpfs" ino=1913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 214.460815][ T6010] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 214.462898][ T40] audit: type=1400 audit(1767834105.294:732): avc: denied { link } for pid=11042 comm="syz.2.1429" name="#1913" dev="tmpfs" ino=1913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 214.471251][ T40] audit: type=1400 audit(1767834105.304:733): avc: denied { setopt } for pid=11042 comm="syz.2.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 214.547135][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 214.551623][ T34] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 214.556026][ T34] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 214.561621][ T34] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 214.566545][ T34] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 214.575845][ T34] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 214.581137][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.584159][ T34] usb 6-1: Product: syz [ 214.585520][ T34] usb 6-1: Manufacturer: syz [ 214.587387][ T34] usb 6-1: SerialNumber: syz [ 214.600023][ C3] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 214.606339][ T34] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input16 [ 214.617253][ T6010] usb 8-1: Using ep0 maxpacket: 16 [ 214.620931][ T6010] usb 8-1: config index 0 descriptor too short (expected 65, got 36) [ 214.624257][ T6010] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.628538][ T6010] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 229, changing to 11 [ 214.632021][ T6010] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 26495, setting to 1024 [ 214.636210][ T6010] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.643378][ T6010] usb 8-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 214.647134][ T6010] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.651836][ T6010] usb 8-1: config 0 descriptor?? [ 214.654274][T11038] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 214.663803][ T6010] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input18 [ 214.826986][ T34] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 214.829648][ T34] (id 0x00) [ 214.887095][ T34] rc_core: IR keymap rc-imon-pad not found [ 214.890039][ T34] Registered IR keymap rc-empty [ 214.892588][ T34] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 214.896164][ T34] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 214.929543][ T29] usb 8-1: USB disconnect, device number 12 [ 215.008441][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 215.015580][T11056] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 215.019819][ T34] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 215.020847][T11056] batadv_slave_0: entered promiscuous mode [ 215.026855][T11056] batadv_slave_0: left promiscuous mode [ 215.035132][ T34] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input17 [ 215.040014][T11056] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 215.042800][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1434'. [ 215.049762][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1434'. [ 215.059219][ T34] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:16> initialized [ 215.060590][T11062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1434'. [ 215.114611][T11068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1435'. [ 215.202009][T11034] imon:display_open: display port is already open [ 215.210588][ T6010] usb 6-1: USB disconnect, device number 16 [ 215.214510][T11075] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 215.257342][T11077] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1438'. [ 215.260202][T11077] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1438'. [ 215.263352][T11077] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1438'. [ 215.274929][T11081] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11081 comm=syz.2.1439 [ 215.385755][T11079] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 215.397165][T11079] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 215.401084][T11088] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 215.522660][T11100] pimreg: entered allmulticast mode [ 215.621087][ T6010] libceph: connect (1)[c::]:6789 error -101 [ 215.625329][ T6010] libceph: mon0 (1)[c::]:6789 connect error [ 215.629858][ T6010] libceph: connect (1)[c::]:6789 error -101 [ 215.632633][ T6010] libceph: mon0 (1)[c::]:6789 connect error [ 215.687933][T11112] netlink: 'syz.4.1449': attribute type 11 has an invalid length. [ 215.691310][T11112] netlink: 'syz.4.1449': attribute type 7 has an invalid length. [ 215.785391][T11106] ceph: No mds server is up or the cluster is laggy [ 215.950399][T11132] gtp0: entered promiscuous mode [ 215.952742][T11132] gtp0: entered allmulticast mode [ 215.961058][T11130] /dev/nullb0: Can't lookup blockdev [ 216.012202][T11135] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 216.038244][T11135] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 216.611606][T11138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.617747][T11163] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11163 comm=syz.1.1466 [ 216.627555][ T24] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 216.717095][T11161] 9p: Could not find request transport: j2rtio [ 216.777062][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 216.780755][ T24] usb 7-1: config 2 interface 0 has no altsetting 0 [ 216.785106][ T24] usb 7-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 216.790989][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.797583][ T24] usb 7-1: Product: syz [ 216.799460][ T24] usb 7-1: Manufacturer: syz [ 216.801426][ T24] usb 7-1: SerialNumber: syz [ 217.012431][T11198] loop5: detected capacity change from 0 to 7 [ 217.016333][T11198] Dev loop5: unable to read RDB block 7 [ 217.019533][T11198] loop5: unable to read partition table [ 217.021637][T11198] loop5: partition table beyond EOD, truncated [ 217.028324][T11198] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 217.060938][ T24] usb 7-1: USB disconnect, device number 16 [ 217.310518][T11213] vxcan1: entered promiscuous mode [ 217.711923][T11227] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65498 sclass=netlink_audit_socket pid=11227 comm=syz.2.1485 [ 217.815495][T11229] binder: BINDER_SET_CONTEXT_MGR already set [ 217.819490][T11229] binder: 11228:11229 ioctl 4018620d 200000000100 returned -16 [ 217.959569][ T5340] udevd[5340]: worker [10944] terminated by signal 33 (Unknown signal 33) [ 217.968457][ T5340] udevd[5340]: worker [10944] failed while handling '/devices/virtual/block/loop5' [ 218.461715][T11244] kernel profiling enabled (shift: 5) [ 218.704705][T11247] binder: 11245:11247 ioctl c0306201 200000000680 returned -22 [ 219.208087][T11267] __nla_validate_parse: 13 callbacks suppressed [ 219.208099][T11267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1497'. [ 219.512458][T11278] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 219.520538][T11278] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 219.564732][T11281] nbd: must specify at least one socket [ 219.647669][T11284] netlink: 'syz.1.1504': attribute type 178 has an invalid length. [ 219.836688][T11299] syz.3.1508: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 219.841406][T11299] CPU: 0 UID: 0 PID: 11299 Comm: syz.3.1508 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.841427][T11299] Tainted: [L]=SOFTLOCKUP [ 219.841432][T11299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 219.841441][T11299] Call Trace: [ 219.841462][T11299] [ 219.841469][T11299] dump_stack_lvl+0x16c/0x1f0 [ 219.841508][T11299] warn_alloc+0x248/0x3a0 [ 219.841523][T11299] ? __pfx_warn_alloc+0x10/0x10 [ 219.841539][T11299] ? __lock_acquire+0x436/0x2890 [ 219.841556][T11299] ? kasan_save_stack+0x42/0x60 [ 219.841576][T11299] ? kasan_save_stack+0x33/0x60 [ 219.841588][T11299] ? kasan_save_track+0x14/0x30 [ 219.841602][T11299] ? xskq_create+0xfb/0x1d0 [ 219.841614][T11299] __vmalloc_node_range_noprof+0x12c2/0x16b0 [ 219.841639][T11299] ? xskq_create+0xfb/0x1d0 [ 219.841674][T11299] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 219.841716][T11299] ? xskq_create+0xfb/0x1d0 [ 219.841728][T11299] vmalloc_user_noprof+0x9e/0xe0 [ 219.841746][T11299] ? xskq_create+0xfb/0x1d0 [ 219.841758][T11299] xskq_create+0xfb/0x1d0 [ 219.841770][T11299] xsk_setsockopt+0x932/0xc00 [ 219.841783][T11299] ? __pfx_xsk_setsockopt+0x10/0x10 [ 219.841810][T11299] ? selinux_socket_setsockopt+0x6a/0x80 [ 219.841826][T11299] ? __pfx_xsk_setsockopt+0x10/0x10 [ 219.841845][T11299] do_sock_setsockopt+0xf3/0x1d0 [ 219.841862][T11299] __sys_setsockopt+0x1a0/0x230 [ 219.841876][T11299] __x64_sys_setsockopt+0xbd/0x160 [ 219.841886][T11299] ? do_syscall_64+0x91/0xf80 [ 219.841901][T11299] ? lockdep_hardirqs_on+0x7c/0x110 [ 219.841916][T11299] do_syscall_64+0xcd/0xf80 [ 219.841934][T11299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.841946][T11299] RIP: 0033:0x7f9a2238f7c9 [ 219.841957][T11299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.841969][T11299] RSP: 002b:00007f9a23187038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 219.841980][T11299] RAX: ffffffffffffffda RBX: 00007f9a225e5fa0 RCX: 00007f9a2238f7c9 [ 219.841988][T11299] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 219.841994][T11299] RBP: 00007f9a22413f91 R08: 0000000000000004 R09: 0000000000000000 [ 219.842001][T11299] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.842008][T11299] R13: 00007f9a225e6038 R14: 00007f9a225e5fa0 R15: 00007fffd60832a8 [ 219.842023][T11299] [ 219.842028][T11299] Mem-Info: [ 219.936196][T11299] active_anon:44707 inactive_anon:4 isolated_anon:0 [ 219.936196][T11299] active_file:3950 inactive_file:50770 isolated_file:0 [ 219.936196][T11299] unevictable:11052 dirty:47 writeback:0 [ 219.936196][T11299] slab_reclaimable:9974 slab_unreclaimable:75461 [ 219.936196][T11299] mapped:28515 shmem:38063 pagetables:1340 [ 219.936196][T11299] sec_pagetables:308 bounce:0 [ 219.936196][T11299] kernel_misc_reclaimable:0 [ 219.936196][T11299] free:359944 free_pcp:18617 free_cma:0 [ 219.955913][T11299] Node 0 active_anon:90684kB inactive_anon:16kB active_file:15800kB inactive_file:202792kB unevictable:28228kB isolated(anon):0kB isolated(file):0kB mapped:94304kB dirty:144kB writeback:0kB shmem:61436kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:14176kB pagetables:4832kB sec_pagetables:1232kB all_unreclaimable? no Balloon:0kB [ 219.976266][T11299] Node 1 active_anon:88144kB inactive_anon:0kB active_file:0kB inactive_file:288kB unevictable:15980kB isolated(anon):0kB isolated(file):0kB mapped:19756kB dirty:44kB writeback:0kB shmem:90816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:576kB pagetables:528kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 219.986718][T11299] Node 0 DMA free:5252kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4444kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:328kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:204kB local_pcp:32kB free_cma:0kB [ 219.999498][T11299] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 220.001707][T11299] Node 0 DMA32 free:39596kB boost:0kB min:27548kB low:34432kB high:41316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:86156kB inactive_anon:16kB active_file:15800kB inactive_file:202792kB unevictable:27900kB writepending:144kB zspages:0kB present:2080628kB managed:1265184kB mlocked:0kB bounce:0kB free_pcp:15072kB local_pcp:5676kB free_cma:0kB [ 220.013696][T11299] lowmem_reserve[]: 0 0 0 0 0 [ 220.015603][T11299] Node 1 Normal free:1397712kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:87988kB inactive_anon:0kB active_file:0kB inactive_file:288kB unevictable:15980kB writepending:44kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:56084kB local_pcp:15156kB free_cma:0kB [ 220.026311][T11299] lowmem_reserve[]: 0 0 0 0 0 [ 220.027953][T11299] Node 0 DMA: 1*4kB (M) 2*8kB (UM) 1*16kB (M) 7*32kB (UM) 6*64kB (UM) 2*128kB (UM) 1*256kB (U) 2*512kB (U) 3*1024kB (UM) 0*2048kB 0*4096kB = 5252kB [ 220.032729][T11299] Node 0 DMA32: 242*4kB (UME) 278*8kB (UME) 271*16kB (UME) 235*32kB (UME) 94*64kB (UME) 46*128kB (UME) 9*256kB (UE) 8*512kB (UME) 2*1024kB (UM) 2*2048kB (UM) 0*4096kB = 39496kB [ 220.039250][T11299] Node 1 Normal: 149*4kB (UM) 128*8kB (UME) 131*16kB (UM) 96*32kB (UME) 71*64kB (UME) 6*128kB (UM) 7*256kB (UM) 11*512kB (UM) 8*1024kB (UM) 1*2048kB (U) 334*4096kB (UM) = 1397828kB [ 220.044959][T11299] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 220.048213][T11299] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 220.051266][T11299] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 220.054498][T11299] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 220.057821][T11299] 99458 total pagecache pages [ 220.059636][T11299] 0 pages in swap cache [ 220.061099][T11299] Free swap = 124996kB [ 220.063256][T11299] Total swap = 124996kB [ 220.064795][T11299] 1048443 pages RAM [ 220.066013][T11299] 0 pages HighMem/MovableOnly [ 220.068150][T11299] 282836 pages reserved [ 220.069873][T11299] 0 pages cma reserved [ 220.662892][T11328] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1517'. [ 220.671907][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 220.671923][ T40] audit: type=1400 audit(1767834111.534:738): avc: denied { write } for pid=11327 comm="syz.1.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 220.975661][ T40] audit: type=1400 audit(1767834111.834:739): avc: denied { create } for pid=11344 comm="syz.1.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 220.989836][T11345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=11345 comm=syz.1.1521 [ 221.005655][T11345] loop6: detected capacity change from 0 to 2640 [ 221.008456][T11345] buffer_io_error: 25 callbacks suppressed [ 221.008465][T11345] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.012824][T11345] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.015408][T11345] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.018544][T11345] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.021038][T11345] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.023492][T11345] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.027651][T11345] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.030267][T11345] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.032671][T11345] ldm_validate_partition_table(): Disk read failed. [ 221.035058][T11345] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.038850][T11345] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.041713][T11345] Dev loop6: unable to read RDB block 0 [ 221.043581][T11345] loop6: unable to read partition table [ 221.045508][T11345] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 221.069006][ T5340] ldm_validate_partition_table(): Disk read failed. [ 221.071874][ T5340] Dev loop6: unable to read RDB block 0 [ 221.073759][ T5340] loop6: unable to read partition table [ 221.112085][ T40] audit: type=1400 audit(1767834111.974:740): avc: denied { read open } for pid=11346 comm="syz.3.1522" path="/" dev="configfs" ino=2078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 221.139017][T11347] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1522'. [ 221.198366][ T40] audit: type=1400 audit(1767834112.064:741): avc: denied { listen } for pid=11351 comm="syz.3.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 221.439678][T11371] sysfs: cannot create duplicate filename '/class/ieee80211/4π!FVluc'f`ކ;1x%MF-I' [ 221.444394][T11371] CPU: 3 UID: 0 PID: 11371 Comm: syz.2.1531 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.444420][T11371] Tainted: [L]=SOFTLOCKUP [ 221.444426][T11371] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 221.444437][T11371] Call Trace: [ 221.444444][T11371] [ 221.444452][T11371] dump_stack_lvl+0x16c/0x1f0 [ 221.444479][T11371] sysfs_warn_dup+0x7f/0xa0 [ 221.444500][T11371] sysfs_do_create_link_sd+0x124/0x140 [ 221.444517][T11371] sysfs_create_link+0x61/0xc0 [ 221.444532][T11371] device_add+0x652/0x1980 [ 221.444551][T11371] ? __pfx_device_add+0x10/0x10 [ 221.444564][T11371] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 221.444582][T11371] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 221.444601][T11371] wiphy_register+0x1ea1/0x2cc0 [ 221.444618][T11371] ? __rtnl_unlock+0x68/0xf0 [ 221.444634][T11371] ? __netdev_update_features+0x920/0x1fe0 [ 221.444651][T11371] ? __pfx_wiphy_register+0x10/0x10 [ 221.444667][T11371] ? __asan_memset+0x23/0x50 [ 221.444686][T11371] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 221.444705][T11371] ieee80211_register_hw+0x2bb2/0x4160 [ 221.444728][T11371] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 221.444744][T11371] ? __pfx___debug_object_init+0x10/0x10 [ 221.444764][T11371] ? find_held_lock+0x2b/0x80 [ 221.444783][T11371] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 221.444797][T11371] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 221.444812][T11371] ? __hrtimer_setup+0x176/0x280 [ 221.444831][T11371] mac80211_hwsim_new_radio+0x3323/0x5150 [ 221.444859][T11371] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 221.444880][T11371] ? __asan_memcpy+0x3c/0x60 [ 221.444895][T11371] hwsim_new_radio_nl+0xba2/0x1330 [ 221.444916][T11371] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 221.444938][T11371] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 221.444957][T11371] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 221.444978][T11371] genl_family_rcv_msg_doit+0x209/0x2f0 [ 221.444995][T11371] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 221.445017][T11371] ? bpf_lsm_capable+0x9/0x10 [ 221.445031][T11371] ? security_capable+0x7e/0x260 [ 221.445044][T11371] ? ns_capable+0xd7/0x110 [ 221.445062][T11371] genl_rcv_msg+0x55c/0x800 [ 221.445080][T11371] ? __pfx_genl_rcv_msg+0x10/0x10 [ 221.445099][T11371] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 221.445118][T11371] ? __lock_acquire+0x436/0x2890 [ 221.445134][T11371] netlink_rcv_skb+0x158/0x420 [ 221.445149][T11371] ? __pfx_genl_rcv_msg+0x10/0x10 [ 221.445165][T11371] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 221.445185][T11371] ? netlink_deliver_tap+0x1ae/0xd30 [ 221.445202][T11371] genl_rcv+0x28/0x40 [ 221.445216][T11371] netlink_unicast+0x5aa/0x870 [ 221.445233][T11371] ? __pfx_netlink_unicast+0x10/0x10 [ 221.445253][T11371] netlink_sendmsg+0x8c8/0xdd0 [ 221.445270][T11371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.445289][T11371] ____sys_sendmsg+0xa5d/0xc30 [ 221.445306][T11371] ? copy_msghdr_from_user+0x10a/0x160 [ 221.445318][T11371] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.445337][T11371] ? __pfx_futex_wake_mark+0x10/0x10 [ 221.445360][T11371] ___sys_sendmsg+0x134/0x1d0 [ 221.445376][T11371] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.445390][T11371] ? futex_private_hash_put+0x160/0x1b0 [ 221.445426][T11371] __sys_sendmsg+0x16d/0x220 [ 221.445440][T11371] ? __pfx___sys_sendmsg+0x10/0x10 [ 221.445454][T11371] ? __x64_sys_futex+0x1e0/0x4c0 [ 221.445479][T11371] ? fput+0x70/0xf0 [ 221.445493][T11371] do_syscall_64+0xcd/0xf80 [ 221.445515][T11371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.445528][T11371] RIP: 0033:0x7f15b738f7c9 [ 221.445540][T11371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.445551][T11371] RSP: 002b:00007f15b82a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.445564][T11371] RAX: ffffffffffffffda RBX: 00007f15b75e6090 RCX: 00007f15b738f7c9 [ 221.445571][T11371] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005 [ 221.445577][T11371] RBP: 00007f15b7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 221.445584][T11371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.445591][T11371] R13: 00007f15b75e6128 R14: 00007f15b75e6090 R15: 00007fffbde0ea78 [ 221.445606][T11371] [ 221.466088][ T40] audit: type=1400 audit(1767834112.324:742): avc: denied { setopt } for pid=11368 comm="syz.2.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 221.508325][ T24] hid_parser_main: 5 callbacks suppressed [ 221.508341][ T24] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 221.508357][ T24] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 221.508370][ T24] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 221.508382][ T24] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 221.508395][ T24] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 221.508407][ T24] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 221.508419][ T24] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 221.508432][ T24] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 221.508444][ T24] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 221.508457][ T24] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 221.518518][ T24] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 221.676771][T11375] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 221.683581][T11385] netlink: 'syz.2.1534': attribute type 1 has an invalid length. [ 221.721136][T11385] kvm: MWAIT instruction emulated as NOP! [ 221.781299][T11390] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 221.785067][T11390] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 221.827836][T11393] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1534'. [ 221.847303][T11395] bridge3: entered promiscuous mode [ 222.649957][T11426] program syz.1.1548 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.705626][T11434] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1551'. [ 222.710185][T11434] /dev/nullb0: Can't lookup blockdev [ 222.766339][ T40] audit: type=1400 audit(1767834113.624:743): avc: denied { name_bind } for pid=11438 comm="syz.1.1553" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 222.818378][T11447] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1554'. [ 222.871853][ T5955] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 223.515722][T11460] team0 (unregistering): Port device team_slave_0 removed [ 223.523079][T11460] team0 (unregistering): Port device team_slave_1 removed [ 223.593630][T11472] netlink: 'syz.3.1562': attribute type 1 has an invalid length. [ 223.596882][T11472] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 223.641574][ T40] audit: type=1400 audit(1767834114.504:744): avc: denied { read } for pid=11475 comm="syz.3.1563" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 223.684884][ T40] audit: type=1400 audit(1767834114.544:745): avc: denied { write } for pid=11476 comm="syz.2.1564" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 223.739783][T11485] SELinux: security_context_str_to_sid (sysl/) failed with errno=-22 [ 223.858351][T11494] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 223.862431][T11494] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 223.986349][T11501] bridge7: entered promiscuous mode [ 223.990651][T11501] bridge7: entered allmulticast mode [ 224.040589][T11504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1573'. [ 224.048870][T11505] program syz.2.1573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.052843][T11505] ata1.00: invalid service action 31 [ 224.219976][T11519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1578'. [ 224.298753][T11529] tmpfs: Unknown parameter 'grpmuotz_inode_hardlimit' [ 224.304364][ T40] audit: type=1400 audit(1767834115.164:746): avc: denied { setopt } for pid=11528 comm="syz.4.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 224.311460][T11531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1584'. [ 224.402266][T11554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1589'. [ 224.489885][ T40] audit: type=1400 audit(1767834115.354:747): avc: denied { write } for pid=11558 comm="syz.2.1590" name="/" dev="9p" ino=81264747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.578238][T11555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 224.653412][T11576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1596'. [ 224.659786][T11576] xt_NFQUEUE: number of total queues is 0 [ 224.700922][T11583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1598'. [ 224.706216][T11583] netlink: 'syz.3.1598': attribute type 1 has an invalid length. [ 224.709381][T11583] netlink: 'syz.3.1598': attribute type 4 has an invalid length. [ 224.712514][T11583] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1598'. [ 224.784120][T11587] openvswitch: netlink: Message has 592 unknown bytes. [ 224.788693][T11587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.833353][T11590] netlink: 'syz.4.1601': attribute type 1 has an invalid length. [ 224.842810][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1601'. [ 224.849464][T11590] netlink: 28824 bytes leftover after parsing attributes in process `syz.4.1601'. [ 224.948500][T11591] bond2: (slave bond_slave_1): Device is not our slave [ 224.951103][T11591] bond2: option active_slave: invalid value (bond_slave_1) [ 224.955757][T11591] bond2 (unregistering): Released all slaves [ 225.084058][T11595] netlink: 'syz.4.1602': attribute type 39 has an invalid length. [ 225.577032][ T34] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 225.676997][ T40] kauditd_printk_skb: 18563 callbacks suppressed [ 225.677010][ T40] audit: type=1326 audit(1767834116.534:19312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11580 comm="syz.2.1594" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b738f7c9 code=0x50000 [ 225.686442][ T40] audit: type=1326 audit(1767834116.544:19313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11580 comm="syz.2.1594" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b738f7c9 code=0x50000 [ 225.694293][ T40] audit: type=1326 audit(1767834116.544:19314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11580 comm="syz.2.1594" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b738f7c9 code=0x50000 [ 225.702271][ T40] audit: type=1326 audit(1767834116.544:19315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11580 comm="syz.2.1594" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b738f7c9 code=0x50000 [ 225.709625][ T40] audit: type=1326 audit(1767834116.544:19316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11580 comm="syz.2.1594" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b738f7c9 code=0x50000 [ 225.717129][ T40] audit: type=1326 audit(1767834116.544:19317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11580 comm="syz.2.1594" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b738f7c9 code=0x50000 [ 225.725421][ T40] audit: type=1326 audit(1767834116.534:19311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11580 comm="syz.2.1594" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f15b738e27f code=0x50000 [ 225.732746][ T40] audit: type=1326 audit(1767834116.544:19318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11580 comm="syz.2.1594" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b738f7c9 code=0x50000 [ 225.740700][ T40] audit: type=1326 audit(1767834116.544:19320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11580 comm="syz.2.1594" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b738f7c9 code=0x50000 [ 225.742593][ T34] usb 8-1: No LPM exit latency info found, disabling LPM. [ 225.748161][ T40] audit: type=1326 audit(1767834116.544:19319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11580 comm="syz.2.1594" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f15b738e27f code=0x50000 [ 225.751713][ T34] usb 8-1: config 1 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 225.767016][ T34] usb 8-1: config 1 interface 0 altsetting 255 endpoint 0x82 is Bulk; changing to Interrupt [ 225.770333][ T34] usb 8-1: config 1 interface 0 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 225.774435][ T34] usb 8-1: config 1 interface 0 has no altsetting 0 [ 226.134761][T11634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.138577][T11634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.142982][T11634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.148053][T11634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.672085][T11642] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 227.629196][T11652] netlink: 'syz.4.1618': attribute type 5 has an invalid length. [ 227.715039][T11657] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1621'. [ 227.823500][ T61] IPVS: starting estimator thread 0... [ 227.917065][T11668] IPVS: using max 45 ests per chain, 108000 per kthread [ 228.210757][T11681] futex_wake_op: syz.2.1628 tries to shift op by -1; fix this program [ 228.219405][T11680] netlink: 'syz.2.1628': attribute type 3 has an invalid length. [ 228.350146][ T34] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.353922][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.361743][ T34] usb 8-1: can't set config #1, error -71 [ 228.370019][ T34] usb 8-1: USB disconnect, device number 13 [ 228.370826][T11685] netlink: 'syz.3.1630': attribute type 3 has an invalid length. [ 228.375305][T11685] netlink: 'syz.3.1630': attribute type 1 has an invalid length. [ 228.380086][T11685] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1630'. [ 228.383665][T11685] NCSI netlink: No device for ifindex 0 [ 228.459281][T11692] netlink: 'syz.3.1632': attribute type 21 has an invalid length. [ 228.785501][T11718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=11718 comm=syz.2.1638 [ 228.854996][T11725] random: crng reseeded on system resumption [ 229.030589][ T5960] Bluetooth: hci1: unexpected event for opcode 0x0804 [ 229.043954][T11751] netlink: 'syz.3.1646': attribute type 5 has an invalid length. [ 229.081127][T11755] 9pnet_virtio: no channels available for device syz [ 229.220556][T11770] geneve2: entered promiscuous mode [ 229.223008][T11770] geneve2: entered allmulticast mode [ 229.702385][T11784] netlink: 'syz.2.1654': attribute type 10 has an invalid length. [ 229.705254][T11784] __nla_validate_parse: 2 callbacks suppressed [ 229.705264][T11784] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1654'. [ 229.711929][T11784] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 229.715389][T11784] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 229.725293][T11784] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 229.781354][T11787] vcan0: entered allmulticast mode [ 229.839657][T11790] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1656'. [ 229.845070][T11790] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 229.847590][T11790] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 229.857063][T11790] vhci_hcd vhci_hcd.0: Device attached [ 229.888438][T11791] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 229.890973][ T8881] vhci_hcd vhci_hcd.2: stop threads [ 229.893899][ T8881] vhci_hcd vhci_hcd.2: release socket [ 229.896319][ T8881] vhci_hcd vhci_hcd.2: disconnect device [ 230.434903][T11826] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 230.495631][T11831] tipc: Trying to set illegal importance in message [ 230.498830][T11831] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1666'. [ 230.569934][T11841] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1669'. [ 230.722721][T11846] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1671'. [ 230.890951][ T5960] Bluetooth: hci0: unexpected cc 0x040e length: 3 < 7 [ 230.893935][ T5960] Bluetooth: hci0: unexpected event for opcode 0x040e [ 230.909429][T11868] netlink: 'syz.4.1677': attribute type 2 has an invalid length. [ 230.912376][T11868] netlink: 'syz.4.1677': attribute type 1 has an invalid length. [ 231.045438][T11874] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1678'. [ 231.056208][T11874] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 231.058604][T11874] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 231.062828][T11874] vhci_hcd vhci_hcd.0: Device attached [ 231.145462][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1680'. [ 231.150869][T11880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1680'. [ 231.297235][ T29] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 231.817825][T11875] vhci_hcd: connection reset by peer [ 231.819760][ T8881] vhci_hcd vhci_hcd.1: stop threads [ 231.821461][ T8881] vhci_hcd vhci_hcd.1: release socket [ 231.825072][ T8881] vhci_hcd vhci_hcd.1: disconnect device [ 232.466635][T11926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1694'. [ 232.654315][T11930] nfs4: Unknown parameter 'eJ)]4PT>AN[wB{|~MGJa{' [ 232.695135][T11932] hfsplus: Unknown parameter 'barrierMPďh' [ 232.705467][ T40] kauditd_printk_skb: 41160 callbacks suppressed [ 232.705483][ T40] audit: type=1400 audit(1767834123.564:60481): avc: denied { write } for pid=11931 comm="syz.1.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 232.945050][ T40] audit: type=1400 audit(1767834123.804:60482): avc: denied { listen } for pid=11941 comm="syz.4.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 232.952526][ T40] audit: type=1400 audit(1767834123.804:60483): avc: denied { accept } for pid=11941 comm="syz.4.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 233.107142][ T5960] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 233.111378][ T5960] Bluetooth: hci1: Injecting HCI hardware error event [ 233.118471][ T5955] Bluetooth: hci1: hardware error 0x00 [ 233.181221][T11950] Bluetooth: (null): Non-link packet received in non-active state [ 233.184154][T11950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1702'. [ 233.488438][T11932] syz.1.1697 (11932): drop_caches: 1 [ 233.538767][T11960] dvmrp6: entered allmulticast mode [ 233.607934][T11932] syz.1.1697 (11932): drop_caches: 1 [ 233.711547][T11964] geneve4: entered promiscuous mode [ 233.713415][T11964] geneve4: entered allmulticast mode [ 234.007274][ T34] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 234.168717][ T34] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 234.172710][ T34] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 234.177175][ T34] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 234.181149][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.186425][T11966] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 234.197627][ T34] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 234.365143][T11989] vxfs: WRONG superblock magic 00000000 at 1 [ 234.368222][T11989] vxfs: WRONG superblock magic 00000000 at 8 [ 234.370304][T11989] vxfs: can't find superblock. [ 234.448698][ T34] usb 6-1: USB disconnect, device number 17 [ 234.473144][T11997] netlink: 'syz.4.1719': attribute type 9 has an invalid length. [ 234.475957][T11997] netlink: 'syz.4.1719': attribute type 11 has an invalid length. [ 234.479135][T11997] netlink: 'syz.4.1719': attribute type 12 has an invalid length. [ 234.513315][T12001] fuse: Unknown parameter '-terbVec@Gz9XX ' [ 234.526382][ T40] audit: type=1800 audit(1767834125.384:60484): pid=12001 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1720" name="nullb0" dev="tmpfs" ino=512 res=0 errno=0 [ 235.021455][T12023] __nla_validate_parse: 3 callbacks suppressed [ 235.021466][T12023] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1727'. [ 235.073455][T12026] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1727'. [ 235.114797][ T40] audit: type=1400 audit(1767834125.974:60485): avc: denied { accept } for pid=12031 comm="syz.1.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 235.121973][ T40] audit: type=1400 audit(1767834125.984:60486): avc: denied { read } for pid=12031 comm="syz.1.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 235.168850][T12032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1728'. [ 235.187930][ T5955] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 235.323836][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 235.324235][ T5955] Bluetooth: hci0: unexpected event for opcode 0x080f [ 235.329947][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 235.334661][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 235.338983][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 235.341879][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 235.446464][ T40] audit: type=1400 audit(1767834126.304:60487): avc: denied { execute } for pid=12049 comm="syz.1.1734" path="/selinux/load" dev="selinuxfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 235.590451][T12067] binder: 12065:12067 ioctl c0306201 200000000040 returned -11 [ 235.641283][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1745'. [ 235.644132][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1745'. [ 235.843922][T12092] netlink: 'syz.1.1748': attribute type 1 has an invalid length. [ 235.860854][T12092] 8021q: adding VLAN 0 to HW filter on device bond3 [ 235.900333][T12099] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 235.941654][T12101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53066 sclass=netlink_route_socket pid=12101 comm=syz.1.1750 [ 235.951045][ T40] audit: type=1400 audit(1767834126.814:60488): avc: denied { mount } for pid=12100 comm="syz.1.1750" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 236.019199][T12105] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52248 sclass=netlink_route_socket pid=12105 comm=syz.1.1752 [ 236.069146][T12107] program syz.1.1753 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.377098][ T29] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 236.439132][T12123] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 236.555157][T12134] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 236.557409][T12134] PKCS7: Only support pkcs7_signedData type [ 236.666123][T12145] 0: renamed from hsr0 (while UP) [ 236.672865][T12145] 0: entered allmulticast mode [ 236.675050][T12145] hsr_slave_0: entered allmulticast mode [ 236.677716][T12145] hsr_slave_1: entered allmulticast mode [ 236.681131][T12145] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 236.914092][T12193] Bluetooth: MGMT ver 1.23 [ 236.957487][ T5955] Bluetooth: hci0: ISO packet for unknown connection handle 1038 [ 236.995852][T12199] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 237.468982][T12242] overlayfs: failed to clone lowerpath [ 237.719967][T12263] IPVS: set_ctl: invalid protocol: 92 100.1.1.0:20003 [ 238.305234][T12269] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 238.332408][ T5955] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 238.423492][T12275] sp0: Synchronizing with TNC [ 238.467950][T12275] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33 sclass=netlink_tcpdiag_socket pid=12275 comm=syz.3.1800 [ 238.518985][T12281] bridge_slave_0: left allmulticast mode [ 238.520920][T12281] bridge_slave_0: left promiscuous mode [ 238.522855][T12281] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.530913][T12281] bridge_slave_1: left allmulticast mode [ 238.532840][T12281] bridge_slave_1: left promiscuous mode [ 238.536399][T12281] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.542423][T12281] bond0: (slave bond_slave_0): Releasing backup interface [ 238.547634][T12274] [U] [ 238.552392][T12264] syz.4.1796 (12264) used greatest stack depth: 19224 bytes left [ 238.565015][T12281] bond0: (slave bond_slave_1): Releasing backup interface [ 238.593191][T12281] team0: Port device team_slave_0 removed [ 238.597860][T12281] team0: Port device team_slave_1 removed [ 238.601169][T12281] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 238.717819][ T40] audit: type=1400 audit(1767834129.584:60489): avc: denied { connect } for pid=12290 comm="syz.3.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 238.727241][ T40] audit: type=1400 audit(1767834129.594:60490): avc: denied { read } for pid=12290 comm="syz.3.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 238.739043][T12292] tipc: Started in network mode [ 238.741315][T12292] tipc: Node identity 84e, cluster identity 4711 [ 238.744067][T12292] tipc: Node number set to 2126 [ 239.015460][T12315] netlink: 'syz.4.1811': attribute type 1 has an invalid length. [ 239.063168][T12315] 8021q: adding VLAN 0 to HW filter on device bond2 [ 239.247690][ T40] audit: type=1326 audit(1767834130.114:60491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12323 comm="syz.1.1814" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75ded8f7c9 code=0x0 [ 239.347092][ T5955] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 239.356229][ T5955] Bluetooth: hci0: Injecting HCI hardware error event [ 239.356286][T12331] tls_set_device_offload: netdev not found [ 239.360184][ T5955] Bluetooth: hci0: hardware error 0x00 [ 239.574148][ T40] audit: type=1400 audit(1767834130.434:60492): avc: denied { relabelto } for pid=12345 comm="syz.4.1821" name="249" dev="tmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:clock_device_t:s0" [ 239.632195][T12350] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 239.742299][T12361] SELinux: syz.3.1824 (12361) set checkreqprot to 1. This is no longer supported. [ 239.742350][ T40] audit: type=1400 audit(1767834130.604:60493): avc: denied { setcheckreqprot } for pid=12360 comm="syz.3.1824" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 239.788603][T12365] random: crng reseeded on system resumption [ 239.864663][T12368] (syz.3.1826,12368,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 239.871042][T12368] (syz.3.1826,12368,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 239.933209][ T40] audit: type=1400 audit(1767834130.794:60494): avc: denied { getopt } for pid=12371 comm="syz.3.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 239.941852][T12372] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 239.943682][T12374] tmpfs: Invalid gid '0x00000000ffffffff' [ 239.948124][T12374] tmpfs: Invalid gid '0x00000000ffffffff' [ 239.997534][T12377] bond0: entered allmulticast mode [ 239.999793][T12377] bond_slave_0: entered allmulticast mode [ 240.001868][T12377] bond_slave_1: entered allmulticast mode [ 240.004351][T12377] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 240.111223][T12384] __nla_validate_parse: 14 callbacks suppressed [ 240.111235][T12384] netlink: 63 bytes leftover after parsing attributes in process `syz.2.1831'. [ 240.120716][T12384] netlink: 63 bytes leftover after parsing attributes in process `syz.2.1831'. [ 240.124232][T12384] netlink: 63 bytes leftover after parsing attributes in process `syz.2.1831'. [ 240.127759][T12384] netlink: 63 bytes leftover after parsing attributes in process `syz.2.1831'. [ 240.131589][T12384] netlink: 63 bytes leftover after parsing attributes in process `syz.2.1831'. [ 240.134805][T12384] netlink: 63 bytes leftover after parsing attributes in process `syz.2.1831'. [ 240.138161][T12384] netlink: 63 bytes leftover after parsing attributes in process `syz.2.1831'. [ 240.141289][T12384] netlink: 63 bytes leftover after parsing attributes in process `syz.2.1831'. [ 240.144342][T12384] netlink: 63 bytes leftover after parsing attributes in process `syz.2.1831'. [ 240.148736][T12384] netlink: 63 bytes leftover after parsing attributes in process `syz.2.1831'. [ 240.161675][ T40] audit: type=1400 audit(1767834131.024:60495): avc: denied { append } for pid=12380 comm="syz.2.1831" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 240.163900][ T29] hid_parser_main: 8 callbacks suppressed [ 240.163913][ T29] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 240.177797][ T29] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 240.180276][ T29] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 240.183050][ T29] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 240.185924][ T29] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 240.189412][ T29] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 240.192738][ T29] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 240.195384][ T29] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 240.198107][ T29] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 240.200587][ T29] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 240.206386][ T29] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 240.234660][T12386] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 240.269243][T12387] fido_id[12387]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 240.270970][ T40] audit: type=1800 audit(1767834131.134:60496): pid=12386 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1832" name="file0" dev="overlay" ino=2587 res=0 errno=0 [ 240.285618][T12386] evm: overlay not supported [ 240.393194][T12398] tipc: Started in network mode [ 240.395445][T12398] tipc: Node identity fad43bbb66b5, cluster identity 4711 [ 240.401011][T12398] tipc: Enabled bearer , priority 0 [ 240.437150][T12398] syzkaller0: entered promiscuous mode [ 240.439579][T12398] syzkaller0: entered allmulticast mode [ 240.442622][T12398] tipc: Resetting bearer [ 240.454917][T12398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.458240][T12398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.567999][ T40] audit: type=1326 audit(1767834131.434:60497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12410 comm="syz.1.1842" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ded8f7c9 code=0x7ffc0000 [ 240.577128][ T40] audit: type=1326 audit(1767834131.434:60498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12410 comm="syz.1.1842" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ded8f7c9 code=0x7ffc0000 [ 240.664845][ T8879] tipc: Resetting bearer [ 240.697094][ T29] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 240.851624][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.866680][ T29] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 240.870663][ T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 240.874341][ T29] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 240.877594][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.883146][T12399] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 240.887215][ T29] hub 7-1:1.0: bad descriptor, ignoring hub [ 240.889113][ T29] hub 7-1:1.0: probe with driver hub failed with error -5 [ 240.892448][ T29] cdc_wdm 7-1:1.0: skipping garbage [ 240.894281][ T29] cdc_wdm 7-1:1.0: skipping garbage [ 240.902753][ T29] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 240.905472][ T29] cdc_wdm 7-1:1.0: Unknown control protocol [ 241.271288][T12486] netlink: 'syz.4.1867': attribute type 21 has an invalid length. [ 241.274223][T12486] netlink: 'syz.4.1867': attribute type 21 has an invalid length. [ 241.393412][T12500] IPVS: set_ctl: invalid protocol: 33 172.20.20.24:20003 [ 241.400772][T12500] sctp: [Deprecated]: syz.1.1870 (pid 12500) Use of int in max_burst socket option. [ 241.400772][T12500] Use struct sctp_assoc_value instead [ 241.437645][ T5955] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 241.438112][T12501] securityfs: Unknown parameter 'K' [ 241.529642][ T6035] tipc: Node number set to 2623617979 [ 242.338423][T12548] vlan0: entered allmulticast mode [ 242.340638][T12548] bond0: entered allmulticast mode [ 242.557921][ T6035] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 242.717100][ T34] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 242.719087][ T6035] usb 6-1: config 0 has no interfaces? [ 242.722650][ T6035] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 242.726686][ T6035] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.732319][ T6035] usb 6-1: config 0 descriptor?? [ 242.887049][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 242.890482][ T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 242.894536][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 242.897909][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 242.901118][ T34] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.905275][ T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 242.908381][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.967580][ T6042] usb 6-1: USB disconnect, device number 18 [ 243.114817][ T34] usb 8-1: GET_CAPABILITIES returned 0 [ 243.116723][ T34] usbtmc 8-1:16.0: can't read capabilities [ 243.841985][T12600] kAFS: unable to lookup cell '(,cL' [ 243.898378][T12602] kAFS: unable to lookup cell '(,' [ 244.074708][T12613] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12613 comm=syz.4.1904 [ 244.074719][T12612] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12612 comm=syz.4.1904 [ 244.421198][T12619] ISOFS: Unable to identify CD-ROM format. [ 244.471917][T12399] cdc_wdm 7-1:1.0: Error autopm - -16 [ 244.472348][ T29] usb 7-1: USB disconnect, device number 17 [ 244.475440][T12398] cdc_wdm 7-1:1.0: Error autopm - -16 [ 244.480474][T12563] cdc_wdm 7-1:1.0: Error autopm - -16 [ 244.487423][ T24] usb 8-1: USB disconnect, device number 14 [ 244.495454][T12398] tipc: Resetting bearer [ 244.586726][T12627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12627 comm=syz.1.1908 [ 244.592630][T12627] netlink: 'syz.1.1908': attribute type 1 has an invalid length. [ 244.959525][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 244.959542][ T40] audit: type=1400 audit(1767834135.824:60541): avc: denied { watch_sb } for pid=12631 comm="syz.4.1909" path="/288/file0" dev="tmpfs" ino=1561 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 245.198947][T12640] __nla_validate_parse: 67 callbacks suppressed [ 245.198968][T12640] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1912'. [ 245.216076][T12640] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 245.269598][T12644] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1913'. [ 245.417699][ T40] audit: type=1400 audit(1767834136.284:60542): avc: denied { mount } for pid=12649 comm="syz.4.1916" name="/" dev="configfs" ino=2078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 246.136357][T12398] tipc: Disabling bearer [ 246.141773][T12627] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 246.310132][T12664] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20004 [ 246.475048][ T5960] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 246.481109][ T5960] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 246.484888][ T5960] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 246.491332][ T5960] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 246.496350][ T5960] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 246.527275][ T34] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 246.598288][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.678650][ T34] usb 6-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 246.682723][ T34] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 246.688090][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.688719][ T34] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 246.694862][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.698242][ T34] usb 6-1: Product: syz [ 246.699963][ T34] usb 6-1: Manufacturer: syz [ 246.701839][ T34] usb 6-1: SerialNumber: syz [ 246.724063][T12671] chnl_net:caif_netlink_parms(): no params data found [ 246.755558][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.795487][T12671] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.798149][T12671] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.801089][T12671] bridge_slave_0: entered allmulticast mode [ 246.804658][T12671] bridge_slave_0: entered promiscuous mode [ 246.814844][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.825167][T12671] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.828509][T12671] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.832228][T12671] bridge_slave_1: entered allmulticast mode [ 246.836597][T12671] bridge_slave_1: entered promiscuous mode [ 246.858793][T12671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.864369][T12671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.881215][T12671] team0: Port device team_slave_0 added [ 246.884610][T12671] team0: Port device team_slave_1 added [ 246.899110][T12671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.901510][T12671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.910216][T12671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.912740][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1921'. [ 246.915016][T12671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.917743][T12662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1921'. [ 246.919781][T12671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.923034][T12662] netlink: 'syz.1.1921': attribute type 6 has an invalid length. [ 246.932349][T12671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.952463][ T34] usb 6-1: USB disconnect, device number 19 [ 246.961732][T12671] hsr_slave_0: entered promiscuous mode [ 246.964006][T12671] hsr_slave_1: entered promiscuous mode [ 246.966192][T12671] debugfs: 'hsr0' already exists in 'hsr' [ 246.968475][T12671] Cannot create hsr debugfs directory [ 247.235297][T12666] delete_channel: no stack [ 247.374597][ T12] bond0 (unregistering): (slave gretap1): Releasing active interface [ 247.378525][ T12] bond0 (unregistering): (slave gretap1): the permanent HWaddr of slave - 0e:35:ee:b6:68:b6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 247.384419][ T12] bond0 (unregistering): (slave bridge_slave_1): making interface the new active one [ 247.394330][ T40] audit: type=1400 audit(1767834138.254:60543): avc: denied { map } for pid=12680 comm="syz.4.1926" path="socket:[43807]" dev="sockfs" ino=43807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 247.459103][ T12] dvmrp6 (unregistering): left allmulticast mode [ 247.888670][ T12]  (unregistering): (slave wlan1): Releasing backup interface [ 247.928297][ T12]  (unregistering): Released all slaves [ 248.021741][ T12] bond0 (unregistering): (slave bridge_slave_1): Releasing active interface [ 248.070932][ T12] bond0 (unregistering): Released all slaves [ 248.168714][ T12] bond1 (unregistering): Released all slaves [ 248.280217][ T12] bond2 (unregistering): (slave veth1): Releasing active interface [ 248.310139][ T12] bond2 (unregistering): Released all slaves [ 248.425584][ T12] tipc: Left network mode [ 248.435626][T12671] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 248.442634][T12698] netlink: 'syz.1.1931': attribute type 10 has an invalid length. [ 248.453746][T12671] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 248.471586][T12671] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 248.490432][T12671] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 248.547231][ T5960] Bluetooth: hci3: command tx timeout [ 248.583079][T12713] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1933'. [ 248.602018][T12671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.613666][T12671] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.625059][ T8879] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.627873][ T8879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.661388][ T40] audit: type=1400 audit(1767834139.524:60544): avc: denied { setopt } for pid=12718 comm="syz.1.1934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 248.679215][ T8881] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.683268][ T8881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.789035][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1937'. [ 248.982414][ T12] hsr_slave_0: left promiscuous mode [ 248.997067][ T12] hsr_slave_1: left promiscuous mode [ 249.021624][ T12] veth0_macvtap: left promiscuous mode [ 249.037571][T12741] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12741 comm=syz.1.1939 [ 249.706043][T12671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.844000][T12671] veth0_vlan: entered promiscuous mode [ 249.853854][T12671] veth1_vlan: entered promiscuous mode [ 249.886787][T12671] veth0_macvtap: entered promiscuous mode [ 249.893757][T12671] veth1_macvtap: entered promiscuous mode [ 249.942922][T12671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.952345][T12671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.972040][ T8892] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.982604][ T6042] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 249.987261][ T8892] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.989951][ T8892] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.993530][ T8892] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.045048][ T8883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.046241][T12777] netlink: 'syz.4.1943': attribute type 7 has an invalid length. [ 250.048835][ T8883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.059646][T12777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1943'. [ 250.098071][T12777] netlink: 'syz.4.1943': attribute type 7 has an invalid length. [ 250.104027][T12777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1943'. [ 250.114254][ T6825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.116998][ T6825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.158647][ T6042] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.162266][ T6042] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 250.166776][ T6042] usb 6-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 250.169985][ T6042] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.172493][ T6042] usb 6-1: Product: syz [ 250.173808][ T6042] usb 6-1: Manufacturer: syz [ 250.175286][ T6042] usb 6-1: SerialNumber: syz [ 250.183507][ T6042] usb 6-1: config 0 descriptor?? [ 250.250397][T12786] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 250.253257][T12786] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 250.462783][ T6042] usb 6-1: USB disconnect, device number 20 [ 250.511699][T12794] sit0: entered promiscuous mode [ 250.518190][T12794] netlink: 'syz.5.1946': attribute type 1 has an invalid length. [ 250.521431][T12794] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1946'. [ 250.638304][ T5960] Bluetooth: hci3: command tx timeout [ 251.430196][T12809] input: syz1 as /devices/virtual/input/input21 [ 251.634412][T12822] netlink: 328 bytes leftover after parsing attributes in process `syz.5.1953'. [ 251.711745][T12824] netlink: 'syz.5.1954': attribute type 2 has an invalid length. [ 251.820843][T12828] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.823696][T12828] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.827003][T12828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.207134][ T6520] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 252.368602][ T6520] usb 10-1: config 0 has no interfaces? [ 252.371217][ T6520] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 252.375447][ T6520] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.381489][ T6520] usb 10-1: config 0 descriptor?? [ 252.593857][ T6042] usb 10-1: USB disconnect, device number 2 [ 252.707464][ T5960] Bluetooth: hci3: command tx timeout [ 253.403566][T12845] netlink: 'syz.4.1961': attribute type 8 has an invalid length. [ 253.406449][T12845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1961'. [ 253.412688][T12845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1961'. [ 254.174968][T12861] tmpfs: Unknown parameter '؏5bcS(DKr}YXjn..' [ 254.180088][T12861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1965'. [ 254.481111][ T40] audit: type=1326 audit(1767834145.344:60545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12872 comm="syz.4.1968" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dccd8f7c9 code=0x7ffc0000 [ 254.491295][ T40] audit: type=1326 audit(1767834145.344:60546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12872 comm="syz.4.1968" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4dccd8f7c9 code=0x7ffc0000 [ 254.500168][ T40] audit: type=1326 audit(1767834145.344:60547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12872 comm="syz.4.1968" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dccd8f7c9 code=0x7ffc0000 [ 254.508724][ T40] audit: type=1326 audit(1767834145.344:60548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12872 comm="syz.4.1968" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4dccd8f7c9 code=0x7ffc0000 [ 254.525578][ T40] audit: type=1326 audit(1767834145.354:60549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12872 comm="syz.4.1968" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dccd8f7c9 code=0x7ffc0000 [ 254.533636][ T40] audit: type=1326 audit(1767834145.354:60550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12877 comm="syz.4.1968" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4dccdc2085 code=0x7ffc0000 [ 254.541988][ T40] audit: type=1326 audit(1767834145.354:60551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12872 comm="syz.4.1968" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4dccd8f7c9 code=0x7ffc0000 [ 254.552409][ T40] audit: type=1326 audit(1767834145.354:60552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12872 comm="syz.4.1968" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dccd8f7c9 code=0x7ffc0000 [ 254.559950][ T40] audit: type=1326 audit(1767834145.354:60553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12872 comm="syz.4.1968" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dccd8f7c9 code=0x7ffc0000 [ 254.568353][ T40] audit: type=1326 audit(1767834145.354:60554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12872 comm="syz.4.1968" exe="/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4dccd8f7c9 code=0x7ffc0000 [ 254.712701][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1974'. [ 254.716605][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1974'. [ 254.721101][T12895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1974'. [ 254.724584][T12895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1974'. [ 254.787437][ T5960] Bluetooth: hci3: command tx timeout [ 254.819206][T12900] overlay: Unknown parameter 'obj_user' [ 254.994688][T12913] SELinux: failed to load policy [ 255.163546][T12935] netlink: 'syz.1.1986': attribute type 322 has an invalid length. [ 255.214631][T12939] exFAT-fs (nullb0): invalid boot record signature [ 255.218857][T12939] exFAT-fs (nullb0): failed to read boot sector [ 255.221555][T12939] exFAT-fs (nullb0): failed to recognize exfat type [ 255.555942][T12968] netlink: 'syz.4.1998': attribute type 14 has an invalid length. [ 255.614435][T12972] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2000'. [ 255.824440][T12986] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2003'. [ 255.867419][ T53] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 256.017567][T12993] netlink: 'syz.2.2004': attribute type 10 has an invalid length. [ 256.027051][ T53] usb 10-1: Using ep0 maxpacket: 8 [ 256.030651][ T53] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 256.033622][ T53] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 256.037522][ T53] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 256.040913][ T53] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 256.044283][ T53] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.045430][T12993] netlink: 'syz.2.2004': attribute type 10 has an invalid length. [ 256.049535][ T53] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 256.052728][T12993] dummy0: entered promiscuous mode [ 256.054323][ T53] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.056397][T12993] dummy0: entered allmulticast mode [ 256.820895][T13007] usbtmc 10-1:16.0: simple usb_control_msg failed -32 [ 256.826261][ T53] usb 10-1: USB disconnect, device number 3 [ 257.239651][T13012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2009'. [ 257.250658][T13012] macsec1: entered allmulticast mode [ 257.252920][T13012] bridge0: entered allmulticast mode [ 257.257585][T13012] bridge0: port 1(macsec1) entered blocking state [ 257.260703][T13012] bridge0: port 1(macsec1) entered disabled state [ 259.837756][T13012] bridge0: left allmulticast mode [ 259.956956][ T6520] hid-generic 0004:0006:0002.0005: item fetching failed at offset 1/2 [ 259.959802][ T6520] hid-generic 0004:0006:0002.0005: probe with driver hid-generic failed with error -22 [ 260.012300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 260.018596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 260.029878][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2017'. [ 260.099390][T13043] IPVS: length: 18 != 8 [ 260.245844][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 260.245865][ T40] audit: type=1400 audit(1767834151.104:60559): avc: denied { mounton } for pid=13044 comm="syz.2.2020" path="/427/file0" dev="hugetlbfs" ino=46817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 260.247550][T13052] overlayfs: maximum fs stacking depth exceeded [ 260.402399][ T40] audit: type=1400 audit(1767834151.264:60560): avc: denied { name_bind } for pid=13064 comm="syz.5.2023" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 260.605942][T13080] netlink: 'syz.5.2026': attribute type 13 has an invalid length. [ 260.610637][T13080] netlink: 160 bytes leftover after parsing attributes in process `syz.5.2026'. [ 260.808598][ T40] audit: type=1400 audit(1767834151.674:60561): avc: denied { shutdown } for pid=13092 comm="syz.5.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 260.862887][T13096] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2029'. [ 260.869391][T13096] ip6gre1: entered promiscuous mode [ 260.871429][T13096] ip6gre1: entered allmulticast mode [ 260.875108][ T8881] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 260.887188][ T8881] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 260.898208][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 260.904730][T13098] (syz.5.2030,13098,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 260.907523][T13098] (syz.5.2030,13098,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 260.910049][T13098] (syz.5.2030,13098,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 260.912793][T13098] (syz.5.2030,13098,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 260.952296][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.961714][ T1421] ================================================================== [ 260.964543][ T1421] BUG: KASAN: slab-use-after-free in tty_write_room+0x7d/0x90 [ 260.967227][ T1421] Read of size 8 at addr ffff88803359a020 by task aoe_tx0/1421 [ 260.971298][ T1421] [ 260.973082][ T1421] CPU: 1 UID: 0 PID: 1421 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.973103][ T1421] Tainted: [L]=SOFTLOCKUP [ 260.973108][ T1421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 260.973116][ T1421] Call Trace: [ 260.973123][ T1421] [ 260.973130][ T1421] dump_stack_lvl+0x116/0x1f0 [ 260.973160][ T1421] print_report+0xcd/0x630 [ 260.973177][ T1421] ? __virt_addr_valid+0x81/0x610 [ 260.973189][ T1421] ? __phys_addr+0xe8/0x180 [ 260.973199][ T1421] ? tty_write_room+0x7d/0x90 [ 260.973215][ T1421] kasan_report+0xe0/0x110 [ 260.973234][ T1421] ? tty_write_room+0x7d/0x90 [ 260.973251][ T1421] tty_write_room+0x7d/0x90 [ 260.973267][ T1421] handle_tx+0x14f/0x630 [ 260.973286][ T1421] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 260.973302][ T1421] dev_hard_start_xmit+0x97/0x6e0 [ 260.973322][ T1421] __dev_queue_xmit+0x6d7/0x46b0 [ 260.973340][ T1421] ? rcu_is_watching+0x12/0xc0 [ 260.973353][ T1421] ? finish_task_switch.isra.0+0x207/0xbd0 [ 260.973372][ T1421] ? __pfx___dev_queue_xmit+0x10/0x10 [ 260.973390][ T1421] ? __lock_acquire+0x436/0x2890 [ 260.973404][ T1421] ? ref_tracker_free+0x37c/0x830 [ 260.973417][ T1421] ? do_raw_spin_lock+0x12c/0x2b0 [ 260.973435][ T1421] ? rcu_is_watching+0x12/0xc0 [ 260.973446][ T1421] tx+0xcc/0x190 [ 260.973462][ T1421] ? __pfx_tx+0x10/0x10 [ 260.973474][ T1421] kthread+0x1e4/0x3e0 [ 260.973487][ T1421] ? find_held_lock+0x2b/0x80 [ 260.973503][ T1421] ? __pfx_kthread+0x10/0x10 [ 260.973515][ T1421] ? __pfx_default_wake_function+0x10/0x10 [ 260.973534][ T1421] ? lockdep_hardirqs_on+0x7c/0x110 [ 260.973550][ T1421] ? __kthread_parkme+0x19e/0x250 [ 260.973562][ T1421] ? __pfx_kthread+0x10/0x10 [ 260.973573][ T1421] kthread+0x3c5/0x780 [ 260.973586][ T1421] ? __pfx_kthread+0x10/0x10 [ 260.973599][ T1421] ? rcu_is_watching+0x12/0xc0 [ 260.973609][ T1421] ? __pfx_kthread+0x10/0x10 [ 260.973621][ T1421] ret_from_fork+0x983/0xb10 [ 260.973635][ T1421] ? __pfx_ret_from_fork+0x10/0x10 [ 260.973647][ T1421] ? __switch_to+0x7af/0x10d0 [ 260.973662][ T1421] ? __pfx_kthread+0x10/0x10 [ 260.973674][ T1421] ret_from_fork_asm+0x1a/0x30 [ 260.973770][ T1421] [ 260.973776][ T1421] [ 261.044672][ T1421] Allocated by task 13045: [ 261.046106][ T1421] kasan_save_stack+0x33/0x60 [ 261.047607][ T1421] kasan_save_track+0x14/0x30 [ 261.049121][ T1421] __kasan_kmalloc+0xaa/0xb0 [ 261.050646][ T1421] alloc_tty_struct+0x96/0x8c0 [ 261.052240][ T1421] tty_init_dev.part.0+0x1e/0x500 [ 261.053920][ T1421] tty_open+0xa4f/0xf90 [ 261.055261][ T1421] chrdev_open+0x234/0x6a0 [ 261.056710][ T1421] do_dentry_open+0x748/0x1590 [ 261.058249][ T1421] vfs_open+0x82/0x3f0 [ 261.059553][ T1421] path_openat+0x2078/0x3140 [ 261.061084][ T1421] do_filp_open+0x20b/0x470 [ 261.062523][ T1421] do_sys_openat2+0x121/0x290 [ 261.064040][ T1421] __x64_sys_openat+0x174/0x210 [ 261.065639][ T1421] do_syscall_64+0xcd/0xf80 [ 261.067160][ T1421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.069096][ T1421] [ 261.069966][ T1421] Freed by task 1026: [ 261.071290][ T1421] kasan_save_stack+0x33/0x60 [ 261.072783][ T1421] kasan_save_track+0x14/0x30 [ 261.074286][ T1421] kasan_save_free_info+0x3b/0x60 [ 261.075876][ T1421] __kasan_slab_free+0x5f/0x80 [ 261.077403][ T1421] kfree+0x2f8/0x6e0 [ 261.078661][ T1421] process_one_work+0x9ba/0x1b20 [ 261.080252][ T1421] worker_thread+0x6c8/0xf10 [ 261.081727][ T1421] kthread+0x3c5/0x780 [ 261.083061][ T1421] ret_from_fork+0x983/0xb10 [ 261.084574][ T1421] ret_from_fork_asm+0x1a/0x30 [ 261.086122][ T1421] [ 261.086891][ T1421] Last potentially related work creation: [ 261.088687][ T1421] kasan_save_stack+0x33/0x60 [ 261.090284][ T1421] kasan_record_aux_stack+0xa7/0xc0 [ 261.091992][ T1421] insert_work+0x36/0x230 [ 261.093406][ T1421] __queue_work+0x94f/0x10e0 [ 261.094894][ T1421] queue_work_on+0x1a4/0x1f0 [ 261.096368][ T1421] release_tty+0x4de/0x5d0 [ 261.097693][ T1421] tty_release_struct+0xb7/0xe0 [ 261.099239][ T1421] tty_release+0xe2d/0x1470 [ 261.100830][ T1421] __fput+0x402/0xb70 [ 261.102202][ T1421] task_work_run+0x150/0x240 [ 261.103685][ T1421] exit_to_user_mode_loop+0xfb/0x540 [ 261.105483][ T1421] do_syscall_64+0x4ee/0xf80 [ 261.107027][ T1421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.108898][ T1421] [ 261.109665][ T1421] The buggy address belongs to the object at ffff88803359a000 [ 261.109665][ T1421] which belongs to the cache kmalloc-cg-2k of size 2048 [ 261.114162][ T1421] The buggy address is located 32 bytes inside of [ 261.114162][ T1421] freed 2048-byte region [ffff88803359a000, ffff88803359a800) [ 261.118471][ T1421] [ 261.119337][ T1421] The buggy address belongs to the physical page: [ 261.121193][ T1421] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33598 [ 261.123947][ T1421] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 261.126724][ T1421] memcg:ffff8880330bc401 [ 261.128202][ T1421] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 261.130890][ T1421] page_type: f5(slab) [ 261.132246][ T1421] raw: 00fff00000000040 ffff88801b44c140 dead000000000100 dead000000000122 [ 261.135130][ T1421] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff8880330bc401 [ 261.137948][ T1421] head: 00fff00000000040 ffff88801b44c140 dead000000000100 dead000000000122 [ 261.140699][ T1421] head: 0000000000000000 0000000000080008 00000000f5000000 ffff8880330bc401 [ 261.143444][ T1421] head: 00fff00000000003 ffffea0000cd6601 00000000ffffffff 00000000ffffffff [ 261.146277][ T1421] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 261.147169][ T6520] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 261.149619][ T1421] page dumped because: kasan: bad access detected [ 261.149636][ T1421] page_owner tracks the page as allocated [ 261.149643][ T1421] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6087, tgid 6085 (syz.1.13), ts 109950029925, free_ts 109932894497 [ 261.149673][ T1421] post_alloc_hook+0x1af/0x220 [ 261.149703][ T1421] get_page_from_freelist+0xd0b/0x31a0 [ 261.149718][ T1421] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 261.149734][ T1421] alloc_pages_mpol+0x1fb/0x550 [ 261.172304][ T1421] new_slab+0x2c3/0x430 [ 261.173759][ T1421] ___slab_alloc+0xe18/0x1c90 [ 261.175306][ T1421] __slab_alloc.constprop.0+0x63/0x110 [ 261.177071][ T1421] __kmalloc_cache_noprof+0x485/0x800 [ 261.178898][ T1421] bpf_prog_alloc_no_stats+0x122/0x610 [ 261.181028][ T1421] bpf_prog_alloc+0x3b/0x230 [ 261.182886][ T1421] bpf_prog_create_from_user+0xb4/0x2f0 [ 261.184809][ T1421] do_seccomp+0x7b4/0x26d0 [ 261.186280][ T1421] do_syscall_64+0xcd/0xf80 [ 261.187895][ T1421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.189995][ T1421] page last free pid 6081 tgid 6080 stack trace: [ 261.192459][ T1421] __free_frozen_pages+0x7df/0x1170 [ 261.194265][ T40] audit: type=1400 audit(1767834152.034:60562): avc: denied { read } for pid=5322 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 261.194474][ T1421] __put_partials+0x130/0x170 [ 261.205915][ T1421] qlist_free_all+0x4c/0xf0 [ 261.207547][ T1421] kasan_quarantine_reduce+0x195/0x1e0 [ 261.209454][ T1421] __kasan_slab_alloc+0x69/0x90 [ 261.211065][ T1421] __kmalloc_node_track_caller_noprof+0x30b/0x930 [ 261.213103][ T1421] memdup_user+0x2a/0xe0 [ 261.214373][ T40] audit: type=1400 audit(1767834152.034:60563): avc: denied { search } for pid=5322 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.214470][ T1421] kvm_vcpu_ioctl+0x38e/0x16d0 [ 261.225478][ T1421] __x64_sys_ioctl+0x18e/0x210 [ 261.227117][ T1421] do_syscall_64+0xcd/0xf80 [ 261.228636][ T1421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.230640][ T1421] [ 261.231658][ T1421] Memory state around the buggy address: [ 261.233507][ T1421] ffff888033599f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 261.236149][ T1421] ffff888033599f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 261.238463][ T40] audit: type=1400 audit(1767834152.034:60564): avc: denied { search } for pid=5322 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.238719][ T1421] >ffff88803359a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 261.248541][ T1421] ^ [ 261.250247][ T1421] ffff88803359a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 261.252780][ T1421] ffff88803359a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 261.255300][ T1421] ================================================================== [ 261.258494][ T1421] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 261.261265][ T1421] CPU: 1 UID: 0 PID: 1421 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.264636][ T1421] Tainted: [L]=SOFTLOCKUP [ 261.266025][ T1421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 261.269417][ T1421] Call Trace: [ 261.270536][ T1421] [ 261.271516][ T1421] dump_stack_lvl+0x3d/0x1f0 [ 261.273058][ T1421] vpanic+0x640/0x6f0 [ 261.274427][ T1421] panic+0xca/0xd0 [ 261.275690][ T1421] ? __pfx_panic+0x10/0x10 [ 261.277171][ T1421] ? check_panic_on_warn+0x1f/0xb0 [ 261.278833][ T1421] check_panic_on_warn+0xab/0xb0 [ 261.280502][ T1421] end_report+0x107/0x160 [ 261.281961][ T1421] kasan_report+0xee/0x110 [ 261.283402][ T1421] ? tty_write_room+0x7d/0x90 [ 261.284888][ T1421] tty_write_room+0x7d/0x90 [ 261.286363][ T1421] handle_tx+0x14f/0x630 [ 261.287800][ T1421] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 261.289769][ T1421] dev_hard_start_xmit+0x97/0x6e0 [ 261.291591][ T1421] __dev_queue_xmit+0x6d7/0x46b0 [ 261.293347][ T1421] ? rcu_is_watching+0x12/0xc0 [ 261.295414][ T1421] ? finish_task_switch.isra.0+0x207/0xbd0 [ 261.297695][ T1421] ? __pfx___dev_queue_xmit+0x10/0x10 [ 261.299798][ T1421] ? __lock_acquire+0x436/0x2890 [ 261.301478][ T1421] ? ref_tracker_free+0x37c/0x830 [ 261.303127][ T1421] ? do_raw_spin_lock+0x12c/0x2b0 [ 261.304733][ T1421] ? rcu_is_watching+0x12/0xc0 [ 261.306265][ T1421] tx+0xcc/0x190 [ 261.307427][ T1421] ? __pfx_tx+0x10/0x10 [ 261.308743][ T1421] kthread+0x1e4/0x3e0 [ 261.310432][ T1421] ? find_held_lock+0x2b/0x80 [ 261.312458][ T1421] ? __pfx_kthread+0x10/0x10 [ 261.314291][ T1421] ? __pfx_default_wake_function+0x10/0x10 [ 261.316599][ T1421] ? lockdep_hardirqs_on+0x7c/0x110 [ 261.318329][ T1421] ? __kthread_parkme+0x19e/0x250 [ 261.319980][ T1421] ? __pfx_kthread+0x10/0x10 [ 261.321470][ T1421] kthread+0x3c5/0x780 [ 261.322818][ T1421] ? __pfx_kthread+0x10/0x10 [ 261.324290][ T1421] ? rcu_is_watching+0x12/0xc0 [ 261.325824][ T1421] ? __pfx_kthread+0x10/0x10 [ 261.327300][ T1421] ret_from_fork+0x983/0xb10 [ 261.328913][ T1421] ? __pfx_ret_from_fork+0x10/0x10 [ 261.331043][ T1421] ? __switch_to+0x7af/0x10d0 [ 261.333101][ T1421] ? __pfx_kthread+0x10/0x10 [ 261.335121][ T1421] ret_from_fork_asm+0x1a/0x30 [ 261.337043][ T1421] [ 261.338942][ T1421] Kernel Offset: disabled [ 261.340634][ T1421] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:02:32 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000002 RBX=ffff88806a43be80 RCX=ffffffff81b2a2d3 RDX=ffff88801daac980 RSI=0000000000000000 RDI=0000000000000005 RBP=ffffc90000157c88 RSP=ffffc90000157b38 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1c7a8de R12=1ffff9200002af70 R13=0000000000000002 R14=0000000000000001 R15=ffffed100d4877d1 RIP=ffffffff81bee1cc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c301f42 CR3=000000002c237000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffebbc68df0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75dee15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75dee1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75dee15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75dee1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75dee150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75dee151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85327330 RDI=ffffffff9aeedc40 RBP=ffffffff9aeedc00 RSP=ffffc900070af360 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff35ddbda R15=dffffc0000000000 RIP=ffffffff85327357 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000008 CR3=0000000061770000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd860d7e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6487c15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6487c1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6487c15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6487c1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6487c150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6487c151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000094 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000094 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000009f495a033c RBX=ffff88806a623f40 RCX=00000000000006e0 RDX=000000000000009f RSI=ffff88806a623f40 RDI=0000000000043c6c RBP=0000000000043c6c RSP=ffffc90000648ed0 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=ffff88802d5454b0 R12=0000000000000000 R13=0000000000000000 R14=0000000000000019 R15=ffff88806a628440 RIP=ffffffff8169e8a5 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f75dfc166c0 ffffffff 00c00000 GS =0000 ffff8880d6af5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa3e2308e9c CR3=000000002a6e1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75dee15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75dee1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75dee15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75dee1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75dee150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75dee151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75defba4a8 00007f75defba4a0 00007f75defba498 00007f75defba470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75dfb1d100 00007f75defba460 00007f75defba478 00007f75defba4c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75defba4b8 00007f75defba4b0 00007f75defba4a8 00007f75defba4a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001e13f3 RBX=0000000000000003 RCX=ffffffff8b7826d9 RDX=0000000000000000 RSI=ffffffff8dace031 RDI=ffffffff8bf2b380 RBP=ffffed1003bd7000 RSP=ffffc90000197de8 R8 =0000000000000001 R9 =ffffed100d4e673d R10=ffff88806a7339eb R11=ffff88801deb8b30 R12=0000000000000003 R13=ffff88801deb8000 R14=ffffffff9088b8d0 R15=0000000000000000 RIP=ffffffff8b780dcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bf5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000001c0 CR3=000000002a6e1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75dee15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75dee1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75dee15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75dee1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75dee150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75dee151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75defba4a8 00007f75defba4a0 00007f75defba498 00007f75defba470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75dfb1d100 00007f75defba460 00007f75defba478 00007f75defba4c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75defba4b8 00007f75defba4b0 00007f75defba4a8 00007f75defba4a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000